last executing test programs: 3m5.649251545s ago: executing program 2 (id=3): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x121040, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose6/statistics/tx_window_errors\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x7) r1 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) write$auto_tracing_mark_raw_fops_trace(r1, 0x0, 0x10) close_range$auto(0x2, 0x8, 0x0) 3m5.223166587s ago: executing program 2 (id=9): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1d, 0x2, 0x6) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x6, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) listen$auto(0x3, 0x9) 3m5.148045088s ago: executing program 2 (id=11): mkdir$auto(&(0x7f0000000040)='./file0\x00', 0xcf18) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) unshare$auto(0x40000080) madvise$auto(0x0, 0x20200, 0x15) 3m4.321953477s ago: executing program 2 (id=19): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) 3m3.865937054s ago: executing program 2 (id=22): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) ioctl$auto(0x3, 0x894b, 0x38) 2m48.610977939s ago: executing program 32 (id=22): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) ioctl$auto(0x3, 0x894b, 0x38) 10.471016727s ago: executing program 3 (id=1311): sendmsg$auto_NFSD_CMD_VERSION_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x20000840) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x23, 0x80805, 0x0) socket(0xa, 0x801, 0x84) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x1d, 0x0, &(0x7f00000000c0)=0x10000) 10.31463686s ago: executing program 3 (id=1312): mmap$auto(0x0, 0x20009, 0xdf, 0xeb2, 0x401, 0x8000) socket(0x10, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x22240, 0x155) io_uring_setup$auto(0x1, 0x0) r0 = socket(0xa, 0x801, 0x106) setsockopt$auto(r0, 0x6, 0x24, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) shutdown$auto(0x200000003, 0x2) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 10.160932231s ago: executing program 3 (id=1313): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x0) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mq_open$auto(0x0, 0xde8, 0xb, 0x0) mq_unlink$auto(0x0) mq_timedreceive$auto(0x8, 0x0, 0xfffffffd, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 9.968552362s ago: executing program 3 (id=1314): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) open(&(0x7f0000000080)='.\x00', 0x0, 0x1f2) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) open(0x0, 0x22240, 0x155) 9.529203806s ago: executing program 3 (id=1317): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0xc8, 0x2, 0x9, 0xffffffffffff8001, 0xbef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) get_robust_list$auto(0x1, 0x0, 0x0) kexec_load$auto(0x0, 0x4, 0x0, 0x1) 9.144451512s ago: executing program 3 (id=1319): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) epoll_create$auto(0x4) epoll_pwait$auto(0x3, 0x0, 0x1, 0xffff0102, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) socket(0x26, 0x80805, 0x0) bind$auto(0x3, 0x0, 0xd) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 8.936975468s ago: executing program 33 (id=1319): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) epoll_create$auto(0x4) epoll_pwait$auto(0x3, 0x0, 0x1, 0xffff0102, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) socket(0x26, 0x80805, 0x0) bind$auto(0x3, 0x0, 0xd) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 4.916494595s ago: executing program 1 (id=1344): r0 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) memfd_create$auto(0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) ftruncate$auto(r0, 0x9) 4.354209094s ago: executing program 0 (id=1345): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xfffffffffffff000, 0x2) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@HWSIM_ATTR_ADDR_TRANSMITTER={0x9, 0x2, "cacd2dff11"}, @HWSIM_ATTR_NO_VIF={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xb06af94f6e038a6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001200c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) 4.352577442s ago: executing program 4 (id=1346): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a001}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) shutdown$auto(0x200000003, 0x2) shutdown$auto(0x200000003, 0x2) 4.139086393s ago: executing program 4 (id=1347): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x6) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 3.9605209s ago: executing program 1 (id=1348): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000008000) prctl$auto(0x200, 0x1, 0x9, 0x4000000000000003, 0x7d) r0 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, 0x3, 0x0, 0xc01) dup2$auto(0x0, 0x3) fcntl$auto(0x3, 0x4, 0xa553) gettid() write$auto(r0, &(0x7f0000000000)='\x00', 0xe6) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/nr_hugepages\x00', 0x642, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0xfdef) 3.755499477s ago: executing program 4 (id=1349): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r1, 0x0, 0x40) io_uring_setup$auto(0x6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x400c880) 3.613369451s ago: executing program 5 (id=1320): adjtimex$auto(&(0x7f00000004c0)={0xf332b6b, 0x0, 0x7d, 0xfffffffffffffffd, 0xd4, 0x4, 0x4, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x8000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa744, 0x0, 0x804}) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setrlimit$auto(0xb, 0x0) r2 = getpid() mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) statmount$auto(&(0x7f0000000040)={0x800, @inferred=r0, 0x3, 0xa, 0x3}, &(0x7f00000000c0)={0x5, 0x8, 0xac07, 0x7, 0x5, 0x5, 0x8, 0x6, 0xe, 0x1, 0x70000000, 0x1, 0x4, 0x7, 0x8, 0xee, 0x5, 0x9, 0xe07b, 0xd, 0x5, 0x1, 0x7, 0x9, 0x6, 0x9, [0x4, 0x6, 0x7, 0xfff, 0x5, 0x1, 0xf83e, 0xc, 0x1, 0x80000000, 0x2, 0x7, 0x3, 0x5, 0xff, 0x6, 0x3633, 0x7, 0xffffffff, 0x3, 0x1, 0x7, 0x5, 0xffffffffffffffff, 0x1, 0x4, 0x10000, 0x6, 0xfe000000000000, 0x400, 0xf1e, 0x3, 0x9, 0x10, 0x7d0000000, 0x1, 0x4, 0x6, 0x3, 0x8, 0xa, 0x10000, 0x8, 0x2, 0x2, 0x6], "5f1bd7173f022372caaab6a5"}, 0xffff, 0x6) ioctl$auto(0xffffffffffffffff, 0x4b68, 0x92b6) rt_tgsigqueueinfo$auto(r2, 0x0, 0x21, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) close_range$auto(0x2, 0x8, 0x0) 3.360720962s ago: executing program 4 (id=1350): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0xc8, 0x2, 0x9, 0xffffffffffff8001, 0xbef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) get_robust_list$auto(0x1, 0x0, 0x0) kexec_load$auto(0x0, 0x4, 0x0, 0x1) 3.22855286s ago: executing program 0 (id=1351): sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10000}, 0x400c0d0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xf6f6, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8a81, 0x0) select$auto(0x7, &(0x7f00000005c0)={[0xff, 0x81, 0x6, 0x10000000008, 0x0, 0x0, 0x7, 0x0, 0x8f, 0x0, 0x3d, 0x0, 0x40, 0xef, 0x2, 0x10000]}, 0x0, 0x0, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) ioctl$auto(0x3, 0x8b0b, 0x91) ioctl$auto(r0, 0x5385, 0xbb1) 3.227797366s ago: executing program 5 (id=1352): prctl$auto(0x59616d61, 0x1, 0x1, 0xfffffffffffffffb, 0xffffffffffffffe5) prctl$auto(0x59616d61, 0x0, 0x1, 0x5, 0xfffffffffffffffb) prctl$auto(0x59616d61, 0x1, 0x2, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) munmap$auto(0x1000000, 0x2000000c) socket(0xa, 0x2, 0x73) madvise$auto(0x0, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) pipe$auto(0x0) socket(0x1, 0x1, 0x100) 2.950988925s ago: executing program 1 (id=1353): open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xe1d2b27bdc14ab5c) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0) open(&(0x7f0000000800)='./file1\x00', 0x22240, 0x8c) dup2$auto(0x0, 0x3) read$auto(0x3, 0x0, 0x80) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/system/node/node1/hugepages/hugepages-2048kB/nr_hugepages\x00', 0x40082, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x7) 1.266070781s ago: executing program 0 (id=1354): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0x19d0, 0xfffffffffffffffa, 0x8000) mkdir$auto(0x0, 0x8001) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x4044820) unshare$auto(0x20000) r0 = syz_open_procfs$namespace(0x0, 0x0) setns(r0, 0x0) fcntl$auto(0xff80000000000000, 0x4, 0xfffffffffffffffc) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x20003b44, 0x2, 0x0, 0x0, 0x2) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) 1.205417499s ago: executing program 1 (id=1355): openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80840, 0x0) unshare$auto(0x40000080) socket(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x8c3a, 0x2, 0xf) ioctl$auto(0x1, 0x89a0, 0x8) read$auto(0x3, 0x0, 0x400000) 788.45808ms ago: executing program 4 (id=1356): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x261c2, 0x84) setreuid$auto(0x7, 0x806) fcntl$auto(0xff80000000000000, 0x406, 0x1) bind$auto(0x3, &(0x7f0000002000), 0xf) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) pipe2$auto(0x0, 0x80) mmap$auto(0x8, 0x4, 0xc000000, 0x19, 0xfffffffffffffffc, 0x29400000000000) settimeofday$auto(&(0x7f0000000180)={0x1ed5d7403, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x8b0b, 0x91) 787.404821ms ago: executing program 5 (id=1357): socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) read$auto(0x4, 0x0, 0xfdef) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, r3, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) 629.879173ms ago: executing program 4 (id=1358): move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) bpf$auto(0x5, 0x0, 0x101) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) prctl$auto(0x1000000003b, 0x1, 0x4, 0x40000000003, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_getevents$auto(0x8496, 0x2, 0x373, &(0x7f0000000080)={0x2706, 0x8, 0x800, 0x4e6e}, 0x0) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x68a, 0x400, 0x7, 0x201005, 0x6, 0x7, [0x4, 0x802e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x2, 0x5, 0x1000001, 0xfffffffc, 0x7}, {0x4, 0xffe, 0xfffffffb, 0x6, 0x9, 0x6, 0x3, 0x0, 0x101}}) madvise$auto(0x0, 0x3e, 0x15) rt_sigsuspend$auto(&(0x7f0000000000)={0x70}, 0x8) 462.622243ms ago: executing program 1 (id=1359): r0 = socket(0x10, 0x80002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r1, 0x3, 0x0, 0x0) timerfd_settime$auto(r0, 0x2, 0x0, 0x0) 286.711896ms ago: executing program 1 (id=1360): mmap$auto(0x0, 0x20009, 0x12, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) socket(0x2, 0x6, 0x0) epoll_create$auto(0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd$auto(0x1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r0, 0x0) capset$auto(0x0, 0xfffffffffffffffe) epoll_ctl$auto(0x5, 0x3, r0, 0x0) 177.582346ms ago: executing program 0 (id=1361): rmdir$auto(&(0x7f0000000080)='.\x00') socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0xa000a, 0x4000000000df, 0x14, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x1e7d43, 0xa6) socket(0xa, 0x2, 0x88) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_SET_WEDGE(r0, 0x4004550f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r1) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x20, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x4}, @IOAM6_ATTR_SC_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8010) 76.183584ms ago: executing program 0 (id=1362): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000080), 0x6b) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x5, 0x0) socket(0xa, 0x2, 0x73) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080), 0x6b) 0s ago: executing program 0 (id=1363): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) socket(0x2, 0x3, 0x1) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_CHANNELS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) r3 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r3, &(0x7f00000000c0)='.', 0x1) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x20055) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70) readv$auto(0x10, &(0x7f0000000040)={&(0x7f0000000000), 0xf}, 0xbb) write$auto_mtd_fops_mtdchar(r0, &(0x7f0000000440)="df", 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. [ 58.251640][ T5818] cgroup: Unknown subsys name 'net' [ 58.369177][ T5818] cgroup: Unknown subsys name 'cpuset' [ 58.376976][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.748685][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.459690][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.470404][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.478090][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.486536][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.495704][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.503505][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.512102][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.519908][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.527313][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.536347][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.536346][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.553071][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.557122][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.570330][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.579092][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.579314][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.593768][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.602068][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.609786][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.609876][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.617123][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.632051][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.639827][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.649860][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.002252][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 62.016561][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 62.067847][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 62.091807][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 62.192807][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.200225][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.208133][ T5832] bridge_slave_0: entered allmulticast mode [ 62.214795][ T5832] bridge_slave_0: entered promiscuous mode [ 62.243156][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.250426][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.257687][ T5832] bridge_slave_1: entered allmulticast mode [ 62.264279][ T5832] bridge_slave_1: entered promiscuous mode [ 62.281132][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.288350][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.296549][ T5829] bridge_slave_0: entered allmulticast mode [ 62.303131][ T5829] bridge_slave_0: entered promiscuous mode [ 62.337931][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.345089][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.352461][ T5829] bridge_slave_1: entered allmulticast mode [ 62.359617][ T5829] bridge_slave_1: entered promiscuous mode [ 62.382051][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.389344][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.396854][ T5828] bridge_slave_0: entered allmulticast mode [ 62.403419][ T5828] bridge_slave_0: entered promiscuous mode [ 62.413391][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.426520][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.435750][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.442863][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.450699][ T5827] bridge_slave_0: entered allmulticast mode [ 62.458081][ T5827] bridge_slave_0: entered promiscuous mode [ 62.472684][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.480030][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.487341][ T5828] bridge_slave_1: entered allmulticast mode [ 62.493915][ T5828] bridge_slave_1: entered promiscuous mode [ 62.517413][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.524542][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.531998][ T5827] bridge_slave_1: entered allmulticast mode [ 62.538841][ T5827] bridge_slave_1: entered promiscuous mode [ 62.556747][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.569116][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.587190][ T5832] team0: Port device team_slave_0 added [ 62.603469][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.630159][ T5832] team0: Port device team_slave_1 added [ 62.638215][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.664985][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.678131][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.703365][ T5829] team0: Port device team_slave_0 added [ 62.733623][ T5827] team0: Port device team_slave_0 added [ 62.741918][ T5829] team0: Port device team_slave_1 added [ 62.757162][ T5828] team0: Port device team_slave_0 added [ 62.763825][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.771236][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.797442][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.810907][ T5827] team0: Port device team_slave_1 added [ 62.834705][ T5828] team0: Port device team_slave_1 added [ 62.843793][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.850930][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.876923][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.900217][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.907325][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.934117][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.962908][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.970146][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.996636][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.009016][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.016303][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.042394][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.068223][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.075186][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.102131][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.118230][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.125200][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.151251][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.162840][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.174641][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.200875][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.233212][ T5832] hsr_slave_0: entered promiscuous mode [ 63.240246][ T5832] hsr_slave_1: entered promiscuous mode [ 63.305073][ T5829] hsr_slave_0: entered promiscuous mode [ 63.311573][ T5829] hsr_slave_1: entered promiscuous mode [ 63.318182][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.326252][ T5829] Cannot create hsr debugfs directory [ 63.364713][ T5828] hsr_slave_0: entered promiscuous mode [ 63.370923][ T5828] hsr_slave_1: entered promiscuous mode [ 63.377784][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.385366][ T5828] Cannot create hsr debugfs directory [ 63.410174][ T5827] hsr_slave_0: entered promiscuous mode [ 63.416510][ T5827] hsr_slave_1: entered promiscuous mode [ 63.422474][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.430147][ T5827] Cannot create hsr debugfs directory [ 63.646740][ T5841] Bluetooth: hci0: command tx timeout [ 63.655674][ T5841] Bluetooth: hci3: command tx timeout [ 63.678260][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.692751][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.701894][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.713855][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.726342][ T5841] Bluetooth: hci1: command tx timeout [ 63.727070][ T5834] Bluetooth: hci2: command tx timeout [ 63.790723][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.800860][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.820757][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.837269][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.874570][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.890312][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.901311][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.930315][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.964469][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.990188][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.002626][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.012537][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.028405][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.104665][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.158993][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.166416][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.191797][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.198917][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.221806][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.232531][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.274636][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.289621][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.307689][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.314800][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.336030][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.343156][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.373907][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.381063][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.399989][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.407167][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.436421][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.488444][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.518058][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.525192][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.551239][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.558422][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.592147][ T5829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.605268][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.730879][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.828639][ T5832] veth0_vlan: entered promiscuous mode [ 64.843445][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.885441][ T5832] veth1_vlan: entered promiscuous mode [ 64.972018][ T5827] veth0_vlan: entered promiscuous mode [ 64.982223][ T5832] veth0_macvtap: entered promiscuous mode [ 64.993517][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.009362][ T5832] veth1_macvtap: entered promiscuous mode [ 65.021769][ T5827] veth1_vlan: entered promiscuous mode [ 65.037596][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.078607][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.091490][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.101882][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.112158][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.121477][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.130577][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.162957][ T5827] veth0_macvtap: entered promiscuous mode [ 65.173881][ T5827] veth1_macvtap: entered promiscuous mode [ 65.183359][ T5829] veth0_vlan: entered promiscuous mode [ 65.210642][ T5829] veth1_vlan: entered promiscuous mode [ 65.241777][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.269011][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.281974][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.334778][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.346341][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.357672][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.374069][ T271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.383148][ T271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.396370][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.405132][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.414483][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.423251][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.448865][ T5829] veth0_macvtap: entered promiscuous mode [ 65.457587][ T5828] veth0_vlan: entered promiscuous mode [ 65.499783][ T5829] veth1_macvtap: entered promiscuous mode [ 65.508274][ T5828] veth1_vlan: entered promiscuous mode [ 65.523652][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.534340][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.534638][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.548705][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.553180][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.570768][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.582181][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.592874][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.604086][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.614929][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.625535][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.636645][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.662743][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.671946][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.680825][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.689584][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.726453][ T5834] Bluetooth: hci3: command tx timeout [ 65.726745][ T5841] Bluetooth: hci0: command tx timeout [ 65.750312][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.781846][ T5828] veth0_macvtap: entered promiscuous mode [ 65.791155][ T5828] veth1_macvtap: entered promiscuous mode [ 65.806200][ T5841] Bluetooth: hci2: command tx timeout [ 65.808147][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.811622][ T5841] Bluetooth: hci1: command tx timeout [ 65.822074][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.822111][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.847968][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.857861][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.868656][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.880576][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.899478][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.907703][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.952128][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.962778][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.973218][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.983862][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.993897][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.004612][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.017075][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.027734][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.036510][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.045243][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.054372][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.079920][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.098825][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.207971][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.256643][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.281838][ T271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.306439][ T271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.365902][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.399119][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.441888][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.467276][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.681685][ T5901] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.896660][ T5906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6'. [ 66.931847][ T5906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6'. [ 67.832189][ T5834] Bluetooth: hci0: command tx timeout [ 67.841449][ T5834] Bluetooth: hci3: command tx timeout [ 67.885741][ T5841] Bluetooth: hci1: command tx timeout [ 67.891196][ T5841] Bluetooth: hci2: command tx timeout [ 67.922238][ T5937] syz.0.18 uses obsolete (PF_INET,SOCK_PACKET) [ 68.194213][ T5935] netlink: 'syz.1.17': attribute type 33 has an invalid length. [ 68.202135][ T5935] netlink: 322 bytes leftover after parsing attributes in process `syz.1.17'. [ 68.235036][ T5935] Zero length message leads to an empty skb [ 68.319866][ T5945] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.551659][ T5950] netlink: 222 bytes leftover after parsing attributes in process `syz.3.24'. [ 68.586117][ T5950] netlink: 222 bytes leftover after parsing attributes in process `syz.3.24'. [ 69.885888][ T5841] Bluetooth: hci3: command tx timeout [ 69.891358][ T5841] Bluetooth: hci0: command tx timeout [ 69.970671][ T5841] Bluetooth: hci2: command tx timeout [ 69.976198][ T5834] Bluetooth: hci1: command tx timeout [ 71.046442][ T5993] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.743602][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.750346][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.356560][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 73.381725][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 75.883424][ T6062] netlink: 326 bytes leftover after parsing attributes in process `syz.0.64'. [ 75.957098][ T6061] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.963493][ T6061] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.999543][ T6061] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.040619][ T6061] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.051905][ T6061] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.107626][ T6061] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.148655][ T6061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.165034][ T6061] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.188043][ T6061] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.234631][ T6061] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.242728][ T6061] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.276832][ T6061] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 77.493296][ T6077] netlink: 334 bytes leftover after parsing attributes in process `syz.1.70'. [ 77.511636][ T6074] netlink: 504 bytes leftover after parsing attributes in process `syz.3.69'. [ 78.095697][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 78.137229][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.205643][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 78.285628][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.044034][ T6097] ======================================================= [ 79.044034][ T6097] WARNING: The mand mount option has been deprecated and [ 79.044034][ T6097] and is ignored by this kernel. Remove the mand [ 79.044034][ T6097] option from the mount to silence this warning. [ 79.044034][ T6097] ======================================================= [ 79.415141][ T6101] netlink: 326 bytes leftover after parsing attributes in process `syz.3.78'. [ 79.706511][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 79.731560][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 79.757041][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 79.777877][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 80.125773][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.205783][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.286107][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.365644][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.995405][ T25] cfg80211: failed to load regulatory.db [ 82.010709][ T6138] netlink: 330 bytes leftover after parsing attributes in process `syz.3.91'. [ 82.205814][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.305685][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.366386][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.445706][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.229700][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.240174][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.249839][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.265643][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.273499][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.282674][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.627657][ T6157] netlink: 322 bytes leftover after parsing attributes in process `syz.3.97'. [ 84.629985][ T6151] chnl_net:caif_netlink_parms(): no params data found [ 84.869000][ T2920] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.118266][ T2920] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.146050][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.163472][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.172022][ T6151] bridge_slave_0: entered allmulticast mode [ 85.198927][ T6151] bridge_slave_0: entered promiscuous mode [ 85.231152][ T2920] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.285767][ T6151] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.292926][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.300278][ T6151] bridge_slave_1: entered allmulticast mode [ 85.307396][ T6151] bridge_slave_1: entered promiscuous mode [ 85.478000][ T2920] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.529977][ T6151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.557883][ T6151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.623845][ T6151] team0: Port device team_slave_0 added [ 85.645013][ T6151] team0: Port device team_slave_1 added [ 85.711361][ T6151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.718690][ T6151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.744967][ T6151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.758848][ T6151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.765871][ T6151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.792108][ T6151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.867324][ T2920] bridge_slave_1: left allmulticast mode [ 85.873707][ T2920] bridge_slave_1: left promiscuous mode [ 85.881812][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.887596][ T6173] process 'syz.1.103' launched './file0' with NULL argv: empty string added [ 85.903958][ T2920] bridge_slave_0: left allmulticast mode [ 85.925798][ T2920] bridge_slave_0: left promiscuous mode [ 85.932014][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.276424][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.293028][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.303900][ T2920] bond0 (unregistering): Released all slaves [ 86.333963][ T6194] mkiss: ax0: crc mode is auto. [ 86.369165][ T5834] Bluetooth: hci2: command tx timeout [ 86.372735][ T6151] hsr_slave_0: entered promiscuous mode [ 86.382076][ T6151] hsr_slave_1: entered promiscuous mode [ 86.402635][ T6151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.411115][ T6151] Cannot create hsr debugfs directory [ 87.022915][ T2920] hsr_slave_0: left promiscuous mode [ 87.106509][ T2920] hsr_slave_1: left promiscuous mode [ 87.161257][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.183283][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.213339][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.235869][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.406533][ T2920] veth1_macvtap: left promiscuous mode [ 87.426234][ T2920] veth0_macvtap: left promiscuous mode [ 87.431901][ T2920] veth1_vlan: left promiscuous mode [ 87.453899][ T2920] veth0_vlan: left promiscuous mode [ 87.566578][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.119'. [ 88.461943][ T5834] Bluetooth: hci2: command tx timeout [ 89.289348][ T2920] team0 (unregistering): Port device team_slave_1 removed [ 89.576388][ T2920] team0 (unregistering): Port device team_slave_0 removed [ 90.525779][ T5834] Bluetooth: hci2: command tx timeout [ 91.321839][ T6224] bond0: (slave bond_slave_1): Releasing backup interface [ 91.509741][ T6151] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.576196][ T6151] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.617926][ T6151] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.739968][ T6151] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.105605][ T6151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.125432][ T6151] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.169914][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.177116][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.300021][ T6151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.310492][ T6151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.332700][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.339893][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.605701][ T5834] Bluetooth: hci2: command tx timeout [ 92.677302][ T6151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.871422][ T6305] netlink: 330 bytes leftover after parsing attributes in process `syz.0.142'. [ 93.268572][ T6151] veth0_vlan: entered promiscuous mode [ 93.311827][ T6151] veth1_vlan: entered promiscuous mode [ 93.387315][ T6151] veth0_macvtap: entered promiscuous mode [ 93.424801][ T6151] veth1_macvtap: entered promiscuous mode [ 93.644034][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.667403][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.709289][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.735614][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.762669][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.790909][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.827947][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.855436][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.890149][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.913945][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.941819][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.967897][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.989551][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.016540][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.076072][ T6151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.095936][ T6151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.104692][ T6151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.134439][ T6151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.415184][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.449222][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.540541][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.587732][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.541490][ T6475] netlink: 'syz.0.177': attribute type 5 has an invalid length. [ 98.549535][ T6475] netlink: 314 bytes leftover after parsing attributes in process `syz.0.177'. [ 98.651298][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 99.415621][ T29] audit: type=1800 audit(1734605721.921:2): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.185" name="discovery_nqn" dev="configfs" ino=10010 res=0 errno=0 [ 100.170987][ T6537] netlink: 334 bytes leftover after parsing attributes in process `syz.1.195'. [ 100.585380][ T6554] mmap: syz.1.201 (6554) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.991600][ T6571] netlink: 138 bytes leftover after parsing attributes in process `syz.4.205'. [ 101.081940][ T6576] netlink: 338 bytes leftover after parsing attributes in process `syz.0.206'. [ 101.280184][ T6581] netlink: 330 bytes leftover after parsing attributes in process `syz.3.208'. [ 101.854218][ T6607] netlink: 146 bytes leftover after parsing attributes in process `syz.1.214'. [ 102.772177][ T6643] netlink: 146 bytes leftover after parsing attributes in process `syz.3.227'. [ 103.398627][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 103.418899][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 103.495908][ T6664] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.502088][ T6664] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.563165][ T6664] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.605077][ T6664] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.634509][ T6664] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.745139][ T6664] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.876063][ T6675] netlink: 322 bytes leftover after parsing attributes in process `syz.3.239'. [ 103.897585][ T6675] vcan0: entered promiscuous mode [ 104.164793][ T6684] netlink: 'syz.3.242': attribute type 1 has an invalid length. [ 104.709387][ T6690] netlink: 'syz.4.244': attribute type 33 has an invalid length. [ 104.725643][ T6690] netlink: 322 bytes leftover after parsing attributes in process `syz.4.244'. [ 105.565847][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.570201][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.572075][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.646145][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.696344][ T6711] sp0: Synchronizing with TNC [ 106.434989][ T6722] netlink: 'syz.4.255': attribute type 39 has an invalid length. [ 106.443570][ T6722] netlink: 'syz.4.255': attribute type 40 has an invalid length. [ 106.470485][ T6722] netlink: 'syz.4.255': attribute type 41 has an invalid length. [ 106.485737][ T6722] netlink: 'syz.4.255': attribute type 44 has an invalid length. [ 106.501587][ T6722] netlink: 'syz.4.255': attribute type 46 has an invalid length. [ 106.516760][ T6722] netlink: 'syz.4.255': attribute type 47 has an invalid length. [ 106.533152][ T6722] netlink: 'syz.4.255': attribute type 48 has an invalid length. [ 106.548825][ T6722] netlink: 'syz.4.255': attribute type 49 has an invalid length. [ 106.581335][ T6722] netlink: 6 bytes leftover after parsing attributes in process `syz.4.255'. [ 107.016899][ T6733] netlink: 330 bytes leftover after parsing attributes in process `syz.3.260'. [ 107.162255][ T6740] netlink: 326 bytes leftover after parsing attributes in process `syz.4.261'. [ 107.725697][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.372505][ T6768] netlink: 314 bytes leftover after parsing attributes in process `syz.4.271'. [ 109.298813][ T6785] netlink: 342 bytes leftover after parsing attributes in process `syz.1.277'. [ 109.334635][ T6785] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.363872][ T6785] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.371533][ T6785] IPv6: NLM_F_CREATE should be set when creating new route [ 109.378903][ T6785] IPv6: NLM_F_CREATE should be set when creating new route [ 109.386198][ T6785] IPv6: NLM_F_CREATE should be set when creating new route [ 109.805982][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.079032][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.284'. [ 110.104098][ T6811] vcan0: entered promiscuous mode [ 110.826611][ T6829] netlink: 342 bytes leftover after parsing attributes in process `syz.3.287'. [ 110.877705][ T6829] netlink: 342 bytes leftover after parsing attributes in process `syz.3.287'. [ 110.903340][ T6829] netlink: 342 bytes leftover after parsing attributes in process `syz.3.287'. [ 110.927973][ T6831] netlink: 102 bytes leftover after parsing attributes in process `syz.3.287'. [ 113.203144][ T6847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.294'. [ 113.275582][ T6847] lo: entered promiscuous mode [ 113.311047][ T6847] lo: entered allmulticast mode [ 113.392039][ T6882] netlink: 50 bytes leftover after parsing attributes in process `syz.4.301'. [ 114.125964][ T6907] validate_nla: 2 callbacks suppressed [ 114.125984][ T6907] netlink: 'syz.1.307': attribute type 33 has an invalid length. [ 114.140795][ T6910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.308'. [ 114.187584][ T6907] netlink: 322 bytes leftover after parsing attributes in process `syz.1.307'. [ 114.244630][ T6910] veth1_macvtap: left promiscuous mode [ 115.915596][ T6958] netlink: 'syz.4.318': attribute type 8 has an invalid length. [ 115.965979][ T6958] netlink: 'syz.4.318': attribute type 9 has an invalid length. [ 116.008863][ T6958] netlink: 162 bytes leftover after parsing attributes in process `syz.4.318'. [ 117.646363][ T7000] netlink: 338 bytes leftover after parsing attributes in process `syz.3.327'. [ 117.667345][ T7000] netlink: 338 bytes leftover after parsing attributes in process `syz.3.327'. [ 117.697309][ T7000] netlink: 210 bytes leftover after parsing attributes in process `syz.3.327'. [ 119.058924][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.338'. [ 119.281837][ T7053] bond0: (slave bond_slave_0): Releasing backup interface [ 121.557412][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 121.582570][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 123.254697][ T7147] netlink: 222 bytes leftover after parsing attributes in process `syz.4.371'. [ 124.179770][ T7169] netlink: 22 bytes leftover after parsing attributes in process `syz.4.382'. [ 125.320417][ T7190] netlink: 'syz.3.391': attribute type 10 has an invalid length. [ 125.335736][ T7190] netlink: 'syz.3.391': attribute type 13 has an invalid length. [ 125.830820][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 125.867866][ T7211] netlink: 10 bytes leftover after parsing attributes in process `syz.3.398'. [ 125.879028][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 125.985707][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 126.022299][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 126.373621][ T7235] netlink: 334 bytes leftover after parsing attributes in process `syz.4.409'. [ 126.928234][ T7253] netlink: 'syz.0.414': attribute type 5 has an invalid length. [ 126.942412][ T7253] __nla_validate_parse: 1 callbacks suppressed [ 126.942431][ T7253] netlink: 314 bytes leftover after parsing attributes in process `syz.0.414'. [ 127.862922][ T7289] netlink: 330 bytes leftover after parsing attributes in process `syz.1.429'. [ 127.880994][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 127.903883][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 128.047739][ T7296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.431'. [ 128.180629][ T7296] bond0: (slave bond_slave_1): Releasing backup interface [ 128.621045][ T7307] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 128.825847][ T7319] binder: 7318:7319 ioctl c0105512 1 returned -22 [ 128.847291][ T7319] binder: 7318:7319 ioctl c0306201 9 returned -14 [ 129.032950][ T7316] syz.1.440 (7316) used greatest stack depth: 21296 bytes left [ 129.312554][ T7337] netlink: 354 bytes leftover after parsing attributes in process `syz.1.449'. [ 129.461148][ T7340] netlink: 322 bytes leftover after parsing attributes in process `syz.0.451'. [ 129.470553][ T7340] vcan0: entered promiscuous mode [ 129.960675][ T7354] netlink: 130 bytes leftover after parsing attributes in process `syz.3.456'. [ 130.476453][ T7373] mkiss: ax0: crc mode is auto. [ 130.544357][ T7378] netlink: 342 bytes leftover after parsing attributes in process `syz.4.466'. [ 131.717014][ T7413] netlink: 326 bytes leftover after parsing attributes in process `syz.3.480'. [ 132.046389][ T7430] netlink: 1 bytes leftover after parsing attributes in process `syz.1.488'. [ 132.121153][ T7433] netlink: 330 bytes leftover after parsing attributes in process `syz.3.489'. [ 132.684241][ T7451] netlink: 334 bytes leftover after parsing attributes in process `syz.0.503'. [ 132.710504][ T7453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.494'. [ 132.736052][ T7453] ipvlan0: entered allmulticast mode [ 132.741968][ T7453] veth0_vlan: entered allmulticast mode [ 133.050600][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'. [ 133.207389][ T7466] netlink: 'syz.1.501': attribute type 4 has an invalid length. [ 133.215202][ T7466] netlink: 314 bytes leftover after parsing attributes in process `syz.1.501'. [ 133.248228][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.255657][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.662867][ T7478] netlink: 350 bytes leftover after parsing attributes in process `syz.0.507'. [ 135.210777][ T7486] netlink: 'syz.4.511': attribute type 21 has an invalid length. [ 135.256572][ T7486] netlink: 326 bytes leftover after parsing attributes in process `syz.4.511'. [ 136.354392][ T7518] netlink: 330 bytes leftover after parsing attributes in process `syz.3.524'. [ 136.707594][ T7529] block nbd0: Unsupported socket: shutdown callout must be supported. [ 137.445027][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 137.478100][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 138.126856][ T7565] netlink: 330 bytes leftover after parsing attributes in process `syz.4.538'. [ 138.389543][ T7569] netlink: 322 bytes leftover after parsing attributes in process `syz.4.539'. [ 138.422148][ T7569] bond0: entered promiscuous mode [ 138.433117][ T7569] bond_slave_0: entered promiscuous mode [ 138.442591][ T7569] bond_slave_1: entered promiscuous mode [ 140.127308][ T7611] netlink: 338 bytes leftover after parsing attributes in process `syz.3.556'. [ 140.139235][ T7611] netlink: 338 bytes leftover after parsing attributes in process `syz.3.556'. [ 140.168969][ T7611] netlink: 210 bytes leftover after parsing attributes in process `syz.3.556'. [ 140.745186][ T7629] netlink: 314 bytes leftover after parsing attributes in process `syz.0.564'. [ 141.048636][ T7639] mkiss: ax0: crc mode is auto. [ 141.860540][ T7646] raw_sendmsg: syz.4.570 forgot to set AF_INET. Fix it! [ 142.326906][ T7663] tipc: Started in network mode [ 142.332080][ T7663] tipc: Node identity ffffffff, cluster identity 4711 [ 142.372387][ T7663] tipc: Node number set to 4294967295 [ 142.945792][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.581'. [ 142.997578][ T7678] HfR: entered promiscuous mode [ 143.023321][ T7678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.581'. [ 145.935366][ T7744] netlink: 342 bytes leftover after parsing attributes in process `syz.0.604'. [ 146.776076][ T7767] netlink: 330 bytes leftover after parsing attributes in process `syz.4.613'. [ 146.969585][ T7772] sctp: [Deprecated]: syz.0.612 (pid 7772) Use of int in maxseg socket option. [ 146.969585][ T7772] Use struct sctp_assoc_value instead [ 147.986767][ T7808] netlink: 330 bytes leftover after parsing attributes in process `syz.1.625'. [ 148.244021][ T7812] netlink: 146 bytes leftover after parsing attributes in process `syz.3.626'. [ 148.663122][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.632'. [ 148.674364][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.632'. [ 148.717750][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 148.790102][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 149.866130][ T7860] netlink: 4755 bytes leftover after parsing attributes in process `syz.3.643'. [ 151.140157][ T7896] netlink: 330 bytes leftover after parsing attributes in process `syz.3.656'. [ 151.304750][ T7899] netlink: 342 bytes leftover after parsing attributes in process `syz.3.657'. [ 151.457034][ T7904] netlink: 'syz.0.660': attribute type 21 has an invalid length. [ 151.469164][ T7904] netlink: 326 bytes leftover after parsing attributes in process `syz.0.660'. [ 152.588463][ T7942] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.640666][ T7944] netlink: 'syz.1.676': attribute type 4 has an invalid length. [ 152.664266][ T7944] netlink: 'syz.1.676': attribute type 4 has an invalid length. [ 153.931636][ T7988] __nla_validate_parse: 6 callbacks suppressed [ 153.931657][ T7988] netlink: 334 bytes leftover after parsing attributes in process `syz.1.694'. [ 155.003337][ T8012] openvswitch: HfR: Dropping previously announced user features [ 155.031853][ T8012] openvswitch: HfR: Dropping previously announced user features [ 155.052162][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'. [ 156.274916][ T8039] netlink: 'syz.3.711': attribute type 4 has an invalid length. [ 156.290498][ T8039] netlink: 314 bytes leftover after parsing attributes in process `syz.3.711'. [ 156.315850][ T8039] netlink: 'syz.3.711': attribute type 4 has an invalid length. [ 156.333915][ T8039] netlink: 314 bytes leftover after parsing attributes in process `syz.3.711'. [ 158.535429][ T8088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.726'. [ 158.619519][ T8088] bond0: (slave bond_slave_0): Releasing backup interface [ 159.522326][ T8113] netlink: 330 bytes leftover after parsing attributes in process `syz.4.734'. [ 159.575560][ T8113] net veth1_virt_wifi ›: renamed from virt_wifi0 [ 160.370935][ T8130] netlink: 504 bytes leftover after parsing attributes in process `syz.1.742'. [ 160.385377][ T8130] netlink: 504 bytes leftover after parsing attributes in process `syz.1.742'. [ 160.788228][ T8132] netlink: 186 bytes leftover after parsing attributes in process `syz.1.743'. [ 161.659679][ T8149] HfR: entered promiscuous mode [ 161.743251][ T8149] openvswitch: HfR: Dropping previously announced user features [ 161.795955][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 162.750454][ T8169] netlink: 'syz.1.761': attribute type 4 has an invalid length. [ 162.765955][ T8169] netlink: 314 bytes leftover after parsing attributes in process `syz.1.761'. [ 166.135619][ T8234] netlink: 266 bytes leftover after parsing attributes in process `syz.1.771'. [ 166.144641][ T8234] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.581024][ T8244] netlink: 22 bytes leftover after parsing attributes in process `syz.4.773'. [ 167.787535][ T8275] netlink: 266 bytes leftover after parsing attributes in process `syz.3.786'. [ 167.812841][ T8275] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.311057][ T8295] openvswitch: netlink: IP tunnel dst address not specified [ 168.336125][ T8295] openvswitch: netlink: IP tunnel dst address not specified [ 169.402733][ T8310] HfR: entered promiscuous mode [ 171.120448][ T8345] netlink: 338 bytes leftover after parsing attributes in process `syz.0.815'. [ 171.262918][ T8347] netlink: 338 bytes leftover after parsing attributes in process `syz.0.815'. [ 171.941911][ T8375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.818'. [ 172.064939][ T8375] bond0: (slave bond_slave_0): Releasing backup interface [ 174.305232][ T8432] netlink: 342 bytes leftover after parsing attributes in process `syz.4.836'. [ 174.773012][ T8446] nbd: illegal input index 50331648 [ 175.674412][ T8472] nbd: illegal input index 50331648 [ 175.901579][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.855'. [ 175.930992][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.855'. [ 176.191933][ T8487] netlink: 330 bytes leftover after parsing attributes in process `syz.3.859'. [ 176.201167][ T8487] : renamed from bond_slave_1 (while UP) [ 177.882383][ T8525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.872'. [ 180.912326][ T8582] netlink: 330 bytes leftover after parsing attributes in process `syz.4.892'. [ 180.944799][ T8582] : renamed from bond_slave_1 (while UP) [ 181.231203][ T8593] netlink: 146 bytes leftover after parsing attributes in process `syz.4.896'. [ 191.488223][ T8840] netlink: 330 bytes leftover after parsing attributes in process `syz.0.978'. [ 191.553268][ T8840] ›: renamed from veth0_vlan (while UP) [ 193.034897][ T5834] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 193.999940][ T8878] netlink: 'syz.0.990': attribute type 10 has an invalid length. [ 194.065680][ T8878] netlink: 230 bytes leftover after parsing attributes in process `syz.0.990'. [ 194.610567][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.616949][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.807026][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1010'. [ 196.867676][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1010'. [ 196.938134][ T8934] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1011'. [ 199.171866][ T8967] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[8967] [ 199.607605][ T8957] kexec: Could not allocate control_code_buffer [ 200.184064][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1033'. [ 200.201131][ T8993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1033'. [ 201.615630][ T9019] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1041'. [ 203.294105][ T9048] netlink: 'syz.1.1050': attribute type 2 has an invalid length. [ 203.340395][ T9048] netlink: 'syz.1.1050': attribute type 2 has an invalid length. [ 203.407152][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1052'. [ 203.480866][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1052'. [ 205.670413][ T9096] netlink: 158 bytes leftover after parsing attributes in process `syz.0.1068'. [ 205.895918][ T9102] netlink: 138 bytes leftover after parsing attributes in process `syz.0.1070'. [ 206.881889][ T9119] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1075'. [ 207.097527][ T9124] Process accounting resumed [ 209.746955][ T9167] netlink: 'syz.4.1102': attribute type 10 has an invalid length. [ 209.755119][ T9167] netlink: 'syz.4.1102': attribute type 13 has an invalid length. [ 210.810509][ T9177] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1098'. [ 210.836618][ T9177] netlink: 274 bytes leftover after parsing attributes in process `syz.4.1098'. [ 211.325030][ T9169] kexec: Could not allocate control_code_buffer [ 214.826718][ T9237] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1119'. [ 215.017149][ T9239] openvswitch: HfR: Dropping previously announced user features [ 215.034001][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 219.586875][ T9321] kernel read not supported for file /éçTµhÊYdèܨ3ô`Ãüå—e&jdˆKÜBUXàØ0z¾Lš¼æÆ84³ÿÿÿÿ (pid: 9321 comm: syz.1.1147) [ 219.679991][ T29] audit: type=1800 audit(1735195666.174:3): pid=9321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1147" name=E9E71E54B568CA0E5964E8DCA833F46006C310FCE59765266A64884BDC425558E01BD8307A04BE4C9ABCE6C63834B3FFFFFFFF dev="mqueue" ino=20818 res=0 errno=0 [ 222.061505][ T9371] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1164'. [ 222.086113][ T9371] netlink: 274 bytes leftover after parsing attributes in process `syz.4.1164'. [ 224.626461][ T9412] netlink: 222 bytes leftover after parsing attributes in process `syz.3.1180'. [ 224.689531][ T9415] netlink: 222 bytes leftover after parsing attributes in process `syz.3.1180'. [ 225.296291][ T9430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1186'. [ 225.520208][ T9430] team0: Port device team_slave_0 removed [ 225.856182][ T9426] could not allocate digest TFM handle [ 226.046551][ T9446] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1190'. [ 226.073956][ T9446] netlink: 306 bytes leftover after parsing attributes in process `syz.1.1190'. [ 228.307017][ T9477] netlink: 322 bytes leftover after parsing attributes in process `syz.0.1201'. [ 228.334462][ T9477] bond0: entered promiscuous mode [ 228.369992][ T9477] bond0: entered allmulticast mode [ 228.977213][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'. [ 229.782137][ T9514] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1217'. [ 229.803937][ T9514] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1217'. [ 229.838033][ T9516] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1218'. [ 231.867758][ T9548] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1227'. [ 231.880740][ T9548] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1227'. [ 232.096190][ T9528] syz.1.1222: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 232.118988][ T9528] CPU: 0 UID: 0 PID: 9528 Comm: syz.1.1222 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 232.129718][ T9528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 232.139804][ T9528] Call Trace: [ 232.143086][ T9528] [ 232.146030][ T9528] dump_stack_lvl+0x16c/0x1f0 [ 232.150731][ T9528] warn_alloc+0x24d/0x3a0 [ 232.155077][ T9528] ? __pfx_warn_alloc+0x10/0x10 [ 232.159952][ T9528] ? __pfx_mark_lock+0x10/0x10 [ 232.164738][ T9528] ? lock_acquire.part.0+0x11b/0x380 [ 232.170042][ T9528] __vmalloc_node_range_noprof+0x10df/0x1530 [ 232.176049][ T9528] ? rcu_is_watching+0x12/0xc0 [ 232.180825][ T9528] ? trace_contention_end+0xee/0x140 [ 232.186125][ T9528] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 232.191435][ T9528] ? dvb_demux_do_ioctl+0x496/0x1340 [ 232.196745][ T9528] ? __pfx___mutex_lock+0x10/0x10 [ 232.201807][ T9528] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 232.208197][ T9528] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 232.214103][ T9528] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 232.219413][ T9528] vmalloc_noprof+0x6b/0x90 [ 232.223945][ T9528] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 232.229262][ T9528] dvb_demux_do_ioctl+0x54d/0x1340 [ 232.234406][ T9528] dvb_usercopy+0x165/0x320 [ 232.238915][ T9528] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 232.244473][ T9528] ? __pfx_dvb_usercopy+0x10/0x10 [ 232.249503][ T9528] ? __pfx_lock_release+0x10/0x10 [ 232.254542][ T9528] ? __fget_files+0x206/0x3a0 [ 232.259237][ T9528] dvb_demux_ioctl+0x29/0x40 [ 232.263838][ T9528] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 232.269129][ T9528] __x64_sys_ioctl+0x190/0x200 [ 232.273899][ T9528] do_syscall_64+0xcd/0x250 [ 232.278415][ T9528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.284320][ T9528] RIP: 0033:0x7f1e00785d29 [ 232.288740][ T9528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.308356][ T9528] RSP: 002b:00007f1e01645038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.316779][ T9528] RAX: ffffffffffffffda RBX: 00007f1e00975fa0 RCX: 00007f1e00785d29 [ 232.324758][ T9528] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 232.332733][ T9528] RBP: 00007f1e00801aa8 R08: 0000000000000000 R09: 0000000000000000 [ 232.340740][ T9528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.348712][ T9528] R13: 0000000000000000 R14: 00007f1e00975fa0 R15: 00007ffea5026dc8 [ 232.356698][ T9528] [ 232.397151][ T9528] Mem-Info: [ 232.412571][ T9528] active_anon:19448 inactive_anon:3 isolated_anon:0 [ 232.412571][ T9528] active_file:2580 inactive_file:53643 isolated_file:0 [ 232.412571][ T9528] unevictable:2443 dirty:407 writeback:0 [ 232.412571][ T9528] slab_reclaimable:10926 slab_unreclaimable:94399 [ 232.412571][ T9528] mapped:25981 shmem:12677 pagetables:836 [ 232.412571][ T9528] sec_pagetables:0 bounce:0 [ 232.412571][ T9528] kernel_misc_reclaimable:0 [ 232.412571][ T9528] free:1309291 free_pcp:18762 free_cma:0 [ 232.605008][ T9528] Node 0 active_anon:72212kB inactive_anon:12kB active_file:10320kB inactive_file:214496kB unevictable:12636kB isolated(anon):0kB isolated(file):0kB mapped:108324kB dirty:1628kB writeback:0kB shmem:47964kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10984kB pagetables:3244kB sec_pagetables:0kB all_unreclaimable? no [ 232.736177][ T9528] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 232.803050][ T9528] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 232.905550][ T9528] lowmem_reserve[]: 0 2465 2466 0 0 [ 232.910861][ T9528] Node 0 DMA32 free:1388336kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:63076kB inactive_anon:12kB active_file:10220kB inactive_file:216264kB unevictable:1536kB writepending:1628kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:16044kB local_pcp:284kB free_cma:0kB [ 232.970197][ T9528] lowmem_reserve[]: 0 0 0 0 0 [ 232.975006][ T9528] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 233.002587][ T9528] lowmem_reserve[]: 0 0 0 0 0 [ 233.008100][ T9528] Node 1 Normal free:3908296kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4096kB local_pcp:0kB free_cma:0kB [ 233.038557][ T9528] lowmem_reserve[]: 0 0 0 0 0 [ 233.043368][ T9528] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 233.069437][ T9528] Node 0 DMA32: 1743*4kB (UM) 1660*8kB (UME) 1530*16kB (UM) 1003*32kB (UME) 798*64kB (UM) 329*128kB (UME) 153*256kB (UM) 54*512kB (UM) 36*1024kB (UM) 20*2048kB (UM) 262*4096kB (UME) = 1387804kB [ 233.093587][ T9528] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 233.115576][ T9528] Node 1 Normal: 226*4kB (UE) 44*8kB (UME) 36*16kB (UME) 201*32kB (UME) 100*64kB (UME) 35*128kB (UME) 14*256kB (UME) 9*512kB (UM) 6*1024kB (UME) 6*2048kB (UME) 943*4096kB (M) = 3908296kB [ 233.144997][ T9528] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.162313][ T9528] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 233.171726][ T9528] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.181585][ T9528] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 233.191703][ T9528] 61677 total pagecache pages [ 233.196454][ T9528] 24 pages in swap cache [ 233.200709][ T9528] Free swap = 124276kB [ 233.205606][ T9528] Total swap = 124996kB [ 233.209791][ T9528] 2097051 pages RAM [ 233.213618][ T9528] 0 pages HighMem/MovableOnly [ 233.218469][ T9528] 427367 pages reserved [ 233.222646][ T9528] 0 pages cma reserved [ 233.392298][ T9575] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1236'. [ 234.017957][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'. [ 234.087006][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'. [ 235.222131][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'. [ 235.293741][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1255'. [ 235.325704][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1255'. [ 235.993224][ T9649] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1267'. [ 236.041710][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.050455][ T9649] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.556191][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.645787][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.654236][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.663112][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.671065][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 243.679050][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.970938][ T9800] chnl_net:caif_netlink_parms(): no params data found [ 244.174852][ T9817] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1326'. [ 244.203862][ T9817] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1326'. [ 244.242795][ T9800] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.269341][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.284741][ T9800] bridge_slave_0: entered allmulticast mode [ 244.325660][ T9800] bridge_slave_0: entered promiscuous mode [ 244.344962][ T9800] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.365666][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.385973][ T9800] bridge_slave_1: entered allmulticast mode [ 244.393979][ T9800] bridge_slave_1: entered promiscuous mode [ 244.510647][ T9800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.537247][ T9822] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1327'. [ 244.578541][ T9800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.699247][ T9800] team0: Port device team_slave_0 added [ 244.743366][ T9800] team0: Port device team_slave_1 added [ 244.823469][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.846362][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.905683][ T9800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.929688][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.945603][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.992812][ T9831] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1336'. [ 244.995622][ T9800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.023379][ T9831] netlink: 274 bytes leftover after parsing attributes in process `syz.0.1336'. [ 245.319445][ T9800] hsr_slave_0: entered promiscuous mode [ 245.351800][ T9800] hsr_slave_1: entered promiscuous mode [ 245.363244][ T9800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.381125][ T9800] Cannot create hsr debugfs directory [ 245.408072][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1332'. [ 245.469839][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1332'. [ 245.725750][ T5841] Bluetooth: hci0: command tx timeout [ 245.779136][ T9800] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 245.792753][ T9800] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 245.804305][ T9800] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 245.832056][ T9800] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 246.079637][ T9800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.181262][ T9800] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.251966][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.259139][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.306408][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.313539][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.959640][ T9800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.067148][ T9873] sctp: [Deprecated]: syz.1.1343 (pid 9873) Use of int in max_burst socket option deprecated. [ 247.067148][ T9873] Use struct sctp_assoc_value instead [ 247.495798][ T9800] veth0_vlan: entered promiscuous mode [ 247.555819][ T9800] veth1_vlan: entered promiscuous mode [ 247.623378][ T9800] veth0_macvtap: entered promiscuous mode [ 247.658076][ T9800] veth1_macvtap: entered promiscuous mode [ 247.700547][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.733474][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.755674][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.798912][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.805903][ T5841] Bluetooth: hci0: command tx timeout [ 247.825745][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.851622][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.871770][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.892507][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.906774][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.922953][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.953846][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.982513][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.003392][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.023061][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.045685][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.065687][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.095571][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.123830][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.175758][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 248.197439][ T9800] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.231777][ T9800] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.260304][ T9800] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.291818][ T9800] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.440893][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.461523][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.479795][ T271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.502683][ T271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.885977][ T5841] Bluetooth: hci0: command tx timeout [ 251.965907][ T5841] Bluetooth: hci0: command tx timeout [ 252.266109][ T9943] [ 252.268487][ T9943] ====================================================== [ 252.275519][ T9943] WARNING: possible circular locking dependency detected [ 252.282555][ T9943] 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 Not tainted [ 252.289676][ T9943] ------------------------------------------------------ [ 252.296699][ T9943] syz.0.1363/9943 is trying to acquire lock: [ 252.302688][ T9943] ffff88801bbeb198 (sk_lock-AF_INET){+.+.}-{0:0}, at: sockopt_lock_sock+0x54/0x70 [ 252.311965][ T9943] [ 252.311965][ T9943] but task is already holding lock: [ 252.319339][ T9943] ffffffff8fabfb08 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xf9/0x38c0 [ 252.328262][ T9943] [ 252.328262][ T9943] which lock already depends on the new lock. [ 252.328262][ T9943] [ 252.338673][ T9943] [ 252.338673][ T9943] the existing dependency chain (in reverse order) is: [ 252.347695][ T9943] [ 252.347695][ T9943] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 252.354936][ T9943] __mutex_lock+0x19b/0xa60 [ 252.359990][ T9943] do_ipv6_setsockopt+0x1f4d/0x4660 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 252.365739][ T9943] ipv6_setsockopt+0xcb/0x170 [ 252.370967][ T9943] tcp_setsockopt+0xa4/0x100 [ 252.376102][ T9943] smc_setsockopt+0x1b4/0xc00 [ 252.381334][ T9943] do_sock_setsockopt+0x222/0x480 [ 252.386909][ T9943] __sys_setsockopt+0x1a0/0x230 [ 252.392308][ T9943] __x64_sys_setsockopt+0xbd/0x160 [ 252.397970][ T9943] do_syscall_64+0xcd/0x250 [ 252.403021][ T9943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.409466][ T9943] [ 252.409466][ T9943] -> #1 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 252.418098][ T9943] __mutex_lock+0x19b/0xa60 [ 252.423149][ T9943] smc_switch_to_fallback+0x2d/0xa00 [ 252.428986][ T9943] smc_connect_fallback+0x42/0x240 [ 252.434655][ T9943] __smc_connect+0xb6f/0x4890 [ 252.439877][ T9943] smc_connect_work+0x54f/0xae0 [ 252.445269][ T9943] process_one_work+0x958/0x1b30 [ 252.450747][ T9943] worker_thread+0x6c8/0xf00 [ 252.455879][ T9943] kthread+0x2c1/0x3a0 [ 252.460503][ T9943] ret_from_fork+0x45/0x80 [ 252.465469][ T9943] ret_from_fork_asm+0x1a/0x30 [ 252.470790][ T9943] [ 252.470790][ T9943] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 252.478476][ T9943] __lock_acquire+0x249e/0x3c40 [ 252.483888][ T9943] lock_acquire.part.0+0x11b/0x380 [ 252.489546][ T9943] lock_sock_nested+0x3a/0xf0 [ 252.494777][ T9943] sockopt_lock_sock+0x54/0x70 [ 252.500096][ T9943] do_ip_setsockopt+0x101/0x38c0 [ 252.505580][ T9943] ip_setsockopt+0x59/0xf0 [ 252.510536][ T9943] raw_setsockopt+0xb8/0x290 [ 252.515672][ T9943] do_sock_setsockopt+0x222/0x480 [ 252.521236][ T9943] __sys_setsockopt+0x1a0/0x230 [ 252.526635][ T9943] __x64_sys_setsockopt+0xbd/0x160 [ 252.532293][ T9943] do_syscall_64+0xcd/0x250 [ 252.537355][ T9943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.543797][ T9943] [ 252.543797][ T9943] other info that might help us debug this: [ 252.543797][ T9943] [ 252.554032][ T9943] Chain exists of: [ 252.554032][ T9943] sk_lock-AF_INET --> &smc->clcsock_release_lock --> rtnl_mutex [ 252.554032][ T9943] [ 252.567621][ T9943] Possible unsafe locking scenario: [ 252.567621][ T9943] [ 252.575075][ T9943] CPU0 CPU1 [ 252.580446][ T9943] ---- ---- [ 252.585819][ T9943] lock(rtnl_mutex); [ 252.589824][ T9943] lock(&smc->clcsock_release_lock); [ 252.597735][ T9943] lock(rtnl_mutex); [ 252.604253][ T9943] lock(sk_lock-AF_INET); [ 252.608685][ T9943] [ 252.608685][ T9943] *** DEADLOCK *** [ 252.608685][ T9943] [ 252.616835][ T9943] 1 lock held by syz.0.1363/9943: [ 252.621867][ T9943] #0: ffffffff8fabfb08 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xf9/0x38c0 [ 252.631215][ T9943] [ 252.631215][ T9943] stack backtrace: [ 252.637119][ T9943] CPU: 1 UID: 0 PID: 9943 Comm: syz.0.1363 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 252.647812][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 252.657879][ T9943] Call Trace: [ 252.661168][ T9943] [ 252.664113][ T9943] dump_stack_lvl+0x116/0x1f0 [ 252.668813][ T9943] print_circular_bug+0x41c/0x610 [ 252.673873][ T9943] check_noncircular+0x31a/0x400 [ 252.678843][ T9943] ? __pfx_check_noncircular+0x10/0x10 [ 252.684598][ T9943] ? lockdep_lock+0xc6/0x200 [ 252.689217][ T9943] ? __pfx_lockdep_lock+0x10/0x10 [ 252.694268][ T9943] __lock_acquire+0x249e/0x3c40 [ 252.699156][ T9943] ? __pfx___lock_acquire+0x10/0x10 [ 252.704383][ T9943] ? rcu_is_watching+0x12/0xc0 [ 252.709174][ T9943] lock_acquire.part.0+0x11b/0x380 [ 252.714308][ T9943] ? sockopt_lock_sock+0x54/0x70 [ 252.719277][ T9943] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 252.724929][ T9943] ? rcu_is_watching+0x12/0xc0 [ 252.729709][ T9943] ? trace_lock_acquire+0x14e/0x1f0 [ 252.734900][ T9943] ? mark_lock+0xb5/0xc60 [ 252.739221][ T9943] ? sockopt_lock_sock+0x54/0x70 [ 252.744150][ T9943] ? lock_acquire+0x2f/0xb0 [ 252.748638][ T9943] ? sockopt_lock_sock+0x54/0x70 [ 252.753564][ T9943] lock_sock_nested+0x3a/0xf0 [ 252.758232][ T9943] ? sockopt_lock_sock+0x54/0x70 [ 252.763159][ T9943] sockopt_lock_sock+0x54/0x70 [ 252.767916][ T9943] do_ip_setsockopt+0x101/0x38c0 [ 252.772840][ T9943] ? __pfx___futex_wait+0x10/0x10 [ 252.777869][ T9943] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 252.783259][ T9943] ? 0xffffffffff600000 [ 252.787412][ T9943] ? 0xffffffffff600000 [ 252.791569][ T9943] ip_setsockopt+0x59/0xf0 [ 252.795974][ T9943] raw_setsockopt+0xb8/0x290 [ 252.800552][ T9943] ? __pfx_raw_setsockopt+0x10/0x10 [ 252.805735][ T9943] ? 0xffffffffff600000 [ 252.809888][ T9943] ? sock_common_setsockopt+0x2e/0xf0 [ 252.815244][ T9943] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 252.821124][ T9943] do_sock_setsockopt+0x222/0x480 [ 252.826144][ T9943] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 252.831697][ T9943] ? lock_acquire+0x2f/0xb0 [ 252.836187][ T9943] ? 0xffffffffff600000 [ 252.840325][ T9943] ? 0xffffffffff600000 [ 252.844462][ T9943] __sys_setsockopt+0x1a0/0x230 [ 252.849303][ T9943] __x64_sys_setsockopt+0xbd/0x160 [ 252.854405][ T9943] ? do_syscall_64+0x91/0x250 [ 252.859078][ T9943] ? lockdep_hardirqs_on+0x7c/0x110 [ 252.864261][ T9943] do_syscall_64+0xcd/0x250 [ 252.868754][ T9943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.874652][ T9943] RIP: 0033:0x7fb760d85d29 [ 252.879054][ T9943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.898652][ T9943] RSP: 002b:00007fb761aeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 252.907053][ T9943] RAX: ffffffffffffffda RBX: 00007fb760f75fa0 RCX: 00007fb760d85d29 [ 252.915014][ T9943] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000003 [ 252.922968][ T9943] RBP: 00007fb760e01aa8 R08: 0000000000000070 R09: 0000000000000000 [ 252.930927][ T9943] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 252.938884][ T9943] R13: 0000000000000000 R14: 00007fb760f75fa0 R15: 00007fff99dcf448 [ 252.946842][ T9943] ? 0xffffffffff600000 [ 252.950978][ T9943] [ 253.469542][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.548669][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.609925][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.668789][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.742461][ T12] bridge_slave_1: left allmulticast mode [ 253.750779][ T12] bridge_slave_1: left promiscuous mode [ 253.756952][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.764811][ T12] bridge_slave_0: left allmulticast mode [ 253.770669][ T12] bridge_slave_0: left promiscuous mode [ 253.776537][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.855661][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.865435][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.874937][ T12] bond0 (unregistering): Released all slaves [ 254.054937][ T12] hsr_slave_0: left promiscuous mode [ 254.063339][ T12] hsr_slave_1: left promiscuous mode [ 254.070791][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.078472][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.086980][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.094364][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.102955][ T12] veth1_macvtap: left promiscuous mode [ 254.108479][ T12] veth0_macvtap: left promiscuous mode [ 254.113983][ T12] veth1_vlan: left promiscuous mode [ 254.119933][ T12] veth0_vlan: left promiscuous mode [ 254.223504][ T12] team0 (unregistering): Port device team_slave_1 removed [ 254.241996][ T12] team0 (unregistering): Port device team_slave_0 removed [ 256.046810][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.053104][ T1292] ieee802154 phy1 wpan1: encryption failed: -22