[ 86.527498][ T56] cfg80211: failed to load regulatory.db [ 99.781426][ C0] [ 99.782429][ C0] ============================= [ 99.784156][ C0] [ BUG: Invalid wait context ] [ 99.785978][ C0] 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 Not tainted [ 99.788555][ C0] ----------------------------- [ 99.790459][ C0] sshd/5295 is trying to lock: [ 99.792273][ C0] ffffffff8ea6a638 (stack_list_lock){-.-.}-{3:3}, at: __set_page_owner+0x5cb/0x800 [ 99.795784][ C0] other info that might help us debug this: [ 99.797948][ C0] context-{2:2} [ 99.799332][ C0] 1 lock held by sshd/5295: [ 99.801025][ C0] #0: ffff88801fc3e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 99.804612][ C0] stack backtrace: [ 99.805858][ C0] CPU: 0 UID: 0 PID: 5295 Comm: sshd Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 99.809237][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.812785][ C0] Call Trace: [ 99.813960][ C0] [ 99.814943][ C0] dump_stack_lvl+0x241/0x360 [ 99.816759][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.818641][ C0] ? __pfx__printk+0x10/0x10 [ 99.820258][ C0] ? stack_trace_save+0x118/0x1d0 [ 99.822245][ C0] __lock_acquire+0x15a8/0x2100 [ 99.824142][ C0] lock_acquire+0x1ed/0x550 [ 99.825856][ C0] ? __set_page_owner+0x5cb/0x800 [ 99.827778][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 99.829651][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 99.831720][ C0] ? __set_page_owner+0x5cb/0x800 [ 99.833560][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 99.835823][ C0] ? __kmalloc_cache_noprof+0x243/0x390 [ 99.837805][ C0] ? __set_page_owner+0x55f/0x800 [ 99.839628][ C0] __set_page_owner+0x5cb/0x800 [ 99.841394][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 99.843292][ C0] post_alloc_hook+0x1f3/0x230 [ 99.844965][ C0] get_page_from_freelist+0x365c/0x37a0 [ 99.846965][ C0] __alloc_pages_noprof+0x292/0x710 [ 99.848911][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 99.851040][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 99.852947][ C0] ? kernel_text_address+0xa7/0xe0 [ 99.855147][ C0] ? arch_stack_walk+0xfd/0x150 [ 99.857159][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 99.859142][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 99.861295][ C0] ? stack_trace_save+0x118/0x1d0 [ 99.863132][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 99.865136][ C0] ? alloc_pages_noprof+0x43/0x170 [ 99.866986][ C0] stack_depot_save_flags+0x666/0x830 [ 99.868957][ C0] kasan_save_stack+0x4f/0x60 [ 99.870569][ C0] ? kasan_save_stack+0x3f/0x60 [ 99.872311][ C0] ? __kasan_record_aux_stack+0xac/0xc0 [ 99.874268][ C0] ? task_work_add+0xd9/0x490 [ 99.875963][ C0] ? task_tick_fair+0x58c/0x7b0 [ 99.877653][ C0] ? sched_tick+0x21e/0x660 [ 99.879253][ C0] ? update_process_times+0x276/0x2f0 [ 99.881099][ C0] ? tick_nohz_handler+0x37c/0x500 [ 99.882890][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 99.884865][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 99.886754][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 99.888914][ C0] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 99.891211][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.893422][ C0] ? __phys_addr+0xba/0x170 [ 99.895035][ C0] __kasan_record_aux_stack+0xac/0xc0 [ 99.896989][ C0] task_work_add+0xd9/0x490 [ 99.898661][ C0] ? __pfx_task_work_add+0x10/0x10 [ 99.900541][ C0] ? task_scan_start+0x14c/0x430 [ 99.902377][ C0] ? task_scan_start+0x14c/0x430 [ 99.904214][ C0] ? task_scan_start+0x3f5/0x430 [ 99.906056][ C0] task_tick_fair+0x58c/0x7b0 [ 99.907708][ C0] sched_tick+0x21e/0x660 [ 99.909323][ C0] update_process_times+0x276/0x2f0 [ 99.911318][ C0] tick_nohz_handler+0x37c/0x500 [ 99.913168][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 99.915145][ C0] __hrtimer_run_queues+0x551/0xd30 [ 99.917190][ C0] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 99.919278][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 99.921235][ C0] ? kvm_clock_get_cycles+0x52/0x70 [ 99.922968][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 99.925145][ C0] hrtimer_interrupt+0x403/0xa40 [ 99.926841][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 99.928868][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 99.930860][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.932999][ C0] RIP: 0033:0x7fda7c72e92f [ 99.934543][ C0] Code: ff e9 0d b1 fe ff 49 c1 e8 03 49 39 f0 73 06 50 e8 7e ef ff ff e9 84 b1 fe ff 48 39 f2 73 06 50 e8 6e ef ff ff 48 89 f1 31 c0 aa c3 50 48 8d 3d b1 ae 08 00 e8 00 00 00 00 55 48 8d 2d bc ae [ 99.942010][ C0] RSP: 002b:00007ffeb3d0d748 EFLAGS: 00010246 [ 99.944306][ C0] RAX: 0000000000000000 RBX: 00000000002a0000 RCX: 0000000000026a10 [ 99.947116][ C0] RDX: ffffffffffffffff RSI: 0000000000298000 RDI: 00007fda7c396600 [ 99.950177][ C0] RBP: 00007fda7be84010 R08: 00007fda7be84010 R09: 0000000000000000 [ 99.953163][ C0] R10: 0000000000000022 R11: 0000000000000246 R12: 00000000002a0000 [ 99.956075][ C0] R13: 00007fda7c125010 R14: 0000000000298000 R15: 00007ffeb3d0d908 [ 99.959015][ C0] Warning: Permanently added '[localhost]:29358' (ED25519) to the list of known hosts. 2024/12/06 10:03:44 ignoring optional flag "sandboxArg"="0" 2024/12/06 10:03:45 parsed 1 programs [ 104.423817][ T5308] cgroup: Unknown subsys name 'net' [ 104.482728][ T5308] cgroup: Unknown subsys name 'cpuset' [ 104.486151][ T5308] cgroup: Unknown subsys name 'rlimit' [ 105.587886][ T5308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 108.062196][ T5330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.064897][ T5330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.067912][ T5330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.070634][ T5330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.074070][ T5330] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.076688][ T5330] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.331620][ T5325] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.113114][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.116052][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.201412][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.241110][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.753737][ T5346] chnl_net:caif_netlink_parms(): no params data found [ 109.903791][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.912522][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.929819][ T5346] bridge_slave_0: entered allmulticast mode [ 109.945114][ T5346] bridge_slave_0: entered promiscuous mode [ 109.952768][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.955234][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.957685][ T5346] bridge_slave_1: entered allmulticast mode [ 109.966210][ T5346] bridge_slave_1: entered promiscuous mode [ 110.001888][ T5346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.006353][ T5346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.018799][ T5346] team0: Port device team_slave_0 added [ 110.022100][ T5346] team0: Port device team_slave_1 added [ 110.030575][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.041557][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.050395][ T5346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.057250][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.059615][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.070337][ T5346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.085461][ T5346] hsr_slave_0: entered promiscuous mode [ 110.088063][ T5346] hsr_slave_1: entered promiscuous mode [ 110.140024][ T5346] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.144134][ T5346] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.148651][ T5346] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.152868][ T5346] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.186247][ T5346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.194514][ T5346] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.199047][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.201478][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.210602][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.213075][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.228636][ T5346] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.233805][ T5346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.306271][ T5346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.323629][ T5346] veth0_vlan: entered promiscuous mode [ 110.328998][ T5346] veth1_vlan: entered promiscuous mode [ 110.344353][ T5346] veth0_macvtap: entered promiscuous mode [ 110.348118][ T5346] veth1_macvtap: entered promiscuous mode [ 110.356855][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.374596][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.392496][ T5346] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.395747][ T5346] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.398778][ T5346] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.421088][ T5346] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/12/06 10:03:53 executed programs: 0 [ 110.576077][ T4660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.579463][ T4660] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.583370][ T4660] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.586074][ T4660] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.588789][ T4660] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 110.594531][ T4660] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.631163][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.637100][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.643101][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.651026][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.655570][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 110.659045][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.680240][ T5346] syz-executor (5346) used greatest stack depth: 19088 bytes left [ 110.722888][ T5330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.727910][ T5330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.739200][ T4660] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.742436][ T4660] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.745111][ T4660] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 110.747868][ T4660] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 VM DIAGNOSIS: 10:03:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff81a73cbc RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff901945b0 RBP=0000000000000000 RSP=ffffc9000042f900 R8 =ffffffff901945b7 R9 =1ffffffff20328b6 R10=dffffc0000000000 R11=fffffbfff20328b7 R12=ffff88801ac4da00 R13=ffff8880364996e0 R14=ffff88801ac4da00 R15=0000000000000282 RIP=ffffffff820a449e RFL=00000056 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005650b4fec048 CR3=000000000e736000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000002 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfa6e7a8bfa6e7a8 bfa6e7a8bfa6e7a8 bfa6e7a8bfa6e7a8 bfa6e7a8bfa6e7a8 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8346cd5a8346cd5a 8346cd5a8346cd5a 8346cd5a8346cd5a 8346cd5a8346cd5a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b92c8f7cb92c8f7c b92c8f7cb92c8f7c b92c8f7cb92c8f7c b92c8f7cb92c8f7c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6acffd976acffd97 6acffd976acffd97 6acffd976acffd97 6acffd976acffd97 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54e1913254e19132 54e1913254e19132 54e1913254e19132 54e1913254e19132 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dbc8c518dbc8c518 dbc8c518dbc8c518 dbc8c518dbc8c518 dbc8c518dbc8c518 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45e9b3b445e9b3b4 45e9b3b445e9b3b4 45e9b3b445e9b3b4 45e9b3b445e9b3b4 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800000006 0000000400000002 0000000700000005 0000000300000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0000000c000000 0c0000000c000000 0c0000000c000000 0c0000000c000000