last executing test programs: 17m54.428282155s ago: executing program 32 (id=405): landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0xb, 0x2e1b}, 0x8, 0x0) 13m23.363381305s ago: executing program 33 (id=5941): r0 = socket(0x2, 0x2, 0x0) setsockopt$auto(r0, 0x88, 0xa, &(0x7f0000000000)='\xba\xba\xd3\xc8[&P\x9c\xe7AJz\'\x91\xce=B}v+7n\xa2r0\x92\xc3\x0eE\x96\xf63\xec\xe0\xb2\f\xa86v\xeb\xf1\xcb\xd4\xa9\v\xe1\xcc\x18', 0x80000e) 10m7.575418567s ago: executing program 2 (id=9631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xdf}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) 10m7.427051931s ago: executing program 2 (id=9634): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 10m7.18891053s ago: executing program 1 (id=9639): ioperm$auto(0x7, 0x6, 0x2) r0 = epoll_create$auto(0x2) epoll_pwait2$auto(r0, 0x0, 0x8, &(0x7f0000002780)={0x0, 0x6}, 0x0, 0x8) 10m7.100456405s ago: executing program 1 (id=9640): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x4) 10m6.977711264s ago: executing program 2 (id=9643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TDLS_OPER(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000e40)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "e59954082586bc3ad68380a90659c016443901a24cd21d8a4e5e9deb34bdf7318e8589eb"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x40000c4) 10m6.938930709s ago: executing program 1 (id=9645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_DELPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000894) 10m6.769242407s ago: executing program 34 (id=9643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TDLS_OPER(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000e40)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "e59954082586bc3ad68380a90659c016443901a24cd21d8a4e5e9deb34bdf7318e8589eb"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x40000c4) 10m6.763358642s ago: executing program 1 (id=9648): pipe$auto(&(0x7f0000001480)=0xffffffffffffffff) vmsplice$auto(r0, &(0x7f0000000000)={0x0, 0x7}, 0x5, 0x1) close_range$auto(0x2, 0xa, 0x0) 10m6.579926716s ago: executing program 1 (id=9652): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 10m6.141430253s ago: executing program 1 (id=9659): sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="80060000", @ANYRES16=0x0, @ANYBLOB="040026bd7000fcdbdf2504000000b1000180f5c53c7461b64f8c60fb90f69a1d13d52d6da3527ec741c595abf933faa4d782a42b4c249ab5be48e686e7364c12793198cdcb6a78253c3bdd7916ced602b5b19762a916baa53c0411bfbf1477407c42963b5791e719e91567d82c697af89370f6f7872979c6713c9b4265a481e529d40b485bc24dac0ed112ebaf8e0f59b20e48f9cffcaa0bed04dadf0c00c2d584eb40a6d01a4f463f88d47ae307e73bfd4123c7765a43faedde70", @ANYRES32, @ANYBLOB="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"], 0x680}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) write$auto_bm_entry_operations_binfmt_misc(0xffffffffffffffff, &(0x7f0000000500)="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", 0x4bf) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:+\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') acct$auto(&(0x7f0000000040)='/dev/sequencer2\x00') open(&(0x7f0000000840)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x22240, 0x0) 5m39.535433043s ago: executing program 6 (id=13094): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 5m38.837767555s ago: executing program 6 (id=13103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003b00), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026f7dd46db2ead009500000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x180c0) 5m38.522217778s ago: executing program 36 (id=13103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003b00), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026f7dd46db2ead009500000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x180c0) 4m22.63771559s ago: executing program 8 (id=14100): mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x2284, r0) 4m22.345957281s ago: executing program 8 (id=14102): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x23, 0x80805, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 4m21.994195939s ago: executing program 8 (id=14106): mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x3, 0x73) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(r0, 0xff, 0x7, 0x0, 0xfff) 4m21.873558483s ago: executing program 8 (id=14108): sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x348, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xb1, 0x1, 0x0, 0x1, [@generic="f5c53c7461b64f8c60fb90f69a1d13d52d6da3527ec7b5be48e686e7364c12793198cdcb6a78253c3bdd7916ced602b5b19762a916baa53c0411bfbf1477407c42963b5791e719e91567d82c697af89370f6f7872979c6713c9b4265a481e529d40b485bc24dac0ed112ebaf8e0f59b20e48f9cffcaa0bed04dad70c00c2d584eb40a6d01a4f463f88d47ae307e73bfd4123c7765a43faedde7088214666ba0cf2c894acec", @typed={0x8, 0x5c, 0x0, 0x0, @fd}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x278, 0x2, 0x0, 0x1, [@nested={0x274, 0xda, 0x0, 0x1, [@typed={0x4, 0x9f}, @generic="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"]}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="17000000", @ANYBLOB='j\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 4m21.662828536s ago: executing program 8 (id=14112): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 4m21.010975364s ago: executing program 8 (id=14123): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) r0 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800009}, 0x1, 0x20000000) 4m20.761022043s ago: executing program 37 (id=14123): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) r0 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800009}, 0x1, 0x20000000) 2m10.933428029s ago: executing program 9 (id=15706): mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x2284, r0) 2m10.873154553s ago: executing program 9 (id=15707): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x23, 0x80805, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m10.582594179s ago: executing program 9 (id=15708): openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x8082, 0x0) mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0xffffffffffffffff, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) read$auto(0x3, 0x0, 0x80) 2m10.516074107s ago: executing program 9 (id=15709): prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x8, &(0x7f0000002a40)={0x0, 0x7fffffff}, 0x6, 0x0) 2m9.496168464s ago: executing program 7 (id=15721): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x23, 0x80805, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m9.354290928s ago: executing program 9 (id=15723): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 2m8.719659979s ago: executing program 9 (id=15724): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001300)={'veth0_to_bond\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4865}, 0x0) 2m8.718689151s ago: executing program 7 (id=15725): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = socket(0x2, 0x3, 0xa) getsockopt$auto(r0, 0x0, 0x33, 0x0, 0x0) 2m8.393086772s ago: executing program 38 (id=15724): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001300)={'veth0_to_bond\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4865}, 0x0) 2m3.773205052s ago: executing program 7 (id=15742): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x8802, 0x0) mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) write$auto(0x3, 0x0, 0xfdef) 2m3.441810549s ago: executing program 7 (id=15734): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/card1\x00', 0x800, 0x0) ioctl$auto(r1, 0x900064b5, r0) 2m3.231125238s ago: executing program 7 (id=15738): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 2m2.185104736s ago: executing program 7 (id=15758): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getitimer$auto(0x0, 0x0) 2m1.84193557s ago: executing program 39 (id=15758): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getitimer$auto(0x0, 0x0) 8.916440982s ago: executing program 5 (id=16932): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setreuid$auto(0x0, 0x20000000004) socket(0xa, 0x5, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) 8.768041742s ago: executing program 5 (id=16933): open$dir(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, 0xa0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x3, 0x8001}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, 0x0, 0x7, 0x1000}, 0x5}, 0x2, 0x100) 8.619547969s ago: executing program 5 (id=16937): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000005600)='/proc/sys/dev/parport/default/timeslice\x00', 0x88281, 0x0) write$auto(0x3, 0x0, 0xfdef) 8.483629999s ago: executing program 5 (id=16939): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x5) setsockopt$auto(0x4, 0x2000000000000116, 0x80, 0xfffffffffffffffd, 0x0) 8.261496542s ago: executing program 5 (id=16943): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) tkill$auto(0x1, 0x7) 7.579280812s ago: executing program 5 (id=16953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000038c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f00000000c0)={0x1c, r1, 0x301, 0x70bd28, 0x25dfdbff, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x2) 7.270043606s ago: executing program 40 (id=16953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000038c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f00000000c0)={0x1c, r1, 0x301, 0x70bd28, 0x25dfdbff, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x2) 7.262818426s ago: executing program 3 (id=16956): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/traceSMB\x00', 0x62441, 0x0) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xb5) write$auto(0x3, 0x0, 0xfdef) 7.113971508s ago: executing program 4 (id=16958): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/kernel/random/boot_id\x00', 0x0, 0x0) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x75, 0x0, 0xc) 7.11027819s ago: executing program 3 (id=16959): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x24, 0xf1, 0x2, @raw=0xfffff004}}) 6.835597011s ago: executing program 3 (id=16960): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) r1 = socket(0x11, 0xa, 0x1000) ioctl$auto(r1, 0x2, 0x2) ioctl$auto_KVM_CREATE_VM(r0, 0xc008ae09, 0x0) 6.551405004s ago: executing program 4 (id=16963): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) open(0x0, 0x149443, 0x0) ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 6.55086146s ago: executing program 3 (id=16964): openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r0, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 967.281395ms ago: executing program 2 (id=16954): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) getxattrat$auto(r0, 0x0, 0x6, 0x0, 0x0, 0x200006) 966.604314ms ago: executing program 4 (id=16972): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x20, r1, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r3}, @NET_SHAPER_A_HANDLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) 961.528202ms ago: executing program 3 (id=16973): socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x5, 0xfffffffffffffffc, 0x0) 585.089906ms ago: executing program 2 (id=16965): socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) close_range$auto(0x2, 0x8, 0x0) 581.255869ms ago: executing program 4 (id=16976): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) setsockopt$auto(0x1, 0x1, 0x14, &(0x7f0000000000)='\x00', 0xbb) 580.918651ms ago: executing program 3 (id=16966): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3ff, 0x8000) socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @rand_addr=0x2}, 0x55) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) 580.630585ms ago: executing program 0 (id=16967): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000011c0)='./cgroup.cpu/hugetlb.1GB.rsvd.failcnt\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) 436.482572ms ago: executing program 4 (id=16968): mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x1e, 0x5, 0x0) sendto$auto(0x3, 0x0, 0x79, 0x2, 0x0, 0x20) 411.24052ms ago: executing program 0 (id=16969): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) 253.258647ms ago: executing program 0 (id=16970): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_STOP_AP(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000009c0)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000001440), r0) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000015c0), r0) sendmsg$auto_NFC_CMD_STOP_POLL(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000001600)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40008d5}, 0x4010) 193.555127ms ago: executing program 0 (id=16971): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x1000000000004}, 0x2bc) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) 69.948783ms ago: executing program 0 (id=16975): close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd2\x00', 0x2000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) fcntl$auto(0x3, 0x4, 0xa553) 47.930402ms ago: executing program 4 (id=16977): mmap$auto(0x0, 0x2020009, 0x3, 0x6b2, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/shm_rmid_forced\x00', 0x141241, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 2.834716ms ago: executing program 0 (id=16978): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x8000002) r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8955, 0x0) 0s ago: executing program 2 (id=16979): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x106) io_uring_setup$auto(0x6, 0x0) listen$auto(0x3, 0x83) setsockopt$auto(0x3, 0x6, 0x6, 0x0, 0x409) kernel console output (not intermixed with test programs): : The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.022697][T26457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.033731][T26457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.045225][T26457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.066163][T26457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.103026][T26457] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.112665][T26457] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.131543][T26457] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.143459][T26457] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.396023][T26479] veth0_vlan: entered promiscuous mode [ 564.421722][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.450935][T26479] veth1_vlan: entered promiscuous mode [ 564.469034][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.541652][T26638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.569289][T26479] veth0_macvtap: entered promiscuous mode [ 564.584804][T26479] veth1_macvtap: entered promiscuous mode [ 564.590709][T26638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.634733][T26479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.677680][T26479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.697716][T26479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.717595][T26479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.737804][T26479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.753292][T26479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.769597][T26479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.791187][T26479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.827440][T26479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.847254][T26479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.865540][T26479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.882385][T26479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.893946][T26479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.905252][T26479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.967197][T26479] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.975931][T26479] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.046281][T26479] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.055033][T26479] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.295151][T26823] netlink: del zone limit has 8 unknown bytes [ 565.314347][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.353534][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.446603][T26638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.461706][T26638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.012299][T26849] netlink: 5 bytes leftover after parsing attributes in process `syz.5.9772'. [ 568.450661][T26956] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 569.594575][T27006] netlink: get zone limit has 8 unknown bytes [ 570.001237][T27016] netlink: 93 bytes leftover after parsing attributes in process `syz.7.9827'. [ 572.197942][T27094] netlink: 'syz.4.9851': attribute type 1 has an invalid length. [ 572.658954][T27120] nbd: must specify a device to reconfigure [ 572.673622][T27119] dyndbg: expected <4096 bytes into control [ 573.539631][T27162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9872'. [ 576.008803][T27272] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 576.027226][T27272] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 576.234197][T27280] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 578.588012][T27389] netlink: 'syz.6.9948': attribute type 1 has an invalid length. [ 579.543148][T27436] netlink: 206 bytes leftover after parsing attributes in process `syz.5.9964'. [ 580.417688][T27468] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 580.428879][T27468] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 581.979233][T27507] openvswitch: netlink: Multiple metadata blocks provided [ 585.066686][T27620] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek 260 [ 612.004557][T20774] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 612.020491][T20774] Bluetooth: hci1: adv larger than maximum supported [ 612.020544][T20774] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 612.029364][T20774] Bluetooth: hci1: Unknown advertising packet type: 0x34 [ 612.036530][T20774] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 612.043791][T20774] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 612.050844][T20774] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 612.058435][T20774] Bluetooth: hci1: adv larger than maximum supported [ 612.542177][T28535] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 613.133786][T28563] bridge0: port 3(vlan1) entered blocking state [ 613.141151][T28563] bridge0: port 3(vlan1) entered disabled state [ 613.152551][T28563] vlan1: entered allmulticast mode [ 613.157919][T28563] veth0_vlan: entered allmulticast mode [ 613.164854][T28563] vlan1: entered promiscuous mode [ 613.170874][T28563] bridge0: port 3(vlan1) entered blocking state [ 613.177300][T28563] bridge0: port 3(vlan1) entered forwarding state [ 613.743182][T28589] program syz.6.10350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 614.586308][T28622] netlink: 18 bytes leftover after parsing attributes in process `syz.5.10365'. [ 614.911384][T28631] svc: failed to register nfsdv3 RPC service (errno 111). [ 614.929630][T28631] svc: failed to register nfsaclv3 RPC service (errno 111). [ 615.180020][T28643] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 615.186542][T28643] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 615.505941][T28651] netlink: 186 bytes leftover after parsing attributes in process `syz.5.10377'. [ 616.843318][T28703] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 617.165945][T28712] input input34: cannot allocate more than FF_MAX_EFFECTS effects [ 617.296574][T28715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10406'. [ 619.726752][T28776] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10431'. [ 621.952875][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 621.959470][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.463883][T28849] zswap: compressor not available [ 623.362825][T28898] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 623.679831][T28909] netlink: 206 bytes leftover after parsing attributes in process `syz.5.10491'. [ 623.699088][T28911] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 623.714106][T28911] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 628.204317][T29091] netlink: 'syz.4.10569': attribute type 1 has an invalid length. [ 629.552101][T29120] Invalid ELF header magic: != ELF [ 630.846696][T29156] bridge0: port 4(team0) entered blocking state [ 630.853833][T29156] bridge0: port 4(team0) entered disabled state [ 630.860269][T29156] team0: entered allmulticast mode [ 630.918395][T29156] team_slave_0: entered allmulticast mode [ 630.943234][T29156] team_slave_1: entered allmulticast mode [ 630.964717][T29156] team0: entered promiscuous mode [ 630.970356][T29156] team_slave_0: entered promiscuous mode [ 630.977927][T29156] team_slave_1: entered promiscuous mode [ 631.003262][T29156] bridge0: port 4(team0) entered blocking state [ 631.009630][T29156] bridge0: port 4(team0) entered forwarding state [ 631.967030][T29190] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 633.569877][T29226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10627'. [ 633.579039][T29226] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 633.604611][T29226] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 636.272290][T29314] Device name cannot be null; rc = [-22] [ 637.214872][T29350] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input36 [ 637.662441][T29371] input: f0?\hՐJL'$d)KLo1oN0ø.m)$cj@qwR=X as /devices/virtual/input/input37 [ 639.267802][T29444] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 639.298636][T29444] svc: failed to register nfsdv3 RPC service (errno 111). [ 639.308046][T29444] svc: failed to register nfsaclv3 RPC service (errno 111). [ 639.493820][ T53] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.611383][ T53] bridge0: port 3(netdevsim2) entered disabled state [ 639.697316][ T53] netdevsim netdevsim7 netdevsim2 (unregistering): left allmulticast mode [ 639.748576][ T53] netdevsim netdevsim7 netdevsim2 (unregistering): left promiscuous mode [ 639.757127][ T53] bridge0: port 3(netdevsim2) entered disabled state [ 639.838425][ T53] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.948405][ T53] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.060948][ T53] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.212964][T20126] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 640.229205][T20126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 640.240738][T20126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 640.252210][T20126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 640.263117][T20126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 640.275932][T20126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 640.344003][ T53] team0: left allmulticast mode [ 640.350860][ T53] team_slave_0: left allmulticast mode [ 640.357177][ T53] team_slave_1: left allmulticast mode [ 640.362980][ T53] team0: left promiscuous mode [ 640.368538][ T53] team_slave_0: left promiscuous mode [ 640.375165][ T53] team_slave_1: left promiscuous mode [ 640.380826][ T53] bridge0: port 4(team0) entered disabled state [ 640.390641][ T53] bridge_slave_1: left allmulticast mode [ 640.396447][ T53] bridge_slave_1: left promiscuous mode [ 640.402283][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.413536][ T53] bridge_slave_0: left allmulticast mode [ 640.419877][ T53] bridge_slave_0: left promiscuous mode [ 640.429957][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.038036][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.066715][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.087617][ T53] bond0 (unregistering): Released all slaves [ 641.790760][T29459] chnl_net:caif_netlink_parms(): no params data found [ 642.009070][ T53] hsr_slave_0: left promiscuous mode [ 642.021579][ T53] hsr_slave_1: left promiscuous mode [ 642.042300][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.064915][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.114905][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.123286][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.171118][ T53] veth1_macvtap: left promiscuous mode [ 642.182374][ T53] veth0_macvtap: left promiscuous mode [ 642.194828][ T53] veth1_vlan: left promiscuous mode [ 642.200258][ T53] veth0_vlan: left promiscuous mode [ 642.324626][T20774] Bluetooth: hci3: command tx timeout [ 643.149856][ T53] team0 (unregistering): Port device team_slave_1 removed [ 643.203103][ T53] team0 (unregistering): Port device team_slave_0 removed [ 643.943473][T20774] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 643.943513][T20774] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 643.960241][T20774] Bluetooth: hci0: adv larger than maximum supported [ 643.960270][T20774] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 643.968064][T20774] Bluetooth: hci0: Unknown advertising packet type: 0x37 [ 643.975127][T20774] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 643.982335][T20774] Bluetooth: hci0: Unknown advertising packet type: 0x30 [ 643.989827][T20774] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 644.001260][T20774] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 644.045770][T29459] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.085295][T29459] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.093020][T29459] bridge_slave_0: entered allmulticast mode [ 644.110831][T29459] bridge_slave_0: entered promiscuous mode [ 644.143618][T29459] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.175896][T29459] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.185988][T29459] bridge_slave_1: entered allmulticast mode [ 644.211945][T29459] bridge_slave_1: entered promiscuous mode [ 644.323154][T29459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.335087][T29459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.393456][T20774] Bluetooth: hci3: command tx timeout [ 644.439294][T29459] team0: Port device team_slave_0 added [ 644.455599][T29459] team0: Port device team_slave_1 added [ 644.557868][T29459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.581436][T29459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.635880][T29459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.668700][T29459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.700488][T29459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.757055][T29459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.077121][T29459] hsr_slave_0: entered promiscuous mode [ 645.096526][T29459] hsr_slave_1: entered promiscuous mode [ 645.118924][T29459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 645.141208][T29459] Cannot create hsr debugfs directory [ 646.172753][T29459] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 646.191639][T29459] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 646.212365][T29459] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 646.232011][T29459] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 646.338906][T29459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.379783][T29459] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.400476][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.407648][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.441344][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.448549][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.465701][T20774] Bluetooth: hci3: command tx timeout [ 646.561630][T29459] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 646.586944][T29459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 646.969251][T29459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.484855][T29459] veth0_vlan: entered promiscuous mode [ 647.506878][T29459] veth1_vlan: entered promiscuous mode [ 647.565141][T29459] veth0_macvtap: entered promiscuous mode [ 647.605404][T29459] veth1_macvtap: entered promiscuous mode [ 647.635804][T29459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.652929][T29459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.686333][T29459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.718623][T29459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.749399][T29459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.777097][T29459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.793215][T29459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.821249][T29459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.855805][T29459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.890103][T29459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.910567][T29459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.924513][T29459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.940220][T29459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.951519][T29459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.984001][T29459] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.007833][T29459] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.034283][T29459] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.043439][T29459] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.350514][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.398291][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.468790][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.500317][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.532037][T20774] Bluetooth: hci3: command tx timeout [ 649.543798][T29773] netlink: 350 bytes leftover after parsing attributes in process `syz.4.10823'. [ 650.090279][T29799] program syz.7.10832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 651.039687][T29835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10848'. [ 651.829787][T29864] netlink: 18 bytes leftover after parsing attributes in process `syz.7.10861'. [ 652.207574][T29821] kexec: Could not allocate control_code_buffer [ 652.940929][T29905] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10880'. [ 653.726047][T29937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10893'. [ 654.157533][T29958] input input38: cannot allocate more than FF_MAX_EFFECTS effects [ 655.367289][T29986] syz.5.10917 (29986) used greatest stack depth: 20912 bytes left [ 655.931579][T30017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10937'. [ 656.394757][T30036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10936'. [ 660.107661][T30140] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input41 [ 660.842194][T30169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10997'. [ 660.931109][T30172] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input42 [ 663.388660][T30257] zswap: compressor not available [ 663.801185][T30280] Setting dangerous option i915.mitigations - tainting kernel [ 665.526179][T30335] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 665.729387][T30341] netlink: 206 bytes leftover after parsing attributes in process `syz.6.11070'. [ 670.558057][T30494] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 671.299442][T30517] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 671.312908][T30517] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 672.843495][T30561] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 672.855273][T30561] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 673.277020][T30581] netlink: 'syz.7.11184': attribute type 1 has an invalid length. [ 674.967822][T20126] Bluetooth: hci1: command 0x0406 tx timeout [ 677.159791][T30682] Invalid ELF header magic: != ELF [ 677.296687][T30686] bridge0: port 4(team0) entered blocking state [ 677.316087][T30686] bridge0: port 4(team0) entered disabled state [ 677.338611][T30686] team0: entered allmulticast mode [ 677.351141][T30686] team_slave_0: entered allmulticast mode [ 677.363810][T30686] team_slave_1: entered allmulticast mode [ 677.379112][T30686] team0: entered promiscuous mode [ 677.408555][T30686] team_slave_0: entered promiscuous mode [ 677.416473][T30686] team_slave_1: entered promiscuous mode [ 677.425902][T30686] bridge0: port 4(team0) entered blocking state [ 677.432295][T30686] bridge0: port 4(team0) entered forwarding state [ 679.970167][T30769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11254'. [ 679.988201][T30769] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 679.996314][T30769] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 682.862251][T30848] netlink: 'syz.6.11285': attribute type 1 has an invalid length. [ 683.090938][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.097447][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.474218][T30895] bridge0: port 3(team0) entered blocking state [ 684.497023][T30895] bridge0: port 3(team0) entered disabled state [ 684.510435][T30895] team0: entered allmulticast mode [ 684.523203][T30895] team_slave_0: entered allmulticast mode [ 684.537073][T30895] team_slave_1: entered allmulticast mode [ 684.559833][T30895] team0: entered promiscuous mode [ 684.573059][T30895] team_slave_0: entered promiscuous mode [ 684.594996][T30895] team_slave_1: entered promiscuous mode [ 684.628043][T30895] bridge0: port 3(team0) entered blocking state [ 684.634489][T30895] bridge0: port 3(team0) entered listening state [ 686.418319][T30939] bridge0: port 3(team0) entered blocking state [ 686.427457][T30939] bridge0: port 3(team0) entered disabled state [ 686.433892][T30939] team0: entered allmulticast mode [ 686.442927][T30939] team_slave_0: entered allmulticast mode [ 686.454032][T30939] team_slave_1: entered allmulticast mode [ 686.464134][T30939] team0: entered promiscuous mode [ 686.498391][T30939] team_slave_0: entered promiscuous mode [ 686.505052][T30939] team_slave_1: entered promiscuous mode [ 686.511845][T30939] bridge0: port 3(team0) entered blocking state [ 686.518271][T30939] bridge0: port 3(team0) entered forwarding state [ 686.663869][T30948] Device name cannot be null; rc = [-22] [ 688.703986][T31035] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input43 [ 690.109054][T31077] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11385'. [ 690.120521][T31077] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 690.129482][T31077] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 690.725676][T31096] syz.4.11392 (31096) used obsolete PPPIOCDETACH ioctl [ 691.029737][T31106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11396'. [ 691.045800][T31106] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 691.057008][T31106] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 695.187679][T31234] Device name cannot be null; rc = [-22] [ 698.371208][T31329] Invalid ELF header magic: != ELF [ 699.629785][ C0] bridge0: port 3(team0) entered learning state [ 699.659074][T31359] Invalid ELF header magic: != ELF [ 700.284327][T31388] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input44 [ 700.806539][T31392] Invalid ELF header magic: != ELF [ 701.326906][T31412] Invalid ELF header magic: != ELF [ 701.388073][T31422] input: f0?\hՐJL'$d)KLo1oN0ø.m)$cj@qwR=X as /devices/virtual/input/input45 [ 702.399106][T31436] Invalid ELF header magic: != ELF [ 703.078275][T20774] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 703.078314][T20774] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 703.093289][T20774] Bluetooth: hci2: adv larger than maximum supported [ 704.076694][T31493] input: f0?\hՐJL'$d)KLo1oN0ø.m)$cj@qwR=X as /devices/virtual/input/input46 [ 704.537772][T20774] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 704.537810][T20774] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 704.553228][T20774] Bluetooth: hci3: adv larger than maximum supported [ 704.553288][T20774] Bluetooth: hci3: Unknown advertising packet type: 0x20 [ 704.561319][T20774] Bluetooth: hci3: Unknown advertising packet type: 0x33 [ 704.568464][T20774] Bluetooth: hci3: Unknown advertising packet type: 0x20 [ 704.575623][T20774] Bluetooth: hci3: Unknown advertising packet type: 0x20 [ 704.582772][T20774] Bluetooth: hci3: Unknown advertising packet type: 0x20 [ 704.589820][T20774] Bluetooth: hci3: adv larger than maximum supported [ 704.889876][T31523] input: f0?\hՐJL'$d)KLo1oN0ø.m)$cj@qwR=X as /devices/virtual/input/input47 [ 709.861037][T31652] bridge0: port 4(vlan1) entered blocking state [ 709.867730][T31652] bridge0: port 4(vlan1) entered disabled state [ 709.901843][T31652] vlan1: entered allmulticast mode [ 709.921359][T31652] veth0_vlan: entered allmulticast mode [ 709.952421][T31652] vlan1: entered promiscuous mode [ 709.988815][T31652] bridge0: port 4(vlan1) entered blocking state [ 709.995254][T31652] bridge0: port 4(vlan1) entered forwarding state [ 713.277837][T31725] netlink: 350 bytes leftover after parsing attributes in process `syz.7.11664'. [ 714.906543][ C0] bridge0: port 3(team0) entered forwarding state [ 714.913073][ C0] bridge0: topology change detected, propagating [ 716.197729][T31804] netlink: 350 bytes leftover after parsing attributes in process `syz.5.11699'. [ 716.657367][T31818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11703'. [ 719.941431][T31863] kexec: Could not allocate control_code_buffer [ 721.670946][T31939] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11763'. [ 722.224322][T31959] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11762'. [ 722.417863][T31963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11772'. [ 723.426128][T32007] input input48: cannot allocate more than FF_MAX_EFFECTS effects [ 724.306187][T32047] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input50 [ 724.842787][T32068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11811'. [ 725.477916][T32085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11819'. [ 727.339857][T32136] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11834'. [ 728.109222][T32157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11849'. [ 728.485235][T32169] zswap: compressor not available [ 730.605625][T32243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11878'. [ 735.698732][T32411] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11953'. [ 736.841586][T32409] kexec: Could not allocate control_code_buffer [ 736.945965][T32414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11964'. [ 738.900881][T32439] kexec: Could not allocate control_code_buffer [ 741.350682][T32515] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input51 [ 742.833842][T32505] kexec: Could not allocate control_code_buffer [ 744.197668][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 744.204381][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 744.415007][T32575] Setting dangerous option i915.mitigations - tainting kernel [ 745.578479][T32605] Setting dangerous option i915.mitigations - tainting kernel [ 750.246354][T32694] kexec: Could not allocate control_code_buffer [ 751.115359][T32735] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 751.158090][T32735] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 753.825660][ T333] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 753.880391][ T334] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 755.681823][ T375] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 755.692445][ T375] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 755.803179][ T378] sctp: [Deprecated]: syz.5.12135 (pid 378) Use of int in maxseg socket option. [ 755.803179][ T378] Use struct sctp_assoc_value instead [ 756.570098][ T29] audit: type=1326 audit(4294967525.642:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=392 comm="syz.5.12142" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f257fd8cde9 code=0x0 [ 757.987286][ T383] kexec: Could not allocate control_code_buffer [ 758.684487][ T423] sctp: [Deprecated]: syz.7.12154 (pid 423) Use of int in maxseg socket option. [ 758.684487][ T423] Use struct sctp_assoc_value instead [ 760.722806][ T488] netlink: 342 bytes leftover after parsing attributes in process `syz.7.12184'. [ 764.282294][ T568] kexec: Could not allocate control_code_buffer [ 766.648974][ T625] Bluetooth: hci3: command 0x0406 tx timeout [ 766.833264][ T642] kexec: Could not allocate control_code_buffer [ 767.119965][ T669] netlink: 342 bytes leftover after parsing attributes in process `syz.4.12263'. [ 768.961135][ T695] netlink: 342 bytes leftover after parsing attributes in process `syz.5.12276'. [ 777.945799][T20774] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 777.945839][T20774] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 777.961396][T20774] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 777.961434][T20774] Bluetooth: hci1: adv larger than maximum supported [ 777.969407][T20774] Bluetooth: hci1: Unknown advertising packet type: 0x7d [ 777.976120][T20774] Bluetooth: hci1: Unknown advertising packet type: 0x7d [ 777.983339][T20774] Bluetooth: hci1: Malformed LE Event: 0x0d [ 784.213850][ T1304] netlink: 346 bytes leftover after parsing attributes in process `syz.5.12518'. [ 786.830120][ T1414] GUP no longer grows the stack in syz.6.12568 (1414): 14000-401000 (4000) [ 786.855627][ T1414] CPU: 1 UID: 0 PID: 1414 Comm: syz.6.12568 Tainted: G U 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 786.855667][ T1414] Tainted: [U]=USER [ 786.855676][ T1414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 786.855690][ T1414] Call Trace: [ 786.855697][ T1414] [ 786.855707][ T1414] dump_stack_lvl+0x16c/0x1f0 [ 786.855743][ T1414] gup_vma_lookup+0x1d2/0x220 [ 786.855778][ T1414] __get_user_pages+0x236/0x36f0 [ 786.855821][ T1414] ? hlock_class+0x4e/0x130 [ 786.855847][ T1414] ? __lock_acquire+0x15a9/0x3c40 [ 786.855881][ T1414] ? __pfx___get_user_pages+0x10/0x10 [ 786.855927][ T1414] __gup_longterm_locked+0x212/0x1870 [ 786.855962][ T1414] ? __pfx___lock_acquire+0x10/0x10 [ 786.856002][ T1414] ? __pfx___gup_longterm_locked+0x10/0x10 [ 786.856038][ T1414] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 786.856072][ T1414] ? rwsem_read_trylock+0x12d/0x250 [ 786.856109][ T1414] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 786.856155][ T1414] ? process_vm_rw_core.constprop.0+0x3ff/0x9c0 [ 786.856188][ T1414] pin_user_pages_remote+0xee/0x150 [ 786.856224][ T1414] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 786.856259][ T1414] ? down_read+0xc9/0x330 [ 786.856302][ T1414] process_vm_rw_core.constprop.0+0x42b/0x9c0 [ 786.856335][ T1414] ? futex_wait_queue+0x103/0x1f0 [ 786.856376][ T1414] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 786.856431][ T1414] process_vm_rw+0x301/0x360 [ 786.856457][ T1414] ? __pfx_process_vm_rw+0x10/0x10 [ 786.856494][ T1414] ? do_user_addr_fault+0xdc7/0x13f0 [ 786.856555][ T1414] ? xfd_validate_state+0x5d/0x180 [ 786.856589][ T1414] ? rcu_is_watching+0x12/0xc0 [ 786.856618][ T1414] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 786.856645][ T1414] ? do_syscall_64+0x91/0x250 [ 786.856672][ T1414] ? lockdep_hardirqs_on+0x7c/0x110 [ 786.856698][ T1414] do_syscall_64+0xcd/0x250 [ 786.856728][ T1414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.856759][ T1414] RIP: 0033:0x7fe479d8cde9 [ 786.856778][ T1414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.856801][ T1414] RSP: 002b:00007fe47ab71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 786.856826][ T1414] RAX: ffffffffffffffda RBX: 00007fe479fa5fa0 RCX: 00007fe479d8cde9 [ 786.856843][ T1414] RDX: 0000000000000004 RSI: 0000400000000040 RDI: 0000000000000603 [ 786.856858][ T1414] RBP: 00007fe479e0e2a0 R08: 0000000000000003 R09: 0000000000000000 [ 786.856873][ T1414] R10: 00004000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 786.856888][ T1414] R13: 0000000000000000 R14: 00007fe479fa5fa0 R15: 00007ffd8ed6f888 [ 786.856923][ T1414] [ 789.447754][ T1495] futex_wake_op: syz.6.12604 tries to shift op by 64; fix this program [ 789.819603][ T1510] ovs_: entered promiscuous mode [ 792.747548][ T1624] ptrace attach of "./syz-executor exec"[6533] was attempted by "./syz-executor exec"[1624] [ 792.846487][ T1628] mtrr: base(0x40000000000) is not aligned on a size(0x0000) boundary [ 793.756700][T20774] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 793.756740][T20774] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 793.777286][T20774] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 793.777357][T20774] Bluetooth: hci2: Malformed LE Event: 0x0d [ 794.584841][ T1709] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 794.794246][ T1715] netlink: 18 bytes leftover after parsing attributes in process `syz.4.12696'. [ 795.198264][ T1725] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12700'. [ 796.123776][ T1755] netlink: 'syz.5.12712': attribute type 1 has an invalid length. [ 797.435075][ T1797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12731'. [ 800.230709][ T1872] sctp: [Deprecated]: syz.4.12763 (pid 1872) Use of struct sctp_assoc_value in delayed_ack socket option. [ 800.230709][ T1872] Use struct sctp_sack_info instead [ 800.565405][ T1882] input: f as /devices/virtual/input/input52 [ 800.929751][ T1901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12774'. [ 801.840319][ T1943] netlink: 206 bytes leftover after parsing attributes in process `syz.6.12793'. [ 803.542674][T20774] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 803.946457][ T2016] sd 0:0:1:0: PR command failed: 1026 [ 803.957110][ T2016] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 803.990203][ T2016] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 805.224378][ T2079] bridge0: port 5(bond0) entered blocking state [ 805.255944][ T2079] bridge0: port 5(bond0) entered disabled state [ 805.272651][ T2079] bond0: entered allmulticast mode [ 805.292689][ T2079] bond_slave_0: entered allmulticast mode [ 805.317064][ T2079] bond_slave_1: entered allmulticast mode [ 805.331107][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 805.338674][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 805.347393][ T2079] bond0: entered promiscuous mode [ 805.353316][ T2079] bond_slave_0: entered promiscuous mode [ 805.362437][ T2079] bond_slave_1: entered promiscuous mode [ 805.369788][ T2079] bridge0: port 5(bond0) entered blocking state [ 805.376156][ T2079] bridge0: port 5(bond0) entered listening state [ 805.717058][ T2100] ptrace attach of "./syz-executor exec"[29459] was attempted by ""[2100] [ 806.645426][ T2149] netlink: 186 bytes leftover after parsing attributes in process `syz.7.12884'. [ 807.571783][ T2194] netlink: 350 bytes leftover after parsing attributes in process `syz.6.12906'. [ 807.759341][ T2206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12910'. [ 808.459119][ T2239] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12925'. [ 808.606749][ T2243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12926'. [ 811.746063][ T2363] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 811.786910][ T2363] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 812.035549][ T2380] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 813.242083][ T2440] could not allocate digest TFM handle  [ 813.516820][ T2461] netlink: 206 bytes leftover after parsing attributes in process `syz.5.13013'. [ 813.575133][ T2463] netlink: 'syz.7.13014': attribute type 62 has an invalid length. [ 813.856059][ T2471] sctp: [Deprecated]: syz.6.13018 (pid 2471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 813.856059][ T2471] Use struct sctp_sack_info instead [ 816.048556][ T2583] IPVS: length: 150994944 != 25171704 [ 817.077980][ T2636] ptrace attach of "./syz-executor exec"[18227] was attempted by "|r#x,xHRS:D.mS=0?_uivвx?[Ǯ'o$KӮ@Y%u(N\x0cs]*;F4xx8$7a%A?ؼ`t%=3jԜ~uKg.PXg@\x07A./!:BWO=&/*F<-=>&7Ene,:ܐThtBɤ־w嚡jx?N1?/?L:lkפ`|_# h0seXx3vCf_˕,H_BSpɢ?zS!\x5c+eW]A8F s2S@v|Z?/.*[WT -\x07wSɕKTRUUWnZ)\x07P\x09x\x0d;SY?+%PU+6Rw\x0amxb&G<4t&n3Bq{X+hݪwVĬ4[܄ h]O[i.!EhSO7w\x0aB@+yxjٚq;<(~Ͱ2Yt˩IJ1#P7!p^4o(\x0c *jUiA/'.C\x5c\x0b\x0cF\x07Naqӫ j4zekn% [ 818.102771][ T2669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13082'. [ 818.301048][ T2669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13082'. [ 819.782775][ T3016] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.950558][ T3016] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.083590][ T3016] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.189937][ T3016] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.332242][ T625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 820.344291][ T625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 820.364065][ T625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 820.374727][ T625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 820.388853][ T625] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 820.396164][ T625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 820.477749][ T3016] team0: left allmulticast mode [ 820.482667][ T3016] team_slave_0: left allmulticast mode [ 820.493152][ T3016] team_slave_1: left allmulticast mode [ 820.517368][ T3016] team0: left promiscuous mode [ 820.522168][ T3016] team_slave_0: left promiscuous mode [ 820.535515][ T3016] team_slave_1: left promiscuous mode [ 820.555908][ T3016] bridge0: port 3(team0) entered disabled state [ 820.575736][ T3016] bridge_slave_1: left allmulticast mode [ 820.585002][ T3016] bridge_slave_1: left promiscuous mode [ 820.597548][ C1] bridge0: port 5(bond0) entered learning state [ 820.601723][ T3016] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.663377][ T3016] bridge_slave_0: left allmulticast mode [ 820.669372][ T3016] bridge_slave_0: left promiscuous mode [ 820.677892][ T3016] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.715539][ T3016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.747513][ T3016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 821.767271][ T3016] bond0 (unregistering): Released all slaves [ 822.382265][ T2837] ovs_: entered promiscuous mode [ 822.434064][T20774] Bluetooth: hci1: command tx timeout [ 822.499446][ T2756] chnl_net:caif_netlink_parms(): no params data found [ 822.862336][ T3016] hsr_slave_0: left promiscuous mode [ 822.885092][ T3016] hsr_slave_1: left promiscuous mode [ 822.905394][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 822.912857][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.955501][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 822.973593][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.079781][ T3016] veth1_macvtap: left promiscuous mode [ 823.094905][ T3016] veth0_macvtap: left promiscuous mode [ 823.100537][ T3016] veth1_vlan: left promiscuous mode [ 823.123912][ T3016] veth0_vlan: left promiscuous mode [ 824.496740][T20774] Bluetooth: hci1: command tx timeout [ 824.597661][ T3016] team0 (unregistering): Port device team_slave_1 removed [ 824.731114][ T3016] team0 (unregistering): Port device team_slave_0 removed [ 826.108697][ T2756] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.115817][ T2756] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.164684][ T2756] bridge_slave_0: entered allmulticast mode [ 826.177199][ T2756] bridge_slave_0: entered promiscuous mode [ 826.209749][ T2756] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.216862][ T2756] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.275146][ T2756] bridge_slave_1: entered allmulticast mode [ 826.293927][ T2756] bridge_slave_1: entered promiscuous mode [ 826.311371][ T2903] block nbd0: Unsupported socket: shutdown callout must be supported. [ 826.566722][T20774] Bluetooth: hci1: command tx timeout [ 826.590210][ T2756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.618145][ T2756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.967454][ T2756] team0: Port device team_slave_0 added [ 827.036640][ T2756] team0: Port device team_slave_1 added [ 827.172427][ T2756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.203966][ T2756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.266849][ T2756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.317735][ T2756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.337353][ T2756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.385620][ T2756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.485185][ T2756] hsr_slave_0: entered promiscuous mode [ 827.506659][ T2756] hsr_slave_1: entered promiscuous mode [ 827.528116][ T2756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 827.549532][ T2756] Cannot create hsr debugfs directory [ 827.737018][ T2951] bridge0: port 6(gretap0) entered blocking state [ 827.745424][ T2951] bridge0: port 6(gretap0) entered disabled state [ 827.760310][ T2951] gretap0: entered allmulticast mode [ 827.767579][ T2951] gretap0: entered promiscuous mode [ 827.777756][ T2951] bridge0: port 6(gretap0) entered blocking state [ 827.784333][ T2951] bridge0: port 6(gretap0) entered listening state [ 827.886162][ T2955] IPVS: length: 150994944 != 2818572296 [ 828.032386][ T2756] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 828.083873][ T2756] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 828.119029][ T2963] ovs9: entered promiscuous mode [ 828.169115][ T2756] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 828.187009][ T2756] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 828.473176][ T2756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.539099][ T2756] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.564051][ T2137] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.571223][ T2137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.632245][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.639433][ T3539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.650340][T20774] Bluetooth: hci1: command tx timeout [ 828.852382][ T2756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 829.148095][ T2998] UHID_CREATE from different security context by process 1382 (syz.7.13180), this is not allowed. [ 829.232640][ T2756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.767987][ T3029] netlink: 186 bytes leftover after parsing attributes in process `syz.4.13185'. [ 829.831880][ T2756] veth0_vlan: entered promiscuous mode [ 829.875028][ T2756] veth1_vlan: entered promiscuous mode [ 829.942440][ T2756] veth0_macvtap: entered promiscuous mode [ 829.972752][ T2756] veth1_macvtap: entered promiscuous mode [ 830.029486][ T2756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.060481][ T2756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.079793][ T2756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.112152][ T2756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.138613][ T2756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.181397][ T2756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.208092][ T2756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.229713][ T2756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.265829][ T2756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.307181][ T2756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.349550][ T2756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.369942][ T2756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.390663][ T2756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.423114][ T2756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.507352][ T2756] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.545144][ T2756] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.568075][ T2756] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.597640][ T3058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13191'. [ 830.612130][ T2756] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.781418][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.811820][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.888298][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.900432][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.267170][ T3079] netlink: 'syz.4.13196': attribute type 2 has an invalid length. [ 831.299091][ T3079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13196'. [ 833.873652][ T3201] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13227'. [ 835.877603][ C1] bridge0: port 5(bond0) entered forwarding state [ 835.884133][ C1] bridge0: topology change detected, propagating [ 836.322122][ T3286] netlink: 338 bytes leftover after parsing attributes in process `syz.5.13260'. [ 836.714942][ T3295] type: 33554176 invalid [ 836.731490][ T3256] kexec: Could not allocate control_code_buffer [ 838.138980][ T3345] input: f0?\7vՐJL'$d)KLo1oNcj@qwR=X as /devices/virtual/input/input53 [ 840.762822][ T3449] netlink: 350 bytes leftover after parsing attributes in process `syz.7.13322'. [ 842.881941][ C0] bridge0: port 6(gretap0) entered learning state [ 842.935865][ T3542] netlink: 342 bytes leftover after parsing attributes in process `syz.4.13359'. [ 844.192773][ T3597] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13381'. [ 845.565892][ T3670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13407'. [ 846.118913][ T3696] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13413'. [ 846.137538][ T3696] macsec0: entered allmulticast mode [ 846.160937][ T3696] veth1_macvtap: entered allmulticast mode [ 846.572539][ T3718] CIFS: VFS: Invalid SecurityFlags: 0 [ 846.572539][ T3718] [ 848.391988][ T3802] ptrace attach of "./syz-executor exec"[6533] was attempted by ""[3802] [ 849.105979][ T3839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13451'. [ 849.489089][ T3854] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13454'. [ 850.047080][ T3881] delete_channel: no stack [ 851.872402][ T3949] qrtr: Invalid version 0 [ 856.315019][ T4062] netlink: 346 bytes leftover after parsing attributes in process `syz.7.13530'. [ 858.161530][ C0] bridge0: port 6(gretap0) entered forwarding state [ 858.168200][ C0] bridge0: topology change detected, propagating [ 863.762651][ T4260] futex_wake_op: syz.4.13616 tries to shift op by 64; fix this program [ 863.969513][ T4269] ovs_: entered promiscuous mode [ 866.443235][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 866.454347][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 866.873294][ T4359] ptrace attach of "./syz-executor exec"[29459] was attempted by "./syz-executor exec"[4359] [ 867.786502][ T4392] mtrr: base(0x40000000000) is not aligned on a size(0x0000) boundary [ 868.756051][T20774] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 868.756092][T20774] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 868.772845][T20774] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 868.772965][T20774] Bluetooth: hci1: Malformed LE Event: 0x0d [ 869.818515][ T4466] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 870.026945][ T4474] netlink: 18 bytes leftover after parsing attributes in process `syz.7.13707'. [ 870.304272][ T4482] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13712'. [ 871.393224][ T4513] netlink: 'syz.7.13725': attribute type 1 has an invalid length. [ 873.400189][ T4555] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13742'. [ 876.517982][ T4638] sctp: [Deprecated]: syz.5.13777 (pid 4638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 876.517982][ T4638] Use struct sctp_sack_info instead [ 877.619642][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13789'. [ 878.414188][ T4693] netlink: 206 bytes leftover after parsing attributes in process `syz.5.13804'. [ 880.533589][T20774] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 882.460430][ T4835] bridge0: port 3(bond0) entered blocking state [ 882.468194][ T4835] bridge0: port 3(bond0) entered disabled state [ 882.474710][ T4835] bond0: entered allmulticast mode [ 882.494285][ T4835] bond_slave_0: entered allmulticast mode [ 882.501882][ T4835] bond_slave_1: entered allmulticast mode [ 882.523400][ T4835] bond0: entered promiscuous mode [ 882.552387][ T4835] bond_slave_0: entered promiscuous mode [ 882.585811][ T4835] bond_slave_1: entered promiscuous mode [ 882.605155][ T4835] bridge0: port 3(bond0) entered blocking state [ 882.611495][ T4835] bridge0: port 3(bond0) entered forwarding state [ 882.846913][ T4849] ptrace attach of "./syz-executor exec"[6533] was attempted by ""[4849] [ 883.918385][ T4893] netlink: 186 bytes leftover after parsing attributes in process `syz.8.13896'. [ 885.058426][ T4944] netlink: 350 bytes leftover after parsing attributes in process `syz.5.13918'. [ 885.463243][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13927'. [ 885.937913][ T4984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13936'. [ 886.157049][ T4995] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13938'. [ 888.715461][ T5107] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 888.742651][ T5107] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 889.203794][ T5125] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 890.626658][ T5197] netlink: 206 bytes leftover after parsing attributes in process `syz.4.14026'. [ 891.256433][ T5211] sctp: [Deprecated]: syz.4.14032 (pid 5211) Use of struct sctp_assoc_value in delayed_ack socket option. [ 891.256433][ T5211] Use struct sctp_sack_info instead [ 892.323290][ T5250] netlink: 346 bytes leftover after parsing attributes in process `syz.8.14049'. [ 893.715616][ T5301] IPVS: length: 150994944 != 25171704 [ 893.861847][ T5307] netlink: 346 bytes leftover after parsing attributes in process `syz.4.14071'. [ 895.190220][ T5361] ptrace attach of "./syz-executor exec"[6533] was attempted by "i΢e4ZIea%ַӬI:H@ɢADфc\x0bM2jlt>H1Lˌ:<-~.h\x0bluE.Փ\x1bvc((N/=C\x0dC3Z\x07֘3݋-όRF\x0d@MHmdZnB;)Ce_\x0aP+gku;[4}|ՎsKx͑QZ:`;,%A\x5c\x22_mi׶UͲ0^S]PLI'Ygjiw.(-Ɂ6ގ\x5csBķe\x1b&e/ZiHm>4y [ 895.384832][ T5366] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14097'. [ 895.591772][ T5366] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14097'. [ 897.490066][ T61] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.593707][ T61] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.758718][ T61] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.863751][ T61] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.013770][ T625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 898.027812][ T625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 898.054464][ T625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 898.079417][ T625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 898.101603][ T625] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 898.115216][ T625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 898.281617][ T61] bridge_slave_1: left allmulticast mode [ 898.308869][ T61] bridge_slave_1: left promiscuous mode [ 898.318172][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.334479][ T61] bridge_slave_0: left allmulticast mode [ 898.340239][ T61] bridge_slave_0: left promiscuous mode [ 898.351662][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.879039][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.890797][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.907175][ T61] bond0 (unregistering): Released all slaves [ 899.191942][ T61] hsr_slave_0: left promiscuous mode [ 899.209266][ T61] hsr_slave_1: left promiscuous mode [ 899.216584][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.239948][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.251230][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.259501][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.331226][ T61] veth1_macvtap: left promiscuous mode [ 899.336785][ T61] veth0_macvtap: left promiscuous mode [ 899.351726][ T61] veth1_vlan: left promiscuous mode [ 899.357048][ T61] veth0_vlan: left promiscuous mode [ 900.062033][ T61] team0 (unregistering): Port device team_slave_1 removed [ 900.118903][ T61] team0 (unregistering): Port device team_slave_0 removed [ 900.188946][T20774] Bluetooth: hci1: command tx timeout [ 900.605540][ T5446] chnl_net:caif_netlink_parms(): no params data found [ 900.725812][ T5446] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.734328][ T5446] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.743991][ T5446] bridge_slave_0: entered allmulticast mode [ 900.755296][ T5446] bridge_slave_0: entered promiscuous mode [ 900.763638][ T5446] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.771079][ T5446] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.778215][ T5446] bridge_slave_1: entered allmulticast mode [ 900.785126][ T5446] bridge_slave_1: entered promiscuous mode [ 900.848688][ T5446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.861026][ T5446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.900656][ T5446] team0: Port device team_slave_0 added [ 900.921916][ T5446] team0: Port device team_slave_1 added [ 900.960057][ T5446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.967024][ T5446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.003579][ T5446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.035760][ T5446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.043104][ T5446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.077270][ T5446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.130056][ T5446] hsr_slave_0: entered promiscuous mode [ 901.136371][ T5446] hsr_slave_1: entered promiscuous mode [ 901.151209][ T5446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 901.158890][ T5446] Cannot create hsr debugfs directory [ 901.339245][ T5446] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 901.354923][ T5446] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 901.367746][ T5446] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 901.383253][ T5446] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 901.417632][ T5446] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.424752][ T5446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.432215][ T5446] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.439314][ T5446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.519165][ T5446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.544893][ T5446] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.567376][ T3016] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.575730][ T3016] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.602188][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.609324][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.627321][ T2137] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.634426][ T2137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.682393][ T5446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 901.876401][ T5446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.130307][ T5446] veth0_vlan: entered promiscuous mode [ 902.145266][ T5446] veth1_vlan: entered promiscuous mode [ 902.177185][ T5446] veth0_macvtap: entered promiscuous mode [ 902.195306][ T5446] veth1_macvtap: entered promiscuous mode [ 902.239110][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.250209][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.260661][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.262549][T20774] Bluetooth: hci1: command tx timeout [ 902.271419][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.287635][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.298357][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.309153][ T5446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.321626][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.334095][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.347484][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.358635][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.368739][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.381499][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.392827][ T5446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.408231][ T5446] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.417878][ T5446] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.427182][ T5446] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.436464][ T5446] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.524268][ T2137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.539459][ T2137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.568265][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.579947][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.886903][ T5600] ovs_: entered promiscuous mode [ 904.322873][T20774] Bluetooth: hci1: command tx timeout [ 904.981331][ T5660] block nbd0: Unsupported socket: shutdown callout must be supported. [ 906.004149][ T5700] bridge0: port 5(gretap0) entered blocking state [ 906.032746][ T5700] bridge0: port 5(gretap0) entered disabled state [ 906.058724][ T5700] gretap0: entered allmulticast mode [ 906.106873][ T5700] gretap0: entered promiscuous mode [ 906.123926][ T5700] bridge0: port 5(gretap0) entered blocking state [ 906.130482][ T5700] bridge0: port 5(gretap0) entered forwarding state [ 906.193158][ T5708] IPVS: length: 150994944 != 2818572296 [ 906.213699][ T5707] ovs9: entered promiscuous mode [ 906.400812][T20774] Bluetooth: hci1: command tx timeout [ 906.913675][ T5733] netlink: 186 bytes leftover after parsing attributes in process `syz.7.14195'. [ 907.851226][ T5768] netlink: 'syz.7.14207': attribute type 2 has an invalid length. [ 907.897715][ T5768] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14207'. [ 908.067191][ T5776] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14200'. [ 910.324503][ T5853] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14242'. [ 912.972330][ T5943] netlink: 338 bytes leftover after parsing attributes in process `syz.9.14271'. [ 913.437953][ T5951] type: 33554176 invalid [ 914.930724][ T5948] kexec: Could not allocate control_code_buffer [ 915.089021][ T5988] input: f0?\7vՐJL'$d)KLo1oNcj@qwR=X as /devices/virtual/input/input54 [ 918.828122][ T6122] netlink: 350 bytes leftover after parsing attributes in process `syz.4.14337'. [ 921.949491][ T6287] netlink: 342 bytes leftover after parsing attributes in process `syz.5.14369'. [ 923.430849][ T6350] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14393'. [ 924.762590][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14426'. [ 925.383244][ T6426] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14423'. [ 925.442174][ T6426] macsec0: entered allmulticast mode [ 925.447505][ T6426] veth1_macvtap: entered allmulticast mode [ 925.715824][ T6433] CIFS: VFS: Invalid SecurityFlags: 0 [ 925.715824][ T6433] [ 926.815505][ T6486] ptrace attach of "./syz-executor exec"[29459] was attempted by ""[6486] [ 927.564472][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 927.571496][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 928.316115][ T6510] svc: failed to register nfsdv3 RPC service (errno 111). [ 928.347940][ T6510] svc: failed to register nfsaclv3 RPC service (errno 111). [ 928.463611][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14466'. [ 928.854309][ T6535] delete_channel: no stack [ 929.921189][ T6573] netlink: 186 bytes leftover after parsing attributes in process `syz.4.14489'. [ 929.953840][ T6574] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 929.960344][ T6574] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 930.264702][ T6590] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 930.470583][ T6584] svc: failed to register nfsdv3 RPC service (errno 111). [ 930.487923][ T6584] svc: failed to register nfsaclv3 RPC service (errno 111). [ 930.675209][ T6603] netlink: 186 bytes leftover after parsing attributes in process `syz.7.14502'. [ 931.614913][ T6641] svc: failed to register nfsdv3 RPC service (errno 111). [ 931.625026][ T6641] svc: failed to register nfsaclv3 RPC service (errno 111). [ 932.006664][ T6648] netlink: 186 bytes leftover after parsing attributes in process `syz.9.14517'. [ 932.204438][ T6654] netlink: 186 bytes leftover after parsing attributes in process `syz.4.14531'. [ 932.432109][ T6662] netlink: 186 bytes leftover after parsing attributes in process `syz.4.14534'. [ 932.580295][ T6670] netlink: 186 bytes leftover after parsing attributes in process `syz.4.14537'. [ 932.781745][ T6672] svc: failed to register nfsdv3 RPC service (errno 111). [ 932.806462][ T6672] svc: failed to register nfsaclv3 RPC service (errno 111). [ 933.252040][ T6692] svc: failed to register nfsdv3 RPC service (errno 111). [ 933.259963][ T6692] svc: failed to register nfsaclv3 RPC service (errno 111). [ 933.895212][ T6697] svc: failed to register nfsdv3 RPC service (errno 111). [ 933.911428][ T6697] svc: failed to register nfsaclv3 RPC service (errno 111). [ 934.404212][ T6716] svc: failed to register nfsdv3 RPC service (errno 111). [ 934.419436][ T6716] svc: failed to register nfsaclv3 RPC service (errno 111). [ 935.101667][ T29] audit: type=1326 audit(59510.832:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6749 comm="syz.9.14565" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f28ffb8cde9 code=0x0 [ 935.462114][ T6766] svc: failed to register nfsdv3 RPC service (errno 111). [ 935.479153][ T6766] svc: failed to register nfsaclv3 RPC service (errno 111). [ 936.195412][ T6778] svc: failed to register nfsdv3 RPC service (errno 111). [ 936.207336][ T6778] svc: failed to register nfsaclv3 RPC service (errno 111). [ 944.699600][ T6985] futex_wake_op: syz.5.14665 tries to shift op by 64; fix this program [ 945.695930][ T7011] futex_wake_op: syz.7.14676 tries to shift op by 64; fix this program [ 945.924570][ T7019] ovs_: entered promiscuous mode [ 947.443109][ T7054] ovs_: entered promiscuous mode [ 955.791845][ T7247] ptrace attach of "./syz-executor exec"[5446] was attempted by "./syz-executor exec"[7247] [ 956.878508][ T7280] ptrace attach of "./syz-executor exec"[18227] was attempted by "./syz-executor exec"[7280] [ 957.744890][ T7321] mtrr: base(0x40000000000) is not aligned on a size(0x0000) boundary [ 958.811938][T20774] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 958.811984][T20774] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 958.830010][T20774] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 958.830079][T20774] Bluetooth: hci3: Malformed LE Event: 0x0d [ 960.726090][T20774] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 960.726131][T20774] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 960.741147][T20774] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 960.741247][T20774] Bluetooth: hci1: Malformed LE Event: 0x0d [ 962.880727][ T7456] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 963.364133][ T7462] netlink: 18 bytes leftover after parsing attributes in process `syz.9.14854'. [ 965.169586][ T7491] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 965.851735][ T7499] netlink: 18 bytes leftover after parsing attributes in process `syz.5.14869'. [ 966.213773][ T7511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14871'. [ 968.577792][ T7551] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14886'. [ 970.903868][ T7592] netlink: 'syz.4.14900': attribute type 1 has an invalid length. [ 972.901781][ T7626] netlink: 'syz.9.14916': attribute type 1 has an invalid length. [ 975.506715][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14935'. [ 976.556164][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14949'. [ 981.256535][ T7835] sctp: [Deprecated]: syz.7.15007 (pid 7835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 981.256535][ T7835] Use struct sctp_sack_info instead [ 982.017516][ T7857] input: f as /devices/virtual/input/input55 [ 982.451170][ T7868] sctp: [Deprecated]: syz.9.15023 (pid 7868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 982.451170][ T7868] Use struct sctp_sack_info instead [ 983.161782][ T7895] input: f as /devices/virtual/input/input56 [ 983.169223][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15030'. [ 983.355278][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15047'. [ 983.867599][ T7923] netlink: 206 bytes leftover after parsing attributes in process `syz.7.15048'. [ 984.663885][ T7956] netlink: 206 bytes leftover after parsing attributes in process `syz.4.15062'. [ 988.686566][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 988.693806][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 989.090125][T20774] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 989.704482][T20774] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 990.069791][ T8107] sd 0:0:1:0: PR command failed: 1026 [ 990.075248][ T8107] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 990.085613][ T8107] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 990.506040][T20774] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 990.952773][ T8147] sd 0:0:1:0: PR command failed: 1026 [ 990.958614][ T8147] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 990.970090][ T8147] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 991.027797][T20774] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 993.805618][ T8244] bridge0: port 3(bond0) entered blocking state [ 993.826466][ T8244] bridge0: port 3(bond0) entered disabled state [ 993.833275][ T8244] bond0: entered allmulticast mode [ 993.845941][ T8244] bond_slave_0: entered allmulticast mode [ 993.851704][ T8244] bond_slave_1: entered allmulticast mode [ 993.892218][ T8244] bond0: entered promiscuous mode [ 993.915534][ T8244] bond_slave_0: entered promiscuous mode [ 993.927591][ T8244] bond_slave_1: entered promiscuous mode [ 993.948879][ T8244] bridge0: port 3(bond0) entered blocking state [ 993.955299][ T8244] bridge0: port 3(bond0) entered forwarding state [ 994.193714][ T8260] ptrace attach of "./syz-executor exec"[5446] was attempted by ""[8260] [ 994.459873][ T8271] bridge0: port 6(bond0) entered blocking state [ 994.471337][ T8271] bridge0: port 6(bond0) entered disabled state [ 994.487833][ T8271] bond0: entered allmulticast mode [ 994.496146][ T8271] bond_slave_0: entered allmulticast mode [ 994.501985][ T8271] bond_slave_1: entered allmulticast mode [ 994.514170][ T8271] bond0: entered promiscuous mode [ 994.519838][ T8271] bond_slave_0: entered promiscuous mode [ 994.530074][ T8271] bond_slave_1: entered promiscuous mode [ 994.538551][ T8271] bridge0: port 6(bond0) entered blocking state [ 994.544967][ T8271] bridge0: port 6(bond0) entered forwarding state [ 994.905907][ T8295] ptrace attach of "./syz-executor exec"[18227] was attempted by ""[8295] [ 995.987309][ T8349] netlink: 186 bytes leftover after parsing attributes in process `syz.5.15240'. [ 996.733963][ T8386] netlink: 186 bytes leftover after parsing attributes in process `syz.4.15254'. [ 997.615867][ T8422] netlink: 186 bytes leftover after parsing attributes in process `syz.9.15270'. [ 998.442219][ T8460] netlink: 350 bytes leftover after parsing attributes in process `syz.4.15288'. [ 999.818053][ T8494] netlink: 350 bytes leftover after parsing attributes in process `syz.7.15300'. [ 999.962632][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15307'. [ 1000.553858][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15319'. [ 1000.796532][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15324'. [ 1001.160316][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15326'. [ 1001.172882][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15325'. [ 1001.314012][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15328'. [ 1001.529042][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15338'. [ 1001.851540][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15336'. [ 1002.360084][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15352'. [ 1002.496961][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15364'. [ 1006.659571][ T8789] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1006.713041][ T8789] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1008.346621][ T8825] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1009.261273][ T8859] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1012.209310][ T8957] could not allocate digest TFM handle  [ 1012.400654][ T8975] netlink: 206 bytes leftover after parsing attributes in process `syz.7.15506'. [ 1012.618448][ T8982] netlink: 'syz.4.15510': attribute type 62 has an invalid length. [ 1013.130763][ T8998] could not allocate digest TFM handle  [ 1013.140208][ T8996] sctp: [Deprecated]: syz.5.15524 (pid 8996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1013.140208][ T8996] Use struct sctp_sack_info instead [ 1013.428937][ T9016] netlink: 206 bytes leftover after parsing attributes in process `syz.9.15518'. [ 1013.503761][ T9014] sctp: [Deprecated]: syz.7.15530 (pid 9014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1013.503761][ T9014] Use struct sctp_sack_info instead [ 1013.936780][ T9032] netlink: 'syz.9.15523': attribute type 62 has an invalid length. [ 1014.687768][ T9057] netlink: 206 bytes leftover after parsing attributes in process `syz.5.15535'. [ 1021.294590][ T9287] IPVS: length: 150994944 != 25171704 [ 1021.329314][ T625] Bluetooth: hci1: command 0x0406 tx timeout [ 1022.644590][ T9331] IPVS: length: 150994944 != 25171704 [ 1025.940148][ T9464] ptrace attach of "./syz-executor exec"[29459] was attempted by "*~Z^Uw樁%!&QXe!v)V%PCwFTq?PZk['oNq9u I@:֝>q=U,(|\x09Rcv@$6\x22Bbd^w(B~PDP:$dy>`ZR\x0d`*%؞k?s)#]\x0cMjhAoUڪK1nCؚ&dy|vD-23,o>~,ʼn-]ยiU6D@i\x1b?d=D)&”+\x5cPz^2z)֛'esmE(ۭ[@Fv52yЛ&x`wwB;${\x0a\x0ahh6捌DD\x07xo\x22Jy6Vwv$7\x22*$93WV*7+.`.1D25㾽6\x0cNmeWt\x1b\x09ZW!S:\x09ːV\x1b:ߋm\x1bV|Ad\x5c{,&B팿HwhWTT@\x0c\x1bo3|4@XfZSuFtEV)V\x1bO]=\x0diBQ-ۓ'mYsx<|wd%xj=\x09tP]qAdZK|>\x0c {#Mt팜}5!b/%vHo\x1b2\x0dhR<6ȏ͔\x0dCM6/My54=$F.~ݺ2x8(WB2v+A⭬Cw-8 [ 1026.004826][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15688'. [ 1026.162711][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15688'. [ 1027.064828][ T9487] Process accounting resumed [ 1027.078865][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15703'. [ 1027.096939][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15703'. [ 1028.001276][ T9531] ptrace attach of "./syz-executor exec"[5446] was attempted by "(&ݚ\x09luS_7}ϞӚ/mXQJ|~-5$O^Fyʰ7Ei: >4c\x07u3:?}xKM3SɃ5\x07؞0|.NOW1ugT}A)C ȿn鏩8q9&F8ԜU1\x0c x}kڌқC8U8z߼{Ȼ=xAw?2ˉ\x1b{\x1blVt?h㒤ܺHd'jjܓHK\x09/3 B\x09\x22\x07yv瀋LXI14Pa/%f6&6b\x0aiw%\x5c~)M:6y߱YY[u3lGư`$D;\x0d,2eL]Ѕ2\x0cY_,ފ8 1H\x0cʇH_կ;\x5cZWQ\x0aq1&5v[qw>|/t90َ\x0cZZM/vX\x07)#y\x0b-`Ҭ3-Utќ|cBfLǢ\x093>\x09ݖHRh\x09S\x0bdz`w^VvTޮ+8._R=};*{W5! F]&[#zqYE\x0b 1 [ 1030.280849][ T625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1030.289459][ T625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1030.300321][ T625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1030.310066][ T625] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1030.322865][ T625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1030.356505][ T3539] bond0: left allmulticast mode [ 1030.361688][ T3539] bond_slave_0: left allmulticast mode [ 1030.370768][ T3539] bond_slave_1: left allmulticast mode [ 1030.376778][ T3539] bond0: left promiscuous mode [ 1030.381556][ T3539] bond_slave_0: left promiscuous mode [ 1030.389855][ T3539] bond_slave_1: left promiscuous mode [ 1030.395391][ T3539] bridge0: port 3(bond0) entered disabled state [ 1030.403291][ T3539] bridge_slave_1: left allmulticast mode [ 1030.409115][ T3539] bridge_slave_1: left promiscuous mode [ 1030.414760][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.423357][ T3539] bridge_slave_0: left allmulticast mode [ 1030.429268][ T3539] bridge_slave_0: left promiscuous mode [ 1030.434880][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.757388][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1030.768417][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1030.780992][ T3539] bond0 (unregistering): Released all slaves [ 1030.837252][ T3539] ovs_: left promiscuous mode [ 1030.905902][ T3539] ovs9: left promiscuous mode [ 1030.932706][ T9577] chnl_net:caif_netlink_parms(): no params data found [ 1030.959012][ T3539] ovs_: left promiscuous mode [ 1031.098037][ T9577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.118242][ T9577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.130016][ T9577] bridge_slave_0: entered allmulticast mode [ 1031.143197][ T9577] bridge_slave_0: entered promiscuous mode [ 1031.179424][ T9577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.186776][ T9577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.201420][ T9577] bridge_slave_1: entered allmulticast mode [ 1031.208701][ T9577] bridge_slave_1: entered promiscuous mode [ 1031.255728][ T3539] hsr_slave_0: left promiscuous mode [ 1031.267943][ T3539] hsr_slave_1: left promiscuous mode [ 1031.274365][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.286193][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.294881][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.302915][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.320405][ T3539] veth1_macvtap: left promiscuous mode [ 1031.326001][ T3539] veth0_macvtap: left promiscuous mode [ 1031.331675][ T3539] veth1_vlan: left promiscuous mode [ 1031.336936][ T3539] veth0_vlan: left promiscuous mode [ 1031.718864][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 1031.770047][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 1032.195566][ T9577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.238115][ T9577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.321597][ T9577] team0: Port device team_slave_0 added [ 1032.336931][ T9577] team0: Port device team_slave_1 added [ 1032.372840][ T9577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1032.376178][T20774] Bluetooth: hci1: command tx timeout [ 1032.395841][ T9577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1032.423481][ T9577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1032.447488][ T9577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.454449][ T9577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1032.493260][ T9577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.551457][ T9577] hsr_slave_0: entered promiscuous mode [ 1032.560444][ T9577] hsr_slave_1: entered promiscuous mode [ 1032.566612][ T9577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1032.574193][ T9577] Cannot create hsr debugfs directory [ 1033.245236][ T9577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1033.261525][ T9577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1033.279299][ T9577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1033.293125][ T9577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1033.421565][ T9577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.442343][ T9577] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.455207][ T3539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.462307][ T3539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.481699][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.488794][ T3539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.693664][ T9577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1033.747686][ T9577] veth0_vlan: entered promiscuous mode [ 1033.767189][ T9577] veth1_vlan: entered promiscuous mode [ 1033.806954][ T9577] veth0_macvtap: entered promiscuous mode [ 1033.817824][ T9577] veth1_macvtap: entered promiscuous mode [ 1033.849179][ T9577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.860924][ T9577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.873654][ T9577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.886730][ T9577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.903075][ T9577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.914638][ T9577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.931442][ T9577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.961699][ T9577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.972578][ T9577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.984541][ T9577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.995310][ T9577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.005229][ T9577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.015741][ T9577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.026655][ T9577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1034.040991][ T9577] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.050033][ T9577] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.059793][ T9577] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.069491][ T9577] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.154379][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.162789][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.209906][ T2137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.218904][ T2137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.445152][T20774] Bluetooth: hci1: command tx timeout [ 1036.263078][ T3016] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.419886][ T3016] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.514618][T20774] Bluetooth: hci1: command tx timeout [ 1036.558152][ T3016] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.748684][ T3016] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.979304][ T625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1036.997993][ T3016] bond0: left allmulticast mode [ 1037.006349][ T625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1037.018838][ T3016] bond_slave_0: left allmulticast mode [ 1037.025440][ T625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1037.039692][ T3016] bond_slave_1: left allmulticast mode [ 1037.046155][ T625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1037.054513][ T625] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1037.066400][ T625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1037.079325][ T3016] bond0: left promiscuous mode [ 1037.090421][ T3016] bond_slave_0: left promiscuous mode [ 1037.096076][ T3016] bond_slave_1: left promiscuous mode [ 1037.102130][ T3016] bridge0: port 3(bond0) entered disabled state [ 1037.119120][ T3016] bridge_slave_1: left allmulticast mode [ 1037.124954][ T3016] bridge_slave_1: left promiscuous mode [ 1037.130683][ T3016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.154545][ T3016] bridge_slave_0: left allmulticast mode [ 1037.160215][ T3016] bridge_slave_0: left promiscuous mode [ 1037.180820][ T3016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.763511][ T3016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.778639][ T3016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.795195][ T3016] bond0 (unregistering): Released all slaves [ 1037.882095][ T3016] ovs_: left promiscuous mode [ 1037.966483][ T3016] ovs_: left promiscuous mode [ 1038.002666][ T9773] chnl_net:caif_netlink_parms(): no params data found [ 1038.306666][ T9773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.314163][ T9773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.329102][ T9773] bridge_slave_0: entered allmulticast mode [ 1038.339096][ T9773] bridge_slave_0: entered promiscuous mode [ 1038.383939][ T3016] hsr_slave_0: left promiscuous mode [ 1038.402817][ T3016] hsr_slave_1: left promiscuous mode [ 1038.415077][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.432752][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.450887][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.460013][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.495854][ T3016] veth1_macvtap: left allmulticast mode [ 1038.501506][ T3016] veth1_macvtap: left promiscuous mode [ 1038.507743][ T3016] veth0_macvtap: left promiscuous mode [ 1038.514382][ T3016] veth1_vlan: left promiscuous mode [ 1038.519832][ T3016] veth0_vlan: left promiscuous mode [ 1038.583485][ T625] Bluetooth: hci1: command tx timeout [ 1039.143143][ T625] Bluetooth: hci3: command tx timeout [ 1039.312328][ T3016] team0 (unregistering): Port device team_slave_1 removed [ 1039.377954][ T3016] team0 (unregistering): Port device team_slave_0 removed [ 1039.946876][ T9773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.954075][ T9773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.964658][ T9773] bridge_slave_1: entered allmulticast mode [ 1039.988824][ T9773] bridge_slave_1: entered promiscuous mode [ 1040.063088][ T9773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.098213][ T9773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.192352][ T9773] team0: Port device team_slave_0 added [ 1040.209721][ T9773] team0: Port device team_slave_1 added [ 1040.282165][ T9773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.294368][ T9773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.347351][ T9773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.367587][ T9773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.374666][ T9773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.437291][ T9773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.494422][ T9773] hsr_slave_0: entered promiscuous mode [ 1040.500699][ T9773] hsr_slave_1: entered promiscuous mode [ 1040.523923][ T9773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1040.531515][ T9773] Cannot create hsr debugfs directory [ 1041.210085][ T625] Bluetooth: hci3: command tx timeout [ 1041.487142][ T9773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1041.498935][ T9773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1041.512423][ T9773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1041.526604][ T9773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1041.601683][ T9773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.620546][ T9773] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.652011][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.659119][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.680524][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.687685][ T3539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.888467][ T9773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.939488][ T9773] veth0_vlan: entered promiscuous mode [ 1041.956622][ T9773] veth1_vlan: entered promiscuous mode [ 1041.987791][ T9773] veth0_macvtap: entered promiscuous mode [ 1042.003266][ T9773] veth1_macvtap: entered promiscuous mode [ 1042.019247][ T9773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.030393][ T9773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.041130][ T9773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.053704][ T9773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.075112][ T9773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.101591][ T9773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.112744][ T9773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.125125][ T9773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.140055][ T9773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.150297][ T9773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.161126][ T9773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.176040][ T9773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.187000][ T9773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.198188][ T9773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.212397][ T9773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.223664][ T9773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.245393][ T9773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.254100][ T9773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.368844][ T8962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.382086][ T8962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.411788][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.420348][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.279070][ T625] Bluetooth: hci3: command tx timeout [ 1044.169589][ T9987] ovs_: entered promiscuous mode [ 1045.350874][ T625] Bluetooth: hci3: command tx timeout [ 1045.406337][T10040] ovs_: entered promiscuous mode [ 1047.078338][T10106] ovs_: entered promiscuous mode [ 1048.224861][T10140] block nbd0: Unsupported socket: shutdown callout must be supported. [ 1049.088462][T10159] ovs_: entered promiscuous mode [ 1049.809011][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1049.817651][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1050.347847][T10203] block nbd0: Unsupported socket: shutdown callout must be supported. [ 1051.577505][T10246] bridge0: port 3(gretap0) entered blocking state [ 1051.584027][T10246] bridge0: port 3(gretap0) entered disabled state [ 1051.649345][T10246] gretap0: entered allmulticast mode [ 1051.664517][T10246] gretap0: entered promiscuous mode [ 1051.684767][T10246] bridge0: port 3(gretap0) entered blocking state [ 1051.691346][T10246] bridge0: port 3(gretap0) entered forwarding state [ 1051.938611][T10254] block nbd0: Unsupported socket: shutdown callout must be supported. [ 1052.220608][T10267] block nbd0: Unsupported socket: shutdown callout must be supported. [ 1052.481567][T10278] IPVS: length: 150994944 != 2818572296 [ 1053.080633][T10298] ovs9: entered promiscuous mode [ 1053.142442][T10302] bridge0: port 3(gretap0) entered blocking state [ 1053.177537][T10302] bridge0: port 3(gretap0) entered disabled state [ 1053.199500][T10302] gretap0: entered allmulticast mode [ 1053.209484][T10302] gretap0: entered promiscuous mode [ 1053.228437][T10302] bridge0: port 3(gretap0) entered blocking state [ 1053.234974][T10302] bridge0: port 3(gretap0) entered forwarding state [ 1054.107357][T10335] IPVS: length: 150994944 != 2818572296 [ 1054.887568][T10362] ovs9: entered promiscuous mode [ 1056.755031][T10418] netlink: 186 bytes leftover after parsing attributes in process `syz.5.15895'. [ 1058.158727][T10471] netlink: 186 bytes leftover after parsing attributes in process `syz.0.15907'. [ 1058.191633][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15908'. [ 1059.218678][T10513] netlink: 'syz.3.15919': attribute type 2 has an invalid length. [ 1059.252337][T10513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15919'. [ 1059.660100][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15921'. [ 1060.821690][T10568] netlink: 'syz.0.15930': attribute type 2 has an invalid length. [ 1060.865540][T10568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15930'. [ 1065.544466][T10739] Device name cannot be null; rc = [-22] [ 1065.945227][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15975'. [ 1066.140595][T10761] nbd: socks must be embedded in a SOCK_ITEM attr [ 1066.148046][T10761] block nbd0: shutting down sockets [ 1066.794347][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15987'. [ 1069.290030][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16027'. [ 1071.979809][T11060] nbd: socks must be embedded in a SOCK_ITEM attr [ 1071.997812][T11060] block nbd0: shutting down sockets [ 1072.453576][T11086] netlink: 346 bytes leftover after parsing attributes in process `syz.5.16073'. [ 1075.380110][T11229] sg_write: process 265 (syz.0.16108) changed security contexts after opening file descriptor, this is not allowed. [ 1076.146259][T11226] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1076.158603][T11226] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1076.203580][T11226] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1076.213926][T11226] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1076.225618][T11226] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1076.233347][T11226] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1076.249232][T11226] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1076.267472][T11226] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1076.275731][T11226] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1077.022682][T11304] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16125'. [ 1077.421576][ T625] Bluetooth: hci0: command 0x0c1a tx timeout [ 1077.481526][T11324] nbd0: detected capacity change from 0 to 68719476736 [ 1077.512806][T11255] block nbd0: Send control failed (result -22) [ 1077.519402][T11255] block nbd0: Request send failed, requeueing [ 1077.579416][ T625] block nbd0: Receive control failed (result -32) [ 1077.584214][ T98] block nbd0: Dead connection, failed to find a fallback [ 1077.601700][ T98] block nbd0: shutting down sockets [ 1077.607412][ T98] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1077.618118][ T98] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1077.626598][T11255] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1077.636956][T11255] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1077.645851][T11255] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1077.655203][T11255] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1077.670285][T11255] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1077.679343][T11255] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1077.721740][T11255] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1077.753968][T11255] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1077.795457][T11255] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1077.815195][T11255] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1077.839434][T11255] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1077.866182][T11255] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1077.884906][T11255] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1077.910185][T11255] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1077.917998][T11255] ldm_validate_partition_table(): Disk read failed. [ 1077.950632][T11255] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1077.970733][T11255] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1078.010254][T11255] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1078.043002][T11255] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1078.061268][T11255] Dev nbd0: unable to read RDB block 0 [ 1078.079261][T11255] nbd0: unable to read partition table [ 1078.106326][T11255] ldm_validate_partition_table(): Disk read failed. [ 1078.120266][T11255] Dev nbd0: unable to read RDB block 0 [ 1078.134385][T11255] nbd0: unable to read partition table [ 1078.217524][ T625] Bluetooth: hci1: command 0x0c1a tx timeout [ 1078.224694][ T625] Bluetooth: hci2: command 0x0c1a tx timeout [ 1078.296809][T11366] Bluetooth: hci3: command 0x0c1a tx timeout [ 1078.685344][T11382] kAFS: bad VL server IP address [ 1078.805937][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16145'. [ 1078.990699][T11400] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16149'. [ 1079.001697][T11400] bridge0: port 6(bond0) entered disabled state [ 1079.008166][T11400] bridge0: port 5(gretap0) entered disabled state [ 1079.014800][T11400] bridge0: port 4(vlan1) entered disabled state [ 1079.021195][T11400] bridge0: port 3(team0) entered disabled state [ 1079.027764][T11400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.035045][T11400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.085154][T11400] bridge0: entered promiscuous mode [ 1079.090556][T11400] bridge0: entered allmulticast mode [ 1079.491166][T11366] Bluetooth: hci0: command 0x0c1a tx timeout [ 1079.728845][T11439] netlink: 'syz.4.16161': attribute type 1 has an invalid length. [ 1080.287794][T11366] Bluetooth: hci1: command 0x0c1a tx timeout [ 1080.377630][T11366] Bluetooth: hci3: command 0x0c1a tx timeout [ 1080.713429][T11480] svc: failed to register nfsdv3 RPC service (errno 111). [ 1080.756122][T11480] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1082.355856][T11366] Bluetooth: hci1: command 0x0c1a tx timeout [ 1082.435248][T11366] Bluetooth: hci3: command 0x0c1a tx timeout [ 1082.708654][T11598] kAFS: bad VL server IP address [ 1083.046619][T11617] netlink: 342 bytes leftover after parsing attributes in process `syz.3.16213'. [ 1084.281216][ T29] audit: type=1800 audit(59541.078:52): pid=11682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.16228" name="members" dev="configfs" ino=129875 res=0 errno=0 [ 1087.732928][T11795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16253'. [ 1087.757883][T11795] bridge0: port 3(gretap0) entered disabled state [ 1087.764482][T11795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.774046][T11795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.814512][T11795] bridge0: entered promiscuous mode [ 1087.828260][T11795] bridge0: entered allmulticast mode [ 1088.416323][T11808] svc: failed to register nfsdv3 RPC service (errno 111). [ 1088.424544][T11808] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1090.159932][T11869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16267'. [ 1090.187063][T11869] bridge0: port 6(gretap0) entered disabled state [ 1090.193667][T11869] bridge0: port 5(bond0) entered disabled state [ 1090.200631][T11869] bridge0: port 4(team0) entered disabled state [ 1090.207060][T11869] bridge0: port 3(vlan1) entered disabled state [ 1090.213437][T11869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.220644][T11869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.266057][T11869] bridge0: entered promiscuous mode [ 1090.285405][T11869] bridge0: entered allmulticast mode [ 1090.875063][T11824] kexec: Could not allocate control_code_buffer [ 1091.996078][T11929] type: 33554176 invalid [ 1094.301825][T11951] kexec: Could not allocate control_code_buffer [ 1094.741413][T12057] netlink: 342 bytes leftover after parsing attributes in process `syz.0.16310'. [ 1095.311351][T12075] netlink: 350 bytes leftover after parsing attributes in process `syz.0.16318'. [ 1098.182001][T12175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16332'. [ 1098.217248][T12175] bridge0: port 3(gretap0) entered disabled state [ 1098.223882][T12175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.231345][T12175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.238125][T12173] svc: failed to register nfsdv3 RPC service (errno 111). [ 1098.247931][T12175] bridge0: entered promiscuous mode [ 1098.257939][T12175] bridge0: entered allmulticast mode [ 1098.293624][T12173] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1098.702170][T12185] input: f0?\7vՐJL'$d)KLo1oNcj@qwR=X as /devices/virtual/input/input57 [ 1099.853878][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16360'. [ 1100.094998][T12243] netlink: 346 bytes leftover after parsing attributes in process `syz.0.16363'. [ 1100.384315][T12257] nbd: socks must be embedded in a SOCK_ITEM attr [ 1100.397921][T12257] block nbd1: shutting down sockets [ 1100.454667][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16372'. [ 1101.831995][T12293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16391'. [ 1103.092329][T12281] kexec: Could not allocate control_code_buffer [ 1103.230900][T12334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16393'. [ 1103.249702][T12330] svc: failed to register nfsdv3 RPC service (errno 111). [ 1103.263384][T12330] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1103.595709][T12348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16396'. [ 1106.261138][T12383] kexec: Could not allocate control_code_buffer [ 1108.167736][T12502] svc: failed to register nfsdv3 RPC service (errno 111). [ 1108.194509][T12502] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1109.622822][T12535] kafs: addr_prefs: Invalid Command [ 1110.854820][T12576] svc: failed to register nfsdv3 RPC service (errno 111). [ 1110.896742][T12576] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1110.940786][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.952711][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1111.786471][T12617] svc: failed to register nfsdv3 RPC service (errno 111). [ 1111.797079][T12617] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1111.975007][T12628] netlink: 194 bytes leftover after parsing attributes in process `syz.3.16493'. [ 1112.118413][T12632] sock: sock_timestamping_bind_phc: sock not bind to device [ 1112.535894][T12650] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16503'. [ 1112.586006][T12650] ipvlan1: entered allmulticast mode [ 1112.622746][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16504'. [ 1116.271101][T12773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16553'. [ 1116.287168][T12773] ipvlan1: entered allmulticast mode [ 1116.297085][T12773] veth0_vlan: entered allmulticast mode [ 1116.914538][T12799] netlink: 'syz.5.16564': attribute type 9 has an invalid length. [ 1116.924871][T12799] netlink: 330 bytes leftover after parsing attributes in process `syz.5.16564'. [ 1117.644846][T12814] netlink: 'syz.5.16570': attribute type 10 has an invalid length. [ 1120.052981][T12912] sock: sock_set_timeout: `syz.0.16610' (pid 12912) tries to set negative timeout [ 1122.119542][T12943] netlink: 'syz.0.16622': attribute type 10 has an invalid length. [ 1125.948393][T13068] sd 0:0:1:0: PR command failed: 1026 [ 1125.957144][T13068] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1125.987894][T13068] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1127.454226][T13123] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1127.481140][T13123] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1130.032109][T13215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16731'. [ 1130.765874][T13241] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1130.780653][T13243] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16739'. [ 1130.783513][T13239] vivid-009: ================= START STATUS ================= [ 1130.824082][T13241] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1130.855787][T13239] vivid-009: Enable Output Cropping: true grabbed [ 1130.862682][T13239] vivid-009: Enable Output Composing: true grabbed [ 1130.905131][T13239] vivid-009: Enable Output Scaler: true grabbed [ 1130.911444][T13239] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 1130.933026][T13239] vivid-009: Transmit Mode: HDMI grabbed [ 1130.938947][T13239] vivid-009: Hotplug Present: 0x00000000 [ 1130.948410][T13239] vivid-009: RxSense Present: 0x00000000 [ 1130.962299][T13239] vivid-009: EDID Present: 0x00000000 [ 1130.980402][T13239] vivid-009: ================== END STATUS ================== [ 1131.411603][T13263] bridge0: port 7(veth0_to_bridge) entered blocking state [ 1131.423519][T13263] bridge0: port 7(veth0_to_bridge) entered disabled state [ 1131.433588][T13263] veth0_to_bridge: entered allmulticast mode [ 1131.441332][T13263] veth0_to_bridge: entered promiscuous mode [ 1133.670929][T13340] netlink: 338 bytes leftover after parsing attributes in process `syz.3.16780'. [ 1134.645789][T13370] ALUA lu_gp_id: 393216 exceeds maximum: 0x0000ffff [ 1138.425493][T13460] syz.3.16825 (13460): /proc/13459/oom_adj is deprecated, please use /proc/13459/oom_score_adj instead. [ 1144.807855][T13610] vhci_hcd: invalid port number 57 [ 1144.836087][T13610] vhci_hcd: default hub control req: 0000 v0000 i0039 l0 [ 1145.506244][T11366] Bluetooth: hci1: Malformed Event: 0x2f [ 1146.470731][T13653] svc: failed to register nfsdv3 RPC service (errno 111). [ 1146.539807][T13653] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1150.295039][T13759] netlink: 186 bytes leftover after parsing attributes in process `syz.3.16944'. [ 1150.525335][T13765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16946'. [ 1150.978944][ T61] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.079889][ T61] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.282669][ T61] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.436752][T13784] nbd1: detected capacity change from 0 to 68719476736 [ 1151.466210][T13766] block nbd1: Send control failed (result -22) [ 1151.472415][T13766] block nbd1: Request send failed, requeueing [ 1151.491464][ T61] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.516290][ T98] block nbd1: Dead connection, failed to find a fallback [ 1151.523357][ T98] block nbd1: shutting down sockets [ 1151.529039][ T98] blk_print_req_error: 24 callbacks suppressed [ 1151.529056][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1151.544379][ T98] buffer_io_error: 23 callbacks suppressed [ 1151.544393][ T98] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1151.561163][T13766] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1151.604842][T13766] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1151.639576][T13766] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1151.701957][T13766] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1151.749347][T13766] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1151.766843][T13766] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1151.808645][T20774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1151.823816][T20774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1151.832119][T20774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1151.841668][T20774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1151.849650][T20774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1151.857080][T20774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1151.862522][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16964'. [ 1151.866730][T13766] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1151.949723][T13766] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1152.033991][ T61] bond0: left allmulticast mode [ 1152.038884][ T61] bond_slave_0: left allmulticast mode [ 1152.045003][ T61] bond_slave_1: left allmulticast mode [ 1152.049957][T13766] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1152.050482][ T61] bond0: left promiscuous mode [ 1152.087015][ T61] bond_slave_0: left promiscuous mode [ 1152.092615][ T61] bond_slave_1: left promiscuous mode [ 1152.099282][T13766] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1152.101703][ T61] bridge0: port 6(bond0) entered disabled state [ 1152.126226][T13766] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1152.139091][ T61] gretap0: left allmulticast mode [ 1152.141989][T13766] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1152.145173][ T61] gretap0: left promiscuous mode [ 1152.152135][T13766] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1152.161913][ T61] bridge0: port 5(gretap0) entered disabled state [ 1152.171617][T13766] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1152.180735][T13766] ldm_validate_partition_table(): Disk read failed. [ 1152.192166][ T61] vlan1: left allmulticast mode [ 1152.197795][ T61] vlan1: left promiscuous mode [ 1152.199081][T13766] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1152.207384][ T61] bridge0: port 4(vlan1) entered disabled state [ 1152.217436][T13766] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1152.226119][T13766] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1152.243001][ T61] team0: left allmulticast mode [ 1152.245352][T13766] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1152.248069][ T61] team_slave_0: left allmulticast mode [ 1152.258449][T13766] Dev nbd1: unable to read RDB block 0 [ 1152.270125][T13766] nbd1: unable to read partition table [ 1152.272152][ T61] team_slave_1: left allmulticast mode [ 1152.285660][T13766] ldm_validate_partition_table(): Disk read failed. [ 1152.291397][ T61] team0: left promiscuous mode [ 1152.295065][T13766] Dev nbd1: unable to read RDB block 0 [ 1152.301903][ T61] team_slave_0: left promiscuous mode [ 1152.310362][T13766] nbd1: unable to read partition table [ 1152.316365][ T61] team_slave_1: left promiscuous mode [ 1152.332080][ T61] bridge0: port 3(team0) entered disabled state [ 1152.352335][ T61] bridge_slave_1: left allmulticast mode [ 1152.357991][ T61] bridge_slave_1: left promiscuous mode [ 1152.364348][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.383120][ T61] bridge_slave_0: left allmulticast mode [ 1152.388781][ T61] bridge_slave_0: left promiscuous mode [ 1152.400686][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.942921][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1152.955023][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1152.966406][ T61] bond0 (unregistering): Released all slaves [ 1153.030595][ T61] ovs9: left promiscuous mode [ 1153.093259][ T61] ovs_: left promiscuous mode [ 1153.149242][ T61] ovs_: left promiscuous mode [ 1153.182774][T13794] chnl_net:caif_netlink_parms(): no params data found [ 1153.354282][T13794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.380675][T13794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.396311][T13794] bridge_slave_0: entered allmulticast mode [ 1153.420273][T13794] bridge_slave_0: entered promiscuous mode [ 1153.456928][T13794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.464030][T13794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.490656][T13794] bridge_slave_1: entered allmulticast mode [ 1153.506653][T13794] bridge_slave_1: entered promiscuous mode [ 1153.593244][T13794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1153.614460][T13794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1153.745248][T13794] team0: Port device team_slave_0 added [ 1153.785470][T13794] team0: Port device team_slave_1 added [ 1153.854749][T13794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.861728][T13794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.905520][T20774] Bluetooth: hci2: command tx timeout [ 1153.933135][T13794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.016618][T13794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1154.060547][T13794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.105322][T13794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1154.228013][T13794] hsr_slave_0: entered promiscuous mode [ 1154.240298][T13794] hsr_slave_1: entered promiscuous mode [ 1154.247876][T13794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1154.264480][T13794] Cannot create hsr debugfs directory [ 1154.552007][ T61] hsr_slave_0: left promiscuous mode [ 1154.570612][ T61] hsr_slave_1: left promiscuous mode [ 1154.576455][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1154.600110][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.610850][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1154.618260][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1154.663837][ T61] veth1_macvtap: left allmulticast mode [ 1154.669433][ T61] veth1_macvtap: left promiscuous mode [ 1154.681158][ T61] veth0_macvtap: left promiscuous mode [ 1154.687023][ T61] veth1_vlan: left promiscuous mode [ 1154.692902][ T61] veth0_vlan: left promiscuous mode [ 1155.233981][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1155.280375][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1155.973024][T20774] Bluetooth: hci2: command tx timeout [ 1156.289187][T13794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1156.305458][T13794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1156.320157][T13794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1156.333438][T13794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1156.404799][T13794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1156.432939][T13794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.463686][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.470814][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.488179][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.495276][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.742307][T13794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1156.804448][T13794] veth0_vlan: entered promiscuous mode [ 1156.832710][T13794] veth1_vlan: entered promiscuous mode [ 1156.873988][T13794] veth0_macvtap: entered promiscuous mode [ 1156.892999][T13794] veth1_macvtap: entered promiscuous mode [ 1156.918558][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1156.935650][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.946781][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1156.957992][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.967827][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1156.978802][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.990344][T13794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1157.000427][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.012138][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.022202][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.032705][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.042587][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.053426][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.064000][T13794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1157.093728][T13794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.103737][T13794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.112499][T13794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.121260][T13794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.237862][ T3016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.252645][ T3016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.287834][ T2137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.295680][ T2137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.846042][T13909] block2mtd: error: cannot open device 0 [ 1158.042346][T20774] Bluetooth: hci2: command tx timeout [ 1158.559804][T13935] ================================================================== [ 1158.567908][T13935] BUG: KASAN: slab-use-after-free in idr_for_each+0x252/0x270 [ 1158.575395][T13935] Read of size 8 at addr ffff8880263642f0 by task syz.4.16977/13935 [ 1158.583389][T13935] [ 1158.585730][T13935] CPU: 0 UID: 0 PID: 13935 Comm: syz.4.16977 Tainted: G U 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 1158.585768][T13935] Tainted: [U]=USER SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1158.585777][T13935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1158.585791][T13935] Call Trace: [ 1158.585799][T13935] [ 1158.585809][T13935] dump_stack_lvl+0x116/0x1f0 [ 1158.585841][T13935] print_report+0xc3/0x620 [ 1158.585877][T13935] ? __virt_addr_valid+0x5e/0x590 [ 1158.585902][T13935] ? __phys_addr+0xc6/0x150 [ 1158.585928][T13935] kasan_report+0xd9/0x110 [ 1158.585948][T13935] ? idr_for_each+0x252/0x270 [ 1158.585975][T13935] ? idr_for_each+0x252/0x270 [ 1158.586001][T13935] ? __pfx_shm_try_destroy_orphaned+0x10/0x10 [ 1158.586033][T13935] idr_for_each+0x252/0x270 [ 1158.586069][T13935] ? __pfx_idr_for_each+0x10/0x10 [ 1158.586098][T13935] ? __pfx_down_write+0x10/0x10 [ 1158.586132][T13935] shm_destroy_orphaned+0x85/0x90 [ 1158.586162][T13935] proc_ipc_dointvec_minmax_orphans+0xca/0xe0 [ 1158.586199][T13935] proc_sys_call_handler+0x3c6/0x5a0 [ 1158.586235][T13935] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1158.586275][T13935] vfs_write+0x5ae/0x1150 [ 1158.586306][T13935] ? __pfx_proc_sys_write+0x10/0x10 [ 1158.586340][T13935] ? __pfx___mutex_lock+0x10/0x10 [ 1158.586368][T13935] ? __pfx_vfs_write+0x10/0x10 [ 1158.586407][T13935] ksys_write+0x12b/0x250 [ 1158.586437][T13935] ? __pfx_ksys_write+0x10/0x10 [ 1158.586472][T13935] do_syscall_64+0xcd/0x250 [ 1158.586502][T13935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.586535][T13935] RIP: 0033:0x7f36e8f8cde9 [ 1158.586554][T13935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1158.586578][T13935] RSP: 002b:00007f36e9da5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1158.586601][T13935] RAX: ffffffffffffffda RBX: 00007f36e91a5fa0 RCX: 00007f36e8f8cde9 [ 1158.586619][T13935] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1158.586633][T13935] RBP: 00007f36e900e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1158.586648][T13935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1158.586662][T13935] R13: 0000000000000000 R14: 00007f36e91a5fa0 R15: 00007ffd1d940748 [ 1158.586685][T13935] [ 1158.586693][T13935] [ 1158.810160][T13935] Allocated by task 9783: [ 1158.814489][T13935] kasan_save_stack+0x33/0x60 [ 1158.819190][T13935] kasan_save_track+0x14/0x30 [ 1158.823889][T13935] __kasan_slab_alloc+0x89/0x90 [ 1158.828767][T13935] kmem_cache_alloc_noprof+0x226/0x3d0 [ 1158.834246][T13935] radix_tree_node_alloc.constprop.0+0x1e8/0x350 [ 1158.840588][T13935] idr_get_free+0x528/0xa40 [ 1158.845110][T13935] idr_alloc_u32+0x191/0x2f0 [ 1158.849735][T13935] idr_alloc_cyclic+0x10c/0x230 [ 1158.854603][T13935] ipc_addid+0x697/0x1f50 [ 1158.858950][T13935] newseg+0x674/0xe60 [ 1158.862953][T13935] ipcget+0x88f/0xdc0 [ 1158.866960][T13935] __x64_sys_shmget+0x13f/0x1b0 [ 1158.871827][T13935] do_syscall_64+0xcd/0x250 [ 1158.876344][T13935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.882242][T13935] [ 1158.884557][T13935] Freed by task 8962: [ 1158.888525][T13935] kasan_save_stack+0x33/0x60 [ 1158.893204][T13935] kasan_save_track+0x14/0x30 [ 1158.897880][T13935] kasan_save_free_info+0x3b/0x60 [ 1158.902904][T13935] __kasan_slab_free+0x51/0x70 [ 1158.907669][T13935] kmem_cache_free+0x2e2/0x4d0 [ 1158.912448][T13935] rcu_core+0x79d/0x14d0 [ 1158.916700][T13935] handle_softirqs+0x213/0x8f0 [ 1158.921467][T13935] do_softirq+0xb2/0xf0 [ 1158.925627][T13935] __local_bh_enable_ip+0x100/0x120 [ 1158.930829][T13935] batadv_nc_purge_paths+0x1c6/0x390 [ 1158.936121][T13935] batadv_nc_worker+0x913/0x1060 [ 1158.941058][T13935] process_one_work+0x9c5/0x1ba0 [ 1158.945996][T13935] worker_thread+0x6c8/0xf00 [ 1158.950590][T13935] kthread+0x3af/0x750 [ 1158.954656][T13935] ret_from_fork+0x45/0x80 [ 1158.959076][T13935] ret_from_fork_asm+0x1a/0x30 [ 1158.963842][T13935] [ 1158.966153][T13935] Last potentially related work creation: [ 1158.971856][T13935] kasan_save_stack+0x33/0x60 [ 1158.976535][T13935] kasan_record_aux_stack+0xb8/0xd0 [ 1158.981731][T13935] __call_rcu_common.constprop.0+0x9a/0x870 [ 1158.987629][T13935] delete_node+0x1fc/0x8e0 [ 1158.992042][T13935] __radix_tree_delete+0x193/0x3d0 [ 1158.997146][T13935] radix_tree_delete_item+0xeb/0x230 [ 1159.002426][T13935] ipc_rmid+0x10b/0x3e0 [ 1159.006576][T13935] shm_destroy+0x2d7/0x6d0 [ 1159.010992][T13935] shm_try_destroy_orphaned+0x1a8/0x270 [ 1159.016543][T13935] idr_for_each+0x141/0x270 [ 1159.021046][T13935] shm_destroy_orphaned+0x85/0x90 [ 1159.026069][T13935] proc_ipc_dointvec_minmax_orphans+0xca/0xe0 [ 1159.032137][T13935] proc_sys_call_handler+0x3c6/0x5a0 [ 1159.037426][T13935] vfs_write+0x5ae/0x1150 [ 1159.041755][T13935] ksys_write+0x12b/0x250 [ 1159.046083][T13935] do_syscall_64+0xcd/0x250 [ 1159.050582][T13935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.056477][T13935] [ 1159.058794][T13935] The buggy address belongs to the object at ffff8880263642c0 [ 1159.058794][T13935] which belongs to the cache radix_tree_node of size 576 [ 1159.073195][T13935] The buggy address is located 48 bytes inside of [ 1159.073195][T13935] freed 576-byte region [ffff8880263642c0, ffff888026364500) [ 1159.086898][T13935] [ 1159.089209][T13935] The buggy address belongs to the physical page: [ 1159.095606][T13935] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880263679c0 pfn:0x26364 [ 1159.105660][T13935] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1159.114147][T13935] memcg:ffff8880325a7001 [ 1159.118373][T13935] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1159.126868][T13935] page_type: f5(slab) [ 1159.130852][T13935] raw: 00fff00000000240 ffff88801b04fdc0 ffffea00012a1710 ffffea0001e0db10 [ 1159.139430][T13935] raw: ffff8880263679c0 0000000000170013 00000000f5000000 ffff8880325a7001 [ 1159.148012][T13935] head: 00fff00000000240 ffff88801b04fdc0 ffffea00012a1710 ffffea0001e0db10 [ 1159.156677][T13935] head: ffff8880263679c0 0000000000170013 00000000f5000000 ffff8880325a7001 [ 1159.165343][T13935] head: 00fff00000000002 ffffea000098d901 ffffffffffffffff 0000000000000000 [ 1159.174011][T13935] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 1159.182668][T13935] page dumped because: kasan: bad access detected [ 1159.189074][T13935] page_owner tracks the page as allocated [ 1159.194772][T13935] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0x52830(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_RECLAIMABLE), pid 1, tgid 1 (swapper/0), ts 20165354961, free_ts 0 [ 1159.214131][T13935] post_alloc_hook+0x181/0x1b0 [ 1159.218900][T13935] get_page_from_freelist+0xfce/0x2f80 [ 1159.224359][T13935] __alloc_frozen_pages_noprof+0x221/0x2470 [ 1159.230256][T13935] alloc_pages_mpol+0x1fc/0x540 [ 1159.235097][T13935] new_slab+0x23d/0x330 [ 1159.239252][T13935] ___slab_alloc+0xc5d/0x1720 [ 1159.243926][T13935] __slab_alloc.constprop.0+0x56/0xb0 [ 1159.249301][T13935] kmem_cache_alloc_noprof+0xfa/0x3d0 [ 1159.254674][T13935] radix_tree_node_alloc.constprop.0+0x1e8/0x350 [ 1159.261000][T13935] idr_get_free+0x528/0xa40 [ 1159.265503][T13935] idr_alloc_u32+0x191/0x2f0 [ 1159.270097][T13935] idr_alloc_cyclic+0x10c/0x230 [ 1159.274943][T13935] __kernfs_new_node+0x11b/0x890 [ 1159.279886][T13935] kernfs_new_node+0x186/0x240 [ 1159.284653][T13935] kernfs_create_dir_ns+0x4c/0x150 [ 1159.289768][T13935] internal_create_group+0x34e/0xf10 [ 1159.295053][T13935] page_owner free stack trace missing [ 1159.300404][T13935] [ 1159.302714][T13935] Memory state around the buggy address: [ 1159.308330][T13935] ffff888026364180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1159.316384][T13935] ffff888026364200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1159.324437][T13935] >ffff888026364280: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1159.332484][T13935] ^ [ 1159.340183][T13935] ffff888026364300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1159.348237][T13935] ffff888026364380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1159.356290][T13935] ================================================================== [ 1159.436602][T13935] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1159.443836][T13935] CPU: 1 UID: 0 PID: 13935 Comm: syz.4.16977 Tainted: G U 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 1159.456178][T13935] Tainted: [U]=USER [ 1159.459991][T13935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1159.470056][T13935] Call Trace: [ 1159.473339][T13935] [ 1159.476281][T13935] dump_stack_lvl+0x3d/0x1f0 [ 1159.480897][T13935] panic+0x71d/0x800 [ 1159.484809][T13935] ? __pfx_panic+0x10/0x10 [ 1159.489252][T13935] ? preempt_schedule_thunk+0x1a/0x30 [ 1159.494650][T13935] ? preempt_schedule_common+0x44/0xc0 [ 1159.500129][T13935] check_panic_on_warn+0xab/0xb0 [ 1159.505089][T13935] end_report+0x117/0x180 [ 1159.509441][T13935] kasan_report+0xe9/0x110 [ 1159.513865][T13935] ? idr_for_each+0x252/0x270 [ 1159.518561][T13935] ? idr_for_each+0x252/0x270 [ 1159.523258][T13935] ? __pfx_shm_try_destroy_orphaned+0x10/0x10 [ 1159.529344][T13935] idr_for_each+0x252/0x270 [ 1159.533861][T13935] ? __pfx_idr_for_each+0x10/0x10 [ 1159.538886][T13935] ? __pfx_down_write+0x10/0x10 [ 1159.543743][T13935] shm_destroy_orphaned+0x85/0x90 [ 1159.548769][T13935] proc_ipc_dointvec_minmax_orphans+0xca/0xe0 [ 1159.554850][T13935] proc_sys_call_handler+0x3c6/0x5a0 [ 1159.560144][T13935] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1159.565958][T13935] vfs_write+0x5ae/0x1150 [ 1159.570297][T13935] ? __pfx_proc_sys_write+0x10/0x10 [ 1159.575500][T13935] ? __pfx___mutex_lock+0x10/0x10 [ 1159.580526][T13935] ? __pfx_vfs_write+0x10/0x10 [ 1159.585298][T13935] ksys_write+0x12b/0x250 [ 1159.589627][T13935] ? __pfx_ksys_write+0x10/0x10 [ 1159.594483][T13935] do_syscall_64+0xcd/0x250 [ 1159.598990][T13935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.604887][T13935] RIP: 0033:0x7f36e8f8cde9 [ 1159.609295][T13935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1159.628899][T13935] RSP: 002b:00007f36e9da5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1159.637313][T13935] RAX: ffffffffffffffda RBX: 00007f36e91a5fa0 RCX: 00007f36e8f8cde9 [ 1159.645280][T13935] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1159.653246][T13935] RBP: 00007f36e900e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.661215][T13935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1159.669180][T13935] R13: 0000000000000000 R14: 00007f36e91a5fa0 R15: 00007ffd1d940748 [ 1159.677159][T13935] [ 1159.680427][T13935] Kernel Offset: disabled [ 1159.684819][T13935] Rebooting in 86400 seconds..