last executing test programs: 1m29.167756863s ago: executing program 3 (id=180): close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x55) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 1m28.834812042s ago: executing program 3 (id=183): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x40, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m28.218624451s ago: executing program 3 (id=190): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0x2, 0x1) r1 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xffffffff, 0x8000200008011, r1, 0x8000) mprotect$auto(0x0, 0x2, 0x7) 1m28.023088841s ago: executing program 3 (id=193): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/020/001\x00', 0x102, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0x3, 0x0, 0x1f40) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x3b70, 0x0) 1m27.741811453s ago: executing program 3 (id=195): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) tkill$auto(0x1, 0x7) 1m26.647559147s ago: executing program 3 (id=204): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0xff, &(0x7f0000000080)={[0x9, 0xfffffffffffffffc, 0x4, 0xe, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa654, 0x202, 0x9, 0x1]}, 0x0, 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mknod$auto(&(0x7f0000000100)=':,\x00', 0xc9, 0xfffefffa) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000140)='$+[-+\x98%(,\x00\xdc\xec^&\x9e\x1c3\xeaf[|\xdeZ\xed2\xbc\xbd^\xc3\x0f\xc4\xd9\x94\x94B3\x97p\'\xf7\xea\xd5\xf9=\xe5\x1e\f\x8d\xe3\xb7\xadS\xbd\xb2uu\xc1I\xdew\x13.[\xee\xb6L\x983Z\xecS_\xff\xec\t\xd7\t\xa1&\x832Q&\x99\xbbI\xb5\xd2\xc7\xc8\x02S\x18ubI*\x8e\xd9\xd4\xaf\x8b\xfa\x8a\x90\xcd\x90\xaf\x95\x90\x1bU{O\x9cw\x8ez\xa1\xb23^\"\xbc\xd8\x0fT\xb7\x80\x00\bW\xd3\x9d=\x18\x91\x00\xedn\x9c\x93\x82@\x1a\xaex\xad*I\x1b\xa4Mx\x91f\xa6h\xb2c\x01Pf\x06\x18\xbd\x85\x1a\xea\xdc\x9bH\xcc\x1enhul8\xbdW^r\xe4\x04n\x8fK\x8f\xa1\xdc\xfc\xee\x97wO6\xe1+\xe7\xb0\v\xdfu\xb3\xa9L\x85\x1cW\x89~\x98\xfb&(\x9e\xa8\x8a\xed\xcaw,\x13\x13\x99a\x8d\xc6\xea\xff,\x11\x80\xe6H\xea\xe0\xcf\xab\xc2}I\xf5A\xd2\xf4\xc9_\x16\x97r\x94;\xb7\xd8\xf5)\xca)\xcf\x02\x0f\xa5V\xd17U*5C\x19\x8cL\xb5Ds.\x1b\xf9\x7f?b\xaf\x9d\xd4ww4\xa1\xc4\xfe\xf2\xda\x10\xdcV\x0e\x00'/311, 0x0) 1m26.213851755s ago: executing program 32 (id=204): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0xff, &(0x7f0000000080)={[0x9, 0xfffffffffffffffc, 0x4, 0xe, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa654, 0x202, 0x9, 0x1]}, 0x0, 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mknod$auto(&(0x7f0000000100)=':,\x00', 0xc9, 0xfffefffa) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000140)='$+[-+\x98%(,\x00\xdc\xec^&\x9e\x1c3\xeaf[|\xdeZ\xed2\xbc\xbd^\xc3\x0f\xc4\xd9\x94\x94B3\x97p\'\xf7\xea\xd5\xf9=\xe5\x1e\f\x8d\xe3\xb7\xadS\xbd\xb2uu\xc1I\xdew\x13.[\xee\xb6L\x983Z\xecS_\xff\xec\t\xd7\t\xa1&\x832Q&\x99\xbbI\xb5\xd2\xc7\xc8\x02S\x18ubI*\x8e\xd9\xd4\xaf\x8b\xfa\x8a\x90\xcd\x90\xaf\x95\x90\x1bU{O\x9cw\x8ez\xa1\xb23^\"\xbc\xd8\x0fT\xb7\x80\x00\bW\xd3\x9d=\x18\x91\x00\xedn\x9c\x93\x82@\x1a\xaex\xad*I\x1b\xa4Mx\x91f\xa6h\xb2c\x01Pf\x06\x18\xbd\x85\x1a\xea\xdc\x9bH\xcc\x1enhul8\xbdW^r\xe4\x04n\x8fK\x8f\xa1\xdc\xfc\xee\x97wO6\xe1+\xe7\xb0\v\xdfu\xb3\xa9L\x85\x1cW\x89~\x98\xfb&(\x9e\xa8\x8a\xed\xcaw,\x13\x13\x99a\x8d\xc6\xea\xff,\x11\x80\xe6H\xea\xe0\xcf\xab\xc2}I\xf5A\xd2\xf4\xc9_\x16\x97r\x94;\xb7\xd8\xf5)\xca)\xcf\x02\x0f\xa5V\xd17U*5C\x19\x8cL\xb5Ds.\x1b\xf9\x7f?b\xaf\x9d\xd4ww4\xa1\xc4\xfe\xf2\xda\x10\xdcV\x0e\x00'/311, 0x0) 2.27940678s ago: executing program 2 (id=1002): socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) socketpair$auto(0x1b, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "22342c707bff2459b582b1a63a7f"}, 0x6a) 1.956396163s ago: executing program 2 (id=1006): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x801, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) 1.785134032s ago: executing program 2 (id=1010): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x44, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) 1.364906749s ago: executing program 2 (id=1015): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0xd2d2, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r0 = gettid() process_vm_readv$auto(r0, &(0x7f0000000040)={0x0, 0x2}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) 1.362569496s ago: executing program 1 (id=1016): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f0000000000), 0x55) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1e, &(0x7f0000000000), 0x1) 1.244076212s ago: executing program 0 (id=1018): mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) 1.173902182s ago: executing program 1 (id=1020): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) 915.685886ms ago: executing program 4 (id=1022): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) fstat$auto(0x2, 0x0) mincore$auto(0x1000, 0x8001, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201) 914.9582ms ago: executing program 0 (id=1030): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) 785.176763ms ago: executing program 4 (id=1023): socket(0xa, 0x2, 0x0) socket(0xa, 0x3, 0xff) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="13000300", @ANYBLOB="010027"], 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x40) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES8=0x0, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) 780.835109ms ago: executing program 1 (id=1032): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), r0) 644.740874ms ago: executing program 1 (id=1024): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x44, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) 644.656151ms ago: executing program 4 (id=1025): socket(0x1d, 0x2, 0x7) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) close_range$auto(0x2, 0x8000, 0x0) 555.153362ms ago: executing program 4 (id=1026): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(&(0x7f0000000000)='\xbe\xf2\x82\xe7\x14g\xb5\xeeMQ\x13\xa2_g\xbf\t\xfa\xf2_N\xb0{\xf9\xb57v\xeeG\xd9l\xbf\x86q w\x96\xd9\xe9\xa8\xe1\xf0\xc7\x1f\x1e\xc4\xc4\x89u\x83\xe8}\xbd\x7fO\x91\xc1UVW.\xb6\xad\x04u\x02w.\xec`O\xc1\x0e\x15\xe7:\xc9\x1bK\xcddY\x03\x95\xd1\xae\xc1\x9b\x96\x9faj\xd2\xfc\xfc\x1f7\xaf\xcan\xf6\xc0wK\xce\xe7Q\xae\xc9Hg\x01\xef\xda[\xe5\xa3\xa3%\'\x8f\xcf\x96X:\x04Dkt\x7f\xde\x80\x01\xddX\x91\x88\xa1\t\xc3\xf1\xfe[\x93$O8 b\xb4\x92\xf4\xbc\xc5\xb9\x989\xfcF\xec\xdc@\xdd\xdaeM\xe0U\xc8;\xf5\xe7$Q8\xd2\x87\xdd\xc5\x9d\xc5\xe8\xb5\xb5\xb8\xdfD\xd0\xe8t\x8aS\xaa\xbe\xaa\xba\x9e^0\x1a\xf8Y\xf5Jp\bu\xba\x98\x00\xf0H5\xa9u\x0e\xc4\x04\x13\xf58p\x9f\x11\xc07\xefS*|\xd87\x12\xd8\xce\xde0\xd82;\xcd\x18\r\xccI\x99\n\xd2\x86', 0xdd1, 0x8, 0x0) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred=r0, 0x2}) mq_timedsend$auto(0x4, 0x0, 0x0, 0x7fff, 0x0) 544.963387ms ago: executing program 0 (id=1027): mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) 519.463732ms ago: executing program 2 (id=1028): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, 0x0, 0x6b) 339.271757ms ago: executing program 0 (id=1029): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x4f000, 0x1, 0x1, 0x0, 0x7fff, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) 338.19026ms ago: executing program 4 (id=1031): mmap$auto(0x0, 0x22009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setreuid$auto(0x0, 0x0) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sda\x00', 0x8000, 0x0) ioctl$auto(r0, 0x401070c9, r0) 298.231764ms ago: executing program 2 (id=1033): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r0 = socket(0x2, 0x3, 0xa) getsockopt$auto(r0, 0x0, 0x30, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 164.341262ms ago: executing program 0 (id=1034): socket(0xa, 0x2, 0x0) socket(0xa, 0x3, 0xff) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="13000300", @ANYBLOB="010027"], 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x40) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES8=0x0, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) 163.834996ms ago: executing program 1 (id=1035): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x24c802, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) socket(0x2, 0x3, 0x6) setresuid$auto(0x8, 0x8, 0x0) pread64$auto(r0, 0x0, 0x3, 0x5) 150.865228ms ago: executing program 4 (id=1036): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x1}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x4}) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(r0, 0x0, 0x45c) 26.832229ms ago: executing program 0 (id=1037): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}}, 0x5, 0x20000000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) 0s ago: executing program 1 (id=1038): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.36' (ED25519) to the list of known hosts. [ 86.943883][ T5828] cgroup: Unknown subsys name 'net' [ 87.071026][ T5828] cgroup: Unknown subsys name 'cpuset' [ 87.080351][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.856105][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.959483][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.968307][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.976303][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.984670][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.993588][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.100978][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.109783][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.118197][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.126580][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.134425][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.168017][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.177092][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.184921][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.243462][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.251657][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.260584][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.268311][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.295388][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.305509][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.313547][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.342301][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 91.560772][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.568829][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.577153][ T5837] bridge_slave_0: entered allmulticast mode [ 91.584589][ T5837] bridge_slave_0: entered promiscuous mode [ 91.634826][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.642151][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.649934][ T5837] bridge_slave_1: entered allmulticast mode [ 91.657569][ T5837] bridge_slave_1: entered promiscuous mode [ 91.736625][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.773165][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.844126][ T5837] team0: Port device team_slave_0 added [ 91.859115][ T5837] team0: Port device team_slave_1 added [ 92.006707][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.013710][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.040325][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.064192][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.071549][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.097794][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.307461][ T5837] hsr_slave_0: entered promiscuous mode [ 92.314346][ T5837] hsr_slave_1: entered promiscuous mode [ 92.332018][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 92.394445][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 92.439038][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 92.670836][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.678486][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.685642][ T5846] bridge_slave_0: entered allmulticast mode [ 92.694735][ T5846] bridge_slave_0: entered promiscuous mode [ 92.716716][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.724011][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.731329][ T5842] bridge_slave_0: entered allmulticast mode [ 92.739375][ T5842] bridge_slave_0: entered promiscuous mode [ 92.784577][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.792165][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.799512][ T5846] bridge_slave_1: entered allmulticast mode [ 92.807380][ T5846] bridge_slave_1: entered promiscuous mode [ 92.814340][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.822399][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.830339][ T5842] bridge_slave_1: entered allmulticast mode [ 92.837930][ T5842] bridge_slave_1: entered promiscuous mode [ 92.951705][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.968207][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.975755][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.984125][ T5845] bridge_slave_0: entered allmulticast mode [ 92.992513][ T5845] bridge_slave_0: entered promiscuous mode [ 93.003366][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.015036][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.045564][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.057097][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.064656][ T5845] bridge_slave_1: entered allmulticast mode [ 93.066089][ T55] Bluetooth: hci0: command tx timeout [ 93.073097][ T5845] bridge_slave_1: entered promiscuous mode [ 93.086558][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.114128][ T5842] team0: Port device team_slave_0 added [ 93.169182][ T5846] team0: Port device team_slave_0 added [ 93.179247][ T5842] team0: Port device team_slave_1 added [ 93.187818][ T5846] team0: Port device team_slave_1 added [ 93.250171][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.263577][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.296041][ T55] Bluetooth: hci2: command tx timeout [ 93.296113][ T5848] Bluetooth: hci1: command tx timeout [ 93.348635][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.355630][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.382125][ T5848] Bluetooth: hci3: command tx timeout [ 93.388473][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.401489][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.409165][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.435625][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.448933][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.456763][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.482908][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.511150][ T5845] team0: Port device team_slave_0 added [ 93.521057][ T5845] team0: Port device team_slave_1 added [ 93.527850][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.534840][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.561979][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.624114][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.631306][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.657641][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.670560][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.677592][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.704047][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.766082][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.813860][ T5846] hsr_slave_0: entered promiscuous mode [ 93.820583][ T5846] hsr_slave_1: entered promiscuous mode [ 93.827556][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.835324][ T5846] Cannot create hsr debugfs directory [ 93.843942][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.858037][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.874489][ T5842] hsr_slave_0: entered promiscuous mode [ 93.881041][ T5842] hsr_slave_1: entered promiscuous mode [ 93.887607][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.895210][ T5842] Cannot create hsr debugfs directory [ 93.945292][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.993429][ T5845] hsr_slave_0: entered promiscuous mode [ 94.000122][ T5845] hsr_slave_1: entered promiscuous mode [ 94.008983][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.016761][ T5845] Cannot create hsr debugfs directory [ 94.424800][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.444897][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.459644][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.478816][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.590595][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.610190][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.621570][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.635173][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.652800][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.744222][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.761363][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.785049][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.815875][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.829255][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.836606][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.853180][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.866701][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.873867][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.950631][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.021931][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.057677][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.064879][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.094458][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.101661][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.139891][ T5848] Bluetooth: hci0: command tx timeout [ 95.185782][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.274308][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.302675][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.309874][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.345299][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.352494][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.369986][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.376997][ T5848] Bluetooth: hci2: command tx timeout [ 95.377077][ T5848] Bluetooth: hci1: command tx timeout [ 95.457376][ T55] Bluetooth: hci3: command tx timeout [ 95.485492][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.524765][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.554969][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.562190][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.610812][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.618063][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.772272][ T5837] veth0_vlan: entered promiscuous mode [ 95.803475][ T5837] veth1_vlan: entered promiscuous mode [ 95.910175][ T5837] veth0_macvtap: entered promiscuous mode [ 95.942084][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.958297][ T5837] veth1_macvtap: entered promiscuous mode [ 96.005675][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.042847][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.054539][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.078608][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.091975][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.102573][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.114946][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.174450][ T5846] veth0_vlan: entered promiscuous mode [ 96.235657][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.244025][ T5846] veth1_vlan: entered promiscuous mode [ 96.322522][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.343687][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.415116][ T5842] veth0_vlan: entered promiscuous mode [ 96.432933][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.436227][ T5845] veth0_vlan: entered promiscuous mode [ 96.448888][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.469695][ T5846] veth0_macvtap: entered promiscuous mode [ 96.482365][ T5842] veth1_vlan: entered promiscuous mode [ 96.495733][ T5846] veth1_macvtap: entered promiscuous mode [ 96.517587][ T5845] veth1_vlan: entered promiscuous mode [ 96.591358][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.607012][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.620262][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.634827][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.651233][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.651724][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.681049][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.713407][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.725020][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.734524][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.744362][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.764709][ T5842] veth0_macvtap: entered promiscuous mode [ 96.822722][ T5845] veth0_macvtap: entered promiscuous mode [ 96.833369][ T5842] veth1_macvtap: entered promiscuous mode [ 96.854584][ T5845] veth1_macvtap: entered promiscuous mode [ 96.931032][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.944902][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.958568][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.969762][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.983385][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.997387][ T47] cfg80211: failed to load regulatory.db [ 97.015265][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.032606][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.043983][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.054759][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.066011][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.077116][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.089007][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.108563][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.119319][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.129510][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.140803][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.152138][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.200139][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.200573][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.219799][ T55] Bluetooth: hci0: command tx timeout [ 97.226377][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.235129][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.245862][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.274786][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.302435][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.324250][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.342045][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.353178][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.384732][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.400227][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.412568][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.456955][ T55] Bluetooth: hci1: command tx timeout [ 97.458117][ T5848] Bluetooth: hci2: command tx timeout [ 97.514052][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.523932][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.536780][ T5848] Bluetooth: hci3: command tx timeout [ 97.545461][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.557538][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.584487][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.594207][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.649295][ T5912] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.833632][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.871736][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.947977][ T5917] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.985076][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.003191][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.186766][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.194750][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.211115][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.234958][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.808715][ T5935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14'. [ 98.861393][ T5935] caif0: entered promiscuous mode [ 98.888532][ T5935] Zero length message leads to an empty skb [ 99.306480][ T5848] Bluetooth: hci0: command tx timeout [ 99.536974][ T5848] Bluetooth: hci1: command tx timeout [ 99.537794][ T55] Bluetooth: hci2: command tx timeout [ 99.616537][ T55] Bluetooth: hci3: command tx timeout [ 100.433607][ T5974] program syz.3.27 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.967622][ T6014] sock: sock_timestamping_bind_phc: sock not bind to device [ 103.206406][ T6050] netlink: 346 bytes leftover after parsing attributes in process `syz.2.48'. [ 103.251599][ T55] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 104.328373][ T6078] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.882165][ T6207] netlink: 346 bytes leftover after parsing attributes in process `syz.0.107'. [ 110.926711][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 110.974206][ T6208] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 110.983973][ T6208] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 111.021258][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 111.721062][ T6214] netlink: 'syz.0.113': attribute type 9 has an invalid length. [ 111.875989][ T6214] netlink: 330 bytes leftover after parsing attributes in process `syz.0.113'. [ 113.086378][ T6246] Device name cannot be null; rc = [-22] [ 114.688722][ T6276] batman_adv: Routing algorithm '60000' is not supported [ 115.345065][ T6297] program syz.0.148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.577171][ T6302] netlink: 186 bytes leftover after parsing attributes in process `syz.2.151'. [ 120.211099][ T55] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 120.211142][ T55] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 120.229258][ T55] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 120.229325][ T55] Bluetooth: hci0: adv larger than maximum supported [ 120.236647][ T55] Bluetooth: hci0: Malformed LE Event: 0x0d [ 121.315535][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.452857][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.607832][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.733859][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.176300][ T68] bridge_slave_1: left allmulticast mode [ 122.196117][ T68] bridge_slave_1: left promiscuous mode [ 122.214913][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.272199][ T68] bridge_slave_0: left allmulticast mode [ 122.289349][ T68] bridge_slave_0: left promiscuous mode [ 122.295183][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.361555][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 122.377091][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 122.385002][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 122.396075][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.408760][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.412095][ T6449] CIFS: VFS: Unsupported security flags: 0x200 [ 123.307653][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.329986][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.353927][ T68] bond0 (unregistering): Released all slaves [ 123.844859][ T6482] netlink: 'syz.2.219': attribute type 3 has an invalid length. [ 124.374295][ T68] hsr_slave_0: left promiscuous mode [ 124.414667][ T68] hsr_slave_1: left promiscuous mode [ 124.443841][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.503644][ T55] Bluetooth: hci2: command tx timeout [ 124.510433][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.578729][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.608988][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.672901][ T68] veth1_macvtap: left promiscuous mode [ 124.713682][ T68] veth0_macvtap: left promiscuous mode [ 124.734935][ T68] veth1_vlan: left promiscuous mode [ 124.747363][ T68] veth0_vlan: left promiscuous mode [ 124.790837][ T6506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.224'. [ 125.665043][ T68] team0 (unregistering): Port device team_slave_1 removed [ 125.728879][ T68] team0 (unregistering): Port device team_slave_0 removed [ 126.494396][ T6517] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 126.576427][ T55] Bluetooth: hci2: command tx timeout [ 126.665506][ T6444] chnl_net:caif_netlink_parms(): no params data found [ 126.876337][ T6522] syz.0.230 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 127.234409][ T6444] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.256576][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.276447][ T6444] bridge_slave_0: entered allmulticast mode [ 127.310749][ T6444] bridge_slave_0: entered promiscuous mode [ 127.356404][ T6444] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.366067][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.373305][ T6444] bridge_slave_1: entered allmulticast mode [ 127.407809][ T6444] bridge_slave_1: entered promiscuous mode [ 127.559659][ T6444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.607461][ T6444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.851263][ T6444] team0: Port device team_slave_0 added [ 127.891044][ T6444] team0: Port device team_slave_1 added [ 128.081887][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.096088][ T6560] netlink: 350 bytes leftover after parsing attributes in process `syz.0.238'. [ 128.118552][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.162744][ T6444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.201123][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.213679][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.242531][ T6444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.363542][ T6444] hsr_slave_0: entered promiscuous mode [ 128.370943][ T6444] hsr_slave_1: entered promiscuous mode [ 128.386757][ T6444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.394363][ T6444] Cannot create hsr debugfs directory [ 128.662587][ T55] Bluetooth: hci2: command tx timeout [ 129.279206][ T6444] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 129.314440][ T6444] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 129.325091][ T55] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 129.325133][ T55] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 129.340467][ T55] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 129.340517][ T55] Bluetooth: hci3: adv larger than maximum supported [ 129.347875][ T55] Bluetooth: hci3: Malformed LE Event: 0x0d [ 129.370176][ T6444] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 129.405292][ T6444] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 129.886758][ T6611] process 'syz.0.248' launched './file0' with NULL argv: empty string added [ 129.964338][ T6444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.041908][ T6444] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.070286][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.077605][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.154714][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.161960][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.736212][ T55] Bluetooth: hci2: command tx timeout [ 130.910872][ T6444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.155771][ T6653] delete_channel: no stack [ 131.617018][ T6444] veth0_vlan: entered promiscuous mode [ 131.645027][ T6444] veth1_vlan: entered promiscuous mode [ 131.721843][ T6444] veth0_macvtap: entered promiscuous mode [ 131.745908][ T6444] veth1_macvtap: entered promiscuous mode [ 131.806687][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.832328][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.845009][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.880115][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.897790][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.946099][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.967798][ T6444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.023554][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.073534][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.091949][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.112856][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.135909][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.170133][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.227565][ T6444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.270263][ T6444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.304465][ T6444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.336670][ T6444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.371149][ T6444] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.657118][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.680794][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.730301][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.760904][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.039058][ T6737] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.066241][ T6737] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 134.104624][ T6737] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 134.142109][ T6737] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.186334][ T6737] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 134.278727][ T6737] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 134.321438][ T6737] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.377523][ T6737] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 134.490362][ T6737] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 134.534342][ T6737] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.565816][ T6737] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 134.608853][ T6737] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 136.097713][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.176131][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.343364][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.585951][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.614071][ T6829] Invalid ELF header magic: != ELF [ 137.843868][ T6839] mmap: syz.1.307 (6839) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.955304][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.961934][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.047756][ T6848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.311'. [ 138.077717][ T6848] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 138.176396][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.257952][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.416051][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.656075][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.368513][ T6882] netlink: 'syz.2.322': attribute type 9 has an invalid length. [ 139.471276][ T6876] Invalid ELF header magic: != ELF [ 139.587365][ T6887] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 139.616989][ T6887] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 139.659926][ T6887] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.709757][ T6887] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.616366][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.696120][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.702221][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.786908][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.323565][ T7003] capability: warning: `syz.2.374' uses 32-bit capabilities (legacy support in use) [ 144.266189][ T7029] netlink: 342 bytes leftover after parsing attributes in process `syz.1.384'. [ 148.607909][ T7161] nbd: socks must be embedded in a SOCK_ITEM attr [ 148.627325][ T7161] block nbd0: shutting down sockets [ 149.980821][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.450'. [ 150.006253][ T7220] ipvlan0: entered allmulticast mode [ 150.011618][ T7220] veth0_vlan: entered allmulticast mode [ 150.382211][ T7227] lo: entered promiscuous mode [ 150.393936][ T7225] lo: left promiscuous mode [ 150.450406][ T7232] bond0: Unable to set up delay as MII monitoring is disabled [ 151.483430][ T7265] lo: entered allmulticast mode [ 151.507592][ T7264] lo: left allmulticast mode [ 151.743607][ T7273] PM: Enabling pm_trace changes system date and time during resume. [ 151.743607][ T7273] PM: Correct system time has to be restored manually after resume. [ 151.884007][ T55] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 151.884055][ T55] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 151.900014][ T55] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 151.900063][ T55] Bluetooth: hci1: Unknown advertising packet type: 0x74 [ 151.909393][ T55] Bluetooth: hci1: adv larger than maximum supported [ 151.917380][ T55] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 151.924114][ T55] Bluetooth: hci1: adv larger than maximum supported [ 151.931655][ T55] Bluetooth: hci1: adv larger than maximum supported [ 151.944892][ T55] Bluetooth: hci1: Malformed LE Event: 0x0d [ 153.303468][ T7315] sock: sock_set_timeout: `syz.2.475' (pid 7315) tries to set negative timeout [ 155.172475][ T7370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.493'. [ 155.301203][ T7370] team0: Port device team_slave_0 removed [ 155.918445][ T7389] sctp: [Deprecated]: syz.4.497 (pid 7389) Use of int in max_burst socket option deprecated. [ 155.918445][ T7389] Use struct sctp_assoc_value instead [ 156.213076][ T7400] ptrace attach of "./syz-executor exec"[6444] was attempted by ""[7400] [ 156.678207][ T7411] netlink: 206 bytes leftover after parsing attributes in process `syz.0.503'. [ 158.968428][ T55] Bluetooth: hci3: unexpected event 0x06 length: 11 > 3 [ 161.335821][ T7528] sctp: [Deprecated]: syz.0.542 (pid 7528) Use of int in max_burst socket option deprecated. [ 161.335821][ T7528] Use struct sctp_assoc_value instead [ 167.456482][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.457382][ T7615] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 168.222053][ T7615] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.257170][ T7615] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 168.270967][ T7615] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 168.706194][ T7660] netlink: 342 bytes leftover after parsing attributes in process `syz.0.593'. [ 169.229047][ T7675] snd_aloop snd_aloop.0: Parsing timer source 'efs' failed with -22 [ 169.487748][ T7678] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 169.546633][ T7678] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 169.616009][ T5152] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.750321][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.605'. [ 170.059284][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.609'. [ 170.336077][ T5152] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.336083][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 172.023815][ T7733] netlink: 342 bytes leftover after parsing attributes in process `syz.1.623'. [ 175.319434][ T7795] program syz.1.649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.634304][ T7894] Invalid ELF header magic: != ELF [ 180.182667][ T7906] ======================================================= [ 180.182667][ T7906] WARNING: The mand mount option has been deprecated and [ 180.182667][ T7906] and is ignored by this kernel. Remove the mand [ 180.182667][ T7906] option from the mount to silence this warning. [ 180.182667][ T7906] ======================================================= [ 180.992913][ T7929] netlink: 338 bytes leftover after parsing attributes in process `syz.4.704'. [ 184.055076][ T8030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.746'. [ 185.115736][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.763'. [ 185.125198][ T8067] team_slave_0: entered allmulticast mode [ 185.142700][ T8068] Device name cannot be null; rc = [-22] [ 188.482789][ T8135] Invalid ELF header magic: != ELF [ 189.155445][ T8163] qrtr: Invalid version 0 [ 189.365081][ T8169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.806'. [ 189.386748][ T8169] vxcan1: entered promiscuous mode [ 189.454363][ T8171] netlink: 'syz.2.805': attribute type 1 has an invalid length. [ 190.131318][ T8193] netlink: 40 bytes leftover after parsing attributes in process `syz.4.816'. [ 192.166705][ T8263] nbd2: detected capacity change from 0 to 68719476736 [ 192.180599][ T5856] block nbd2: Send control failed (result -22) [ 192.228366][ T5856] block nbd2: Request send failed, requeueing [ 192.255157][ T5152] block nbd2: Receive control failed (result -32) [ 192.272011][ T59] block nbd2: Dead connection, failed to find a fallback [ 192.279487][ T59] block nbd2: shutting down sockets [ 192.285082][ T59] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.294744][ T59] Buffer I/O error on dev nbd2, logical block 0, async page read [ 192.305531][ T5856] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.322191][ T5856] Buffer I/O error on dev nbd2, logical block 0, async page read [ 192.332027][ T5856] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.343479][ T5856] Buffer I/O error on dev nbd2, logical block 0, async page read [ 192.351964][ T5856] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.362947][ T5856] Buffer I/O error on dev nbd2, logical block 0, async page read [ 192.371228][ T5856] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.386322][ T5856] Buffer I/O error on dev nbd2, logical block 0, async page read [ 192.397397][ T5856] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.406664][ T5856] Buffer I/O error on dev nbd2, logical block 0, async page read [ 192.414639][ T5856] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.424675][ T5856] Buffer I/O error on dev nbd2, logical block 0, async page read [ 192.433163][ T5856] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.443117][ T5856] Buffer I/O error on dev nbd2, logical block 0, async page read [ 192.452216][ T5856] ldm_validate_partition_table(): Disk read failed. [ 192.460989][ T5856] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.481268][ T5856] Buffer I/O error on dev nbd2, logical block 0, async page read [ 192.495058][ T5856] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.525929][ T5856] Buffer I/O error on dev nbd2, logical block 0, async page read [ 192.546599][ T5856] Dev nbd2: unable to read RDB block 0 [ 192.553018][ T5856] nbd2: unable to read partition table [ 192.593958][ T5856] ldm_validate_partition_table(): Disk read failed. [ 192.610154][ T5856] Dev nbd2: unable to read RDB block 0 [ 192.630933][ T5856] nbd2: unable to read partition table [ 192.836270][ T8285] qrtr: Invalid version 0 [ 193.797621][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 195.626150][ T8365] GUP no longer grows the stack in syz.4.887 (8365): 14000-401000 (4000) [ 195.636592][ T8365] CPU: 0 UID: 0 PID: 8365 Comm: syz.4.887 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 195.636635][ T8365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.636653][ T8365] Call Trace: [ 195.636664][ T8365] [ 195.636680][ T8365] dump_stack_lvl+0x16c/0x1f0 [ 195.636747][ T8365] gup_vma_lookup+0x1d2/0x220 [ 195.636787][ T8365] __get_user_pages+0x234/0x36f0 [ 195.636841][ T8365] ? process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 195.636872][ T8365] ? look_up_lock_class+0x59/0x150 [ 195.636918][ T8365] ? __pfx___get_user_pages+0x10/0x10 [ 195.636959][ T8365] ? process_vm_rw+0x2ff/0x360 [ 195.636985][ T8365] ? __x64_sys_process_vm_readv+0xe2/0x1c0 [ 195.637014][ T8365] ? do_syscall_64+0xcd/0x260 [ 195.637080][ T8365] __gup_longterm_locked+0x20d/0x1850 [ 195.637136][ T8365] ? __pfx___gup_longterm_locked+0x10/0x10 [ 195.637199][ T8365] pin_user_pages_remote+0xed/0x140 [ 195.637244][ T8365] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 195.637285][ T8365] ? mm_access+0x22d/0x2e0 [ 195.637345][ T8365] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 195.637385][ T8365] ? futex_wait_queue+0x14c/0x220 [ 195.637414][ T8365] ? futex_unqueue+0xba/0x140 [ 195.637466][ T8365] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 195.637503][ T8365] ? iovec_from_user+0xbb/0x140 [ 195.637565][ T8365] ? iovec_from_user+0xbb/0x140 [ 195.637610][ T8365] process_vm_rw+0x2ff/0x360 [ 195.637644][ T8365] ? __pfx_process_vm_rw+0x10/0x10 [ 195.637685][ T8365] ? task_mm_cid_work+0x37b/0x910 [ 195.637764][ T8365] ? xfd_validate_state+0x5d/0x180 [ 195.637809][ T8365] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 195.637842][ T8365] ? do_syscall_64+0x91/0x260 [ 195.637888][ T8365] ? lockdep_hardirqs_on+0x7c/0x110 [ 195.637933][ T8365] do_syscall_64+0xcd/0x260 [ 195.637982][ T8365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.638015][ T8365] RIP: 0033:0x7f7c1b78d169 [ 195.638053][ T8365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.638084][ T8365] RSP: 002b:00007f7c1c6c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 195.638114][ T8365] RAX: ffffffffffffffda RBX: 00007f7c1b9a5fa0 RCX: 00007f7c1b78d169 [ 195.638135][ T8365] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 000000000000017d [ 195.638154][ T8365] RBP: 00007f7c1b80e990 R08: 0000000000000003 R09: 0000000000000000 [ 195.638173][ T8365] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 195.638191][ T8365] R13: 0000000000000000 R14: 00007f7c1b9a5fa0 R15: 00007ffd7210a638 [ 195.638231][ T8365] [ 196.216598][ T8380] netlink: 194 bytes leftover after parsing attributes in process `syz.4.893'. [ 199.381946][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.388425][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.703125][ T8436] kexec: Could not allocate control_code_buffer [ 199.797321][ T8471] openvswitch: netlink: IP tunnel TTL not specified. [ 203.088951][ T8587] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to 0. Contact your vendor for updates. [ 203.638487][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 204.314555][ T5152] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 204.314600][ T5152] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 204.332338][ T5152] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 204.332397][ T5152] Bluetooth: hci2: adv larger than maximum supported [ 204.341389][ T5152] Bluetooth: hci2: Malformed LE Event: 0x0d [ 206.269731][ T8693] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1013'. [ 207.015819][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1023'. [ 207.604615][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'. [ 207.840836][ T8740] [ 207.843236][ T8740] ====================================================== [ 207.850280][ T8740] WARNING: possible circular locking dependency detected [ 207.857324][ T8740] 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 Tainted: G I [ 207.866014][ T8740] ------------------------------------------------------ [ 207.873058][ T8740] syz.2.1033/8740 is trying to acquire lock: [ 207.879058][ T8740] ffff888022eeb858 (sk_lock-AF_INET){+.+.}-{0:0}, at: sockopt_lock_sock+0x54/0x70 [ 207.888336][ T8740] [ 207.888336][ T8740] but task is already holding lock: [ 207.895709][ T8740] ffffffff9012daa8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x1843/0x2220 [ 207.904800][ T8740] [ 207.904800][ T8740] which lock already depends on the new lock. [ 207.904800][ T8740] [ 207.915213][ T8740] [ 207.915213][ T8740] the existing dependency chain (in reverse order) is: [ 207.924238][ T8740] [ 207.924238][ T8740] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 207.931484][ T8740] __mutex_lock+0x199/0xb90 [ 207.936545][ T8740] smc_vlan_by_tcpsk+0x251/0x620 [ 207.942035][ T8740] __smc_connect+0x44b/0x4880 [ 207.947258][ T8740] smc_connect_work+0x54c/0xae0 [ 207.952650][ T8740] process_one_work+0x9cc/0x1b70 [ 207.958130][ T8740] worker_thread+0x6c8/0xf10 [ 207.963260][ T8740] kthread+0x3c2/0x780 [ 207.967891][ T8740] ret_from_fork+0x45/0x80 [ 207.972848][ T8740] ret_from_fork_asm+0x1a/0x30 [ 207.978165][ T8740] [ 207.978165][ T8740] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 207.985840][ T8740] __lock_acquire+0x1173/0x1ba0 [ 207.991253][ T8740] lock_acquire+0x179/0x350 [ 207.996292][ T8740] lock_sock_nested+0x41/0xf0 [ 208.001539][ T8740] sockopt_lock_sock+0x54/0x70 [ 208.006848][ T8740] do_ip_getsockopt+0x13e4/0x2220 [ 208.012410][ T8740] ip_getsockopt+0x9b/0x1e0 [ 208.017447][ T8740] raw_getsockopt+0x4d/0x1f0 [ 208.022595][ T8740] do_sock_getsockopt+0x3fc/0x800 [ 208.028178][ T8740] __sys_getsockopt+0x12f/0x260 [ 208.033596][ T8740] __x64_sys_getsockopt+0xbd/0x160 [ 208.039253][ T8740] do_syscall_64+0xcd/0x260 [ 208.044306][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.050763][ T8740] [ 208.050763][ T8740] other info that might help us debug this: [ 208.050763][ T8740] [ 208.060998][ T8740] Possible unsafe locking scenario: [ 208.060998][ T8740] [ 208.068458][ T8740] CPU0 CPU1 [ 208.073848][ T8740] ---- ---- [ 208.079217][ T8740] lock(rtnl_mutex); [ 208.083220][ T8740] lock(sk_lock-AF_INET); [ 208.090174][ T8740] lock(rtnl_mutex); [ 208.096694][ T8740] lock(sk_lock-AF_INET); [ 208.101127][ T8740] [ 208.101127][ T8740] *** DEADLOCK *** [ 208.101127][ T8740] [ 208.109277][ T8740] 1 lock held by syz.2.1033/8740: [ 208.114308][ T8740] #0: ffffffff9012daa8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x1843/0x2220 [ 208.123871][ T8740] [ 208.123871][ T8740] stack backtrace: [ 208.129795][ T8740] CPU: 1 UID: 0 PID: 8740 Comm: syz.2.1033 Tainted: G I 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 208.129836][ T8740] Tainted: [I]=FIRMWARE_WORKAROUND [ 208.129846][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.129861][ T8740] Call Trace: [ 208.129869][ T8740] [ 208.129878][ T8740] dump_stack_lvl+0x116/0x1f0 [ 208.129921][ T8740] print_circular_bug+0x275/0x350 [ 208.129963][ T8740] check_noncircular+0x14c/0x170 [ 208.130008][ T8740] __lock_acquire+0x1173/0x1ba0 [ 208.130057][ T8740] ? do_ip_getsockopt+0x1843/0x2220 [ 208.130086][ T8740] lock_acquire+0x179/0x350 [ 208.130107][ T8740] ? sockopt_lock_sock+0x54/0x70 [ 208.130146][ T8740] lock_sock_nested+0x41/0xf0 [ 208.130178][ T8740] ? sockopt_lock_sock+0x54/0x70 [ 208.130211][ T8740] sockopt_lock_sock+0x54/0x70 [ 208.130244][ T8740] do_ip_getsockopt+0x13e4/0x2220 [ 208.130272][ T8740] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 208.130297][ T8740] ? schedule+0x2d7/0x3a0 [ 208.130332][ T8740] ? schedule+0xf1/0x3a0 [ 208.130364][ T8740] ? futex_wait_queue+0x14c/0x220 [ 208.130387][ T8740] ? futex_unqueue+0xba/0x140 [ 208.130422][ T8740] ? __futex_wait+0x323/0x3c0 [ 208.130447][ T8740] ? __pfx___futex_wait+0x10/0x10 [ 208.130475][ T8740] ? __lock_acquire+0xaa4/0x1ba0 [ 208.130518][ T8740] ? __pfx___might_resched+0x10/0x10 [ 208.130570][ T8740] ip_getsockopt+0x9b/0x1e0 [ 208.130595][ T8740] ? __pfx_ip_getsockopt+0x10/0x10 [ 208.130620][ T8740] ? __might_fault+0xe3/0x190 [ 208.130659][ T8740] ? __might_fault+0x13b/0x190 [ 208.130701][ T8740] raw_getsockopt+0x4d/0x1f0 [ 208.130725][ T8740] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 208.130768][ T8740] do_sock_getsockopt+0x3fc/0x800 [ 208.130811][ T8740] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 208.130851][ T8740] ? __fget_files+0x204/0x3c0 [ 208.130895][ T8740] __sys_getsockopt+0x12f/0x260 [ 208.130930][ T8740] __x64_sys_getsockopt+0xbd/0x160 [ 208.130961][ T8740] ? do_syscall_64+0x91/0x260 [ 208.130999][ T8740] ? lockdep_hardirqs_on+0x7c/0x110 [ 208.131040][ T8740] do_syscall_64+0xcd/0x260 [ 208.131078][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.131105][ T8740] RIP: 0033:0x7f93acb8d169 [ 208.131126][ T8740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.131151][ T8740] RSP: 002b:00007f93ada0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 208.131174][ T8740] RAX: ffffffffffffffda RBX: 00007f93acda5fa0 RCX: 00007f93acb8d169 [ 208.131191][ T8740] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 208.131206][ T8740] RBP: 00007f93acc0e990 R08: 0000000000000000 R09: 0000000000000000 [ 208.131221][ T8740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.131236][ T8740] R13: 0000000000000000 R14: 00007f93acda5fa0 R15: 00007ffdd8514158 [ 208.131260][ T8740] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)