last executing test programs: 6m57.501296809s ago: executing program 2 (id=1063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002c80), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002cc0)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4812) 6m57.256417123s ago: executing program 2 (id=1065): write$auto(0x3, 0x0, 0xffd8) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/query\x00', 0x20840, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) acct$auto(&(0x7f0000000040)='\x00') 6m57.011657747s ago: executing program 2 (id=1067): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0x80c3) 6m56.860109552s ago: executing program 2 (id=1069): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_memory\x00', 0xf22437c730143eb6, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/wg0/drop_gratuitous_arp\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) 6m56.698425891s ago: executing program 2 (id=1072): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) tkill$auto(0x80000000000001, 0x7) 6m56.015480215s ago: executing program 2 (id=1078): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x0, 0x0) r0 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r0, 0x65, 0x7, 0x0, 0x0) 6m55.656361425s ago: executing program 32 (id=1078): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x0, 0x0) r0 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r0, 0x65, 0x7, 0x0, 0x0) 2m43.110705495s ago: executing program 4 (id=3954): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x20000000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) 2m41.901708291s ago: executing program 4 (id=3968): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x8000, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2, 0x1, &(0x7f0000002100)=0x4, 0x5, 0x0) madvise$auto(0xa, 0x8ce, 0x19) 2m41.220452254s ago: executing program 4 (id=3976): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x149082, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000280)=""/65, 0x41) io_uring_setup$auto(0x6, &(0x7f0000000100)={0x7, 0x3, 0x5, 0x5, 0x4, 0x4, 0xffffffffffffffff, [0x9, 0x2, 0xd6], {0xa, 0x4, 0x3, 0x2, 0x7, 0x2, 0xe, 0x9, 0xffffffff00000000}, {0x8, 0x9, 0x5f3, 0x7, 0x5, 0x1, 0x9, 0x6, 0x9}}) 2m40.992094556s ago: executing program 4 (id=3979): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) pipe2$auto(0x0, 0x80) ioctl$auto(0x1, 0x5761, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 2m40.764134556s ago: executing program 4 (id=3983): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) tkill$auto(0x1, 0x7) 2m40.284855197s ago: executing program 4 (id=3989): mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) syslog$auto(0x4, &(0x7f0000000040)='..\x00', 0x7) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) 2m39.973492204s ago: executing program 33 (id=3989): mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) syslog$auto(0x4, &(0x7f0000000040)='..\x00', 0x7) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) 3.331203209s ago: executing program 0 (id=6162): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x2a, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0x1}, 0x6b) 3.038546714s ago: executing program 0 (id=6166): close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x0) syz_clone(0x98280000, 0x0, 0x0, 0x0, 0x0, 0x0) kill$auto(0x0, 0x11) 2.698533199s ago: executing program 0 (id=6172): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) getrandom$auto(0x0, 0x6000000, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) get_mempolicy$auto(&(0x7f0000000000)=0x200, 0x0, 0x4c, 0x360, 0x4) 2.266089728s ago: executing program 5 (id=6177): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) 2.068061864s ago: executing program 3 (id=6179): socket(0xa, 0x1, 0x84) listen$auto(0x3, 0x83) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) accept$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.838647427s ago: executing program 5 (id=6181): close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x0) syz_clone(0x98280000, 0x0, 0x0, 0x0, 0x0, 0x0) kill$auto(0x0, 0x11) 1.838053938s ago: executing program 0 (id=6189): bind$auto(0x2, 0x0, 0x5) getpeername$auto(0x3, 0x0, 0x0) setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff}) unshare$auto(0x20000080) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) unshare$auto(0x40000080) 1.77274789s ago: executing program 1 (id=6182): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) keyctl$auto(0x4, 0xfffffffe, 0x6, 0xffffffffffffffff, 0xe) 1.739764106s ago: executing program 3 (id=6183): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) mprotect$auto(0x1ffff000, 0x8000000000002001, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_7={@btf_id=0xe9f, 0x4, 0x1c}, 0xa3) writev$auto(0x0, &(0x7f0000000000)={0x0, 0x202}, 0x9) 1.540889375s ago: executing program 3 (id=6184): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd693840f03c423aa0000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x404c050}, 0x80) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.368616397s ago: executing program 5 (id=6185): r0 = socket(0x2, 0x801, 0x106) bind$auto(0x3, &(0x7f0000000000), 0x68) connect$auto(0x3, &(0x7f0000000000), 0x55) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) 1.125204761s ago: executing program 0 (id=6186): mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0) socket(0x2, 0x2, 0x0) r0 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto_zero_fops_mem(r0, 0x0, 0x0) readv$auto(0x5, &(0x7f0000001b40)={0x0, 0x1}, 0xb2) 1.107321328s ago: executing program 5 (id=6187): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)={0x1c, r2, 0x13ebbac2338983f3, 0x70b927, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x4008000) 1.09410352s ago: executing program 3 (id=6188): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0x2, 0x2, 0x1) socket(0x25, 0x1, 0x3) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 1.078327856s ago: executing program 1 (id=6190): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) userfaultfd$auto(0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 752.039114ms ago: executing program 3 (id=6191): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 572.763493ms ago: executing program 0 (id=6192): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x6, 0x29, 0x7, 0xfffffffffffffffe, 0x0) 502.295993ms ago: executing program 1 (id=6193): mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010026bd703900dbdf25598c000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40010) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) 473.291335ms ago: executing program 5 (id=6194): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 310.401933ms ago: executing program 1 (id=6195): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x100000006, 0x1, 0x12, 0xfffffffffffffffe, 0x0) 167.095124ms ago: executing program 1 (id=6196): mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) timer_create$auto(0xfffffffa, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 124.50933ms ago: executing program 5 (id=6197): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x80}, @NETDEV_A_QUEUE_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x9e) 18.283909ms ago: executing program 3 (id=6198): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) setrlimit$auto(0xb, 0x0) r0 = getpid() mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x21, 0x0) 0s ago: executing program 1 (id=6199): close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0xc4}, 0x6, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) kernel console output (not intermixed with test programs): ers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 96.277732][ T6604] CIFS mount error: No usable UNC path provided in device string! [ 96.277732][ T6604] [ 96.289082][ T6604] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 98.604577][ T6688] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.591764][ T6717] batman_adv: Routing algorithm '' is not supported [ 102.387038][ T6817] netlink: zone id is out of range [ 102.397239][ T6817] netlink: set zone limit has 8 unknown bytes [ 102.554073][ T6824] kAFS: bad VL server IP address [ 103.522746][ T6862] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 103.739737][ T6870] Zero length message leads to an empty skb [ 105.038599][ T6921] netlink: zone id is out of range [ 105.049896][ T6921] netlink: set zone limit has 8 unknown bytes [ 106.564901][ T6982] tipc: Started in network mode [ 106.575439][ T6982] tipc: Node identity ffffffff, cluster identity 4711 [ 106.623447][ T6982] tipc: Node number set to 4294967295 [ 106.794421][ T6981] could not allocate digest TFM handle [ 107.100891][ T6985] could not allocate digest TFM handle syzkaller syzkaller login: [ 108.508152][ T7036] ICMPv6: process `syz.0.510' is using deprecated sysctl (syscall) net.ipv6.neigh.veth1_to_team.base_reachable_time - use net.ipv6.neigh.veth1_to_team.base_reachable_time_ms instead [ 109.346122][ T7077] Process accounting resumed [ 109.675577][ T7085] Process accounting resumed [ 109.908148][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 110.526656][ T7117] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 112.795632][ T7178] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 113.060208][ T7186] netlink: 'syz.2.581': attribute type 1 has an invalid length. [ 116.563927][ T29] audit: type=1800 audit(1734732837.106:2): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.635" name="dbroot" dev="configfs" ino=12753 res=0 errno=0 [ 117.313073][ T29] audit: type=1800 audit(1734732837.856:3): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.647" name="dbroot" dev="configfs" ino=12795 res=0 errno=0 [ 118.120713][ T7352] CIFS: VFS: Invalid SecurityFlags: [ 118.554133][ T7377] usb usb15: usbfs: interface 0 claimed by hub while 'syz.2.669' sets config #0 [ 120.925024][ T7466] Process accounting resumed [ 121.866372][ T7503] Process accounting resumed [ 123.553361][ T7553] hugetlbfs: syz.2.745 (7553): Using mlock ulimits for SHM_HUGETLB is obsolete [ 125.591015][ T7586] bridge0: port 3(bond0) entered blocking state [ 125.620224][ T7586] bridge0: port 3(bond0) entered disabled state [ 125.640917][ T7586] bond0: entered allmulticast mode [ 125.646110][ T7586] bond_slave_0: entered allmulticast mode [ 125.662596][ T7586] bond_slave_1: entered allmulticast mode [ 125.673428][ T7586] bond0: entered promiscuous mode [ 125.681439][ T7586] bond_slave_0: entered promiscuous mode [ 125.711606][ T7586] bond_slave_1: entered promiscuous mode [ 125.727600][ T7586] bridge0: port 3(bond0) entered blocking state [ 125.734303][ T7586] bridge0: port 3(bond0) entered forwarding state [ 127.075043][ T7609] Process accounting resumed [ 128.713961][ T7661] Process accounting resumed [ 128.945443][ T7668] syz.3.791 (7668): /proc/7667/oom_adj is deprecated, please use /proc/7667/oom_score_adj instead. [ 131.839172][ T7747] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.849674][ T7747] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 131.893419][ T7747] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 131.925170][ T7747] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.956833][ T7747] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 132.005152][ T7747] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 132.043804][ T7747] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.052507][ T7747] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.090161][ T7747] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.130781][ T7747] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.151597][ T7747] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.219515][ T7747] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.337401][ T7759] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 133.312501][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.323978][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.823711][ T7803] syz.0.859 (7803) used obsolete PPPIOCDETACH ioctl [ 133.857432][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.938563][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.116259][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.179098][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.936677][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.016701][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.184492][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.256650][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.460217][ T7878] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.027077][ T7904] raw_sendmsg: syz.3.892 forgot to set AF_INET. Fix it! [ 137.152491][ T7906] netlink: 342 bytes leftover after parsing attributes in process `syz.3.893'. [ 137.206643][ T7910] netlink: 342 bytes leftover after parsing attributes in process `syz.3.893'. [ 137.215972][ T7910] netlink: 342 bytes leftover after parsing attributes in process `syz.3.893'. [ 137.353595][ T7918] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.017956][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.100091][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.264929][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.337258][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.566018][ T7966] netlink: 'syz.3.919': attribute type 1 has an invalid length. [ 138.970549][ T29] audit: type=1800 audit(1734732859.516:4): pid=7976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.922" name="features" dev="configfs" ino=14759 res=0 errno=0 [ 139.017614][ T29] audit: type=1800 audit(1734732859.556:5): pid=7976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.922" name="dbroot" dev="configfs" ino=14762 res=0 errno=0 [ 139.478407][ T7993] Process accounting paused [ 139.656862][ T8004] Process accounting resumed [ 140.073117][ T8025] Process accounting resumed [ 140.385663][ T8039] ptp ptp0: only physical clock in use now [ 143.788310][ T29] audit: type=1800 audit(1734732864.326:6): pid=8119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.984" name="features" dev="configfs" ino=14970 res=0 errno=0 [ 143.870059][ T29] audit: type=1800 audit(1734732864.326:7): pid=8119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.984" name="dbroot" dev="configfs" ino=14973 res=0 errno=0 [ 144.046817][ T8125] capability: warning: `syz.3.986' uses 32-bit capabilities (legacy support in use) [ 145.987649][ T8183] program syz.2.1010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.507374][ T8241] Process accounting resumed [ 149.489846][ T8271] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1048'. [ 151.282728][ T8307] [ 151.426437][ T8308] Process accounting resumed [ 151.459938][ T8308] kernel write not supported for file /tomoyo/query (pid: 8308 comm: syz.2.1065) [ 151.609033][ T8313] kernel write not supported for file /tomoyo/query (pid: 8313 comm: syz.2.1067) [ 151.766083][ T8314] kernel write not supported for file /tomoyo/query (pid: 8314 comm: syz.2.1069) [ 151.976409][ T5828] kernel write not supported for file /tomoyo/query (pid: 5828 comm: syz-executor) [ 152.023659][ T8320] kernel write not supported for file /tomoyo/query (pid: 8320 comm: syz.2.1072) [ 152.033494][ T8325] sctp: [Deprecated]: syz.3.1073 (pid 8325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.033494][ T8325] Use struct sctp_sack_info instead [ 152.078830][ T8327] ima: policy update failed [ 152.086673][ T29] audit: type=1802 audit(1734732872.626:8): pid=8327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1074" res=0 errno=0 [ 152.128414][ T8320] kernel write not supported for file /tomoyo/query (pid: 8320 comm: syz.2.1072) [ 152.649020][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.773590][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.999482][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.143715][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.166867][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.168267][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.188479][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.206903][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.217120][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.227262][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.320206][ T8349] Process accounting resumed [ 153.523474][ T35] bridge_slave_1: left allmulticast mode [ 153.540010][ T35] bridge_slave_1: left promiscuous mode [ 153.569610][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.643545][ T35] bridge_slave_0: left allmulticast mode [ 153.654474][ T35] bridge_slave_0: left promiscuous mode [ 153.677904][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.739455][ T8356] sd 0:0:1:0: PR command failed: 1026 [ 153.749512][ T8356] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 153.817089][ T8356] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 154.957426][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.978620][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.996386][ T35] bond0 (unregistering): Released all slaves [ 155.075781][ T35] nl80211: left promiscuous mode [ 155.174145][ T8383] Process accounting resumed [ 155.187414][ T8383] i8042 kbd 00:01: in use; can't configure [ 155.189487][ T35] tipc: Left network mode [ 155.298263][ T5839] Bluetooth: hci3: command tx timeout [ 155.410631][ T8344] chnl_net:caif_netlink_parms(): no params data found [ 155.759190][ T35] hsr_slave_0: left promiscuous mode [ 155.765484][ T35] hsr_slave_1: left promiscuous mode [ 155.775713][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.797337][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.806032][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.814166][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.845908][ T35] veth1_macvtap: left promiscuous mode [ 155.852141][ T35] veth0_macvtap: left promiscuous mode [ 155.858308][ T35] veth1_vlan: left promiscuous mode [ 155.863881][ T35] veth0_vlan: left promiscuous mode [ 156.318429][ T35] team0 (unregistering): Port device team_slave_1 removed [ 156.357360][ T35] team0 (unregistering): Port device team_slave_0 removed [ 156.701382][ T8344] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.708694][ T8344] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.715832][ T8344] bridge_slave_0: entered allmulticast mode [ 156.723369][ T8344] bridge_slave_0: entered promiscuous mode [ 156.732035][ T8344] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.739505][ T8344] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.747040][ T8344] bridge_slave_1: entered allmulticast mode [ 156.754046][ T8344] bridge_slave_1: entered promiscuous mode [ 156.825540][ T8344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.847764][ T8344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.899704][ T8344] team0: Port device team_slave_0 added [ 156.911936][ T8344] team0: Port device team_slave_1 added [ 156.974789][ T8344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.006451][ T8344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.038998][ T8344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.065456][ T8344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.092000][ T8344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.130834][ T8344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.235599][ T8344] hsr_slave_0: entered promiscuous mode [ 157.242707][ T8344] hsr_slave_1: entered promiscuous mode [ 157.249062][ T8344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.257196][ T8344] Cannot create hsr debugfs directory [ 157.377176][ T5839] Bluetooth: hci3: command tx timeout [ 157.527341][ T8344] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 157.550051][ T8344] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 157.571357][ T8344] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 157.595410][ T8344] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 157.623401][ T8344] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.630606][ T8344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.711378][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.746431][ T8344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.769951][ T8344] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.788761][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.795892][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.805417][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.812545][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.051300][ T8344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.313698][ T8344] veth0_vlan: entered promiscuous mode [ 158.325716][ T8344] veth1_vlan: entered promiscuous mode [ 158.361949][ T8344] veth0_macvtap: entered promiscuous mode [ 158.375555][ T8344] veth1_macvtap: entered promiscuous mode [ 158.392768][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.404957][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.414882][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.427731][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.441603][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.453328][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.468930][ T8344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.493037][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.511759][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.524109][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.540533][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.551967][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.566392][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.583973][ T8344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.606104][ T8344] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.615185][ T8344] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.632083][ T8344] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.641174][ T8344] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.756314][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.777091][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.805499][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.814279][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.988837][ T8491] Process accounting resumed [ 159.247278][ T8502] Process accounting resumed [ 159.457187][ T5839] Bluetooth: hci3: command tx timeout [ 160.097644][ T8534] Process accounting resumed [ 161.545288][ T5839] Bluetooth: hci3: command tx timeout [ 161.781014][ T8602] Process accounting resumed [ 161.797794][ T8602] synth uevent: /module/go7007: unknown uevent action string [ 161.949752][ T8588] ptrace attach of "./syz-executor exec"[5825] was attempted by "/\x22#ϖCD*\x0cui)| ڽ#5T>$GYm\x22u[B8}\x0cwﰹ\x0b']׺#ƅOL`ʸ6\x22GqDv]jrh+FQ\x09AHԔ&:\x0c`\x07N};v\x0d1+!Ȃ\x0dKN\x1b3QOҀDN|>\x5c=S9x\x0a[Y?\x09͎\x0a͞nvWXX7:7iAJ5J1`3rE^,@쵱ٯm6LLL7/G{JN/39sC_*4Lץ$v~}e/-JધWLJZ_}f\x07~QVH_H$7ͺQ=|\x09#\x0a=lG8ߡQ'Pujx8E\x5cGp1?6<8Μ;eLP㢢3Ι<\x07&j2^='{s\x5c3MkQ~@_xRXIy_`ÒܗMC{*gd7Cj+lR<CzȧI>:&(C)d$k줸8C\x5c nh߂hч7D`+CE8I%Ԛ<)nшңWG1A֗BN1i9|v*;pWE.aơ/adR\x07%Y=F0-7BWD¯\x1b<4]?q1voP'PQVA,`T#7󽡋q\x5cp}o9Q%6ܔcNI,\x0cp]mZD^ P_ך<5Mx[/~L?F-ѡ;H,\x1b2۴\x1bQOHhz>.$}^+|^,߽qh>)Wnڤ\x07\x0bE:{-܏ضM.zgRL\x07mx^\x1bN1[RD%DGB\x0bbbϐG;=$,'eHk]z#\x0dliHv*rG/˄K/xk\x0cZsh [ 164.033474][ T8675] sctp: [Deprecated]: syz.4.1158 (pid 8675) Use of int in maxseg socket option. [ 164.033474][ T8675] Use struct sctp_assoc_value instead [ 164.996788][ T8708] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 166.845678][ T8776] mmap: syz.4.1202 (8776) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 167.706625][ T8805] Process accounting resumed [ 168.735038][ T8832] ======================================================= [ 168.735038][ T8832] WARNING: The mand mount option has been deprecated and [ 168.735038][ T8832] and is ignored by this kernel. Remove the mand [ 168.735038][ T8832] option from the mount to silence this warning. [ 168.735038][ T8832] ======================================================= [ 172.037793][ T8908] Process accounting resumed [ 172.266806][ T29] audit: type=1326 audit(1734732892.726:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.3.1246" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5350b85d29 code=0x0 [ 177.851543][ T9029] netlink: 'syz.3.1254': attribute type 1 has an invalid length. [ 178.373339][ T9047] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.2097152.1), cmd(6) [ 178.507705][ T9054] Process accounting resumed [ 179.023711][ T9074] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 179.030632][ T9074] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 179.586285][ T9097] syz.3.1285 uses obsolete (PF_INET,SOCK_PACKET) [ 179.950446][ T29] audit: type=1326 audit(1734732900.496:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.4.1291" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc05fd85d29 code=0x0 [ 180.065309][ T9115] Unable to find swap-space signature [ 180.974802][ T9151] Process accounting resumed [ 181.462399][ T9165] Process accounting resumed [ 183.523120][ T9226] program syz.4.1339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.538404][ T9224] Process accounting resumed [ 183.921965][ T9236] Process accounting resumed [ 186.584934][ T9287] synth uevent: /devices/platform/vhci_hcd.11: unknown uevent action string [ 186.595523][ T9287] vhci_hcd vhci_hcd.11: uevent: failed to send synthetic uevent: -22 [ 187.850399][ T9340] bridge0: port 4(syz_tun) entered blocking state [ 187.861023][ T9340] bridge0: port 4(syz_tun) entered disabled state [ 187.869766][ T9340] syz_tun: entered allmulticast mode [ 187.876329][ T9340] syz_tun: entered promiscuous mode [ 187.888416][ T9340] bridge0: port 4(syz_tun) entered blocking state [ 187.894994][ T9340] bridge0: port 4(syz_tun) entered forwarding state [ 194.742742][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.751946][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.369209][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1393'. [ 198.149638][ T9414] Process accounting resumed [ 199.104966][ T9437] netlink: 'syz.1.1425': attribute type 1 has an invalid length. [ 200.248286][ T29] audit: type=1804 audit(1734732920.786:11): pid=9467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1439" name="/newroot/sys/kernel/tracing/error_log" dev="tracefs" ino=85 res=1 errno=0 [ 201.188015][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1452'. [ 201.511075][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1454'. [ 202.587424][ T9518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.564761][ T9544] Process accounting resumed [ 205.069851][ T9582] Process accounting resumed [ 206.430507][ T9606] netlink: 85 bytes leftover after parsing attributes in process `syz.4.1500'. [ 207.988712][ T9647] futex_wake_op: syz.0.1519 tries to shift op by 64; fix this program [ 208.196137][ T9651] Process accounting resumed [ 209.120302][ T9684] Process accounting resumed [ 210.324299][ T9717] netlink: 'syz.1.1548': attribute type 11 has an invalid length. [ 211.923300][ T9765] netlink: 206 bytes leftover after parsing attributes in process `syz.0.1571'. [ 214.708261][ T9841] size and base must be multiples of 4 kiB [ 214.714149][ T9841] CPU: 1 UID: 0 PID: 9841 Comm: syz.4.1604 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 214.724867][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 214.734964][ T9841] Call Trace: [ 214.738275][ T9841] [ 214.741237][ T9841] dump_stack_lvl+0x16c/0x1f0 [ 214.746027][ T9841] mtrr_del+0xd1/0x110 [ 214.750149][ T9841] mtrr_ioctl+0x900/0xcd0 [ 214.754529][ T9841] ? __pfx_mtrr_ioctl+0x10/0x10 [ 214.759441][ T9841] ? __pfx_lock_release+0x10/0x10 [ 214.764517][ T9841] ? __fget_files+0x206/0x3a0 [ 214.769240][ T9841] ? __pfx_mtrr_ioctl+0x10/0x10 [ 214.774139][ T9841] proc_reg_unlocked_ioctl+0x226/0x320 [ 214.779652][ T9841] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 214.785688][ T9841] __x64_sys_ioctl+0x190/0x200 [ 214.790496][ T9841] do_syscall_64+0xcd/0x250 [ 214.795048][ T9841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.800993][ T9841] RIP: 0033:0x7fc05fd85d29 [ 214.805443][ T9841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.825096][ T9841] RSP: 002b:00007fc060bd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.833553][ T9841] RAX: ffffffffffffffda RBX: 00007fc05ff75fa0 RCX: 00007fc05fd85d29 [ 214.839285][ T9846] netlink: 350 bytes leftover after parsing attributes in process `syz.1.1607'. [ 214.841539][ T9841] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 214.841561][ T9841] RBP: 00007fc05fe01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 214.841580][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.874548][ T9841] R13: 0000000000000000 R14: 00007fc05ff75fa0 R15: 00007ffc72b58f48 [ 214.882584][ T9841] [ 215.109286][ T5826] bridge0: port 4(syz_tun) entered disabled state [ 215.208608][ T5826] syz_tun (unregistering): left allmulticast mode [ 215.215141][ T5826] syz_tun (unregistering): left promiscuous mode [ 215.224010][ T5826] bridge0: port 4(syz_tun) entered disabled state [ 215.278154][ T5826] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 215.621250][ T9861] Process accounting resumed [ 215.626108][ T9861] ACPI: Can not change Invalid GPE/Fixed Event status [ 215.665730][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.889510][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.953635][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.964845][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.973244][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.987591][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.995871][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.003354][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.133707][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.343203][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.844092][ T9871] chnl_net:caif_netlink_parms(): no params data found [ 216.968210][ T9891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1625'. [ 217.115256][ T12] bond0: left allmulticast mode [ 217.120363][ T12] bond_slave_0: left allmulticast mode [ 217.125917][ T12] bond_slave_1: left allmulticast mode [ 217.131601][ T12] bond0: left promiscuous mode [ 217.132439][ T9892] Process accounting resumed [ 217.136374][ T12] bond_slave_0: left promiscuous mode [ 217.147033][ T12] bond_slave_1: left promiscuous mode [ 217.152680][ T12] bridge0: port 3(bond0) entered disabled state [ 217.178067][ T12] bridge_slave_1: left allmulticast mode [ 217.183785][ T12] bridge_slave_1: left promiscuous mode [ 217.189583][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.300055][ T9892] Console: switching to colour VGA+ 80x25 [ 217.348331][ T12] bridge_slave_0: left allmulticast mode [ 217.354070][ T12] bridge_slave_0: left promiscuous mode [ 217.368390][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.096733][ T5834] Bluetooth: hci1: command tx timeout [ 218.483198][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.501759][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.518126][ T12] bond0 (unregistering): Released all slaves [ 218.609446][ T12] .': left promiscuous mode [ 219.054181][ T9871] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.074209][ T9871] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.100061][ T9871] bridge_slave_0: entered allmulticast mode [ 219.130995][ T9871] bridge_slave_0: entered promiscuous mode [ 219.364235][ T9871] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.379647][ T9871] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.434657][ T9871] bridge_slave_1: entered allmulticast mode [ 219.458751][ T9871] bridge_slave_1: entered promiscuous mode [ 219.591594][ T9871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.819455][ T9871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.972884][ T9871] team0: Port device team_slave_0 added [ 219.995258][ T12] hsr_slave_0: left promiscuous mode [ 220.009310][ T12] hsr_slave_1: left promiscuous mode [ 220.028356][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.035825][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.062347][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.078367][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.171403][ T12] veth1_macvtap: left promiscuous mode [ 220.178167][ T5834] Bluetooth: hci1: command tx timeout [ 220.196630][ T12] veth0_macvtap: left promiscuous mode [ 220.202934][ T12] veth1_vlan: left promiscuous mode [ 220.226660][ T12] veth0_vlan: left promiscuous mode [ 221.269368][ T9973] Process accounting resumed [ 221.760768][ T9985] Process accounting resumed [ 221.768671][ T12] team0 (unregistering): Port device team_slave_1 removed [ 221.867701][ T9987] Process accounting resumed [ 221.952065][ T12] team0 (unregistering): Port device team_slave_0 removed [ 222.258930][ T5834] Bluetooth: hci1: command tx timeout [ 222.817024][ T5834] Bluetooth: hci3: ACL packet too small [ 223.786363][ T9871] team0: Port device team_slave_1 added [ 223.838307][T10031] Process accounting resumed [ 223.885467][ T9871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.901076][ T9871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.956392][ T9871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.971302][ T9871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.979084][ T9871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.005227][ T9871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.095123][ T9871] hsr_slave_0: entered promiscuous mode [ 224.109892][ T9871] hsr_slave_1: entered promiscuous mode [ 224.117308][ T9871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.124990][ T9871] Cannot create hsr debugfs directory [ 224.347414][ T5834] Bluetooth: hci1: command tx timeout [ 224.595802][T10029] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 224.602575][T10029] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 224.610268][T10029] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.633509][T10029] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 224.653949][T10029] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 224.666251][T10029] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.686502][T10029] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 224.716013][T10029] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 224.872620][ T9871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 224.939745][ T9871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 225.002836][ T9871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 225.024860][ T9871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 225.167444][ T9871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.216289][ T9871] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.267740][ T9997] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.274935][ T9997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.332437][ T9997] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.339716][ T9997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.784080][ T9871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.959091][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 226.013480][ T9871] veth0_vlan: entered promiscuous mode [ 226.069527][ T9871] veth1_vlan: entered promiscuous mode [ 226.198498][ T9871] veth0_macvtap: entered promiscuous mode [ 226.233062][ T9871] veth1_macvtap: entered promiscuous mode [ 226.283117][ T9871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.294277][ T9871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.304771][ T9871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.315573][ T9871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.325710][ T9871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.336467][ T9871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.347864][ T9871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.403276][ T9871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.415613][ T9871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.425810][ T9871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.436423][ T9871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.446782][ T9871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.457660][ T9871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.470160][ T9871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.559585][ T9871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.574594][ T9871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.583540][ T9871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.592380][ T9871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.656930][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 226.657004][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 226.732191][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.741937][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.747541][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 226.880808][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.903467][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.257714][T10152] syz.3.1710 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 227.503848][T10156] Process accounting resumed [ 228.471490][T10187] XFS: irix_sgid_inherit sysctl option is deprecated. [ 228.586786][T10190] Process accounting resumed [ 228.736667][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 228.817262][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 229.082040][T10209] type: 256 invalid [ 229.295023][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'. [ 229.610981][T10229] usb usb15: usbfs: process 10229 (syz.1.1747) did not claim interface 0 before use [ 229.785058][T10235] Process accounting resumed [ 230.826599][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 230.897180][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 230.965427][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1761'. [ 230.997183][T10266] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 231.005331][T10266] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 231.435609][T10278] syz.1.1766: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 231.473254][T10278] CPU: 1 UID: 0 PID: 10278 Comm: syz.1.1766 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 231.484100][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 231.494195][T10278] Call Trace: [ 231.497557][T10278] [ 231.500528][T10278] dump_stack_lvl+0x16c/0x1f0 [ 231.505260][T10278] warn_alloc+0x24d/0x3a0 [ 231.509663][T10278] ? __pfx_warn_alloc+0x10/0x10 [ 231.514568][T10278] ? __pfx_mark_lock+0x10/0x10 [ 231.519399][T10278] ? lock_acquire.part.0+0x11b/0x380 [ 231.524746][T10278] __vmalloc_node_range_noprof+0x10df/0x1530 [ 231.530783][T10278] ? rcu_is_watching+0x12/0xc0 [ 231.535606][T10278] ? trace_contention_end+0xee/0x140 [ 231.540958][T10278] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 231.546299][T10278] ? dvb_demux_do_ioctl+0x496/0x1340 [ 231.551651][T10278] ? __pfx___mutex_lock+0x10/0x10 [ 231.556745][T10278] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 231.563136][T10278] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 231.569081][T10278] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 231.574426][T10278] vmalloc_noprof+0x6b/0x90 [ 231.578979][T10278] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 231.584322][T10278] dvb_demux_do_ioctl+0x54d/0x1340 [ 231.589503][T10278] dvb_usercopy+0x165/0x320 [ 231.594048][T10278] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 231.599642][T10278] ? __pfx_dvb_usercopy+0x10/0x10 [ 231.604725][T10278] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 231.610065][T10278] dvb_demux_ioctl+0x29/0x40 [ 231.614707][T10278] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 231.620044][T10278] __x64_sys_ioctl+0x190/0x200 [ 231.624920][T10278] do_syscall_64+0xcd/0x250 [ 231.629481][T10278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.635435][T10278] RIP: 0033:0x7ff850f85d29 [ 231.639901][T10278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.659559][T10278] RSP: 002b:00007ff851e43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.668036][T10278] RAX: ffffffffffffffda RBX: 00007ff851175fa0 RCX: 00007ff850f85d29 [ 231.676054][T10278] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 231.684068][T10278] RBP: 00007ff851001aa8 R08: 0000000000000000 R09: 0000000000000000 [ 231.692091][T10278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.700105][T10278] R13: 0000000000000000 R14: 00007ff851175fa0 R15: 00007ffd771aec48 [ 231.708229][T10278] [ 231.716713][T10278] Mem-Info: [ 231.719877][T10278] active_anon:9550 inactive_anon:1 isolated_anon:0 [ 231.719877][T10278] active_file:12430 inactive_file:46153 isolated_file:0 [ 231.719877][T10278] unevictable:768 dirty:313 writeback:0 [ 231.719877][T10278] slab_reclaimable:10251 slab_unreclaimable:96088 [ 231.719877][T10278] mapped:24616 shmem:5095 pagetables:781 [ 231.719877][T10278] sec_pagetables:0 bounce:0 [ 231.719877][T10278] kernel_misc_reclaimable:0 [ 231.719877][T10278] free:1330093 free_pcp:2176 free_cma:0 [ 231.807221][T10278] Node 0 active_anon:39300kB inactive_anon:4kB active_file:49720kB inactive_file:184536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98464kB dirty:1236kB writeback:0kB shmem:19644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10712kB pagetables:3124kB sec_pagetables:0kB all_unreclaimable? no [ 231.886819][T10278] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 231.978298][T10278] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 232.077627][T10278] lowmem_reserve[]: 0 2465 2466 0 0 [ 232.091376][T10278] Node 0 DMA32 free:1395400kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:42752kB inactive_anon:4kB active_file:49720kB inactive_file:183708kB unevictable:1536kB writepending:1236kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:2152kB local_pcp:1156kB free_cma:0kB [ 232.208580][T10278] lowmem_reserve[]: 0 0 0 0 0 [ 232.213399][T10278] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 232.321127][T10278] lowmem_reserve[]: 0 0 0 0 0 [ 232.334545][T10278] Node 1 Normal free:3904816kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:7216kB local_pcp:7216kB free_cma:0kB [ 232.391453][T10278] lowmem_reserve[]: 0 0 0 0 0 [ 232.433540][T10278] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 232.461095][T10278] Node 0 DMA32: 13*4kB (UE) 7*8kB (ME) 272*16kB (ME) 1071*32kB (UME) 782*64kB (ME) 246*128kB (UM) 127*256kB (UME) 32*512kB (UM) 36*1024kB (UM) 20*2048kB (UME) 278*4096kB (UME) = 1385676kB [ 232.512816][T10278] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 232.546639][T10278] Node 1 Normal: 199*4kB (UME) 56*8kB (UME) 35*16kB (UME) 201*32kB (UME) 92*64kB (UME) 24*128kB (UME) 15*256kB (UME) 12*512kB (UME) 5*1024kB (UME) 7*2048kB (UME) 942*4096kB (M) = 3905068kB [ 232.598073][T10278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 232.626719][T10278] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 232.653562][T10278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 232.687177][T10278] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 232.727343][T10278] 67752 total pagecache pages [ 232.732088][T10278] 1055 pages in swap cache [ 232.777089][T10278] Free swap = 120172kB [ 232.781549][T10278] Total swap = 124996kB [ 232.797406][T10278] 2097051 pages RAM [ 232.803308][T10278] 0 pages HighMem/MovableOnly [ 232.814529][T10278] 427367 pages reserved [ 232.827319][T10278] 0 pages cma reserved [ 233.300226][T10321] Process accounting resumed [ 235.985493][T10424] usb usb15: usbfs: interface 0 claimed by hub while 'syz.3.1830' sets config #0 [ 236.580864][T10444] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 239.044871][T10513] Process accounting resumed [ 244.282721][T10636] Process accounting resumed [ 246.190117][T10679] Process accounting resumed syzkaller syzkaller login: [ 247.217083][T10709] bridge0: port 3(ipvlan1) entered blocking state [ 247.247028][T10709] bridge0: port 3(ipvlan1) entered disabled state [ 247.256845][T10709] ipvlan1: entered allmulticast mode [ 247.262208][T10709] veth0_vlan: entered allmulticast mode [ 247.284231][T10709] ipvlan1: left allmulticast mode [ 247.301589][T10709] veth0_vlan: left allmulticast mode [ 247.517995][T10717] netlink: 85 bytes leftover after parsing attributes in process `syz.4.1949'. [ 247.898441][T10729] netlink: 122 bytes leftover after parsing attributes in process `syz.4.1956'. [ 247.945481][T10729] netlink: 122 bytes leftover after parsing attributes in process `syz.4.1956'. [ 250.829493][T10799] device-mapper: ioctl: Unable to rename non-existent device, to [ 251.005564][T10804] Process accounting resumed [ 251.311905][T10815] Process accounting resumed [ 251.465025][T10821] Process accounting resumed [ 252.057189][T10840] Process accounting resumed [ 255.227042][T10933] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2045'. [ 255.413387][T10933] bond0: (slave bond_slave_1): Releasing backup interface [ 256.185978][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.196581][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.169663][T10997] Process accounting resumed                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       syzkaller syzkaller login: [ 317.618669][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.619806][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.737629][T12882] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 319.021433][T12899] Process accounting resumed [ 321.477371][T12977] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 322.116825][T12999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2938'. [ 322.142336][T13000] Process accounting resumed [ 322.568559][T13007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2943'. [ 323.762990][T13045] Process accounting resumed [ 324.293380][T13061] Process accounting resumed [ 326.097048][T13116] sg_write: data in/out 32724/1048664 bytes for SCSI command 0x0-- guessing data in; [ 326.097048][T13116] program syz.1.2987 not setting count and/or reply_len properly [ 329.289098][T13191] Process accounting resumed [ 329.482879][T13188] GUP no longer grows the stack in syz.3.3016 (13188): 14000-401000 (4000) [ 329.536851][T13188] CPU: 0 UID: 0 PID: 13188 Comm: syz.3.3016 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 329.549834][T13188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 329.561930][T13188] Call Trace: [ 329.565885][T13188] [ 329.569425][T13188] dump_stack_lvl+0x16c/0x1f0 [ 329.575072][T13188] gup_vma_lookup+0x1d2/0x220 [ 329.580725][T13188] __get_user_pages+0x236/0x3b50 [ 329.586696][T13188] ? hlock_class+0x4e/0x130 [ 329.592140][T13188] ? __lock_acquire+0x15a9/0x3c40 [ 329.598221][T13188] ? __pfx___get_user_pages+0x10/0x10 [ 329.604721][T13188] __gup_longterm_locked+0x211/0x1870 [ 329.611209][T13188] ? __pfx___lock_acquire+0x10/0x10 [ 329.617511][T13188] ? __pfx___gup_longterm_locked+0x10/0x10 [ 329.624513][T13188] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 329.631297][T13188] ? rwsem_read_trylock+0x12d/0x250 [ 329.637573][T13188] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 329.644260][T13188] ? process_vm_rw_core.constprop.0+0x3ff/0x9c0 [ 329.651791][T13188] pin_user_pages_remote+0xee/0x150 [ 329.658066][T13188] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 329.665069][T13188] ? down_read+0xc9/0x330 [ 329.670317][T13188] process_vm_rw_core.constprop.0+0x42b/0x9c0 [ 329.677647][T13188] ? futex_wait_queue+0x101/0x1f0 [ 329.683710][T13188] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 329.691682][T13188] process_vm_rw+0x301/0x360 [ 329.697250][T13188] ? __pfx_process_vm_rw+0x10/0x10 [ 329.703430][T13188] ? up_write+0x1b2/0x520 [ 329.708672][T13188] ? __pfx___do_sys_mremap+0x10/0x10 [ 329.715063][T13188] ? xfd_validate_state+0x5d/0x180 [ 329.721244][T13188] ? rcu_is_watching+0x12/0xc0 [ 329.726997][T13188] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 329.733794][T13188] ? do_syscall_64+0x91/0x250 [ 329.739442][T13188] ? lockdep_hardirqs_on+0x7c/0x110 [ 329.745716][T13188] do_syscall_64+0xcd/0x250 [ 329.751151][T13188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.758264][T13188] RIP: 0033:0x7f5350b85d29 [ 329.763581][T13188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.787140][T13188] RSP: 002b:00007f5351a0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 329.797281][T13188] RAX: ffffffffffffffda RBX: 00007f5350d75fa0 RCX: 00007f5350b85d29 [ 329.806871][T13188] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000774 [ 329.816456][T13188] RBP: 00007f5350c01aa8 R08: 0000000000000006 R09: 0000000000000000 [ 329.826044][T13188] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 329.835635][T13188] R13: 0000000000000000 R14: 00007f5350d75fa0 R15: 00007ffe87f47278 [ 329.845243][T13188] [ 329.848996][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.010012][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3024'. [ 330.376007][T13218] size and base must be multiples of 4 kiB [ 330.383766][T13218] CPU: 0 UID: 0 PID: 13218 Comm: syz.3.3029 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 330.396712][T13218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 330.408780][T13218] Call Trace: [ 330.412713][T13218] [ 330.416221][T13218] dump_stack_lvl+0x16c/0x1f0 [ 330.421873][T13218] mtrr_add+0xdf/0x110 [ 330.426786][T13218] mtrr_ioctl+0x7cd/0xcd0 [ 330.432007][T13218] ? __pfx_mtrr_ioctl+0x10/0x10 [ 330.437872][T13218] ? __pfx_lock_release+0x10/0x10 [ 330.443910][T13218] ? __fget_files+0x206/0x3a0 [ 330.449526][T13218] ? __pfx_mtrr_ioctl+0x10/0x10 [ 330.455355][T13218] proc_reg_unlocked_ioctl+0x226/0x320 [ 330.461925][T13218] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 330.469138][T13218] __x64_sys_ioctl+0x190/0x200 [ 330.474858][T13218] do_syscall_64+0xcd/0x250 [ 330.480271][T13218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.487458][T13218] RIP: 0033:0x7f5350b85d29 [ 330.492757][T13218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.516291][T13218] RSP: 002b:00007f5351a0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.526398][T13218] RAX: ffffffffffffffda RBX: 00007f5350d75fa0 RCX: 00007f5350b85d29 [ 330.535962][T13218] RDX: 0000000000000002 RSI: 00000000400c4d01 RDI: 0000000000000003 [ 330.545535][T13218] RBP: 00007f5350c01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 330.555158][T13218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.564729][T13218] R13: 0000000000000000 R14: 00007f5350d75fa0 R15: 00007ffe87f47278 [ 330.574303][T13218] [ 330.856724][T13226] openvswitch: netlink: IP tunnel TTL not specified. [ 331.006926][T13233] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3035'. [ 331.090987][T13235] Process accounting resumed [ 332.284947][T13272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3053'. [ 333.175060][T13296] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3063'. [ 333.412328][T13306] CIFS: VFS: Unsupported security flags: 0x20 [ 333.729448][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3075'. [ 335.289869][T13367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3092'. [ 336.001169][T13385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3098'. [ 336.321764][T13396] kafs: addr_prefs: Invalid Command [ 337.217541][T13431] bridge0: port 4(team0) entered blocking state [ 337.242134][T13431] bridge0: port 4(team0) entered disabled state [ 337.251480][T13431] team0: entered allmulticast mode [ 337.258048][T13431] team_slave_0: entered allmulticast mode [ 337.356429][T13431] team_slave_1: entered allmulticast mode [ 337.365823][T13431] team0: entered promiscuous mode [ 337.375493][T13431] team_slave_0: entered promiscuous mode [ 337.383016][T13431] team_slave_1: entered promiscuous mode [ 337.392128][T13431] bridge0: port 4(team0) entered blocking state [ 337.399820][T13431] bridge0: port 4(team0) entered forwarding state [ 337.704806][T13444] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3123'. [ 337.856412][T13449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3126'. [ 337.909140][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3128'. [ 342.421654][T13566] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3171'. [ 344.255349][T13597] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3185'. [ 344.696745][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3189'. [ 346.071804][T13649] sd 0:0:1:0: PR command failed: 1026 [ 346.106731][T13649] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 346.136672][T13649] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 346.712901][T13668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3211'. [ 347.795340][T13702] netlink: 'syz.3.3226': attribute type 1 has an invalid length. [ 348.132526][T13712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3230'. [ 348.173133][T13712] veth0_macvtap: left promiscuous mode [ 348.205716][T13712] macvtap0: entered allmulticast mode [ 348.886812][T13725] netlink: 178 bytes leftover after parsing attributes in process `syz.0.3235'. [ 349.150656][T13731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3238'. [ 349.185688][T13731] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 352.662191][T13803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3264'. [ 353.234685][T13820] nvme_fcloop: unknown parameter or missing value '/' [ 355.470264][T13894] netlink: 'syz.3.3300': attribute type 6 has an invalid length. [ 355.520980][T13894] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3300'. [ 357.430589][T13947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3320'. [ 357.488985][T13947] vxcan1: entered promiscuous mode [ 358.454690][T13975] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3330'. [ 358.735322][T13983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3334'. [ 358.746611][T13983] veth1_macvtap: entered allmulticast mode [ 358.995383][T13989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3336'. [ 359.042862][T13989] veth0_macvtap: left promiscuous mode [ 359.067820][T13989] macvtap0: entered allmulticast mode [ 359.427631][T13998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3349'. [ 360.063062][T14023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3351'. [ 360.370372][T14036] bond0: no command found in slaves file - use +ifname or -ifname [ 360.885401][T14057] netlink: 346 bytes leftover after parsing attributes in process `syz.0.3366'. [ 362.909039][T14121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3399'. [ 362.980638][T14121] ksmbd: Unknown IPC event: 0, ignore. [ 364.860141][T14167] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3411'. [ 364.933598][T14171] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3412'. [ 364.955749][T14169] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3412'. [ 365.354895][T14181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3417'. [ 365.368610][T14181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.490856][T14181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.516327][T14326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3474'. [ 369.576234][T14326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.753150][T14326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.991854][T14341] IPVS: length: 11322 != 8 [ 370.688483][T14364] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3490'. [ 371.561278][T14395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3503'. [ 371.572290][T14395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.715498][T14395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.456472][T14432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3519'. [ 372.484773][T14432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.564889][T14432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.880658][T14450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3528'. [ 373.027175][T14457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3531'. [ 373.411641][T14471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3537'. [ 373.712541][T14484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3542'. [ 373.732192][T14484] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.743635][T14484] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.759732][T14484] bridge0: entered allmulticast mode [ 374.669973][T14530] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3563'. [ 375.037194][T14544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3567'. [ 375.108193][T14544] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.117002][T14544] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.142172][T14544] bridge0: entered allmulticast mode [ 375.689604][T14571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3580'. [ 376.048584][T14581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3583'. [ 376.442086][T14589] sctp: [Deprecated]: syz.0.3586 (pid 14589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.442086][T14589] Use struct sctp_sack_info instead [ 377.263745][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3596'. [ 377.290147][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3596'. [ 378.575914][T14649] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3610'. [ 378.954753][T14658] binder: 14657:14658 unknown command 0 [ 378.971628][T14658] binder: 14657:14658 ioctl c0306201 9 returned -22 [ 379.059180][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.067685][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.916048][T14680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3624'. [ 380.475809][T14705] netlink: 'syz.1.3633': attribute type 21 has an invalid length. [ 380.500361][T14705] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3633'. [ 381.026304][T14722] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3641'. [ 381.297728][T14733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3647'. [ 381.308693][T14733] ip_vti0: entered promiscuous mode [ 381.340402][T14732] netlink: 'syz.4.3644': attribute type 1 has an invalid length. [ 381.388934][T14732] netlink: 'syz.4.3644': attribute type 1 has an invalid length. [ 381.927732][T14752] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3653'. [ 382.760350][T14767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3659'. [ 383.487609][T14792] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3670'. [ 384.129538][T14814] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3681'. [ 384.254622][T14818] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3682'. [ 384.396078][T14823] Process accounting resumed [ 384.447138][T14824] lo: entered allmulticast mode [ 384.468142][T14821] lo: left allmulticast mode [ 385.091875][T14850] erspan0: entered allmulticast mode [ 386.341218][T14887] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 386.934507][T14898] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3711'. [ 387.088917][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3712'. [ 387.134061][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3712'. [ 387.386673][T14910] kAFS: Invalid Command on /proc/fs/afs/cells file [ 387.596255][T14916] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3718'. [ 388.873749][T14949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3729'. [ 391.292165][T15014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3755'. [ 391.471393][T15022] tipc: Trying to set illegal importance in message [ 391.788281][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3761'. [ 392.741259][T15062] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3774'. [ 392.771894][T15064] netlink: 74 bytes leftover after parsing attributes in process `syz.3.3776'. [ 392.784922][T15065] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3774'.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       [ 414.674926][T15757] netlink: 178 bytes leftover after parsing attributes in process `syz.0.4050'. [ 414.728110][T15761] netlink: 'syz.5.4052': attribute type 11 has an invalid length. [ 414.754846][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4052'. [ 415.143344][T15174] Bluetooth: hci3: command tx timeout [ 415.515064][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4067'. [ 415.552798][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4067'. [ 417.217362][ T5834] Bluetooth: hci3: command tx timeout [ 421.627983][T16019] netlink: 'syz.1.4164': attribute type 19 has an invalid length. [ 421.656721][T16019] netlink: 310 bytes leftover after parsing attributes in process `syz.1.4164'. [ 422.287038][T16042] netlink: 334 bytes leftover after parsing attributes in process `syz.5.4174'. [ 422.784487][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4184'. [ 424.921070][T16136] netlink: 350 bytes leftover after parsing attributes in process `syz.5.4215'. [ 424.969391][T16141] bridge0: port 3(veth1_to_hsr) entered blocking state [ 425.009324][T16141] bridge0: port 3(veth1_to_hsr) entered disabled state [ 425.018721][T16141] veth1_to_hsr: entered allmulticast mode [ 425.050409][T16141] veth1_to_hsr: entered promiscuous mode [ 425.309037][T16154] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 425.717940][T16165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4228'. [ 426.987173][T16213] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4251'. [ 427.157459][T16220] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4253'. [ 427.186952][T16220] team0: left allmulticast mode [ 427.202677][T16220] team_slave_0: left allmulticast mode [ 427.235615][T16220] team_slave_1: left allmulticast mode [ 427.246185][T16220] team0: left promiscuous mode [ 427.265075][T16220] team_slave_0: left promiscuous mode [ 427.286811][T16220] team_slave_1: left promiscuous mode [ 427.313145][T16220] bridge0: port 4(team0) entered disabled state [ 427.563730][T16231] kAFS: bad VL server IP address [ 427.991605][T16247] could not allocate digest TFM handle [ 428.222326][T16243] could not allocate digest TFM handle [ 431.491637][T16415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4331'. [ 433.317049][T16483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4361'. [ 433.509098][T16492] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4365'. [ 433.519780][T16488] netlink: 350 bytes leftover after parsing attributes in process `syz.5.4363'. [ 434.395873][T16534] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4383'. [ 435.564437][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4401'. [ 435.578082][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4401'. [ 436.017646][T16619] netlink: 'syz.1.4406': attribute type 9 has an invalid length. [ 436.035874][T16619] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4406'. [ 436.546301][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4417'. [ 436.558069][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4417'. [ 436.831675][T16653] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4422'. [ 436.842166][T16653] ipvlan1: entered allmulticast mode [ 436.855063][T16653] veth0_vlan: entered allmulticast mode [ 438.808858][T16744] __nla_validate_parse: 2 callbacks suppressed [ 438.808881][T16744] netlink: 346 bytes leftover after parsing attributes in process `syz.1.4461'. [ 439.362413][T16773] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4474'. [ 440.537016][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.543464][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.390424][T16863] netlink: 334 bytes leftover after parsing attributes in process `syz.5.4514'. [ 441.634780][T16868] Process accounting resumed [ 441.820015][T16884] netlink: 'syz.3.4525': attribute type 19 has an invalid length. [ 441.834274][T16884] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4525'. [ 443.278206][T16946] netlink: 'syz.1.4561': attribute type 1 has an invalid length. [ 444.149887][T16977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4566'. [ 444.162172][T16980] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4567'. [ 444.589249][T17000] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4575'. [ 445.274360][T17023] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4585'. [ 446.009643][T17057] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4600'. [ 447.363981][T17119] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4626'. [ 448.189672][T17162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4645'. [ 448.206622][T17162] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 450.316095][T17255] netlink: 330 bytes leftover after parsing attributes in process `syz.5.4681'. [ 450.346639][T17255] |: renamed from team0 (while UP) [ 450.455128][T17262] netlink: 334 bytes leftover after parsing attributes in process `syz.1.4686'. [ 451.897177][T17300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4698'. [ 452.284445][T17300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4698'. [ 454.151796][T17345] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4716'. [ 454.320419][T17351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4719'. [ 457.139918][T17457] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4761'. [ 457.974956][T17491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4775'. [ 457.984528][T17491] macsec0: entered allmulticast mode [ 457.990596][T17491] veth1_macvtap: entered allmulticast mode [ 458.492784][T17506] FAULT_INJECTION: forcing a failure. [ 458.492784][T17506] name fail_futex, interval 1, probability 0, space 0, times 1 [ 458.526922][T17506] CPU: 1 UID: 0 PID: 17506 Comm: syz.5.4783 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 458.537769][T17506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 458.547859][T17506] Call Trace: [ 458.551168][T17506] [ 458.554122][T17506] dump_stack_lvl+0x16c/0x1f0 [ 458.558850][T17506] should_fail_ex+0x497/0x5b0 [ 458.563571][T17506] should_fail_futex+0x4c/0x60 [ 458.568374][T17506] __x64_sys_futex+0x260/0x4c0 [ 458.573180][T17506] ? __pfx___x64_sys_futex+0x10/0x10 [ 458.578501][T17506] ? rcu_is_watching+0x12/0xc0 [ 458.583307][T17506] do_syscall_64+0xcd/0x250 [ 458.587848][T17506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.593776][T17506] RIP: 0033:0x7f15e1985d29 [ 458.598209][T17506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.617825][T17506] RSP: 002b:00007ffc1cb24d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 458.626249][T17506] RAX: ffffffffffffffda RBX: 00007ffc1cb24e90 RCX: 00007f15e1985d29 [ 458.634232][T17506] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f15e1b75fac [ 458.642209][T17506] RBP: 00007f15e1b75fac R08: 00007f15e27b0000 R09: 00007ffc1cb2505f [ 458.650188][T17506] R10: 00007ffc1cb24e70 R11: 0000000000000246 R12: 000000000006ff00 [ 458.658172][T17506] R13: 00007ffc1cb24e70 R14: 0000000000000032 R15: 000000000006fece [ 458.666166][T17506] [ 458.803975][T17520] netlink: 334 bytes leftover after parsing attributes in process `syz.5.4787'. [ 462.749126][T17664] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4846'. [ 462.959018][T17666] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4847'. [ 463.117875][T17676] netlink: 130 bytes leftover after parsing attributes in process `syz.1.4853'. [ 463.312042][T17686] netlink: 504 bytes leftover after parsing attributes in process `syz.0.4857'. [ 464.592243][T17734] delete_channel: no stack [ 464.942773][T17753] netlink: 326 bytes leftover after parsing attributes in process `syz.5.4885'. [ 465.558939][T17774] nbd6: detected capacity change from 0 to 68719476736 [ 465.593778][T17706] block nbd6: Send control failed (result -22) [ 465.623408][T17706] block nbd6: Request send failed, requeueing [ 465.641058][T16958] block nbd6: Receive control failed (result -32) [ 465.654529][ T42] block nbd6: Dead connection, failed to find a fallback [ 465.661745][ T42] block nbd6: shutting down sockets [ 465.667385][ T42] blk_print_req_error: 24 callbacks suppressed [ 465.667402][ T42] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.684147][ T42] buffer_io_error: 23 callbacks suppressed [ 465.684165][ T42] Buffer I/O error on dev nbd6, logical block 0, async page read [ 465.699176][T17706] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.708319][T17706] Buffer I/O error on dev nbd6, logical block 0, async page read [ 465.716244][T17706] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.725400][T17706] Buffer I/O error on dev nbd6, logical block 0, async page read [ 465.733393][T17706] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.742528][T17706] Buffer I/O error on dev nbd6, logical block 0, async page read [ 465.750498][T17706] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.759642][T17706] Buffer I/O error on dev nbd6, logical block 0, async page read [ 465.767641][T17706] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.776998][T17706] Buffer I/O error on dev nbd6, logical block 0, async page read [ 465.784909][T17706] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.794072][T17706] Buffer I/O error on dev nbd6, logical block 0, async page read [ 465.802446][T17706] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.812051][T17706] Buffer I/O error on dev nbd6, logical block 0, async page read [ 465.821718][T17706] ldm_validate_partition_table(): Disk read failed. [ 465.828530][T17706] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.837680][T17706] Buffer I/O error on dev nbd6, logical block 0, async page read [ 465.845637][T17706] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.854794][T17706] Buffer I/O error on dev nbd6, logical block 0, async page read [ 465.862889][T17706] Dev nbd6: unable to read RDB block 0 [ 465.868930][T17706] nbd6: unable to read partition table [ 465.879240][T17706] ldm_validate_partition_table(): Disk read failed. [ 465.886285][T17706] Dev nbd6: unable to read RDB block 0 [ 465.892382][T17706] nbd6: unable to read partition table [ 467.467212][T17841] delete_channel: no stack [ 468.076154][T17856] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4931'. [ 468.428724][T17872] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4937'. [ 471.602908][T17978] netlink: 'syz.5.4979': attribute type 4 has an invalid length. [ 471.627656][T17978] netlink: 'syz.5.4979': attribute type 4 has an invalid length. [ 471.693540][T17972] Process accounting paused [ 474.545997][T18060] netlink: 74 bytes leftover after parsing attributes in process `syz.0.5011'. [ 474.834567][T18070] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5015'. [ 475.052230][T18081] netlink: 334 bytes leftover after parsing attributes in process `syz.0.5020'. [ 475.620680][T18104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5030'. [ 476.797198][T18135] netlink: 338 bytes leftover after parsing attributes in process `syz.1.5041'. [ 476.830808][T18135] netlink: 338 bytes leftover after parsing attributes in process `syz.1.5041'. [ 477.041216][T18145] netlink: 342 bytes leftover after parsing attributes in process `syz.5.5044'. [ 478.028374][T18171] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5054'. [ 479.617026][T18213] netlink: 'syz.1.5069': attribute type 16 has an invalid length. [ 479.625556][T18213] netlink: 322 bytes leftover after parsing attributes in process `syz.1.5069'. [ 479.729531][T18217] netlink: 342 bytes leftover after parsing attributes in process `syz.5.5072'. [ 480.217220][T18221] netlink: 74 bytes leftover after parsing attributes in process `syz.3.5073'. [ 482.387233][T18298] netlink: 'syz.0.5102': attribute type 1 has an invalid length. [ 482.618072][T18307] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5104'. [ 483.282085][T18340] netlink: 'syz.0.5116': attribute type 3 has an invalid length. [ 483.297907][T18342] netlink: 334 bytes leftover after parsing attributes in process `syz.1.5118'. [ 483.307192][T18342] IPv6: NLM_F_CREATE should be specified when creating new route [ 483.613353][T18353] netlink: 'syz.0.5123': attribute type 29 has an invalid length. [ 483.623336][T18353] netlink: 334 bytes leftover after parsing attributes in process `syz.0.5123'. [ 483.984239][T18368] Invalid ELF header magic: != ELF [ 484.637341][T18392] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5140'. [ 484.668523][T18392] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5140'. [ 485.705226][T18439] kernel read not supported for file /#)-\"[} (pid: 18439 comm: syz.1.5161) [ 485.715823][ T29] audit: type=1800 audit(8277292191.870:20): pid=18439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5161" name=23292D5C225B7D dev="mqueue" ino=48923 res=0 errno=0 [ 485.810182][T18446] Process accounting resumed [ 486.556051][T18477] tc_dump_action: action bad kind [ 488.835843][T18574] usb usb6: check_ctrlrecip: process 18574 (syz.5.5208) requesting ep 01 but needs 81 [ 488.869928][T18574] usb usb6: usbfs: process 18574 (syz.5.5208) did not claim interface 0 before use [ 488.990109][T18583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5210'. [ 489.303208][T18597] netlink: 'syz.3.5215': attribute type 4 has an invalid length. [ 489.325885][T18597] netlink: 110 bytes leftover after parsing attributes in process `syz.3.5215'. [ 489.497009][T18607] netlink: 74 bytes leftover after parsing attributes in process `syz.0.5218'. [ 490.147342][T18634] openvswitch: netlink: VXLAN extension 0 has unexpected len 1 expected 0 [ 490.156651][T18633] openvswitch: netlink: IP tunnel dst address not specified [ 490.167794][T18633] openvswitch: netlink: IP tunnel dst address not specified [ 491.756709][T18680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5248'. [ 492.444049][T18720] openvswitch: netlink: Unknown nsh attribute 0 [ 492.761198][T18731] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5267'. [ 493.331743][T18755] netlink: 342 bytes leftover after parsing attributes in process `syz.5.5277'. [ 493.446785][T18760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5280'. [ 493.644686][ T29] audit: type=1326 audit(8277292199.800:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18756 comm="syz.3.5279" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5350b85d29 code=0x0 [ 494.727818][T18831] netlink: 334 bytes leftover after parsing attributes in process `syz.1.5320'.  495.84879418877 .%4,).+: 342 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.5331'.  497.18186118906 .%4,).+: 4 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.0.5340'.  498.05571218922 .%4,).+: 4 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.0.5347'.  499.70893718988 $9.$"': "!$ &,!'-/0 ", !4 34!24 /& ",!#+,)34).' ).)4#!,, %3.  499.71825418988 $9.$"': &,!'3 0!23% &!),%$  499.72286018988 $9.$"': "!$ &,!'-/0 ), !4 34!24 /& ).)4/-  499.72854318988 $9.$"': &,!'3 0!23% &!),%$  499.89593118997 .%4,).+: 8 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.5377'.  500.42716019015 .%4,).+: 334 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.5393'.  500.56495419021 .%4,).+: '39:.1.5384': !442)"54% 490% 4 (!3 !. ).6!,)$ ,%.'4(.  500.58358319021 .%4,).+: '39:.1.5384': !442)"54% 490% 4 (!3 !. ).6!,)$ ,%.'4(.  501.22578516958 ,5%4//4(: (#)3: 5.%80%#4%$ %6%.4 0801 ,%.'4(: 13 > 1  501.62321219065 .%4,).+: 342 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.5406'.  501.938787 1297 )%%%802154 0(90 70!.0: %.#2904)/. &!),%$: -22  501.943913 1297 )%%%802154 0(91 70!.1: %.#2904)/. &!),%$: -22  502.12168119088 .%4,).+: 342 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.5416'.  502.72196919107 .%4,).+: 334 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.5432'.  502.83201819112 .%4,).+: 8 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.5425'.  503.85335819036 2/#%33 !##/5.4).' 2%35-%$  506.30660319185 .%4,).+: 342 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.5451'.  507.66549319222 .%4,).+: 334 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.0.5465'.  507.96304119233 .%4,).+: '39:.0.5469': !442)"54% 490% 3 (!3 !. ).6!,)$ ,%.'4(.  508.69891819242 .%4,).+: 4 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.5472'.  509.21019419252 .%4,).+: 74 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.5474'.  509.60860519272 .%4,).+: 346 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.5482'.  510.68157419298 .%4,).+: 334 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.5489'.  510.69287719302 .%4,).+: 334 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.5491'.  512.35868719352 .%4,).+: 4 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.5505'.  512.71449419379 .%4,).+: 342 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.5510'.  514.49999519432 .%4,).+: 4 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.0.5528'.  515.58063319437 .%4,).+: 20 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.5532'.  516.83621519477 .%4,).+: '39:.3.5549': !442)"54% 490% 1 (!3 !. ).6!,)$ ,%.'4(.  516.84670419477 .%4,).+: 322 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.5549'.  516.87079119477 .%4,).+: '39:.3.5549': !442)"54% 490% 1 (!3 !. ).6!,)$ ,%.'4(.  516.88275419477 .%4,).+: 322 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.5549'.  517.20754819491 .%4,).+: 4 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.0.5555'.  517.52400819504 .%4,).+: 334 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.5561'.  518.23501619532 .%4,).+: '39:.0.5574': !442)"54% 490% 22 (!3 !. ).6!,)$ ,%.'4(.  518.25560619532 .%4,).+: 334 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.0.5574'.  520.47278619614 042!#% !44!#( /& "./39:-%8%#54/2 %8%#"9871 7!3 !44%-04%$ "9 ""19614  521.39244219648 2!.$/-: #2.' 2%3%%$%$ /. 3934%- 2%35-04)/.  522.29471919670 .%4,).+: 28 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.5631'.  522.54336619670 (323,!6%1 (5.2%')34%2).'): ,%&4 02/-)3#5/53 -/$%  522.62861219670 6%4(14/(32 (5.2%')34%2).'): ,%&4 !,,-5,4)#!34 -/$%  522.66662419670 6%4(14/(32 (5.2%')34%2).'): ,%&4 02/-)3#5/53 -/$%  522.67221819670 "2)$'%0: 0/24 3(6%4(14/(32) %.4%2%$ $)3!",%$ 34!4%  522.98699919681 .%4,).+: 342 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.0.5636'.  523.01667119681 .%4,).+: 342 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.0.5636'.  523.07048919687 .%4,).+: 342 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.5639'.  523.38668619697 .%4,).+: 342 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.5644'.  523.39743619697 .%4,).+: 342 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.5644'.  524.25885819727 .%4,).+: 342 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.5655'.  524.44695219732 .%4,).+: '39:.1.5658': !442)"54% 490% 9 (!3 !. ).6!,)$ ,%.'4(.  527.65663719777 .%4,).+: 350 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.5677'.  528.26461619795 .%4,).+: 28 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.5684'.  528.38910219795 "/.$0: (3,!6% "/.$3,!6%0): %,%!3).' "!#+50 ).4%2&!#%  528.82017319804 02/'2!- 39:.5.5688 )3 53).' ! $%02%#!4%$  )/#4,, 0,%!3% #/.6%24 )4 4/    529.10040919814 .%4,).+: 130 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.5691'.  529.31648219820 .%4,).+: '39:.0.5696': !442)"54% 490% 28 (!3 !. ).6!,)$ ,%.'4(.  529.32418719820 .%4,).+: 334 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.0.5696'.  530.21189119854 .%4,).+: 28 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.5709'.  531.14285219888 3$ 0:0:1:0:  #/--!.$ &!),%$: 1026  531.15222819888 3$ 0:0:1:0: %.3% %9 : ,,%'!, %15%34 #522%.4  531.16406119888 3$ 0:0:1:0: $$. %.3%: .6!,)$ #/--!.$ /0%2!4)/. #/$%  531.39822719899 .%4,).+: 334 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.5729'.  532.43628419927 .%4,).+: 330 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.0.5742'.  532.52737719933 /0%.637)4#(: .%4,).+: 5..%, !442 0 (!3 5.%80%#4%$ ,%. 0 %80%#4%$ 8  532.55731819933 /0%.637)4#(: .%4,).+: 5..%, !442 0 (!3 5.%80%#4%$ ,%. 0 %80%#4%$ 8  532.63783319941 .%4,).+: 334 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.0.5749'.  532.81799119952 .%4,).+: 326 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.5753'.  533.31680219964 .%4,).+: '39:.1.5757': !442)"54% 490% 16 (!3 !. ).6!,)$ ,%.'4(.  533.32313619964 .%4,).+: 330 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.5757'.  534.26440719984 2/#%33 !##/5.4).' 0!53%$  534.35692219999 3$ 0:0:1:0:  #/--!.$ &!),%$: 1026  534.36402519999 3$ 0:0:1:0: %.3% %9 : ,,%'!, %15%34 #522%.4  534.37036420001 .%4,).+: 334 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.5771'.  534.37800519999 3$ 0:0:1:0: $$. %.3%: .6!,)$ #/--!.$ /0%2!4)/. #/$%  534.57411620011 .%4,).+: 334 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.5776'.  534.73970919944 ,5%4//4(: (#)3: #/--!.$ 080406 48 4)-%/54  534.84625120022 2/#%33 !##/5.4).' 2%35-%$  535.24306120048 .%4,).+: 342 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.5794'.  535.25604020051 .%4,).+: 342 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.5795'.  535.39942920058 .%4,).+: 28 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.5799'.  535.40268020059 .%4,).+: 342 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.5798'.  535.48066120058 "/.$0: (3,!6% "/.$3,!6%0): %,%!3).' "!#+50 ).4%2&!#%  535.50402220063 .%4,).+: 64 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.5800'.  535.64809020069 .%4,).+: 342 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.5803'.  537.18808220136 "/.$0: (3,!6% "/.$3,!6%0): %,%!3).' "!#+50 ).4%2&!#%  538.40314020188 .%4,).+: '39:.0.5852': !442)"54% 490% 19 (!3 !. ).6!,)$ ,%.'4(.  538.41931120188 .,!6!,)$!4%0!23%: 7 #!,,"!#+3 35002%33%$  538.41933120188 .%4,).+: 334 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.0.5852'.  539.13608620213 ,/: %.4%2%$ 02/-)3#5/53 -/$%  539.14225920211 ,/: ,%&4 02/-)3#5/53 -/$%  539.44523820229 .%4,).+: 306 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.5869'.  539.47634320231 .%4,).+: 4 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.5870'.  539.49285420231 .%4,).+: 4 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.5870'.  539.84500020244 .%4,).+: 20 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.5875'.  540.42990220267 &: %.4%2%$ 02/-)3#5/53 -/$%  540.45703220267 .%4,).+: 12 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.5885'.  540.47452920267 &: ,%&4 02/-)3#5/53 -/$%  540.89469820277  )6;* % 0"6*!&!%! 9-.56,9621/:-:#(:5'1272 +'<$(86,*82 , 656),+ 1*, #'%?) :6%!$-<,,/$>=38')?   540.93610520277  ' ?<&&&8)!8  '?,!6!(3/-9.$*$:> %:  540.95803820277  <(;:;=(.35< * '5!;?$ 45'0:3527 +,!??;* ,: )  540.97877120277  974 8  540.98149820277  ? +*:7)!' 9, 6!,<1$-=2, 5 +66.*'7  541.01662420277  ?  541.01910920277  ( #"3::; "16 %  541.04635620277  094=0 !->472($86 3$ -%:7%17=0:3,5: -1%8%6#')&564 8 ' >  541.07680220277  . "):+ *'-01 7;/% 3.>2.8$,(" #2*) (/-"9/ ' >4)6-;?<&,65%,)217!/0&$4*>&*6(,-*7)  5= -; +0)1'*0*&5: ,+6"-<$?>= 7 =:0 3%9*%  541.14669820277  =/ ?6#$:63 4 (-4'5?26 ?(1( 62*,'/1  541.18290220277  ;/ <)074:=> 72%32>9< #-1 >":"*2+> 0185 #  541.20899320277  %!'9*( 0!6?! 6* 19>69%8(:$0'9=+2 *% ++ ?6&->$;0!%3  541.21750420277  65$2,821%>)83> !6-::3;9<1.(6..=><:8+& 9&= 0 10.;+/69 #&1<-;! #="77= :6:>9%(;-. $-! (%5  541.22970020277   6> :;&5-=.2:<+&' 13.9=.%%.3%89/8'08,& &3 &<9(8;" :/#."1*>>71 ;"?,/  541.31669420277   =$ 43-6,+  *"'&%(&)+8'=',.>=2*4 81' >7=*9)<6<  541.32682520277  ,:"7;<=/" 17  1!<$;?)'5 60!-<=63;   541.34551520277  ; <1 ..;707:>62)?8$  +  541.35236520277  =6!:9%/-<3=6/:1& % ?3 *'93:8 ' :+$<'.9=/ '+ (<"92; )48/;>?6/'(2 - '#8%&(.2*5  541.38504420277  $ 24;#">;.9#%16'46+:; . .& >%&  541.41548820277  "/)<- -0 ?+$*80?74, 4"?%4-4:;!164!%$! -/  541.46529320277  4>%,/,$1-##5" 5%8 %> * -&-/* /.! +%(1;:&%-$2' 6=?" &># -:*:?:$ 3+ 99.01?6 5%) 0>6 .(42$6  541.54802020277  '*;2)/034)!;!>3(86 >32;< < 3: )<-)4 %,:#11! 9+84).0:("+#(, ) 7+2/<82869 43;%  541.58641820277  :<#. !0->'); ?,+//< &":% 3- 9% 42 $>)>#>95 =. &% &-8;$4--370%  541.63669920277   ( .#,'>977+ (>/ =)7=<!?, ,=)<"&&%1*.;# +%#  541.65805820277  '*  541.74668920277  #?(4"); 31  541.75023020277  , 8 & $ "$  541.75378920277  .%"  ?.$ 3'?:  541.75839520277  4*.(68 ).!8>'*2;8 +&:=8& 1 $;35& ?  541.90331820277  ($.+** -%**3)44.=/&7&"?!8.;08 ?/ #>.! ;53>55-=  542.00784720277   1>/)  542.02584120277  5:5 #82#,)6!  542.08270620277  ?5*4'=2-(  542.08635820277  ,6&;-&>&43;</'3.3 # 5><597>79(:.7  542.09210120277   78 .>=;  ;6,/33&,84!?&1  542.15285220277  /736(<% '6+21,!>34&$'#1#*<<-*< 1+*#+>3:<0 #  542.16045320277  5!44?+0$+24+7 &=  542.22048320277  69&-=75':%+ 1 *5?*!),; 4+='3)+)$!0,)=7 5=:,!%?5= 2'  542.26396420277   ;-  542.91915220318 .%4,).+: '39:.1.5904': !442)"54% 490% 4 (!3 !. ).6!,)$ ,%.'4(.  542.93943020318 .%4,).+: 330 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.5904'.  543.96681220339 2/#%33 !##/5.4).' 2%35-%$  544.19542120344 .%4,).+: 342 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.5916'.  545.73871320395 .%4,).+: 4 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.0.5938'.  545.95236820405 3#40: %02%#!4%$: 39:.3.5944 (0)$ 20405) 3% /& ).4 ). -!8"5234 3/#+%4 /04)/..  545.95236820405 3% 3425#4 3#40!33/#6!,5% ).34%!$  546.24111820418 .%4,).+: 330 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.0.5949'.  547.66965820469 .%4,).+: 130 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.5973'.  547.87767820477 .%4,).+: 330 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.5975'.  548.14670520474 042!#% !44!#( /& "./39:-%8%#54/2 %8%#"5827 7!3 !44%-04%$ "9 "./39:-%8%#54/2 %8%#"20474  548.51561920493 .%4,).+: 334 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.0.5980'.  548.77752720499 .%4,).+: 4 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.5984'.  551.61186020559 .%4,).+: 4 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.6005'.  554.68591220619 .%4,).+: 28 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.6032'.  554.71172920619 6#!.0: %.4%2%$ 02/-)3#5/53 -/$%  555.34824020644 .%4,).+: 334 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.6040'.  556.44116620680 .%4,).+: 350 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.6055'.  557.47154720715 2!.$/-: #2.' 2%3%%$%$ /. 3934%- 2%35-04)/.  557.60944620712 %230!.0: ,%&4 !,,-5,4)#!34 -/$%  557.92624720724 .%4,).+: 338 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.5.6072'.  558.32506020729 .%4,).+: 172 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.6074'.  558.35028020729 .%4,).+: 172 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.6074'.  558.80470720732 .%4,).+: 350 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.3.6076'.  559.44987620758 .%4,).+: 342 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.6086'.  559.56393320763 .%4,).+: 350 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.6089'.  560.13766120784 .%4,).+: 342 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.6098'.  560.38775320795 .%4,).+: 334 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.1.6102'.  560.43127520798 .%4,).+: 4 "94%3 ,%&4/6%2 !&4%2 0!23).' !442)"54%3 ). 02/#%33 39:.0.6105'.  561.90073820833 042!#% !44!#( /& "./39:-%8%#54/2 %8%#"9871 7!3 !44%-04%$ "9 "./39:-%8%#54/2 %8%#"20833 [ 563.169379][T20896] netlink: 342 bytes leftover after parsing attributes in process `syz.5.6145'. [ 563.379219][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.393564][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.602146][T20914] Process accounting resumed [ 565.001268][T20935] netlink: 'syz.0.6161': attribute type 10 has an invalid length. [ 565.026661][T20935] netlink: 326 bytes leftover after parsing attributes in process `syz.0.6161'. [ 565.367246][T20943] netlink: 342 bytes leftover after parsing attributes in process `syz.3.6163'. [ 566.488910][T20974] sctp: [Deprecated]: syz.5.6177 (pid 20974) Use of struct sctp_assoc_value in delayed_ack socket option. [ 566.488910][T20974] Use struct sctp_sack_info instead [ 567.057269][T21000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6184'. [ 567.138072][T21001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6184'. [ 568.117796][T21025] netlink: 342 bytes leftover after parsing attributes in process `syz.5.6194'. [ 568.479871][T21032] netlink: 334 bytes leftover after parsing attributes in process `syz.5.6197'. [ 568.518981][ T25] [ 568.521823][ T25] ====================================================== [ 568.530251][ T25] WARNING: possible circular locking dependency detected [ 568.538671][ T25] 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 Not tainted [ 568.547196][ T25] ------------------------------------------------------ [ 568.555607][ T25] kworker/1:0/25 is trying to acquire lock: [ 568.562659][ T25] ffffffff8fabfc48 (rtnl_mutex){+.+.}-{4:4}, at: smc_vlan_by_tcpsk+0x251/0x620 [ 568.573409][ T25] [ 568.573409][ T25] but task is already holding lock: [ 568.582223][ T25] ffff88805f21bbd8 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53c/0xae0 [ 568.593387][ T25] [ 568.593387][ T25] which lock already depends on the new lock. [ 568.593387][ T25] [ 568.605849][ T25] [ 568.605849][ T25] the existing dependency chain (in reverse order) is: [ 568.616648][ T25] [ 568.616648][ T25] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 568.625822][ T25] lock_sock_nested+0x3a/0xf0 [ 568.632055][ T25] sockopt_lock_sock+0x54/0x70 [ 568.638387][ T25] do_ip_setsockopt+0x101/0x38c0 [ 568.644923][ T25] ip_setsockopt+0x59/0xf0 [ 568.650828][ T25] tcp_setsockopt+0xa4/0x100 [ 568.656949][ T25] do_sock_setsockopt+0x222/0x480 [ 568.663590][ T25] __sys_setsockopt+0x1a0/0x230 [ 568.670024][ T25] __x64_sys_setsockopt+0xbd/0x160 [ 568.676775][ T25] do_syscall_64+0xcd/0x250 [ 568.682795][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.690485][ T25] [ 568.690485][ T25] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 568.699124][ T25] __lock_acquire+0x249e/0x3c40 [ 568.705565][ T25] lock_acquire.part.0+0x11b/0x380 [ 568.712309][ T25] __mutex_lock+0x19b/0xa60 [ 568.718327][ T25] smc_vlan_by_tcpsk+0x251/0x620 [ 568.724865][ T25] __smc_connect+0x466/0x4890 [ 568.731085][ T25] smc_connect_work+0x54f/0xae0 [ 568.737515][ T25] process_one_work+0x958/0x1b30 [ 568.744054][ T25] worker_thread+0x6c8/0xf00 [ 568.750169][ T25] kthread+0x2c1/0x3a0 [ 568.755687][ T25] ret_from_fork+0x45/0x80 [ 568.761596][ T25] ret_from_fork_asm+0x1a/0x30 [ 568.767934][ T25] [ 568.767934][ T25] other info that might help us debug this: [ 568.767934][ T25] [ 568.780184][ T25] Possible unsafe locking scenario: [ 568.780184][ T25] [ 568.789102][ T25] CPU0 CPU1 [ 568.795539][ T25] ---- ---- [ 568.801958][ T25] lock(sk_lock-AF_INET); [ 568.807241][ T25] lock(rtnl_mutex); [ 568.815025][ T25] lock(sk_lock-AF_INET); [ 568.823330][ T25] lock(rtnl_mutex); [ 568.828092][ T25] [ 568.828092][ T25] *** DEADLOCK *** [ 568.828092][ T25] [ 568.837843][ T25] 3 locks held by kworker/1:0/25: [ 568.843849][ T25] #0: ffff88814cfdad48 ((wq_completion)smc_hs_wq){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 568.856680][ T25] #1: ffffc900001f7d80 ((work_completion)(&smc->connect_work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 568.870759][ T25] #2: ffff88805f21bbd8 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53c/0xae0 [ 568.882445][ T25] [ 568.882445][ T25] stack backtrace: [ 568.889491][ T25] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 568.902177][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 568.914257][ T25] Workqueue: smc_hs_wq smc_connect_work [ 568.920905][ T25] Call Trace: [ 568.924826][ T25] [ 568.928329][ T25] dump_stack_lvl+0x116/0x1f0 [ 568.933936][ T25] print_circular_bug+0x41c/0x610 [ 568.939963][ T25] check_noncircular+0x31a/0x400 [ 568.945888][ T25] ? __pfx_check_noncircular+0x10/0x10 [ 568.952441][ T25] ? __lock_acquire+0x2077/0x3c40 [ 568.958505][ T25] ? lockdep_lock+0xc6/0x200 [ 568.964005][ T25] ? __pfx_lockdep_lock+0x10/0x10 [ 568.970030][ T25] __lock_acquire+0x249e/0x3c40 [ 568.976063][ T25] ? __pfx___lock_acquire+0x10/0x10 [ 568.982298][ T25] ? __pfx_lock_release+0x10/0x10 [ 568.988311][ T25] lock_acquire.part.0+0x11b/0x380 [ 568.994439][ T25] ? smc_vlan_by_tcpsk+0x251/0x620 [ 569.000563][ T25] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 569.007309][ T25] ? rcu_is_watching+0x12/0xc0 [ 569.013013][ T25] ? trace_lock_acquire+0x14e/0x1f0 [ 569.019242][ T25] ? smc_vlan_by_tcpsk+0x251/0x620 [ 569.025364][ T25] ? lock_acquire+0x2f/0xb0 [ 569.030750][ T25] ? smc_vlan_by_tcpsk+0x251/0x620 [ 569.036873][ T25] __mutex_lock+0x19b/0xa60 [ 569.042282][ T25] ? smc_vlan_by_tcpsk+0x251/0x620 [ 569.048402][ T25] ? smc_vlan_by_tcpsk+0x251/0x620 [ 569.054528][ T25] ? __pfx___mutex_lock+0x10/0x10 [ 569.060545][ T25] ? smc_vlan_by_tcpsk+0x32e/0x620 [ 569.066666][ T25] ? smc_vlan_by_tcpsk+0x251/0x620 [ 569.072785][ T25] smc_vlan_by_tcpsk+0x251/0x620 [ 569.078702][ T25] ? __pfx_smc_vlan_by_tcpsk+0x10/0x10 [ 569.085239][ T25] __smc_connect+0x466/0x4890 [ 569.090841][ T25] ? __pfx___smc_connect+0x10/0x10 [ 569.096956][ T25] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 569.103390][ T25] ? mark_held_locks+0x9f/0xe0 [ 569.109108][ T25] ? __local_bh_enable_ip+0xa4/0x120 [ 569.115441][ T25] smc_connect_work+0x54f/0xae0 [ 569.121247][ T25] ? __pfx_smc_connect_work+0x10/0x10 [ 569.127680][ T25] ? lock_acquire+0x2f/0xb0 [ 569.133066][ T25] ? process_one_work+0x8bb/0x1b30 [ 569.139187][ T25] process_one_work+0x958/0x1b30 [ 569.145097][ T25] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 569.151845][ T25] ? __pfx_process_one_work+0x10/0x10 [ 569.158272][ T25] ? rcu_is_watching+0x12/0xc0 [ 569.163981][ T25] ? assign_work+0x1a0/0x250 [ 569.169484][ T25] worker_thread+0x6c8/0xf00 [ 569.174977][ T25] ? __pfx_worker_thread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 569.181092][ T25] kthread+0x2c1/0x3a0 [ 569.185959][ T25] ? _raw_spin_unlock_irq+0x23/0x50 [ 569.192181][ T25] ? __pfx_kthread+0x10/0x10 [ 569.197684][ T25] ret_from_fork+0x45/0x80 [ 569.202967][ T25] ? __pfx_kthread+0x10/0x10 [ 569.208467][ T25] ret_from_fork_asm+0x1a/0x30 [ 569.214178][ T25]