last executing test programs: 1m9.942238572s ago: executing program 0 (id=2609): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xf7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048080}, 0x80) 1m9.820855028s ago: executing program 0 (id=2611): sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0xc0) 1m9.709647562s ago: executing program 0 (id=2613): socket(0x10, 0x2, 0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x810) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m9.561584163s ago: executing program 0 (id=2615): socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="00000000f5ffffffffffffff00"}, 0x55) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9) 1m9.181864417s ago: executing program 0 (id=2618): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) tkill$auto(0x1, 0x7) 1m7.992072832s ago: executing program 0 (id=2634): connect$auto(0x3, &(0x7f0000000000)={0xfb, @sockaddr_1_1}, 0x1) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) acct$auto(&(0x7f0000000000)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) 1m7.867327377s ago: executing program 32 (id=2634): connect$auto(0x3, &(0x7f0000000000)={0xfb, @sockaddr_1_1}, 0x1) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) acct$auto(&(0x7f0000000000)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) 1m5.255595849s ago: executing program 1 (id=2668): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x1, 0x1000, 0x47, 0x9, 0xf, 0x0, 0x0, 0x400e, 0xd59, 0x101, 0xff, 0x2, 0x3]}, 0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) 1m4.911193214s ago: executing program 1 (id=2673): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1e, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) 1m4.05922029s ago: executing program 1 (id=2682): socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x20006, 0x10000000000df, 0xeb2, 0x401, 0x8000) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)={0xa, @sa_data_min="c054fdab44b93e00"}, 0x69) 1m3.813896089s ago: executing program 1 (id=2683): r0 = socket(0xa, 0x3, 0xff) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x9, 0x3, 0x1, 0x2800000000000002, 0x9, 0x5e582971, 0xff, 0x2c, 0x4, 0xffff, 0x74, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) unlink$auto(&(0x7f0000000300)=')s:\x00') sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x300, 0x70b525, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x0, 0x4, 0x2}]}, 0x5d}, 0x1, 0x0, 0x0, 0x4000}, 0x880) 1m3.584195679s ago: executing program 1 (id=2685): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) tkill$auto(0x1, 0x7) 1m2.578511691s ago: executing program 1 (id=2689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001740)={'veth0_to_bond\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x2f7c91435f7e8bbf, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40881}, 0x800) 1m2.250652725s ago: executing program 33 (id=2689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001740)={'veth0_to_bond\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x2f7c91435f7e8bbf, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40881}, 0x800) 5.564105596s ago: executing program 4 (id=3321): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x5, 0x0, 0x102) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x14, &(0x7f0000000040)=[0x0, 0x2], 0x1) 5.424772797s ago: executing program 4 (id=3323): sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x0, 0x601, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_NAME={0x8, 0x1, 'HSR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80) rt_sigqueueinfo$auto(0x9, 0x8, &(0x7f0000000000)={@siginfo_0_0={0xacb4, 0x5, 0xfffffffa, @_kill={0x4, 0x1}}}) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) 5.231903763s ago: executing program 4 (id=3326): socket(0xa, 0x3, 0x3a) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x24008094) mmap$auto(0x0, 0x6, 0x6, 0x8db2, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.058542159s ago: executing program 4 (id=3328): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sysfs$auto(0x2, 0x10000000000002b, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 3.920069101s ago: executing program 4 (id=3343): tkill$auto(0x1, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x3, 0x3a) pidfd_open$auto(0x1, 0x0) process_madvise$auto(0x1, 0xfffffffffffffffc, 0x0, 0x14, 0x8000000000000000) 3.456053544s ago: executing program 2 (id=3346): socket(0x1, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000140)={0x1, @sa_data_min="af7af2952a203b6cdd8c8f51372e"}, 0xd) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) listen$auto(0x3, 0x8d) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 3.390886929s ago: executing program 4 (id=3347): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) clone$auto(0x0, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x9) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x20, 0x0, 0x0) 3.071695142s ago: executing program 34 (id=3347): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) clone$auto(0x0, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x9) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x20, 0x0, 0x0) 3.027853204s ago: executing program 2 (id=3351): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x6, 0x84, 0xa, 0x0, 0x0) keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) setresuid$auto(0x0, 0x8, 0x8000) keyctl$auto(0x6, 0xfffffffd, 0x5, 0x100009, 0x4) 2.837668195s ago: executing program 2 (id=3353): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x0, 0x3) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) 1.612038948s ago: executing program 3 (id=3357): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x6, 0x1, 0x2a, &(0x7f00000003c0)='ns/cgroup\x00', 0xc) 1.531104979s ago: executing program 2 (id=3358): socket$nl_generic(0x10, 0x3, 0x10) setresgid$auto(0x81, 0x800000a0, 0x8) setgroups$auto(0xc00000000, 0xfffffffffffffffc) setresuid$auto(0x0, 0x8, 0x8000) shmget$auto(0x14, 0x2, 0xe64) 1.270925378s ago: executing program 5 (id=3359): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') timerfd_create$auto(0x7, 0x0) timerfd_gettime$auto(0x4, 0x0) 1.111997935s ago: executing program 2 (id=3360): socket(0x23, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) ioctl$auto(0x3, 0x89e0, 0x91) 1.111763169s ago: executing program 5 (id=3361): close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) 888.448541ms ago: executing program 2 (id=3362): mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) socket(0xa, 0x2, 0x0) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) 887.917018ms ago: executing program 5 (id=3369): socket(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x6, 0x1, 0x1b, &(0x7f0000000080)='\x00\t\xaf\xc5\xbc\xecH\xd1SY\xda\t\xaa\xd6\xd5+\x16\x0e\xd2\x9c\xf6\xf6\xab\n\xfa\xbc\x9b\xd8P\xed!$\x85\x01\xcf\x88\x992A9S`0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r3}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. [ 66.026536][ T5828] cgroup: Unknown subsys name 'net' [ 66.153587][ T5828] cgroup: Unknown subsys name 'cpuset' [ 66.161604][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.591735][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.268035][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.287367][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.297252][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.297550][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.305283][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.312367][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.321572][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.326663][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.341428][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.349707][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.358423][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.364654][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.365779][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.372666][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.381801][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.388639][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.399092][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.407810][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.417056][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.417143][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.431985][ T5154] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.440543][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.450635][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.458553][ T5154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.776634][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 69.843901][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 69.901985][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 69.912010][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.919797][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.927380][ T5839] bridge_slave_0: entered allmulticast mode [ 69.934062][ T5839] bridge_slave_0: entered promiscuous mode [ 69.968420][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.976968][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.985295][ T5839] bridge_slave_1: entered allmulticast mode [ 69.992551][ T5839] bridge_slave_1: entered promiscuous mode [ 70.038965][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 70.057522][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.068999][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.150073][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.157400][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.167564][ T5838] bridge_slave_0: entered allmulticast mode [ 70.174790][ T5838] bridge_slave_0: entered promiscuous mode [ 70.182984][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.190678][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.197917][ T5838] bridge_slave_1: entered allmulticast mode [ 70.204788][ T5838] bridge_slave_1: entered promiscuous mode [ 70.212461][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.219553][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.226973][ T5837] bridge_slave_0: entered allmulticast mode [ 70.234194][ T5837] bridge_slave_0: entered promiscuous mode [ 70.241627][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.248684][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.256062][ T5837] bridge_slave_1: entered allmulticast mode [ 70.263287][ T5837] bridge_slave_1: entered promiscuous mode [ 70.272155][ T5839] team0: Port device team_slave_0 added [ 70.301868][ T5839] team0: Port device team_slave_1 added [ 70.335551][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.348048][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.369098][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.401805][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.421206][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.428218][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.454464][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.468550][ T5837] team0: Port device team_slave_0 added [ 70.484734][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.492857][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.500062][ T5844] bridge_slave_0: entered allmulticast mode [ 70.507839][ T5844] bridge_slave_0: entered promiscuous mode [ 70.515829][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.523412][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.549587][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.566875][ T5837] team0: Port device team_slave_1 added [ 70.583663][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.591150][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.598282][ T5844] bridge_slave_1: entered allmulticast mode [ 70.605579][ T5844] bridge_slave_1: entered promiscuous mode [ 70.649394][ T5838] team0: Port device team_slave_0 added [ 70.657986][ T5838] team0: Port device team_slave_1 added [ 70.666072][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.677974][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.687834][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.695243][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.721496][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.734654][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.741841][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.768496][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.846479][ T5839] hsr_slave_0: entered promiscuous mode [ 70.853519][ T5839] hsr_slave_1: entered promiscuous mode [ 70.860634][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.867595][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.895854][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.909082][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.916290][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.942532][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.956115][ T5844] team0: Port device team_slave_0 added [ 70.972909][ T5837] hsr_slave_0: entered promiscuous mode [ 70.980138][ T5837] hsr_slave_1: entered promiscuous mode [ 70.986564][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.994736][ T5837] Cannot create hsr debugfs directory [ 71.006247][ T5844] team0: Port device team_slave_1 added [ 71.076605][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.083973][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.110328][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.146912][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.153968][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.180471][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.194615][ T5838] hsr_slave_0: entered promiscuous mode [ 71.201227][ T5838] hsr_slave_1: entered promiscuous mode [ 71.207282][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.214978][ T5838] Cannot create hsr debugfs directory [ 71.329752][ T5844] hsr_slave_0: entered promiscuous mode [ 71.336008][ T5844] hsr_slave_1: entered promiscuous mode [ 71.342933][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.350926][ T5844] Cannot create hsr debugfs directory [ 71.466108][ T5847] Bluetooth: hci2: command tx timeout [ 71.493286][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.509800][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.520134][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.531349][ T5847] Bluetooth: hci0: command tx timeout [ 71.542123][ T5154] Bluetooth: hci1: command tx timeout [ 71.547898][ T5847] Bluetooth: hci3: command tx timeout [ 71.554061][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.598564][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.608171][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.626235][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.636691][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.688636][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.708822][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.719855][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.735361][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.784801][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.796919][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.803677][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.826624][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.838384][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.867574][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.899943][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.928611][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.979733][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.987049][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.002552][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.009737][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.032223][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.055517][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.073961][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.097576][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.104822][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.125439][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.132588][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.169936][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.195953][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.203129][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.215615][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.222736][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.303989][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.357920][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.416971][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.476536][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.483719][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.529655][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.537903][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.634277][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.652919][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.688419][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.758489][ T5838] veth0_vlan: entered promiscuous mode [ 72.814301][ T5838] veth1_vlan: entered promiscuous mode [ 72.828076][ T5839] veth0_vlan: entered promiscuous mode [ 72.843220][ T5837] veth0_vlan: entered promiscuous mode [ 72.870330][ T5839] veth1_vlan: entered promiscuous mode [ 72.901377][ T5837] veth1_vlan: entered promiscuous mode [ 72.917653][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.929018][ T5838] veth0_macvtap: entered promiscuous mode [ 72.945093][ T5838] veth1_macvtap: entered promiscuous mode [ 72.983478][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.016761][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.036879][ T5839] veth0_macvtap: entered promiscuous mode [ 73.056748][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.066119][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.076691][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.086623][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.097677][ T5839] veth1_macvtap: entered promiscuous mode [ 73.112820][ T5844] veth0_vlan: entered promiscuous mode [ 73.138110][ T5837] veth0_macvtap: entered promiscuous mode [ 73.164522][ T5837] veth1_macvtap: entered promiscuous mode [ 73.176111][ T5844] veth1_vlan: entered promiscuous mode [ 73.188344][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.200956][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.216363][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.263019][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.271387][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.279376][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.294204][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.305490][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.336739][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.345821][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.358395][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.367171][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.381966][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.392894][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.405255][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.416368][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.427850][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.441393][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.453535][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.464237][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.475183][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.486357][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.498306][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.507283][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.516411][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.525494][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.534777][ T5847] Bluetooth: hci2: command tx timeout [ 73.554917][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.563663][ T5844] veth0_macvtap: entered promiscuous mode [ 73.575808][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.604701][ T5844] veth1_macvtap: entered promiscuous mode [ 73.611348][ T5847] Bluetooth: hci3: command tx timeout [ 73.616773][ T5847] Bluetooth: hci1: command tx timeout [ 73.622345][ T5154] Bluetooth: hci0: command tx timeout [ 73.682360][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.697852][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.710891][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.721680][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.732554][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.743375][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.755864][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.756979][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.780745][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.791989][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.802121][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.813836][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.824855][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.835458][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.846379][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.887643][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.897917][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.912699][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.924289][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.956699][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.974993][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.995189][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.005144][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.097341][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.106524][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.115950][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.150819][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.255200][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.278847][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.320657][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.328604][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.408178][ T5908] netlink: 229 bytes leftover after parsing attributes in process `syz.0.1'. [ 74.669052][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 75.102098][ T5935] netlink: 'syz.2.17': attribute type 19 has an invalid length. [ 75.145715][ T5935] netlink: 334 bytes leftover after parsing attributes in process `syz.2.17'. [ 75.331130][ T5946] netlink: 334 bytes leftover after parsing attributes in process `syz.1.21'. [ 75.611615][ T5847] Bluetooth: hci2: command tx timeout [ 75.690705][ T5847] Bluetooth: hci1: command tx timeout [ 75.697814][ T5154] Bluetooth: hci0: command tx timeout [ 75.697824][ T5843] Bluetooth: hci3: command tx timeout [ 75.861129][ T5964] netlink: zone id is out of range [ 75.866299][ T5964] netlink: zone id is out of range [ 75.900573][ T5964] netlink: zone id is out of range [ 75.905749][ T5964] netlink: zone id is out of range [ 75.962708][ T5964] netlink: zone id is out of range [ 75.967946][ T5964] netlink: zone id is out of range [ 75.980652][ T5964] netlink: zone id is out of range [ 75.985820][ T5964] netlink: zone id is out of range [ 76.021194][ T5964] netlink: zone id is out of range [ 76.026742][ T5964] netlink: set zone limit has 4 unknown bytes [ 76.522884][ T5988] tc_dump_action: action bad kind [ 76.730339][ T5998] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.949306][ T6005] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 77.391890][ T6027] netlink: 'syz.1.59': attribute type 11 has an invalid length. [ 77.420129][ T6029] netlink: 334 bytes leftover after parsing attributes in process `syz.0.58'. [ 77.460560][ T29] audit: type=1326 audit(1731631227.406:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.3.57" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d72f7e719 code=0x0 [ 77.691236][ T5843] Bluetooth: hci2: command tx timeout [ 77.770928][ T5843] Bluetooth: hci0: command tx timeout [ 77.776860][ T5847] Bluetooth: hci3: command tx timeout [ 77.776910][ T5154] Bluetooth: hci1: command tx timeout [ 77.797082][ T6041] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.273210][ T6092] netlink: 'syz.0.90': attribute type 19 has an invalid length. [ 79.310931][ T6092] netlink: 334 bytes leftover after parsing attributes in process `syz.0.90'. [ 80.912982][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 81.601585][ T6186] nfsd: Unknown parameter '' [ 81.642228][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 82.122063][ T6205] svc: failed to register nfsdv3 RPC service (errno 111). [ 82.172493][ T6205] svc: failed to register nfsaclv3 RPC service (errno 111). [ 82.772698][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 82.803685][ T6227] veth0_macvtap: left promiscuous mode [ 82.823645][ T6227] macvtap0: entered promiscuous mode [ 82.829089][ T6227] macvtap0: entered allmulticast mode [ 83.285193][ T6241] netlink: zone id is out of range [ 83.302755][ T6241] netlink: zone id is out of range [ 83.308001][ T6243] svc: failed to register nfsdv3 RPC service (errno 111). [ 83.316987][ T6243] svc: failed to register nfsaclv3 RPC service (errno 111). [ 83.330024][ T6241] netlink: zone id is out of range [ 83.350525][ T6241] netlink: zone id is out of range [ 83.355683][ T6241] netlink: zone id is out of range [ 83.390445][ T6241] netlink: zone id is out of range [ 83.578677][ T6251] HSR: entered promiscuous mode [ 84.500556][ T6276] svc: failed to register nfsdv3 RPC service (errno 111). [ 84.525370][ T6276] svc: failed to register nfsaclv3 RPC service (errno 111). [ 84.689286][ T6286] netlink: 342 bytes leftover after parsing attributes in process `syz.1.178'. [ 84.770569][ T6288] netlink: 334 bytes leftover after parsing attributes in process `syz.2.179'. [ 85.525980][ T6312] svc: failed to register nfsdv3 RPC service (errno 111). [ 85.538006][ T6312] svc: failed to register nfsaclv3 RPC service (errno 111). [ 85.640056][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 85.657208][ T6321] veth0_macvtap: left promiscuous mode [ 85.681179][ T6321] macvtap0: entered promiscuous mode [ 85.686536][ T6321] macvtap0: entered allmulticast mode [ 86.187254][ T6343] HSR: entered promiscuous mode [ 86.590625][ T29] audit: type=1326 audit(1731631236.526:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.1.215" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76af37e719 code=0x0 [ 86.800046][ T6372] HSR: entered promiscuous mode [ 86.898087][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 87.137845][ T25] cfg80211: failed to load regulatory.db [ 87.632911][ T6410] netlink: 60 bytes leftover after parsing attributes in process `syz.2.240'. [ 87.653030][ T6410] openvswitch: netlink: ufid size 41 bytes exceeds the range (1, 16) [ 87.871776][ T6420] netlink: 342 bytes leftover after parsing attributes in process `syz.0.244'. [ 88.070506][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 88.360786][ T6441] netlink: 342 bytes leftover after parsing attributes in process `syz.0.254'. [ 88.645883][ T6457] openvswitch: netlink: Message has 4 unknown bytes. [ 88.957456][ T6473] netlink: zone id is out of range [ 88.971014][ T6473] netlink: zone id is out of range [ 88.980772][ T6473] netlink: zone id is out of range [ 88.985923][ T6473] netlink: zone id is out of range [ 89.010483][ T6473] netlink: del zone limit has 4 unknown bytes [ 89.111990][ T6482] ptrace attach of "./syz-executor exec"[5844] was attempted by ""[6482] [ 89.543798][ T6503] netlink: 334 bytes leftover after parsing attributes in process `syz.0.285'. [ 89.636506][ T6508] ======================================================= [ 89.636506][ T6508] WARNING: The mand mount option has been deprecated and [ 89.636506][ T6508] and is ignored by this kernel. Remove the mand [ 89.636506][ T6508] option from the mount to silence this warning. [ 89.636506][ T6508] ======================================================= [ 89.787472][ T6516] netlink: 334 bytes leftover after parsing attributes in process `syz.0.290'. [ 89.999991][ T6525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.293'. [ 91.317703][ T6592] netlink: 334 bytes leftover after parsing attributes in process `syz.2.323'. [ 92.557282][ T6654] sctp: [Deprecated]: syz.0.354 (pid 6654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.557282][ T6654] Use struct sctp_sack_info instead [ 92.659169][ T6657] netlink: 'syz.2.356': attribute type 11 has an invalid length. [ 92.750670][ T6664] netlink: 'syz.1.358': attribute type 11 has an invalid length. [ 92.758462][ T6664] netlink: 264 bytes leftover after parsing attributes in process `syz.1.358'. [ 93.513919][ T6698] block nbd0: not configured, cannot reconfigure [ 94.057867][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 94.114925][ T6716] tc_dump_action: action bad kind [ 94.729056][ T6747] netlink: 346 bytes leftover after parsing attributes in process `syz.1.399'. [ 94.917092][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.401'. [ 95.273316][ T6769] Invalid ELF header magic: != ELF [ 95.620143][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'. [ 95.725572][ T6790] openvswitch: HSR: Dropping previously announced user features [ 96.511152][ T29] audit: type=1326 audit(1731631246.466:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.435" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76af37e719 code=0x0 [ 97.974456][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 97.997394][ T6868] veth0_macvtap: entered promiscuous mode [ 98.007386][ T6868] veth0_macvtap: entered allmulticast mode [ 98.841653][ T6897] openvswitch: HSR: Dropping previously announced user features [ 99.652225][ T6923] nbd: couldn't find device at index 33904 [ 100.407549][ T6952] netlink: 334 bytes leftover after parsing attributes in process `syz.1.495'. [ 101.722065][ T6982] netlink: 334 bytes leftover after parsing attributes in process `syz.1.510'. [ 104.176794][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'. [ 105.057788][ T7092] netlink: 334 bytes leftover after parsing attributes in process `syz.3.560'. [ 105.459624][ T7110] netlink: 60 bytes leftover after parsing attributes in process `syz.0.570'. [ 105.470384][ T7110] openvswitch: netlink: ufid size 41 bytes exceeds the range (1, 16) [ 105.839512][ T7122] netlink: 342 bytes leftover after parsing attributes in process `syz.1.574'. [ 106.184313][ T7139] netlink: 'syz.0.583': attribute type 8 has an invalid length. [ 106.500873][ T7150] nbd: couldn't find a device at index -4 [ 106.770553][ T7162] openvswitch: netlink: Flow key attr not present in new flow. [ 107.193863][ T7186] netlink: 342 bytes leftover after parsing attributes in process `syz.1.606'. [ 107.680538][ T7206] nbd: must specify an index to disconnect [ 108.058260][ T7222] netlink: 236 bytes leftover after parsing attributes in process `syz.2.623'. [ 108.613659][ T7246] syz.0.634 uses obsolete (PF_INET,SOCK_PACKET) [ 108.720974][ T7251] netlink: 'syz.3.635': attribute type 6 has an invalid length. [ 108.728877][ T7251] netlink: 330 bytes leftover after parsing attributes in process `syz.3.635'. [ 109.148864][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 111.788638][ T7377] netlink: 330 bytes leftover after parsing attributes in process `syz.2.692'. [ 115.761715][ T7539] netlink: 'syz.2.767': attribute type 19 has an invalid length. [ 115.780503][ T7539] netlink: 310 bytes leftover after parsing attributes in process `syz.2.767'. [ 117.339735][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'. [ 117.918398][ T1089] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.055170][ T1089] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.209730][ T1089] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.317760][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.327170][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.335812][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.344716][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.352709][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 118.377635][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.480248][ T7657] sctp: [Deprecated]: syz.3.826 (pid 7657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.480248][ T7657] Use struct sctp_sack_info instead [ 118.521880][ T1089] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.080282][ T1089] bridge_slave_1: left allmulticast mode [ 119.098940][ T1089] bridge_slave_1: left promiscuous mode [ 119.150629][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.198888][ T1089] bridge_slave_0: left allmulticast mode [ 119.210333][ T1089] bridge_slave_0: left promiscuous mode [ 119.219483][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.834658][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.864267][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.876874][ T1089] bond0 (unregistering): Released all slaves [ 119.895675][ T7690] netlink: 6 bytes leftover after parsing attributes in process `syz.3.837'. [ 119.908142][ T7690] netlink: 3 bytes leftover after parsing attributes in process `syz.3.837'. [ 119.929178][ T7715] Process accounting resumed [ 120.098635][ T7651] chnl_net:caif_netlink_parms(): no params data found [ 120.572205][ T5843] Bluetooth: hci3: command tx timeout [ 120.884375][ T7651] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.898627][ T7651] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.908731][ T7651] bridge_slave_0: entered allmulticast mode [ 120.918371][ T7651] bridge_slave_0: entered promiscuous mode [ 120.975686][ T7651] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.006381][ T7651] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.022657][ T7651] bridge_slave_1: entered allmulticast mode [ 121.051386][ T7651] bridge_slave_1: entered promiscuous mode [ 121.290278][ T1089] hsr_slave_0: left promiscuous mode [ 121.306372][ T1089] hsr_slave_1: left promiscuous mode [ 121.317504][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.332824][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.348002][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.355581][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.393697][ T1089] veth1_macvtap: left promiscuous mode [ 121.399631][ T1089] veth0_macvtap: left promiscuous mode [ 121.405472][ T1089] veth1_vlan: left promiscuous mode [ 121.411112][ T1089] veth0_vlan: left promiscuous mode [ 121.450330][ T7782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.874'. [ 122.650849][ T5843] Bluetooth: hci3: command tx timeout [ 122.825826][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 122.930126][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 123.807086][ T7651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.842540][ T7651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.013827][ T7651] team0: Port device team_slave_0 added [ 124.043457][ T7651] team0: Port device team_slave_1 added [ 124.244307][ T7877] Invalid ELF header magic: != ELF [ 124.334087][ T7651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.341973][ T7651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.368289][ T7651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.383153][ T7651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.390129][ T7651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.416199][ T7651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.768055][ T5843] Bluetooth: hci3: command tx timeout [ 124.864155][ T7651] hsr_slave_0: entered promiscuous mode [ 124.891734][ T7651] hsr_slave_1: entered promiscuous mode [ 124.925622][ T7651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.949011][ T7651] Cannot create hsr debugfs directory [ 125.064779][ T7902] netlink: 'syz.1.923': attribute type 11 has an invalid length. [ 125.073417][ T7902] netlink: 322 bytes leftover after parsing attributes in process `syz.1.923'. [ 125.148123][ T7907] netlink: 342 bytes leftover after parsing attributes in process `syz.3.924'. [ 126.167555][ T7651] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 126.243678][ T7651] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 126.328398][ T7651] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 126.428299][ T7651] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 126.636638][ T7651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.695302][ T7651] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.740708][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.748426][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.790720][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.797938][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.811057][ T5843] Bluetooth: hci3: command tx timeout [ 127.303238][ T7651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.404668][ T7651] veth0_vlan: entered promiscuous mode [ 127.422376][ T7651] veth1_vlan: entered promiscuous mode [ 127.497425][ T7651] veth0_macvtap: entered promiscuous mode [ 127.582743][ T7651] veth1_macvtap: entered promiscuous mode [ 127.641676][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.668446][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.678440][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.693097][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.703003][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.714054][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.726893][ T7651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.763079][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.773671][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.783868][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.794834][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.805196][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.816486][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.828588][ T7651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.838666][ T7651] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.847865][ T7651] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.856975][ T7651] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.866015][ T7651] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.173402][ T8007] svc: failed to register nfsdv3 RPC service (errno 111). [ 128.194845][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.205255][ T8007] svc: failed to register nfsaclv3 RPC service (errno 111). [ 128.212634][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.334018][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.342020][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.406176][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.986'. [ 130.417003][ T8116] veth0_macvtap: left promiscuous mode [ 130.440488][ T8116] macvtap0: entered promiscuous mode [ 130.445851][ T8116] macvtap0: entered allmulticast mode [ 130.696708][ T8128] netlink: 334 bytes leftover after parsing attributes in process `syz.0.992'. [ 130.899107][ T8135] bridge0: port 3(macvtap0) entered blocking state [ 130.909362][ T8135] bridge0: port 3(macvtap0) entered disabled state [ 133.213470][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.220466][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.455965][ T8284] process 'syz.1.1055' launched ':,' with NULL argv: empty string added [ 136.633232][ T8327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1074'. [ 137.710813][ T29] audit: type=1326 audit(8277292036.850:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm=093D exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf0497e719 code=0x0 [ 138.102395][ T8374] mmap: syz.2.1094 (8374) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 138.955448][ T8398] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 140.243547][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1126'. [ 140.896105][ T8457] svc: failed to register nfsdv3 RPC service (errno 111). [ 140.940517][ T8457] svc: failed to register nfsaclv3 RPC service (errno 111). [ 149.236913][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'. [ 151.228011][ T8787] syz.2.1275 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 152.803942][ T8855] netlink: 'syz.0.1307': attribute type 4 has an invalid length. [ 153.832348][ T8879] ptrace attach of "./syz-executor exec"[7651] was attempted by "hzٴ'(ֻNX%ʍV^S0M\x5c'.4!~\x07ŨEfd\x071Rb-\x09ƦLC/? F}\x0awT-}\x0cŲ<܉?#齘(AuX\x0bdð73eYndazh]52&7|M\x22nYۦ\x09Z:JNz}D\x1bOgW\x07AxX.;dw~r~jL!aG\x07Lڑ`U3\x0b!U0z|yU,{:{-0ѯk,gp}O؋CޢnGu&W]20VG\x09:pQRhϦ\x07œ\x5cT\x0cHwAuNGVUɟLUD@u8X:py=D+jY`\x0d)QE$~C@\x224*zC M8ȑ?3琷Jv'v;W~Y-mQ@PT\x07lۺĀ1X({\x5cQZ%/5Ʌ`\x0c,ٟs$-ǢcwF. ԗڶLYXETVrcc [ 155.921749][ T8939] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1343'. [ 158.653574][ T9004] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1369'. [ 158.706311][ T9008] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1369'. [ 158.874271][ T9012] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1374'. [ 159.230168][ T9028] ptrace attach of "./syz-executor exec"[5838] was attempted by "J;zHOK\x0aH!w4תu)jLn9D+IZxg.ܭ]&́p:}3{'\x5ci>QJȫoaUBUAQJ`([GF%|Sh\x07K\x5c^lXs˾أR-Pp3(SctGIRYK8'_eQҶ]\x22bS׃h A$l5A,C-83&'gMF=g\x0dT\x07:\x1bu@>g)J8Y49>l\x0afO09SiX|Rw. I@|cQ[X\x0cbrѳtmP&ET1\x0b\x07]t{lIiԆb\x0d3/,y[HS4hF*ضOWtys\x1b052hj*@R0O^0::yL* ܺEG@x v('l\x0ci]>'C:ʪEX$pz/Z\x07]f'aZe Ⲗt\x1b&.P*\x5c^:ML?_gi\x0bĨLpz0I EWZ \x5cyr}U\x1bCa\x1bBDŸڍꋅC!/wl F\x1bnF\x0a\x0a\x09uKs\x09o'ԤGy^%r݌cUq~'c둂>#8EDL=Ż}.hb:S +}(VNO5\x0d363bpĚD\x1bX:0 [ 160.882637][ T9060] ptrace attach of "./syz-executor exec"[5839] was attempted by "*sC2š털A*GDUaul\x1b\x0c| !3Ú`xcJ\x5cnZb]ĻX\x22b,6R5!1%L>]j*lnZ$!\x0cy{ \x0a7)i]^8C\x5c@2Naē9z*$A(B\x0cKdZ''\x09ŒZ#Xf6w~Zu4~떃u# \x0aV68]k\x1b\x1b ч!~dW\x0b5ќî@JJ)d菳\x09E\x22u\x0d27Ee68^~iuv\x0a\x22\x0cA!H61mVa';pVo֤Ao0f^u'45\x22#u6KBXс<`_S/䕛2g$+Y=}~hɯ@t \x0dY\x07&~'\x0adRb4l@18ӥɕbh҄N:Q^ʤ>ψ6¿GMri\x22Oga5vr`\x09z!6n濖eJshG陂ƠN.hGSZ6P\x1blgOnADl svp_/ny:G@\x09B\x0c~R7ZJn\x0aIX;Ʋl霛\x0dG;,r^\x0dRCM}`cbE7=qܦuEe2!˪}734o;p[A#-^Zkb“P97e'BCy+îgJcߚV9ݿtLWǠ*'3E!ߤu~rj [ 164.960443][ T9174] bridge0: port 3(veth1) entered blocking state [ 164.966815][ T9174] bridge0: port 3(veth1) entered disabled state [ 164.983519][ T9174] veth1: entered allmulticast mode [ 165.000774][ T9174] veth1: entered promiscuous mode [ 165.006760][ T9174] bridge0: port 3(veth1) entered blocking state [ 165.013450][ T9174] bridge0: port 3(veth1) entered forwarding state [ 167.674010][ T9247] raw_sendmsg: syz.3.1475 forgot to set AF_INET. Fix it! [ 169.426348][ T9294] Invalid ELF header magic: != ELF [ 173.667218][ T9365] RDS: rds_bind could not find a transport for 2abd:7000:fcdb:df25:100::, load rds_tcp or rds_rdma? [ 174.827735][ T9398] bridge0: port 3(veth1) entered blocking state [ 174.840603][ T9398] bridge0: port 3(veth1) entered disabled state [ 174.857483][ T9398] veth1: entered allmulticast mode [ 174.868686][ T9398] veth1: entered promiscuous mode [ 174.882169][ T9398] bridge0: port 3(veth1) entered blocking state [ 174.888667][ T9398] bridge0: port 3(veth1) entered forwarding state [ 174.942161][ T9400] GUP no longer grows the stack in syz.1.1546 (9400): 14000-41000 (4000) [ 174.992250][ T9400] CPU: 0 UID: 0 PID: 9400 Comm: syz.1.1546 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 175.003013][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 175.013127][ T9400] Call Trace: [ 175.016523][ T9400] [ 175.019623][ T9400] dump_stack_lvl+0x16c/0x1f0 [ 175.024562][ T9400] gup_vma_lookup+0x1d2/0x220 [ 175.029393][ T9400] __get_user_pages+0x236/0x3b50 [ 175.034394][ T9400] ? hlock_class+0x4e/0x130 [ 175.038959][ T9400] ? __lock_acquire+0x163e/0x3ce0 [ 175.044160][ T9400] ? __pfx___get_user_pages+0x10/0x10 [ 175.049602][ T9400] __gup_longterm_locked+0x211/0x1870 [ 175.055044][ T9400] ? __pfx___lock_acquire+0x10/0x10 [ 175.060322][ T9400] ? __pfx___gup_longterm_locked+0x10/0x10 [ 175.066221][ T9400] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 175.072201][ T9400] ? rwsem_read_trylock+0x12d/0x250 [ 175.077562][ T9400] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 175.083160][ T9400] ? process_vm_rw_core.constprop.0+0x40d/0x9f0 [ 175.089447][ T9400] pin_user_pages_remote+0xee/0x150 [ 175.094688][ T9400] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 175.100530][ T9400] ? down_read+0xc9/0x330 [ 175.104887][ T9400] process_vm_rw_core.constprop.0+0x439/0x9f0 [ 175.111011][ T9400] ? futex_wait_queue+0x101/0x1f0 [ 175.116285][ T9400] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 175.122960][ T9400] process_vm_rw+0x301/0x360 [ 175.127701][ T9400] ? __pfx_process_vm_rw+0x10/0x10 [ 175.132871][ T9400] ? up_write+0x1b2/0x520 [ 175.137246][ T9400] ? __pfx___do_sys_mremap+0x10/0x10 [ 175.143238][ T9400] ? xfd_validate_state+0x5d/0x180 [ 175.148508][ T9400] ? rcu_is_watching+0x12/0xc0 [ 175.153330][ T9400] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 175.159004][ T9400] ? do_syscall_64+0x91/0x250 [ 175.163720][ T9400] ? lockdep_hardirqs_on+0x7c/0x110 [ 175.169038][ T9400] do_syscall_64+0xcd/0x250 [ 175.174023][ T9400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.179960][ T9400] RIP: 0033:0x7f76af37e719 [ 175.184414][ T9400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.204146][ T9400] RSP: 002b:00007f76b00ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 175.212681][ T9400] RAX: ffffffffffffffda RBX: 00007f76af535f80 RCX: 00007f76af37e719 [ 175.220663][ T9400] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000379 [ 175.228642][ T9400] RBP: 00007f76af3f175e R08: 0000000000000006 R09: 0000000000000000 [ 175.236618][ T9400] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 175.244700][ T9400] R13: 0000000000000000 R14: 00007f76af535f80 R15: 00007ffe09d6e1e8 [ 175.252711][ T9400] [ 178.299519][ T9486] RDS: rds_bind could not find a transport for fe80::300:0:0:0, load rds_tcp or rds_rdma? [ 178.736973][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 183.328371][ T9607] Unable to find swap-space signature [ 184.231642][ T9626] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1631'. [ 184.960229][ T9653] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1643'. [ 187.664631][ T9741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1684'. [ 188.298148][ T9763] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1691'. [ 189.151455][ T9782] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1699'. [ 191.527461][ T9850] bridge0: port 3(syz_tun) entered blocking state [ 191.586117][ T9850] bridge0: port 3(syz_tun) entered disabled state [ 191.610795][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 191.610833][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 191.616884][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 191.636194][ T9850] syz_tun: entered allmulticast mode [ 191.663822][ T9850] syz_tun: entered promiscuous mode [ 191.691921][ T9850] bridge0: port 3(syz_tun) entered blocking state [ 191.698544][ T9850] bridge0: port 3(syz_tun) entered forwarding state [ 192.108267][ T9865] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1737'. [ 192.305729][ T9871] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1739'. [ 192.531971][ T9883] bridge0: port 3(geneve0) entered blocking state [ 192.540755][ T9883] bridge0: port 3(geneve0) entered disabled state [ 192.547389][ T9883] geneve0: entered allmulticast mode [ 192.571664][ T9883] geneve0: entered promiscuous mode [ 192.596689][ T9883] bridge0: port 3(geneve0) entered blocking state [ 192.603299][ T9883] bridge0: port 3(geneve0) entered forwarding state [ 192.952127][ T29] audit: type=1326 audit(8277292050.460:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9892 comm="syz.0.1749" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf0497e719 code=0x0 [ 193.011321][ T9900] bridge0: port 4(bond0) entered blocking state [ 193.032073][ T9900] bridge0: port 4(bond0) entered disabled state [ 193.045850][ T9900] bond0: entered allmulticast mode [ 193.072676][ T9900] bond_slave_0: entered allmulticast mode [ 193.129956][ T9900] bond_slave_1: entered allmulticast mode [ 193.165966][ T9900] bond0: entered promiscuous mode [ 193.185297][ T9900] bond_slave_0: entered promiscuous mode [ 193.195577][ T9900] bond_slave_1: entered promiscuous mode [ 193.216326][ T9900] bridge0: port 4(bond0) entered blocking state [ 193.222825][ T9900] bridge0: port 4(bond0) entered forwarding state [ 194.654663][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.661252][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.716323][T10055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.994496][T10177] Process accounting resumed [ 201.208570][T10171] ptrace attach of "./syz-executor exec"[5839] was attempted by ""[10171] [ 202.144751][T10221] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 202.206318][T10221] svc: failed to register nfsdv3 RPC service (errno 111). [ 202.236385][T10221] svc: failed to register nfsaclv3 RPC service (errno 111). [ 202.609582][T10234] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1899'. [ 209.870974][T10407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1971'. [ 212.202298][T10452] bridge0: port 4(team0) entered blocking state [ 212.222334][T10452] bridge0: port 4(team0) entered disabled state [ 212.261904][T10452] team0: entered allmulticast mode [ 212.267110][T10452] team_slave_0: entered allmulticast mode [ 212.279868][T10452] team_slave_1: entered allmulticast mode [ 212.291628][T10452] team0: entered promiscuous mode [ 212.298752][T10452] team_slave_0: entered promiscuous mode [ 212.306994][T10452] team_slave_1: entered promiscuous mode [ 212.313537][T10452] bridge0: port 4(team0) entered blocking state [ 212.320011][T10452] bridge0: port 4(team0) entered forwarding state [ 212.436333][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'. [ 213.079868][T10483] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2002'. [ 214.981858][T10558] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2035'. [ 215.660606][ T5843] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 215.907863][T10588] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2052'. [ 221.294048][T10801] nfsd: Unknown parameter 'IPVS' [ 221.920711][T10822] netlink: 'syz.0.2155': attribute type 2 has an invalid length. [ 221.973357][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2155'. [ 223.915695][T10896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.591047][T10951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2210'. [ 225.652990][T10951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2210'. [ 227.959102][T11018] Process accounting resumed [ 229.460988][T11047] ptrace attach of "./syz-executor exec"[5837] was attempted by ""[11047] [ 230.217844][T11084] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 230.258359][T11084] svc: failed to register nfsdv3 RPC service (errno 111). [ 230.274754][T11084] svc: failed to register nfsaclv3 RPC service (errno 111). [ 235.537100][T11228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2326'. [ 236.029285][T11233] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 236.191628][T11233] svc: failed to register nfsdv3 RPC service (errno 111). [ 236.282325][T11233] svc: failed to register nfsaclv3 RPC service (errno 111). [ 241.372529][ T5847] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 241.596214][T11365] sctp: [Deprecated]: syz.1.2385 (pid 11365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.596214][T11365] Use struct sctp_sack_info instead [ 242.810623][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 243.577862][T11427] netlink: 'syz.0.2407': attribute type 10 has an invalid length. [ 243.614766][T11427] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2407'. [ 248.552698][T11579] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2476'. [ 250.773636][T11644] delete_channel: no stack [ 251.255519][T11661] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2509'. [ 252.302506][T11687] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2520'. [ 254.741035][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2548'. [ 256.093014][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.095953][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.099362][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.715808][T11861] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2590'. [ 258.756139][T11861] Zero length message leads to an empty skb [ 260.194725][T11912] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2613'. [ 261.425500][T11952] netlink: 'syz.1.2629': attribute type 2 has an invalid length. [ 261.433459][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2629'. [ 261.673308][T11929] bridge0: port 3(syz_tun) entered disabled state [ 261.714196][T11929] syz_tun (unregistering): left allmulticast mode [ 261.729056][T11929] syz_tun (unregistering): left promiscuous mode [ 261.737086][T11929] bridge0: port 3(syz_tun) entered disabled state [ 261.863447][ T142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.043117][ T142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.071251][T11970] netlink: 'syz.2.2639': attribute type 2 has an invalid length. [ 262.079345][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2639'. [ 262.178926][ T142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.264362][T11973] delete_channel: no stack [ 262.318986][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.329490][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.337616][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.347141][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.355275][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 262.363091][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.364221][ T142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.931111][ T142] bridge_slave_1: left allmulticast mode [ 262.936825][ T142] bridge_slave_1: left promiscuous mode [ 262.954145][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.025849][ T142] bridge_slave_0: left allmulticast mode [ 263.033377][ T142] bridge_slave_0: left promiscuous mode [ 263.039150][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.281326][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2664'. [ 264.420598][ T5847] Bluetooth: hci0: command tx timeout [ 264.564542][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.567550][T12053] netlink: 'syz.3.2667': attribute type 1 has an invalid length. [ 264.610058][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.664475][ T142] bond0 (unregistering): Released all slaves [ 264.724978][T11977] chnl_net:caif_netlink_parms(): no params data found [ 264.795454][ T142] HSR: left promiscuous mode [ 265.520515][T11977] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.532386][T11977] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.539633][T11977] bridge_slave_0: entered allmulticast mode [ 265.591702][T11977] bridge_slave_0: entered promiscuous mode [ 265.741071][T11977] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.749050][T11977] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.797725][T11977] bridge_slave_1: entered allmulticast mode [ 265.831508][T11977] bridge_slave_1: entered promiscuous mode [ 266.045760][T11977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.153477][T11977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.298607][T11977] team0: Port device team_slave_0 added [ 266.421042][T11977] team0: Port device team_slave_1 added [ 266.490856][ T5847] Bluetooth: hci0: command tx timeout [ 266.633340][T11977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.653565][T11977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.739291][T11977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.774804][T11977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.802799][T11977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.900990][T11977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.613994][ T142] hsr_slave_0: left promiscuous mode [ 267.656669][ T142] hsr_slave_1: left promiscuous mode [ 267.717357][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.735407][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.791173][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.820413][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.822736][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2692'. [ 267.886807][ T142] veth1_macvtap: left promiscuous mode [ 267.905898][ T142] veth1_vlan: left promiscuous mode [ 267.911413][ T142] veth0_vlan: left promiscuous mode [ 268.078325][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.087951][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.096273][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 268.111482][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.119699][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 268.127322][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.582486][ T5847] Bluetooth: hci0: command tx timeout [ 268.695564][ T142] team0 (unregistering): Port device team_slave_1 removed [ 268.766486][ T142] team0 (unregistering): Port device team_slave_0 removed [ 269.403794][T11977] hsr_slave_0: entered promiscuous mode [ 269.451100][T11977] hsr_slave_1: entered promiscuous mode [ 269.458652][T11977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.481125][T11977] Cannot create hsr debugfs directory [ 269.654848][T12138] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2701'. [ 270.057047][T12129] chnl_net:caif_netlink_parms(): no params data found [ 270.106716][T11977] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 270.174796][ T5847] Bluetooth: hci1: command tx timeout [ 270.195186][ T142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.235364][T11977] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 270.249043][T11977] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 270.319009][ T142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.339599][T11977] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 270.402421][ T142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.497619][ T142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.514209][T12129] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.523747][T12129] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.531794][T12129] bridge_slave_0: entered allmulticast mode [ 270.538951][T12129] bridge_slave_0: entered promiscuous mode [ 270.552243][T12129] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.560169][T12129] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.567562][T12129] bridge_slave_1: entered allmulticast mode [ 270.574839][T12129] bridge_slave_1: entered promiscuous mode [ 270.665684][ T5847] Bluetooth: hci0: command tx timeout [ 270.673271][T12129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.688467][T12129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.775488][T12129] team0: Port device team_slave_0 added [ 270.786225][T12129] team0: Port device team_slave_1 added [ 270.888970][T12129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.899759][T12129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.936819][T12129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.959198][ T142] team0: left allmulticast mode [ 270.966843][ T142] team_slave_0: left allmulticast mode [ 270.973371][ T142] team_slave_1: left allmulticast mode [ 271.013317][ T142] team0: left promiscuous mode [ 271.018153][ T142] team_slave_0: left promiscuous mode [ 271.030746][ T142] team_slave_1: left promiscuous mode [ 271.036704][ T142] bridge0: port 4(team0) entered disabled state [ 271.051138][ T142] veth1: left allmulticast mode [ 271.056044][ T142] veth1: left promiscuous mode [ 271.069776][ T142] bridge0: port 3(veth1) entered disabled state [ 271.079203][ T142] bridge_slave_1: left allmulticast mode [ 271.085501][ T142] bridge_slave_1: left promiscuous mode [ 271.091345][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.109101][ T142] bridge_slave_0: left allmulticast mode [ 271.114988][ T142] bridge_slave_0: left promiscuous mode [ 271.121416][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.634831][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.665809][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.680006][ T142] bond0 (unregistering): Released all slaves [ 271.719006][T12129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.726571][T12129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.767994][T12129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.821121][ T142] HSR: left promiscuous mode [ 271.914285][T12129] hsr_slave_0: entered promiscuous mode [ 271.955754][T12129] hsr_slave_1: entered promiscuous mode [ 271.986880][T12129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.007997][T12129] Cannot create hsr debugfs directory [ 272.087041][T11977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.250788][ T5847] Bluetooth: hci1: command tx timeout [ 272.277157][T12203] netlink: 121 bytes leftover after parsing attributes in process `syz.3.2709'. [ 272.356005][T11977] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.470595][T12208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2711'. [ 272.542974][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.550101][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.596969][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.604265][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.996691][ T142] hsr_slave_0: left promiscuous mode [ 273.005166][ T142] hsr_slave_1: left promiscuous mode [ 273.016689][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.025966][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.039304][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.047880][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.079849][ T142] veth1_macvtap: left promiscuous mode [ 273.085498][ T142] veth0_macvtap: left allmulticast mode [ 273.091892][ T142] veth0_macvtap: left promiscuous mode [ 273.097528][ T142] veth1_vlan: left promiscuous mode [ 273.103517][ T142] veth0_vlan: left promiscuous mode [ 273.834245][ T142] team0 (unregistering): Port device team_slave_1 removed [ 273.915527][ T142] team0 (unregistering): Port device team_slave_0 removed [ 274.330520][ T5847] Bluetooth: hci1: command tx timeout [ 274.722934][T12129] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 274.748410][T12129] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 274.774719][T12129] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 274.811167][T12129] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 274.887647][T12129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.910616][T12129] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.929157][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.936328][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.021784][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.029002][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.052797][T11977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.529448][T11977] veth0_vlan: entered promiscuous mode [ 275.545603][T12129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.562546][T11977] veth1_vlan: entered promiscuous mode [ 275.602968][T11977] veth0_macvtap: entered promiscuous mode [ 275.631169][T11977] veth1_macvtap: entered promiscuous mode [ 275.681720][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.693473][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.703508][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.714210][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.726038][T11977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.738988][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.756478][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.767334][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.779126][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.793641][T11977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.822899][T11977] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.832020][T11977] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.841507][T11977] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.850241][T11977] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.964593][T12129] veth0_vlan: entered promiscuous mode [ 275.974508][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.997455][T12129] veth1_vlan: entered promiscuous mode [ 275.999478][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.058897][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.076013][T12129] veth0_macvtap: entered promiscuous mode [ 276.082978][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.108543][T12129] veth1_macvtap: entered promiscuous mode [ 276.147094][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.160140][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.178441][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.198726][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.214157][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.225597][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.252646][T12129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.312287][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.355283][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.375615][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.397279][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.412530][ T5847] Bluetooth: hci1: command tx timeout [ 276.428941][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.467597][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.482902][T12129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.507496][T12129] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.548000][T12129] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.590469][T12129] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.599491][T12129] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.115044][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.159656][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.261284][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.269162][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.706390][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2726'. [ 278.954143][T12376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2741'. [ 278.984981][T12376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2741'. [ 280.159489][T12410] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2750'. [ 280.204540][T12410] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2750'. [ 281.971051][T12485] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2769'. [ 281.992087][T12477] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2769'. [ 287.185460][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2832'. [ 291.398610][T12886] sock: sock_timestamping_bind_phc: sock not bind to device [ 291.487322][T12892] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 293.519094][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2924'. [ 294.202938][T12991] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2933'. [ 294.275751][T12993] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2933'. [ 294.392360][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2934'. [ 294.601610][T13008] Process accounting resumed [ 295.514799][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2947'. [ 296.147414][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2950'. [ 298.172547][T13091] Invalid ELF header magic: != ELF [ 300.161454][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2995'. [ 300.476177][T13193] netlink: 'syz.3.2999': attribute type 6 has an invalid length. [ 300.503086][T13193] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2999'. [ 300.535241][T13193] netlink: 'syz.3.2999': attribute type 6 has an invalid length. [ 300.560495][T13193] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2999'. [ 301.033576][T13207] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3002'. [ 301.269144][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3005'. [ 301.432949][T13222] team0: entered promiscuous mode [ 301.444982][T13222] team_slave_0: entered promiscuous mode [ 301.499848][T13222] team_slave_1: entered promiscuous mode [ 301.810145][T13231] bridge0: port 3(batadv0) entered blocking state [ 301.840567][T13231] bridge0: port 3(batadv0) entered disabled state [ 301.868659][T13231] batadv0: entered allmulticast mode [ 301.907463][T13231] batadv0: entered promiscuous mode [ 301.935654][T13231] bridge0: port 3(batadv0) entered blocking state [ 301.942246][T13231] bridge0: port 3(batadv0) entered forwarding state [ 302.147410][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 302.157179][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 302.538145][T13267] netlink: 'syz.3.3019': attribute type 1 has an invalid length. [ 302.574807][T13267] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3019'. [ 303.273098][T13295] netlink: 'syz.3.3027': attribute type 11 has an invalid length. [ 303.789712][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.811663][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.851154][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.127437][T13485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3076'. [ 308.643134][ T29] audit: type=1326 audit(8277292116.050:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13508 comm="syz.4.3084" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd82237e719 code=0x0 [ 308.879735][T13522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3087'. [ 309.256709][T13537] netlink: 'syz.3.3091': attribute type 1 has an invalid length. [ 309.301119][T13537] netlink: 'syz.3.3091': attribute type 1 has an invalid length. [ 311.652427][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3108'. [ 312.812571][T13664] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3121'. [ 313.530312][T13697] tipc: Trying to set illegal importance in message [ 314.345271][ T29] audit: type=1326 audit(4294967300.980:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.2.3149" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f166d37e719 code=0x0 [ 314.454391][T13736] Process accounting resumed [ 314.478399][T13736] Process accounting resumed [ 316.060842][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'. [ 317.533766][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.540125][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.632547][T13903] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3226'. [ 319.580829][T13937] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3240'. [ 319.612174][T13937] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3240'. [ 319.629908][T13937] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3240'. [ 319.641171][T13937] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3240'. [ 319.654940][T13937] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3240'. [ 319.831223][T13942] team0: entered allmulticast mode [ 319.855991][T13942] team_slave_0: entered allmulticast mode [ 319.874978][T13942] team_slave_1: entered allmulticast mode [ 320.445906][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3255'. [ 320.810518][T13988] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3263'. [ 321.146199][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3266'. [ 321.419578][T14005] netlink: 334 bytes leftover after parsing attributes in process `syz.5.3268'. [ 321.488034][T14005] netlink: 334 bytes leftover after parsing attributes in process `syz.5.3268'. [ 323.238632][T14076] nfsd: Unknown parameter 'IPVS' [ 323.924701][T14105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3314'. [ 324.503388][T14126] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3323'. [ 326.685076][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.930019][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.169829][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.250563][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.259261][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.273246][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.288205][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.300764][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 327.308627][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.388920][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.380508][ T11] bridge_slave_1: left allmulticast mode [ 328.386476][ T11] bridge_slave_1: left promiscuous mode [ 328.450605][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.500381][ T11] bridge_slave_0: left allmulticast mode [ 328.506090][ T11] bridge_slave_0: left promiscuous mode [ 328.518262][T14207] hugetlbfs: syz.2.3358 (14207): Using mlock ulimits for SHM_HUGETLB is obsolete [ 328.550589][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.372759][ T5843] Bluetooth: hci0: command tx timeout [ 329.811078][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.834715][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.860075][ T11] bond0 (unregistering): Released all slaves [ 329.981884][T14237] ------------[ cut here ]------------ [ 329.982008][T14195] chnl_net:caif_netlink_parms(): no params data found [ 329.987629][T14237] skb_assert_len [ 329.988533][T14237] WARNING: CPU: 1 PID: 14237 at include/linux/skbuff.h:2679 __dev_queue_xmit+0x22cf/0x4350 [ 330.008267][T14237] Modules linked in: [ 330.012313][T14237] CPU: 1 UID: 0 PID: 14237 Comm: syz.5.3371 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 330.023185][T14237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 330.033341][T14237] RIP: 0010:__dev_queue_xmit+0x22cf/0x4350 [ 330.039208][T14237] Code: 67 16 9b f8 40 84 ed 75 25 e8 7d 14 9b f8 c6 05 b4 1c 14 07 01 90 48 c7 c6 40 f0 7a 8c 48 c7 c7 e0 be 7a 8c e8 a2 93 5c f8 90 <0f> 0b 90 90 e8 58 14 9b f8 0f b6 2d 8e 1c 14 07 31 ff 89 ee e8 28 [ 330.059115][T14237] RSP: 0018:ffffc9001607f188 EFLAGS: 00010286 [ 330.065860][T14237] RAX: 0000000000000000 RBX: ffff88807e8953c0 RCX: ffffc90004829000 [ 330.074136][T14237] RDX: 0000000000040000 RSI: ffffffff814e3566 RDI: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 330.082399][T14237] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 330.090742][T14237] R10: 0000000000000000 R11: 0000000000000004 R12: ffff88807e8953d0 [ 330.098747][T14237] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880666fc000 [ 330.107386][T14237] FS: 00007f40b5db16c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 330.116625][T14237] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.123514][T14237] CR2: 00007ff6e3923440 CR3: 000000007eb4a000 CR4: 00000000003526f0 [ 330.131749][T14237] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.139757][T14237] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 330.148031][T14237] Call Trace: [ 330.151542][T14237] [ 330.154521][T14237] ? __warn+0xea/0x3d0 [ 330.158634][T14237] ? __dev_queue_xmit+0x22cf/0x4350 [ 330.164165][T14237] ? report_bug+0x3c0/0x580 [ 330.168705][T14237] ? handle_bug+0x54/0xa0 [ 330.173143][T14237] ? exc_invalid_op+0x17/0x50 [ 330.177856][T14237] ? asm_exc_invalid_op+0x1a/0x20 [ 330.183010][T14237] ? __warn_printk+0x1a6/0x350 [ 330.187817][T14237] ? __dev_queue_xmit+0x22cf/0x4350 [ 330.193159][T14237] ? __dev_queue_xmit+0x22ce/0x4350 [ 330.198397][T14237] ? netlink_sendmsg+0x8b8/0xd70 [ 330.203460][T14237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.209586][T14237] ? __pfx___dev_queue_xmit+0x10/0x10 [ 330.215072][T14237] ? rcu_is_watching+0x12/0xc0 [ 330.219867][T14237] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 330.225440][T14237] ? __copy_skb_header+0x2e8/0x5b0 [ 330.230635][T14237] ? __skb_clone+0x570/0x760 [ 330.235265][T14237] netlink_deliver_tap+0xa8a/0xcf0 [ 330.240492][T14237] netlink_unicast+0x6b4/0x7f0 [ 330.245296][T14237] ? __pfx_netlink_unicast+0x10/0x10 [ 330.250842][T14237] ? __nla_parse+0x40/0x60 [ 330.255306][T14237] netdev_nl_queue_get_doit+0x37f/0x6a0 [ 330.261111][T14237] genl_family_rcv_msg_doit+0x202/0x2f0 [ 330.266707][T14237] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 330.275224][T14237] ? __radix_tree_lookup+0x21f/0x2c0 [ 330.280610][T14237] genl_rcv_msg+0x565/0x800 [ 330.285151][T14237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.290292][T14237] ? __pfx_netdev_nl_queue_get_doit+0x10/0x10 [ 330.296421][T14237] netlink_rcv_skb+0x165/0x410 [ 330.301297][T14237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.306352][T14237] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.311791][T14237] ? down_read+0xc9/0x330 [ 330.316161][T14237] ? __pfx_down_read+0x10/0x10 [ 330.321043][T14237] ? netlink_deliver_tap+0x1ae/0xcf0 [ 330.326376][T14237] genl_rcv+0x28/0x40 [ 330.330619][T14237] netlink_unicast+0x53c/0x7f0 [ 330.335433][T14237] ? __pfx_netlink_unicast+0x10/0x10 [ 330.340920][T14237] ? __phys_addr_symbol+0x30/0x80 [ 330.345990][T14237] ? __check_object_size+0x488/0x710 [ 330.351401][T14237] netlink_sendmsg+0x8b8/0xd70 [ 330.356368][T14237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.361917][T14237] ____sys_sendmsg+0x9ae/0xb40 [ 330.366736][T14237] ? copy_msghdr_from_user+0x10b/0x160 [ 330.372334][T14237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.377679][T14237] ? __pfx___lock_acquire+0x10/0x10 [ 330.383038][T14237] ___sys_sendmsg+0x135/0x1e0 [ 330.387868][T14237] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.393205][T14237] ? lock_acquire+0x2f/0xb0 [ 330.397750][T14237] ? __fget_files+0x40/0x3f0 [ 330.402607][T14237] ? fdget+0x176/0x210 [ 330.406720][T14237] __sys_sendmsg+0x117/0x1f0 [ 330.411450][T14237] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.416604][T14237] ? __x64_sys_futex+0x1e1/0x4c0 [ 330.421708][T14237] do_syscall_64+0xcd/0x250 [ 330.426339][T14237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.432556][T14237] RIP: 0033:0x7f40b4f7e719 [ 330.437001][T14237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.456957][T14237] RSP: 002b:00007f40b5db1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.465628][T14237] RAX: ffffffffffffffda RBX: 00007f40b5135f80 RCX: 00007f40b4f7e719 [ 330.473746][T14237] RDX: 0000000000000810 RSI: 0000000020001640 RDI: 0000000000000004 [ 330.481884][T14237] RBP: 00007f40b4ff175e R08: 0000000000000000 R09: 0000000000000000 [ 330.489891][T14237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.498023][T14237] R13: 0000000000000000 R14: 00007f40b5135f80 R15: 00007ffc78eb9128 [ 330.506094][T14237] [ 330.509146][T14237] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 330.516449][T14237] CPU: 1 UID: 0 PID: 14237 Comm: syz.5.3371 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 330.527238][T14237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 330.537318][T14237] Call Trace: [ 330.540628][T14237] [ 330.543618][T14237] dump_stack_lvl+0x3d/0x1f0 [ 330.548252][T14237] panic+0x71d/0x800 [ 330.552186][T14237] ? __pfx_panic+0x10/0x10 [ 330.556642][T14237] ? show_trace_log_lvl+0x29d/0x3d0 [ 330.561894][T14237] ? __dev_queue_xmit+0x22cf/0x4350 [ 330.567133][T14237] check_panic_on_warn+0xab/0xb0 [ 330.572108][T14237] __warn+0xf6/0x3d0 [ 330.576041][T14237] ? __dev_queue_xmit+0x22cf/0x4350 [ 330.581279][T14237] report_bug+0x3c0/0x580 [ 330.585651][T14237] handle_bug+0x54/0xa0 [ 330.589868][T14237] exc_invalid_op+0x17/0x50 [ 330.594383][T14237] asm_exc_invalid_op+0x1a/0x20 [ 330.599247][T14237] RIP: 0010:__dev_queue_xmit+0x22cf/0x4350 [ 330.605071][T14237] Code: 67 16 9b f8 40 84 ed 75 25 e8 7d 14 9b f8 c6 05 b4 1c 14 07 01 90 48 c7 c6 40 f0 7a 8c 48 c7 c7 e0 be 7a 8c e8 a2 93 5c f8 90 <0f> 0b 90 90 e8 58 14 9b f8 0f b6 2d 8e 1c 14 07 31 ff 89 ee e8 28 [ 330.624686][T14237] RSP: 0018:ffffc9001607f188 EFLAGS: 00010286 [ 330.630845][T14237] RAX: 0000000000000000 RBX: ffff88807e8953c0 RCX: ffffc90004829000 [ 330.638819][T14237] RDX: 0000000000040000 RSI: ffffffff814e3566 RDI: 0000000000000001 [ 330.646794][T14237] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 330.654788][T14237] R10: 0000000000000000 R11: 0000000000000004 R12: ffff88807e8953d0 [ 330.662760][T14237] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880666fc000 [ 330.670747][T14237] ? __warn_printk+0x1a6/0x350 [ 330.675530][T14237] ? __dev_queue_xmit+0x22ce/0x4350 [ 330.680750][T14237] ? netlink_sendmsg+0x8b8/0xd70 [ 330.685699][T14237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.691789][T14237] ? __pfx___dev_queue_xmit+0x10/0x10 [ 330.697191][T14237] ? rcu_is_watching+0x12/0xc0 [ 330.701962][T14237] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 330.707347][T14237] ? __copy_skb_header+0x2e8/0x5b0 [ 330.712476][T14237] ? __skb_clone+0x570/0x760 [ 330.717077][T14237] netlink_deliver_tap+0xa8a/0xcf0 [ 330.722294][T14237] netlink_unicast+0x6b4/0x7f0 [ 330.727073][T14237] ? __pfx_netlink_unicast+0x10/0x10 [ 330.732379][T14237] ? __nla_parse+0x40/0x60 [ 330.736825][T14237] netdev_nl_queue_get_doit+0x37f/0x6a0 [ 330.742389][T14237] genl_family_rcv_msg_doit+0x202/0x2f0 [ 330.747952][T14237] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 330.754040][T14237] ? __radix_tree_lookup+0x21f/0x2c0 [ 330.759335][T14237] genl_rcv_msg+0x565/0x800 [ 330.763848][T14237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.768898][T14237] ? __pfx_netdev_nl_queue_get_doit+0x10/0x10 [ 330.774996][T14237] netlink_rcv_skb+0x165/0x410 [ 330.779775][T14237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.784835][T14237] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.790140][T14237] ? down_read+0xc9/0x330 [ 330.794475][T14237] ? __pfx_down_read+0x10/0x10 [ 330.799245][T14237] ? netlink_deliver_tap+0x1ae/0xcf0 [ 330.804542][T14237] genl_rcv+0x28/0x40 [ 330.808537][T14237] netlink_unicast+0x53c/0x7f0 [ 330.813317][T14237] ? __pfx_netlink_unicast+0x10/0x10 [ 330.818627][T14237] ? __phys_addr_symbol+0x30/0x80 [ 330.823662][T14237] ? __check_object_size+0x488/0x710 [ 330.828961][T14237] netlink_sendmsg+0x8b8/0xd70 [ 330.833743][T14237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.839049][T14237] ____sys_sendmsg+0x9ae/0xb40 [ 330.843826][T14237] ? copy_msghdr_from_user+0x10b/0x160 [ 330.849295][T14237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.854603][T14237] ? __pfx___lock_acquire+0x10/0x10 [ 330.859822][T14237] ___sys_sendmsg+0x135/0x1e0 [ 330.864584][T14237] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.869819][T14237] ? lock_acquire+0x2f/0xb0 [ 330.874333][T14237] ? __fget_files+0x40/0x3f0 [ 330.878940][T14237] ? fdget+0x176/0x210 [ 330.883030][T14237] __sys_sendmsg+0x117/0x1f0 [ 330.887632][T14237] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.892756][T14237] ? __x64_sys_futex+0x1e1/0x4c0 [ 330.897717][T14237] do_syscall_64+0xcd/0x250 [ 330.902251][T14237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.908158][T14237] RIP: 0033:0x7f40b4f7e719 [ 330.912590][T14237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.932215][T14237] RSP: 002b:00007f40b5db1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.940645][T14237] RAX: ffffffffffffffda RBX: 00007f40b5135f80 RCX: 00007f40b4f7e719 [ 330.948623][T14237] RDX: 0000000000000810 RSI: 0000000020001640 RDI: 0000000000000004 [ 330.956596][T14237] RBP: 00007f40b4ff175e R08: 0000000000000000 R09: 0000000000000000 [ 330.964570][T14237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.972544][T14237] R13: 0000000000000000 R14: 00007f40b5135f80 R15: 00007ffc78eb9128 [ 330.980565][T14237] [ 330.983744][T14237] Kernel Offset: disabled [ 330.988115][T14237] Rebooting in 86400 seconds..