last executing test programs: 1.366916831s ago: executing program 0 (id=2122): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mlock$auto(0x5, 0xffff) 992.775126ms ago: executing program 1 (id=2127): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd5/queue/iosched/front_merges\x00', 0xc0202, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfdef) 992.713643ms ago: executing program 2 (id=2128): socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(&(0x7f0000000140)=0x2, 0x800) read$auto(0x4, 0x0, 0x80) 939.093132ms ago: executing program 0 (id=2129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20044010}, 0x44800) 865.54677ms ago: executing program 2 (id=2130): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) 771.621169ms ago: executing program 1 (id=2131): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_CQM(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000017c0)={0x40, r0, 0x181, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_HEAD={0x29, 0xe, "8bfa17e0acc74ae55238c615d33bc7e1444386f103d4609366980c7c4195f5f93304cab47a"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c815}, 0x40000) 771.071656ms ago: executing program 0 (id=2139): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8000, 0xe9) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) 687.65274ms ago: executing program 3 (id=2132): socket(0x2, 0x6, 0x0) listen$auto(0x3, 0x9) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) 646.872106ms ago: executing program 1 (id=2133): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0xc, 0x0, &(0x7f0000000080)=0x9c8) 579.044989ms ago: executing program 3 (id=2134): socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0), 0x55) connect$auto(0x3, &(0x7f00000000c0), 0x55) 578.255163ms ago: executing program 2 (id=2143): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1d, 0x0, 0x0) 536.543296ms ago: executing program 1 (id=2135): mmap$auto(0x0, 0x9, 0x10000df, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x5, 0x0) 466.105953ms ago: executing program 3 (id=2136): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r0, 0x3, &(0x7f0000000240), 0x7) 447.123263ms ago: executing program 2 (id=2137): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mseal$auto(0x8000, 0x7, 0x0) mseal$auto(0x8000, 0x7, 0x0) 431.441973ms ago: executing program 1 (id=2138): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r0, 0xc0184d03, r0) 384.861066ms ago: executing program 0 (id=2140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x4000) 293.439021ms ago: executing program 2 (id=2141): mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) sysfs$auto(0x2, 0x9, 0x0) fsopen$auto(0x0, 0x1) 292.848962ms ago: executing program 1 (id=2150): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x10000, 0x7, 0xc) 252.018326ms ago: executing program 3 (id=2142): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x2b, 0x0, 0x9) 237.310635ms ago: executing program 0 (id=2144): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x26, 0x80805, 0x0) 154.008149ms ago: executing program 3 (id=2145): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video64\x00', 0x2380, 0x0) ioctl$auto(r0, 0xc0845657, r0) 122.809µs ago: executing program 0 (id=2146): socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0), 0x55) connect$auto(0x3, &(0x7f00000000c0), 0x55) 35.28µs ago: executing program 2 (id=2147): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0xfffffffd, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) 0s ago: executing program 3 (id=2148): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1d, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. [ 77.601189][ T5821] cgroup: Unknown subsys name 'net' [ 77.730173][ T5821] cgroup: Unknown subsys name 'cpuset' [ 77.738000][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.274182][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.143091][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.151305][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.159240][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.172791][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.180330][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.187866][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.193196][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.198083][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.202842][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.216227][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.217560][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.224412][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.231287][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.238035][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.252351][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.261074][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.270593][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.275825][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.278445][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.296446][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.609294][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 82.680446][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 82.726832][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.734604][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.742094][ T5832] bridge_slave_0: entered allmulticast mode [ 82.748862][ T5832] bridge_slave_0: entered promiscuous mode [ 82.758033][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.765188][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.772479][ T5832] bridge_slave_1: entered allmulticast mode [ 82.779549][ T5832] bridge_slave_1: entered promiscuous mode [ 82.793696][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 82.848746][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.860124][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.919833][ T5832] team0: Port device team_slave_0 added [ 82.927647][ T5832] team0: Port device team_slave_1 added [ 82.951963][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 82.977686][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.984879][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.992381][ T5833] bridge_slave_0: entered allmulticast mode [ 82.999463][ T5833] bridge_slave_0: entered promiscuous mode [ 83.014209][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.023195][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.049485][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.062494][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.069685][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.095756][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.107131][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.114346][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.121845][ T5833] bridge_slave_1: entered allmulticast mode [ 83.129297][ T5833] bridge_slave_1: entered promiscuous mode [ 83.180639][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.188005][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.195403][ T5830] bridge_slave_0: entered allmulticast mode [ 83.202110][ T5830] bridge_slave_0: entered promiscuous mode [ 83.209924][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.217133][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.224285][ T5830] bridge_slave_1: entered allmulticast mode [ 83.232048][ T5830] bridge_slave_1: entered promiscuous mode [ 83.249366][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.285831][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.297282][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.311900][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.367624][ T5832] hsr_slave_0: entered promiscuous mode [ 83.374235][ T5832] hsr_slave_1: entered promiscuous mode [ 83.383125][ T5833] team0: Port device team_slave_0 added [ 83.391430][ T5833] team0: Port device team_slave_1 added [ 83.434399][ T5830] team0: Port device team_slave_0 added [ 83.457964][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.465134][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.474945][ T5831] bridge_slave_0: entered allmulticast mode [ 83.481818][ T5831] bridge_slave_0: entered promiscuous mode [ 83.492064][ T5830] team0: Port device team_slave_1 added [ 83.510083][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.517272][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.543303][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.556141][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.563120][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.589121][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.600575][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.607885][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.615068][ T5831] bridge_slave_1: entered allmulticast mode [ 83.622033][ T5831] bridge_slave_1: entered promiscuous mode [ 83.638002][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.644991][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.671800][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.713178][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.721840][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.748369][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.787064][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.812627][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.880935][ T5830] hsr_slave_0: entered promiscuous mode [ 83.888382][ T5830] hsr_slave_1: entered promiscuous mode [ 83.894360][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.902640][ T5830] Cannot create hsr debugfs directory [ 83.911629][ T5833] hsr_slave_0: entered promiscuous mode [ 83.917899][ T5833] hsr_slave_1: entered promiscuous mode [ 83.924870][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.933065][ T5833] Cannot create hsr debugfs directory [ 83.946268][ T5831] team0: Port device team_slave_0 added [ 83.965746][ T5831] team0: Port device team_slave_1 added [ 84.024379][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.031694][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.058325][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.090782][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.098302][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.125281][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.233591][ T5831] hsr_slave_0: entered promiscuous mode [ 84.240026][ T5831] hsr_slave_1: entered promiscuous mode [ 84.246974][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.254575][ T5831] Cannot create hsr debugfs directory [ 84.260412][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.276158][ T5835] Bluetooth: hci3: command tx timeout [ 84.289418][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.314543][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.341952][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.355847][ T5842] Bluetooth: hci0: command tx timeout [ 84.362454][ T5835] Bluetooth: hci2: command tx timeout [ 84.368250][ T5842] Bluetooth: hci1: command tx timeout [ 84.442024][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.453434][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.464230][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.474696][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.530228][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.564395][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.574857][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.605054][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.619177][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.629234][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.641944][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.662139][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.712879][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.788158][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.814710][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.840695][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.848151][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.870694][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.881372][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.888526][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.931632][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.962422][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.969588][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.981686][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.988799][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.027943][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.048909][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.071918][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.079069][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.100355][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.130145][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.137410][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.151844][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.202655][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.209839][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.234970][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.242124][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.265217][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.296365][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.418231][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.521867][ T5832] veth0_vlan: entered promiscuous mode [ 85.532471][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.552700][ T5832] veth1_vlan: entered promiscuous mode [ 85.628216][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.656603][ T5830] veth0_vlan: entered promiscuous mode [ 85.673130][ T5832] veth0_macvtap: entered promiscuous mode [ 85.696866][ T5832] veth1_macvtap: entered promiscuous mode [ 85.704823][ T5830] veth1_vlan: entered promiscuous mode [ 85.728100][ T5833] veth0_vlan: entered promiscuous mode [ 85.753216][ T5833] veth1_vlan: entered promiscuous mode [ 85.768405][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.785755][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.812128][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.824946][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.837520][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.846586][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.856251][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.897632][ T5830] veth0_macvtap: entered promiscuous mode [ 85.917829][ T5833] veth0_macvtap: entered promiscuous mode [ 85.932662][ T5830] veth1_macvtap: entered promiscuous mode [ 85.952859][ T5831] veth0_vlan: entered promiscuous mode [ 85.970846][ T5833] veth1_macvtap: entered promiscuous mode [ 85.989962][ T5831] veth1_vlan: entered promiscuous mode [ 86.014414][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.025544][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.037231][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.055652][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.066507][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.078626][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.097084][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.105087][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.111894][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.126469][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.135212][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.144087][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.167038][ T5831] veth0_macvtap: entered promiscuous mode [ 86.187872][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.199728][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.211065][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.221636][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.233238][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.247631][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.258381][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.268479][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.280110][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.291965][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.309112][ T5831] veth1_macvtap: entered promiscuous mode [ 86.317452][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.326561][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.336061][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.344822][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.355918][ T5842] Bluetooth: hci3: command tx timeout [ 86.360518][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.369394][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.439533][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.439961][ T5842] Bluetooth: hci1: command tx timeout [ 86.451847][ T5835] Bluetooth: hci0: command tx timeout [ 86.456359][ T5845] Bluetooth: hci2: command tx timeout [ 86.468065][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.478499][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.489095][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.499039][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.509707][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.521518][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.556322][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.568157][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.578923][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.589540][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.600453][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.611526][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.623501][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.644468][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.681775][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.693487][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.707388][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.717673][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.727125][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.739230][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.763133][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.787178][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.829054][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.839919][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.863868][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.893184][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.998243][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.030338][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.063834][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.089455][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.382077][ T5916] netlink: 'syz.0.7': attribute type 11 has an invalid length. [ 87.419690][ T5916] netlink: 'syz.0.7': attribute type 11 has an invalid length. [ 87.437345][ T5916] netlink: 'syz.0.7': attribute type 11 has an invalid length. [ 87.444975][ T5916] netlink: 'syz.0.7': attribute type 11 has an invalid length. [ 87.541964][ T5922] mmap: syz.2.9 (5922) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.075554][ T5944] program syz.0.18 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.435794][ T5845] Bluetooth: hci3: command tx timeout [ 88.515832][ T5845] Bluetooth: hci2: command tx timeout [ 88.521401][ T5842] Bluetooth: hci1: command tx timeout [ 88.521417][ T5835] Bluetooth: hci0: command tx timeout [ 89.362341][ T5990] openvswitch: netlink: Key type 261 is out of range max 32 [ 89.390497][ T5991] netlink: 'syz.0.38': attribute type 11 has an invalid length. [ 90.495102][ T6037] Zero length message leads to an empty skb [ 90.516019][ T5835] Bluetooth: hci3: command tx timeout [ 90.595777][ T5835] Bluetooth: hci1: command tx timeout [ 90.601258][ T5835] Bluetooth: hci0: command tx timeout [ 90.607196][ T5842] Bluetooth: hci2: command tx timeout [ 91.888732][ T1207] cfg80211: failed to load regulatory.db [ 92.005611][ T6102] netlink: 'syz.0.91': attribute type 1 has an invalid length. [ 92.163311][ T6106] program syz.1.93 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.045133][ T6185] openvswitch: netlink: Key type 29 is not supported [ 95.552338][ T6248] netlink: zone id is out of range [ 95.562894][ T6248] netlink: zone id is out of range [ 95.589529][ T6248] netlink: zone id is out of range [ 95.659596][ T6250] openvswitch: netlink: IP tunnel dst address not specified [ 95.783204][ T6254] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 95.797382][ T6254] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 97.265119][ T6317] aoe: can't write to that file. [ 97.752287][ T6333] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 97.759520][ T6333] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 98.547030][ T6364] vivid-003: ================= START STATUS ================= [ 98.555019][ T6364] vivid-003: Radio HW Seek Mode: Bounded [ 98.570828][ T6364] vivid-003: Radio Programmable HW Seek: false [ 98.584946][ T6364] vivid-003: RDS Rx I/O Mode: Block I/O [ 98.590942][ T6364] vivid-003: Generate RBDS Instead of RDS: false [ 98.598807][ T6364] vivid-003: RDS Reception: true [ 98.603842][ T6364] vivid-003: RDS Program Type: 0 inactive [ 98.610505][ T6364] vivid-003: RDS PS Name: inactive [ 98.620425][ T6364] vivid-003: RDS Radio Text: inactive [ 98.634881][ T6364] vivid-003: RDS Traffic Announcement: false inactive [ 98.644523][ T6364] vivid-003: RDS Traffic Program: false inactive [ 98.652823][ T6364] vivid-003: RDS Music: false inactive [ 98.659196][ T6364] vivid-003: ================== END STATUS ================== [ 98.873211][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 99.703564][ T6405] openvswitch: netlink: IPv6 tunnel dst address is zero [ 99.840657][ T6409] openvswitch: netlink: Flow key attr not present in new flow. [ 102.079167][ T6500] process 'syz.0.276' launched '/dev/fd/3' with NULL argv: empty string added [ 102.081535][ T6501] netlink: zone id is out of range [ 102.139212][ T6503] netlink: 'syz.1.278': attribute type 1 has an invalid length. [ 102.154524][ T6503] netlink: 33 bytes leftover after parsing attributes in process `syz.1.278'. [ 103.000602][ T5845] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 103.000644][ T5845] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 103.017924][ T5845] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 103.018026][ T5845] Bluetooth: hci1: Malformed LE Event: 0x0d [ 103.828574][ T6566] netlink: 'syz.1.307': attribute type 10 has an invalid length. [ 104.893395][ T6538] kexec: Could not allocate control_code_buffer [ 105.575398][ T6627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.334'. [ 105.835370][ T30] audit: type=1800 audit(4294967313.832:2): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.339" name="members" dev="configfs" ino=9007 res=0 errno=0 [ 105.866999][ T6641] ======================================================= [ 105.866999][ T6641] WARNING: The mand mount option has been deprecated and [ 105.866999][ T6641] and is ignored by this kernel. Remove the mand [ 105.866999][ T6641] option from the mount to silence this warning. [ 105.866999][ T6641] ======================================================= [ 105.943738][ T6641] nfsd: Unknown parameter 'DJ' [ 105.948413][ T6645] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 107.095992][ T6704] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 107.320084][ T6716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.377'. [ 108.272520][ T6764] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 3000000000 [ 108.466789][ T6772] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 108.848358][ T6789] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 110.817569][ T6880] netlink: 206 bytes leftover after parsing attributes in process `syz.0.455'. [ 111.092029][ T6889] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 111.762724][ T6922] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 112.618573][ T6965] openvswitch: netlink: Flow actions attr not present in new flow. [ 113.211081][ T6993] netlink: 'syz.1.509': attribute type 1 has an invalid length. [ 113.304212][ T6997] netlink: 342 bytes leftover after parsing attributes in process `syz.2.511'. [ 114.072031][ T7029] dyndbg: expected <4096 bytes into control [ 114.244532][ T7039] openvswitch: netlink: Message has 4 unknown bytes. [ 117.006915][ T7155] netlink: 'syz.1.578': attribute type 11 has an invalid length. [ 118.071036][ T7179] netlink: zone id is out of range [ 118.105368][ T7179] netlink: zone id is out of range [ 118.127645][ T7179] netlink: zone id is out of range [ 118.852946][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 119.138976][ T7221] netlink: zone id is out of range [ 119.147634][ T7221] netlink: zone id is out of range [ 119.161971][ T7221] netlink: zone id is out of range [ 119.683463][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 119.795417][ T7242] sd 0:0:1:0: PR command failed: 1026 [ 119.803727][ T7242] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 119.825318][ T7242] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 120.046137][ T7255] delete_channel: no stack [ 120.298668][ T7266] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 120.318513][ T7266] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 122.370452][ T7330] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 122.393304][ T7330] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 122.853958][ T7342] netlink: zone id is out of range [ 123.775124][ T7371] netlink: 'syz.0.675': attribute type 10 has an invalid length. [ 128.037315][ T7503] unsupported nla_type 32969 [ 128.605871][ T7513] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 129.027683][ T7490] kexec: Could not allocate control_code_buffer [ 129.705749][ T7549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.755'. [ 131.024158][ T7595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.775'. [ 132.165525][ T7632] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 132.191615][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.238257][ T7632] CIFS mount error: No usable UNC path provided in device string! [ 132.238257][ T7632] [ 132.266577][ T7632] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 132.661185][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'. [ 132.802257][ T7658] sctp: [Deprecated]: syz.3.805 (pid 7658) Use of int in maxseg socket option. [ 132.802257][ T7658] Use struct sctp_assoc_value instead [ 133.379268][ T7687] warning: `syz.2.818' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.612242][ T7699] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 135.247729][ T7771] netlink: 342 bytes leftover after parsing attributes in process `syz.3.861'. [ 137.958911][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.965612][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.101617][ T7855] netlink: 'syz.0.898': attribute type 1 has an invalid length. [ 139.755601][ T7884] netlink: 'syz.3.911': attribute type 11 has an invalid length. [ 139.796412][ T7884] netlink: 'syz.3.911': attribute type 11 has an invalid length. [ 139.804228][ T7884] netlink: 'syz.3.911': attribute type 11 has an invalid length. [ 142.077365][ T7949] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 143.626630][ T8007] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 146.457784][ T8103] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 146.552799][ T8107] nbd: couldn't find device at index 33904 [ 146.842190][ T5845] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 146.842244][ T5845] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 147.045700][ T8131] nbd: couldn't find device at index 33904 [ 147.165675][ T8135] netlink: 'syz.0.1027': attribute type 1 has an invalid length. [ 147.684733][ T8162] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 148.970194][ T8227] netlink: zone id is out of range [ 148.997457][ T8227] netlink: zone id is out of range [ 149.002631][ T8227] netlink: zone id is out of range [ 149.032789][ T8227] netlink: zone id is out of range [ 149.045291][ T8227] netlink: zone id is out of range [ 149.060608][ T8227] netlink: zone id is out of range [ 149.075289][ T8227] netlink: zone id is out of range [ 149.088821][ T8227] netlink: zone id is out of range [ 149.245274][ T8227] netlink: zone id is out of range [ 149.250473][ T8227] netlink: zone id is out of range [ 151.938094][ T8337] netlink: 'syz.2.1121': attribute type 1 has an invalid length. [ 154.441196][ T8398] program syz.2.1148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.343870][ T8425] netlink: 'syz.2.1160': attribute type 4 has an invalid length. [ 155.579421][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 156.100539][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'. [ 156.193557][ T8465] nbd: must specify an index to disconnect [ 156.741967][ T8488] netlink: 'syz.0.1190': attribute type 4 has an invalid length. [ 156.818801][ T8492] Invalid ELF header magic: != ELF [ 157.439563][ T8520] sctp: [Deprecated]: syz.0.1204 (pid 8520) Use of int in max_burst socket option deprecated. [ 157.439563][ T8520] Use struct sctp_assoc_value instead [ 158.462837][ T8552] sctp: [Deprecated]: syz.1.1217 (pid 8552) Use of int in max_burst socket option deprecated. [ 158.462837][ T8552] Use struct sctp_assoc_value instead [ 160.356815][ T8619] Invalid ELF header magic: != ELF [ 164.288771][ T8759] netlink: 'syz.1.1314': attribute type 11 has an invalid length. [ 165.911591][ T8816] sd 0:0:1:0: PR command failed: 1026 [ 165.948432][ T8816] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 165.981189][ T8816] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 166.841827][ T8858] net_ratelimit: 23 callbacks suppressed [ 166.841851][ T8858] openvswitch: netlink: Duplicate or invalid key (type 0). [ 168.273972][ T8941] openvswitch: netlink: Duplicate or invalid key (type 0). [ 170.440045][ T9037] netlink: 'syz.1.1446': attribute type 1 has an invalid length. [ 171.964821][ T9089] netlink: 'syz.3.1470': attribute type 1 has an invalid length. [ 172.827098][ T9130] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 3000000000 [ 172.939848][ T9132] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 174.689856][ T9203] netlink: 'syz.1.1521': attribute type 1 has an invalid length. [ 175.165036][ T9224] : entered promiscuous mode [ 176.198480][ T9259] openvswitch: netlink: IP tunnel dst address not specified [ 176.590275][ T9279] : entered promiscuous mode [ 178.289826][ T9357] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list syzkaller syzkaller login: [ 179.355430][ T9417] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 179.504335][ T9427] tipc: Enabling of bearer rejected, media not registered [ 181.586659][ T9511] ubi0: attaching mtd0 [ 181.608497][ T9511] ubi0: scanning is finished [ 181.613591][ T9511] ubi0: empty MTD device detected [ 181.647015][ T9514] capability: warning: `syz.2.1667' uses 32-bit capabilities (legacy support in use) [ 181.774954][ T9519] tipc: Enabling of bearer rejected, media not registered [ 181.783546][ T9511] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 181.791188][ T9511] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 181.801914][ T9511] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 181.809662][ T9511] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 181.822495][ T9511] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 181.829387][ T9511] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 181.840756][ T9511] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4282778248 [ 181.851674][ T9511] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 181.864952][ T9520] ubi0: background thread "ubi_bgt0d" started, PID 9520 [ 182.643270][ T9549] sd 0:0:1:0: PR command failed: 1026 [ 182.657588][ T9549] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 182.675380][ T9549] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 183.114396][ T9561] netlink: 'syz.2.1693': attribute type 2 has an invalid length. [ 184.008084][ T9601] syz.0.1701 uses obsolete (PF_INET,SOCK_PACKET) [ 184.309949][ T9617] netlink: 'syz.1.1710': attribute type 2 has an invalid length. [ 184.942240][ T9646] netlink: 206 bytes leftover after parsing attributes in process `syz.0.1723'. [ 185.141869][ T9648] sd 0:0:1:0: PR command failed: 1026 [ 185.148491][ T9648] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 185.164780][ T9648] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 186.054132][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1747'. [ 186.681771][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1757'. [ 186.840947][ T9737] openvswitch: netlink: nsh attr 68 is out of range max 3 [ 187.394759][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1775'. [ 187.591208][ T9777] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 187.615405][ T9777] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 188.816265][ T9844] netlink: 'syz.1.1810': attribute type 2 has an invalid length. [ 192.928409][T10016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1888'. [ 194.318518][T10069] openvswitch: netlink: Message has 4 unknown bytes. [ 194.969240][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'. [ 195.191771][T10103] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 196.343113][T10152] svc: failed to register nfsdv3 RPC service (errno 111). [ 196.353857][T10152] svc: failed to register nfsaclv3 RPC service (errno 111). [ 197.001498][T10187] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 197.430017][T10210] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 198.003817][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1991'. [ 198.244340][T10252] netlink: 'syz.2.1997': attribute type 1 has an invalid length. [ 198.633755][T10268] svc: failed to register nfsdv3 RPC service (errno 111). [ 198.675746][T10268] svc: failed to register nfsaclv3 RPC service (errno 111). [ 199.060150][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2015'. [ 199.385476][T10306] svc: failed to register nfsdv3 RPC service (errno 111). [ 199.399524][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.406328][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.425565][T10306] svc: failed to register nfsaclv3 RPC service (errno 111). [ 199.953415][T10332] openvswitch: netlink: Multiple metadata blocks provided [ 200.269029][T10345] netlink: 'syz.3.2040': attribute type 1 has an invalid length. [ 200.603940][T10362] openvswitch: netlink: Multiple metadata blocks provided [ 201.007210][T10381] netlink: 'syz.1.2066': attribute type 1 has an invalid length. [ 201.056074][T10383] nl80211: entered promiscuous mode [ 202.733417][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2094'. [ 203.442727][T10486] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 205.456325][ T5836] [ 205.458705][ T5836] ====================================================== [ 205.465747][ T5836] WARNING: possible circular locking dependency detected [ 205.472798][ T5836] 6.14.0-syzkaller-07318-g4fa118e5b79f #0 Not tainted [ 205.479591][ T5836] ------------------------------------------------------ [ 205.486622][ T5836] kworker/1:3/5836 is trying to acquire lock: [ 205.492692][ T5836] ffffffff9010b968 (rtnl_mutex){+.+.}-{4:4}, at: smc_vlan_by_tcpsk+0x251/0x620 [ 205.501809][ T5836] [ 205.501809][ T5836] but task is already holding lock: [ 205.509178][ T5836] ffff888025c7b058 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53a/0xae0 [ 205.518541][ T5836] [ 205.518541][ T5836] which lock already depends on the new lock. [ 205.518541][ T5836] [ 205.528952][ T5836] [ 205.528952][ T5836] the existing dependency chain (in reverse order) is: [ 205.537972][ T5836] [ 205.537972][ T5836] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 205.545643][ T5836] lock_sock_nested+0x41/0xf0 [ 205.550858][ T5836] sockopt_lock_sock+0x54/0x70 [ 205.556157][ T5836] do_ip_setsockopt+0xfe/0x3240 [ 205.561555][ T5836] ip_setsockopt+0x59/0xf0 [ 205.566512][ T5836] tcp_setsockopt+0xa4/0x100 [ 205.571653][ T5836] do_sock_setsockopt+0x221/0x470 [ 205.577250][ T5836] __sys_setsockopt+0x1a0/0x230 [ 205.582656][ T5836] __x64_sys_setsockopt+0xbd/0x160 [ 205.588345][ T5836] do_syscall_64+0xcd/0x260 [ 205.593399][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.599835][ T5836] [ 205.599835][ T5836] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 205.607078][ T5836] __lock_acquire+0x1173/0x1ba0 [ 205.612486][ T5836] lock_acquire+0x179/0x350 [ 205.617537][ T5836] __mutex_lock+0x199/0xb90 [ 205.622584][ T5836] smc_vlan_by_tcpsk+0x251/0x620 [ 205.628075][ T5836] __smc_connect+0x44b/0x4880 [ 205.633309][ T5836] smc_connect_work+0x54c/0xae0 [ 205.638708][ T5836] process_one_work+0x9cc/0x1b70 [ 205.644182][ T5836] worker_thread+0x6c8/0xf10 [ 205.649315][ T5836] kthread+0x3c2/0x780 [ 205.653914][ T5836] ret_from_fork+0x45/0x80 [ 205.658858][ T5836] ret_from_fork_asm+0x1a/0x30 [ 205.664163][ T5836] [ 205.664163][ T5836] other info that might help us debug this: [ 205.664163][ T5836] [ 205.674412][ T5836] Possible unsafe locking scenario: [ 205.674412][ T5836] [ 205.681866][ T5836] CPU0 CPU1 [ 205.687246][ T5836] ---- ---- [ 205.692621][ T5836] lock(sk_lock-AF_INET); [ 205.697055][ T5836] lock(rtnl_mutex); [ 205.703583][ T5836] lock(sk_lock-AF_INET); [ 205.710552][ T5836] lock(rtnl_mutex); [ 205.714548][ T5836] [ 205.714548][ T5836] *** DEADLOCK *** [ 205.714548][ T5836] [ 205.722694][ T5836] 3 locks held by kworker/1:3/5836: [ 205.727903][ T5836] #0: ffff888031843148 ((wq_completion)smc_hs_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 205.738651][ T5836] #1: ffffc900040cfd18 ((work_completion)(&smc->connect_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 205.750443][ T5836] #2: ffff888025c7b058 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53a/0xae0 [ 205.760253][ T5836] [ 205.760253][ T5836] stack backtrace: [ 205.766171][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: kworker/1:3 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 205.766201][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 205.766218][ T5836] Workqueue: smc_hs_wq smc_connect_work [ 205.766259][ T5836] Call Trace: [ 205.766268][ T5836] [ 205.766280][ T5836] dump_stack_lvl+0x116/0x1f0 [ 205.766311][ T5836] print_circular_bug+0x275/0x350 [ 205.766346][ T5836] check_noncircular+0x14c/0x170 [ 205.766382][ T5836] __lock_acquire+0x1173/0x1ba0 [ 205.766419][ T5836] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.766449][ T5836] lock_acquire+0x179/0x350 [ 205.766483][ T5836] ? smc_vlan_by_tcpsk+0x251/0x620 [ 205.766521][ T5836] ? __pfx___might_resched+0x10/0x10 [ 205.766552][ T5836] ? kasan_save_stack+0x42/0x60 [ 205.766587][ T5836] ? kasan_save_stack+0x33/0x60 [ 205.766622][ T5836] ? kasan_save_track+0x14/0x30 [ 205.766659][ T5836] __mutex_lock+0x199/0xb90 [ 205.766688][ T5836] ? smc_vlan_by_tcpsk+0x251/0x620 [ 205.766725][ T5836] ? smc_vlan_by_tcpsk+0x251/0x620 [ 205.766761][ T5836] ? __pfx___mutex_lock+0x10/0x10 [ 205.766794][ T5836] ? find_held_lock+0x2b/0x80 [ 205.766822][ T5836] ? smc_vlan_by_tcpsk+0x251/0x620 [ 205.766857][ T5836] ? rtnl_lock+0x9/0x20 [ 205.766886][ T5836] smc_vlan_by_tcpsk+0x251/0x620 [ 205.766923][ T5836] ? __pfx_smc_vlan_by_tcpsk+0x10/0x10 [ 205.766962][ T5836] __smc_connect+0x44b/0x4880 [ 205.766999][ T5836] ? __pfx___smc_connect+0x10/0x10 [ 205.767033][ T5836] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 205.767059][ T5836] ? __local_bh_enable_ip+0xa4/0x120 [ 205.767090][ T5836] smc_connect_work+0x54c/0xae0 [ 205.767124][ T5836] ? __pfx_smc_connect_work+0x10/0x10 [ 205.767163][ T5836] ? rcu_is_watching+0x12/0xc0 [ 205.767208][ T5836] process_one_work+0x9cc/0x1b70 [ 205.767261][ T5836] ? __pfx_process_one_work+0x10/0x10 [ 205.767292][ T5836] ? assign_work+0x1a0/0x250 [ 205.767316][ T5836] worker_thread+0x6c8/0xf10 [ 205.767346][ T5836] ? __kthread_parkme+0x19e/0x250 [ 205.767382][ T5836] ? __pfx_worker_thread+0x10/0x10 [ 205.767409][ T5836] kthread+0x3c2/0x780 [ 205.767431][ T5836] ? __pfx_kthread+0x10/0x10 [ 205.767453][ T5836] ? __pfx_kthread+0x10/0x10 [ 205.767475][ T5836] ? __pfx_kthread+0x10/0x10 [ 205.767497][ T5836] ? __pfx_kthread+0x10/0x10 [ 205.767520][ T5836] ? rcu_is_watching+0x12/0xc0 [ 205.767548][ T5836] ? __pfx_kthread+0x10/0x10 [ 205.767571][ T5836] ret_from_fork+0x45/0x80 [ 205.767597][ T5836] ? __pfx_kthread+0x10/0x10 [ 205.767619][ T5836] ret_from_fork_asm+0x1a/0x30 [ 205.767663][ T5836] [ 206.606454][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 206.607551][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 206.612558][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 206.618540][ T5848] Bluetooth: hci1: command 0x0406 tx timeout