last executing test programs: 1m40.589512495s ago: executing program 1 (id=199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd50009ddbdf251100000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20018048}, 0x0) 1m40.38630657s ago: executing program 1 (id=202): r0 = socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) sendmsg$auto_NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4005}, 0x24008010) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2) 1m40.229362337s ago: executing program 1 (id=203): lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x100000000000001c, 0x280000000000, 0x63, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x80000008040000a, 0x40000402, 0x7, 0x8, 0xffffffff80000000, 0x800000000000b, 0x6, 0x240000100103}) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @raw=0x1, 0x1, @_sigev_thread={0x0, 0x0}}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r0 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) 1m40.03663027s ago: executing program 1 (id=207): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x22, 0x80000, 0xd67d) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) 1m39.824477248s ago: executing program 1 (id=209): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) tkill$auto(0x1, 0x7) 1m38.995687605s ago: executing program 1 (id=218): socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file1\x00', 0x87b7d, 0x37e5c9853cd1b8ea) memfd_secret$auto(0x0) copy_file_range$auto(0x6, 0x0, 0x5, 0x0, 0x5, 0x0) 1m38.532427076s ago: executing program 32 (id=218): socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file1\x00', 0x87b7d, 0x37e5c9853cd1b8ea) memfd_secret$auto(0x0) copy_file_range$auto(0x6, 0x0, 0x5, 0x0, 0x5, 0x0) 2.641560019s ago: executing program 4 (id=1114): mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) 1.941122409s ago: executing program 0 (id=1120): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='d\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.827343381s ago: executing program 4 (id=1122): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x1000, 0xdf, 0x9b72, 0x400, 0x28000) fstatfs$auto(0x3, 0x0) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x83) 1.72929413s ago: executing program 0 (id=1124): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) 1.673893086s ago: executing program 3 (id=1125): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(r0, 0x6, 0x19, 0x0, 0x4) 1.630703916s ago: executing program 4 (id=1126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r2, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x890) 1.464307376s ago: executing program 3 (id=1128): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r0 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) pread64$auto(r0, 0x0, 0x28, 0x5) 1.449435261s ago: executing program 2 (id=1129): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x78, 0x0, 0xd) 1.435752058s ago: executing program 4 (id=1130): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 1.363149605s ago: executing program 0 (id=1131): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) getgroups$auto(0xc5f1, 0x0) 1.064806956s ago: executing program 2 (id=1132): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_min_pages_to_scan\x00', 0x88282, 0x0) write$auto(0x3, 0x0, 0xfdef) 864.225299ms ago: executing program 2 (id=1133): close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x742, 0x0) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7ffff000) 837.682594ms ago: executing program 3 (id=1134): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) r0 = open(&(0x7f0000000100)='./cgroup\x00', 0x0, 0x8734e30457582d08) open_by_handle_at$auto(r0, 0x0, 0xffffffff) 756.86148ms ago: executing program 0 (id=1135): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pread64$auto(r0, 0x0, 0x3e6f, 0x5) 737.525959ms ago: executing program 3 (id=1136): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x200, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) bpf$auto(0x2, 0x0, 0xb) bpf$auto(0x1b, &(0x7f0000000380)=@task_fd_query={0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x8, 0xffffffffffffffff, 0x8}, 0x92) 668.618457ms ago: executing program 4 (id=1137): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL802154_CMD_STOP_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x8890}, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x19, &(0x7f00000000c0), 0x0) 631.153439ms ago: executing program 2 (id=1138): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x80802, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) close_range$auto(0x2, 0x8, 0x0) 597.020605ms ago: executing program 3 (id=1139): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) clone$auto(0x3, 0x9, 0x0, 0x0, 0x10001) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x3, 0x0, 0x0) 523.690034ms ago: executing program 0 (id=1140): r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r2) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf251b0000000c00018008000100", @ANYRES32=r1, @ANYBLOB="0c00028008000340d595"], 0x90}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000810) 442.614843ms ago: executing program 2 (id=1141): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) iopl$auto(0x3) io_uring_setup$auto(0x4c2, 0x0) munmap$auto(0x20001000, 0x7fb3) syz_clone3(&(0x7f0000000300)={0x28020000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10.135871ms ago: executing program 4 (id=1142): socket(0x2b, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x1001, 0x5, 0x40, 0x1ffde, 0x9, 0x3, 0x9, 0x2, 0x80003, 0x4, 0x200000000001, 0xbd, 0x3, 0xb, 0x10007, 0x80, 0x2a0, 0x0, 0xa, 0x22000, 0x2, 0x4, 0x84}, 0x1fe, 0x9) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) unshare$auto(0x40000080) 10.039706ms ago: executing program 2 (id=1143): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x1000, 0x400000, 0x4) io_uring_setup$auto(0x40000002c55, 0x0) write$auto(0x3, 0x0, 0x3f00) 9.97186ms ago: executing program 3 (id=1144): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x0) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) 0s ago: executing program 0 (id=1150): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r0 = socket(0x2, 0x3, 0xa) getsockopt$auto(r0, 0x0, 0x30, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. [ 89.089492][ T5826] cgroup: Unknown subsys name 'net' [ 89.221781][ T5826] cgroup: Unknown subsys name 'cpuset' [ 89.231510][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.989938][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.181467][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.190857][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.199489][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.208014][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.216327][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.224591][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.233176][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.244989][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.253225][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.263744][ T5151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.271635][ T5151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.300034][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.315156][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.332898][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.337355][ T5151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.349683][ T5151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.357082][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.358320][ T5151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.372295][ T5151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.380200][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.851015][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 93.990969][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 94.144526][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.152396][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.160104][ T5836] bridge_slave_0: entered allmulticast mode [ 94.168312][ T5836] bridge_slave_0: entered promiscuous mode [ 94.181797][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.189358][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.196518][ T5836] bridge_slave_1: entered allmulticast mode [ 94.204090][ T5836] bridge_slave_1: entered promiscuous mode [ 94.224793][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 94.262563][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 94.303875][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.311297][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.318846][ T5837] bridge_slave_0: entered allmulticast mode [ 94.326091][ T5837] bridge_slave_0: entered promiscuous mode [ 94.368884][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.376041][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.384189][ T5837] bridge_slave_1: entered allmulticast mode [ 94.392390][ T5837] bridge_slave_1: entered promiscuous mode [ 94.427399][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.498215][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.531766][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.586807][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.615205][ T5836] team0: Port device team_slave_0 added [ 94.637006][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.644407][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.651880][ T5839] bridge_slave_0: entered allmulticast mode [ 94.660193][ T5839] bridge_slave_0: entered promiscuous mode [ 94.697799][ T5836] team0: Port device team_slave_1 added [ 94.703986][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.711247][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.719003][ T5839] bridge_slave_1: entered allmulticast mode [ 94.726283][ T5839] bridge_slave_1: entered promiscuous mode [ 94.760555][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.767816][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.774988][ T5838] bridge_slave_0: entered allmulticast mode [ 94.782992][ T5838] bridge_slave_0: entered promiscuous mode [ 94.825765][ T5837] team0: Port device team_slave_0 added [ 94.836539][ T5837] team0: Port device team_slave_1 added [ 94.843152][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.850595][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.857914][ T5838] bridge_slave_1: entered allmulticast mode [ 94.865197][ T5838] bridge_slave_1: entered promiscuous mode [ 94.901401][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.908473][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.935024][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.951026][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.993857][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.003830][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.011132][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.038058][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.061387][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.087999][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.158364][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.165367][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.191415][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.204390][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.212252][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.238948][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.253198][ T5838] team0: Port device team_slave_0 added [ 95.262733][ T5838] team0: Port device team_slave_1 added [ 95.272568][ T5839] team0: Port device team_slave_0 added [ 95.288251][ T5852] Bluetooth: hci0: command tx timeout [ 95.289780][ T5839] team0: Port device team_slave_1 added [ 95.367909][ T5852] Bluetooth: hci2: command tx timeout [ 95.412366][ T5837] hsr_slave_0: entered promiscuous mode [ 95.420136][ T5837] hsr_slave_1: entered promiscuous mode [ 95.441696][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.449084][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.475247][ T55] Bluetooth: hci3: command tx timeout [ 95.475811][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.481180][ T5852] Bluetooth: hci1: command tx timeout [ 95.497970][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.504925][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.533674][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.551110][ T5836] hsr_slave_0: entered promiscuous mode [ 95.557794][ T5836] hsr_slave_1: entered promiscuous mode [ 95.563916][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.572017][ T5836] Cannot create hsr debugfs directory [ 95.597691][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.604697][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.630821][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.659777][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.666767][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.693263][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.839171][ T5838] hsr_slave_0: entered promiscuous mode [ 95.845754][ T5838] hsr_slave_1: entered promiscuous mode [ 95.852601][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.862820][ T5838] Cannot create hsr debugfs directory [ 95.938426][ T5839] hsr_slave_0: entered promiscuous mode [ 95.944893][ T5839] hsr_slave_1: entered promiscuous mode [ 95.952333][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.960088][ T5839] Cannot create hsr debugfs directory [ 96.345897][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.362648][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.377801][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.400966][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.464003][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.485562][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.500436][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.516273][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.615626][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.633032][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.646502][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.659220][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.766833][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.778117][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.809720][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.831878][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.863079][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.963133][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.975802][ T47] cfg80211: failed to load regulatory.db [ 97.012119][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.019449][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.042318][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.082835][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.094839][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.102035][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.126776][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.181932][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.189152][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.221558][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.228829][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.242973][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.268158][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.275389][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.296651][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.322339][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.329537][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.350855][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.368015][ T5852] Bluetooth: hci0: command tx timeout [ 97.394382][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.401593][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.431813][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.438968][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.448937][ T5852] Bluetooth: hci2: command tx timeout [ 97.492985][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.527606][ T55] Bluetooth: hci3: command tx timeout [ 97.533158][ T5852] Bluetooth: hci1: command tx timeout [ 97.696735][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.886101][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.043914][ T5836] veth0_vlan: entered promiscuous mode [ 98.103118][ T5836] veth1_vlan: entered promiscuous mode [ 98.134174][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.154391][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.180835][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.220973][ T5836] veth0_macvtap: entered promiscuous mode [ 98.273041][ T5836] veth1_macvtap: entered promiscuous mode [ 98.313287][ T5838] veth0_vlan: entered promiscuous mode [ 98.341893][ T5837] veth0_vlan: entered promiscuous mode [ 98.359358][ T5839] veth0_vlan: entered promiscuous mode [ 98.372846][ T5838] veth1_vlan: entered promiscuous mode [ 98.393000][ T5837] veth1_vlan: entered promiscuous mode [ 98.404082][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.419116][ T5839] veth1_vlan: entered promiscuous mode [ 98.457438][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.495723][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.506103][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.515220][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.524292][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.549102][ T5837] veth0_macvtap: entered promiscuous mode [ 98.580620][ T5837] veth1_macvtap: entered promiscuous mode [ 98.608740][ T5838] veth0_macvtap: entered promiscuous mode [ 98.634216][ T5839] veth0_macvtap: entered promiscuous mode [ 98.645342][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.657055][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.669035][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.693772][ T5838] veth1_macvtap: entered promiscuous mode [ 98.707188][ T5839] veth1_macvtap: entered promiscuous mode [ 98.734603][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.750072][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.762634][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.799484][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.810602][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.821266][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.831125][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.853498][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.864530][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.874655][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.886133][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.898797][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.911450][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.922234][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.932186][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.942798][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.954751][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.966228][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.966869][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.985461][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.999347][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.009224][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.019779][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.029696][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.040241][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.052289][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.074269][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.083463][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.092444][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.101215][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.121395][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.135541][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.145984][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.156456][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.166369][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.176865][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.188471][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.227063][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.241301][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.250887][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.260453][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.272205][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.282030][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.448280][ T5852] Bluetooth: hci0: command tx timeout [ 99.468954][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.499867][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.509227][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.527974][ T5852] Bluetooth: hci2: command tx timeout [ 99.553427][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.589253][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.607405][ T5852] Bluetooth: hci1: command tx timeout [ 99.607744][ T55] Bluetooth: hci3: command tx timeout [ 99.716909][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.738912][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.848068][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.855954][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.878982][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.886946][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.001058][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.017975][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.588466][ T5922] Zero length message leads to an empty skb [ 100.822797][ T5924] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.527755][ T5852] Bluetooth: hci0: command tx timeout [ 101.618529][ T5852] Bluetooth: hci2: command tx timeout [ 101.687342][ T5852] Bluetooth: hci3: command tx timeout [ 101.702985][ T5852] Bluetooth: hci1: command tx timeout [ 102.602566][ T5964] process 'syz.2.24' launched './file0' with NULL argv: empty string added [ 103.483159][ T5979] netlink: 342 bytes leftover after parsing attributes in process `syz.1.30'. [ 108.658828][ T5852] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 109.367056][ T6103] tipc: Started in network mode [ 109.403366][ T6103] tipc: Node identity ee00, cluster identity 4711 [ 109.414932][ T6103] tipc: Node number set to 60928 [ 110.218895][ T6117] Invalid ELF header magic: != ELF [ 112.142623][ T6159] Invalid ELF header magic: != ELF [ 112.849165][ T6180] IPVS: length: 24 != 25769803800 [ 113.358728][ T6197] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.532075][ T6200] netlink: 'syz.3.125': attribute type 9 has an invalid length. [ 113.577280][ T6200] netlink: 330 bytes leftover after parsing attributes in process `syz.3.125'. [ 115.960914][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 116.466940][ T6271] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.679367][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 116.701746][ T6276] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 116.737884][ T6276] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 116.781374][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 117.625729][ T6289] Invalid ELF header magic: != ELF [ 117.691028][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 118.877789][ T6328] Device name cannot be null; rc = [-22] [ 119.893145][ T6347] batman_adv: Routing algorithm '60000' is not supported [ 121.914490][ T6392] netlink: 186 bytes leftover after parsing attributes in process `syz.1.203'. [ 124.228239][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.239441][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.253006][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.267906][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.275873][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.943653][ T6440] chnl_net:caif_netlink_parms(): no params data found [ 125.184749][ T5852] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 125.184792][ T5852] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 125.203754][ T5852] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 125.203825][ T5852] Bluetooth: hci3: adv larger than maximum supported [ 125.211412][ T5852] Bluetooth: hci3: Malformed LE Event: 0x0d [ 125.278389][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.287663][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.294907][ T6440] bridge_slave_0: entered allmulticast mode [ 125.314703][ T6440] bridge_slave_0: entered promiscuous mode [ 125.402137][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.409800][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.417370][ T6440] bridge_slave_1: entered allmulticast mode [ 125.425906][ T6440] bridge_slave_1: entered promiscuous mode [ 125.529721][ T6440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.562737][ T6440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.704949][ T6440] team0: Port device team_slave_0 added [ 125.742393][ T6440] team0: Port device team_slave_1 added [ 125.896215][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.907190][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.987172][ T6440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.010468][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.027162][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.091934][ T6440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.327621][ T5852] Bluetooth: hci1: command tx timeout [ 126.453424][ T6440] hsr_slave_0: entered promiscuous mode [ 126.469133][ T6440] hsr_slave_1: entered promiscuous mode [ 126.475624][ T6440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.487149][ T6440] Cannot create hsr debugfs directory [ 127.245463][ T5852] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 127.245507][ T5852] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 127.261964][ T5852] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 127.262013][ T5852] Bluetooth: hci2: adv larger than maximum supported [ 127.269427][ T5852] Bluetooth: hci2: Malformed LE Event: 0x0d [ 127.678691][ T6440] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.778893][ T6440] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.833352][ T6440] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.863395][ T6440] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.210799][ T6440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.254047][ T6440] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.285808][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.293054][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.349839][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.357054][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.407671][ T5852] Bluetooth: hci1: command tx timeout [ 128.954158][ T6440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.449214][ T6540] netlink: 'syz.0.258': attribute type 3 has an invalid length. [ 129.673564][ T6440] veth0_vlan: entered promiscuous mode [ 129.725502][ T6440] veth1_vlan: entered promiscuous mode [ 129.816936][ T6440] veth0_macvtap: entered promiscuous mode [ 129.862206][ T6440] veth1_macvtap: entered promiscuous mode [ 129.944839][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.989921][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.007418][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.049373][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.080161][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.108368][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.118659][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.147722][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.178218][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.200601][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.231320][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.250687][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.272961][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.297214][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.317635][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.340449][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.367323][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.389076][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.441718][ T6440] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.479181][ T6440] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.491632][ T5852] Bluetooth: hci1: command tx timeout [ 130.523135][ T6440] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.546496][ T6440] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.903012][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.923988][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.040220][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.062937][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.328480][ T6589] netlink: 350 bytes leftover after parsing attributes in process `syz.3.273'. [ 132.409754][ T5852] Bluetooth: hci1: unexpected event 0x04 length: 459 > 10 [ 132.410054][ T5852] Bluetooth: hci1: connection err: -111 [ 132.568069][ T5852] Bluetooth: hci1: command tx timeout [ 133.054880][ T6608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.280'. [ 133.144394][ T6608] macsec0: entered promiscuous mode [ 133.167989][ T6608] macsec0: entered allmulticast mode [ 133.182483][ T6608] veth1_macvtap: entered allmulticast mode [ 133.457705][ T6613] syz.2.282 (6613): /proc/6612/oom_adj is deprecated, please use /proc/6612/oom_score_adj instead. [ 133.628435][ T6615] netlink: 350 bytes leftover after parsing attributes in process `syz.3.283'. [ 134.669036][ T6627] Invalid ELF header magic: != ELF [ 134.726360][ T6644] tipc: Trying to set illegal importance in message [ 134.972832][ T6648] capability: warning: `syz.4.296' uses 32-bit capabilities (legacy support in use) [ 135.927345][ T30] audit: type=1804 audit(1744465069.673:2): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.304" name="/newroot/76/file0" dev="tmpfs" ino=404 res=1 errno=0 [ 136.001322][ T30] audit: type=1800 audit(1744465069.683:3): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.304" name="file0" dev="tmpfs" ino=404 res=0 errno=0 [ 136.074653][ T30] audit: type=1800 audit(1744465069.713:4): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.304" name="file0" dev="tmpfs" ino=404 res=0 errno=0 [ 137.937885][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.944559][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.079617][ T6800] syz.4.345 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 140.121740][ T6803] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.128319][ T6803] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.171146][ T6803] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.244523][ T6803] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.250961][ T6803] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.308548][ T6803] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.323580][ T6803] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.326074][ T6809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.348'. [ 140.344615][ T6803] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.364106][ T6809] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 140.393409][ T6803] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.402825][ T6803] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.417394][ T6803] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.469099][ T6803] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.676786][ T6838] syz.4.362 uses obsolete (PF_INET,SOCK_PACKET) [ 142.177209][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.255986][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.327409][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.408279][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.264905][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.328967][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.408462][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.483484][ T6916] netlink: 19 bytes leftover after parsing attributes in process `syz.2.388'. [ 144.492920][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.906210][ T6929] netlink: 'syz.2.391': attribute type 9 has an invalid length. [ 145.383348][ T6931] mmap: syz.4.392 (6931) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 145.744408][ T6952] kafs: addr_prefs: Invalid Command [ 145.923310][ T6955] netlink: 19 bytes leftover after parsing attributes in process `syz.2.402'. [ 146.337413][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.407281][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.487293][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.567332][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.751105][ T5852] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 153.751147][ T5852] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 153.766275][ T5852] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 153.766306][ T5852] Bluetooth: hci1: Unknown advertising packet type: 0x74 [ 153.773534][ T5852] Bluetooth: hci1: adv larger than maximum supported [ 153.781453][ T5852] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 153.788862][ T5852] Bluetooth: hci1: adv larger than maximum supported [ 153.795979][ T5852] Bluetooth: hci1: adv larger than maximum supported [ 153.802795][ T5852] Bluetooth: hci1: Malformed LE Event: 0x0d [ 154.021863][ T7159] nbd: socks must be embedded in a SOCK_ITEM attr [ 154.058147][ T7159] block nbd1: shutting down sockets [ 154.792043][ T7183] netlink: 342 bytes leftover after parsing attributes in process `syz.3.484'. [ 154.808664][ T7183] netlink: 342 bytes leftover after parsing attributes in process `syz.3.484'. [ 155.218440][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.491'. [ 155.263028][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.491'. [ 156.173649][ T7229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.505'. [ 156.185519][ T7229] ipvlan0: entered allmulticast mode [ 156.193364][ T7229] veth0_vlan: entered allmulticast mode [ 156.758423][ T7244] netlink: 'syz.3.511': attribute type 9 has an invalid length. [ 156.766224][ T7244] netlink: 330 bytes leftover after parsing attributes in process `syz.3.511'. [ 156.807905][ T7247] nbd: socks must be embedded in a SOCK_ITEM attr [ 156.815552][ T7247] block nbd1: shutting down sockets [ 157.365014][ T30] audit: type=1800 audit(1744465091.113:5): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.521" name=22050820 dev="tmpfs" ino=719 res=0 errno=0 [ 157.973501][ T7273] MTRR 1 not used [ 158.195815][ T7282] ptrace attach of "./syz-executor exec"[5837] was attempted by ""[7282] [ 158.384012][ T7289] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 158.924949][ T7305] netlink: 206 bytes leftover after parsing attributes in process `syz.4.539'. [ 161.319544][ T7367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.563'. [ 161.435324][ T7364] sctp: [Deprecated]: syz.4.560 (pid 7364) Use of int in max_burst socket option deprecated. [ 161.435324][ T7364] Use struct sctp_assoc_value instead [ 161.435485][ T7367] team0: Port device team_slave_0 removed [ 164.290456][ T7415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.582'. [ 164.424319][ T7415] team0: Port device team_slave_0 removed [ 166.728597][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.736349][ T7419] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 167.461962][ T7419] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.473600][ T7419] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.507544][ T7419] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.015817][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.614'. [ 168.139591][ T7498] team0: Port device team_slave_0 removed [ 168.807233][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.239425][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 169.527385][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.533474][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 172.519386][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 176.276823][ T7654] program syz.0.682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.666984][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 177.866528][ T7676] could not allocate digest TFM handle  [ 181.958769][ T7783] Invalid ELF header magic: != ELF [ 184.666863][ T7855] sock: sock_timestamping_bind_phc: sock not bind to device [ 185.093442][ T7859] Invalid ELF header magic: != ELF [ 185.184916][ T7869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.764'. [ 187.659488][ T7938] netlink: 338 bytes leftover after parsing attributes in process `syz.0.787'. [ 190.533891][ T8035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.832'. [ 190.541956][ T8037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.834'. [ 190.547986][ T8035] vxcan1: entered promiscuous mode [ 190.970143][ T8052] CIFS: VFS: Invalid SecurityFlags: 0x00 [ 191.442400][ T8065] netlink: 'syz.0.847': attribute type 1 has an invalid length. [ 192.520735][ T8096] nbd3: detected capacity change from 0 to 68719476736 [ 192.561248][ T7902] block nbd3: Send control failed (result -22) [ 192.582510][ T7902] block nbd3: Request send failed, requeueing [ 192.594839][ T5844] block nbd3: Receive control failed (result -32) [ 192.611080][ T25] block nbd3: Dead connection, failed to find a fallback [ 192.618694][ T25] block nbd3: shutting down sockets [ 192.624310][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.635646][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.650127][ T7902] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.659693][ T7902] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.669299][ T7902] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.678929][ T7902] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.686919][ T7902] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.699400][ T7902] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.707751][ T7902] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.718234][ T7902] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.726241][ T7902] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.737252][ T7902] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.745312][ T7902] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.756128][ T7902] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.765570][ T7902] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.775820][ T7902] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.787413][ T7902] ldm_validate_partition_table(): Disk read failed. [ 192.807451][ T7902] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.837771][ T7902] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.858071][ T7902] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.887292][ T7902] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.895606][ T7902] Dev nbd3: unable to read RDB block 0 [ 192.913107][ T7902] nbd3: unable to read partition table [ 192.944235][ T7902] ldm_validate_partition_table(): Disk read failed. [ 192.974654][ T7902] Dev nbd3: unable to read RDB block 0 [ 192.987967][ T7902] nbd3: unable to read partition table [ 194.764701][ T8140] qrtr: Invalid version 0 [ 195.187984][ T8152] netlink: 40 bytes leftover after parsing attributes in process `syz.2.882'. [ 198.195204][ T8220] qrtr: Invalid version 0 [ 199.372064][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.382629][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.377368][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 200.768675][ T8290] GUP no longer grows the stack in syz.4.939 (8290): 14000-401000 (4000) [ 200.795984][ T8290] CPU: 1 UID: 0 PID: 8290 Comm: syz.4.939 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 200.796028][ T8290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 200.796047][ T8290] Call Trace: [ 200.796057][ T8290] [ 200.796074][ T8290] dump_stack_lvl+0x16c/0x1f0 [ 200.796132][ T8290] gup_vma_lookup+0x1d2/0x220 [ 200.796172][ T8290] __get_user_pages+0x234/0x36f0 [ 200.796223][ T8290] ? process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 200.796264][ T8290] ? look_up_lock_class+0x59/0x150 [ 200.796309][ T8290] ? __pfx___get_user_pages+0x10/0x10 [ 200.796349][ T8290] ? process_vm_rw+0x2ff/0x360 [ 200.796375][ T8290] ? __x64_sys_process_vm_readv+0xe2/0x1c0 [ 200.796405][ T8290] ? do_syscall_64+0xcd/0x260 [ 200.796462][ T8290] __gup_longterm_locked+0x20d/0x1850 [ 200.796518][ T8290] ? __pfx___gup_longterm_locked+0x10/0x10 [ 200.796581][ T8290] pin_user_pages_remote+0xed/0x140 [ 200.796625][ T8290] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 200.796664][ T8290] ? mm_access+0x22d/0x2e0 [ 200.796726][ T8290] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 200.796766][ T8290] ? futex_wait_queue+0x14c/0x220 [ 200.796795][ T8290] ? futex_unqueue+0xba/0x140 [ 200.796846][ T8290] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 200.796881][ T8290] ? iovec_from_user+0xbb/0x140 [ 200.796943][ T8290] ? iovec_from_user+0xbb/0x140 [ 200.796987][ T8290] process_vm_rw+0x2ff/0x360 [ 200.797019][ T8290] ? __pfx_process_vm_rw+0x10/0x10 [ 200.797063][ T8290] ? task_mm_cid_work+0x6b9/0x910 [ 200.797137][ T8290] ? xfd_validate_state+0x5d/0x180 [ 200.797182][ T8290] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 200.797216][ T8290] ? do_syscall_64+0x91/0x260 [ 200.797273][ T8290] ? lockdep_hardirqs_on+0x7c/0x110 [ 200.797315][ T8290] do_syscall_64+0xcd/0x260 [ 200.797367][ T8290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.797399][ T8290] RIP: 0033:0x7fbf3a98d169 [ 200.797425][ T8290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.797456][ T8290] RSP: 002b:00007fbf3b841038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 200.797485][ T8290] RAX: ffffffffffffffda RBX: 00007fbf3aba5fa0 RCX: 00007fbf3a98d169 [ 200.797505][ T8290] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 000000000000019b [ 200.797524][ T8290] RBP: 00007fbf3aa0e990 R08: 0000000000000003 R09: 0000000000000000 [ 200.797542][ T8290] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 200.797560][ T8290] R13: 0000000000000000 R14: 00007fbf3aba5fa0 R15: 00007ffda7155fa8 [ 200.797600][ T8290] [ 201.202439][ T8309] netlink: 194 bytes leftover after parsing attributes in process `syz.4.946'. [ 202.336760][ T8344] openvswitch: netlink: IP tunnel TTL not specified. [ 206.009585][ T8419] kexec: Could not allocate control_code_buffer [ 208.026577][ T8501] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to 0. Contact your vendor for updates. [ 208.545834][ T8524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 209.458558][ T5844] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 209.458603][ T5844] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 209.474267][ T5844] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 209.474313][ T5844] Bluetooth: hci2: adv larger than maximum supported [ 209.482042][ T5844] Bluetooth: hci2: Malformed LE Event: 0x0d [ 209.742946][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.753458][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.762731][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.771686][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.780053][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.809946][ T8550] chnl_net:caif_netlink_parms(): no params data found [ 210.893199][ T8537] kexec: Could not allocate control_code_buffer [ 211.079470][ T8550] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.086760][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.108253][ T8550] bridge_slave_0: entered allmulticast mode [ 211.116383][ T8550] bridge_slave_0: entered promiscuous mode [ 211.138902][ T8550] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.156439][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.167649][ T8550] bridge_slave_1: entered allmulticast mode [ 211.187518][ T8550] bridge_slave_1: entered promiscuous mode [ 211.318236][ T8550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.355069][ T8550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.513893][ T8550] team0: Port device team_slave_0 added [ 211.542524][ T8550] team0: Port device team_slave_1 added [ 211.650833][ T8550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.677752][ T8550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.747275][ T8550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.790283][ T8550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.809045][ T8550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.838018][ T8550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.849497][ T5844] Bluetooth: hci4: command tx timeout [ 211.937486][ T8550] hsr_slave_0: entered promiscuous mode [ 211.944404][ T8550] hsr_slave_1: entered promiscuous mode [ 211.951401][ T8550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.959648][ T8550] Cannot create hsr debugfs directory [ 212.265688][ T8550] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.364278][ T8550] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.459538][ T8550] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.580325][ T8550] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.891908][ T8629] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1069'. [ 212.938443][ T8550] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.979471][ T8550] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.993054][ T8550] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.020000][ T8550] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.241153][ T8550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.272395][ T8550] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.306427][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.313684][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.339094][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.346302][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.926910][ T8550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.936810][ T5844] Bluetooth: hci4: command tx timeout [ 214.237015][ T8550] veth0_vlan: entered promiscuous mode [ 214.288157][ T8550] veth1_vlan: entered promiscuous mode [ 214.368435][ T8550] veth0_macvtap: entered promiscuous mode [ 214.394138][ T8550] veth1_macvtap: entered promiscuous mode [ 214.451418][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.477719][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.497545][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.508967][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.538439][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.561645][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.587295][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.607538][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.627250][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.665318][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.698696][ T8550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.741147][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.773444][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.794987][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.805897][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.816892][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.828409][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.839459][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.863597][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.892558][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.927266][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.959499][ T8550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.020596][ T8550] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.054872][ T8550] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.097278][ T8550] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.106074][ T8550] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.374524][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.396382][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.491478][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.506176][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.007532][ T5844] Bluetooth: hci4: command tx timeout [ 216.380463][ T5844] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 216.380506][ T5844] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 216.399030][ T5844] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 216.399076][ T5844] Bluetooth: hci3: adv larger than maximum supported [ 216.406193][ T5844] Bluetooth: hci3: Malformed LE Event: 0x0d [ 218.087350][ T5844] Bluetooth: hci4: command tx timeout [ 218.999686][ T5844] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 218.999733][ T5844] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 219.015848][ T5844] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 219.015907][ T5844] Bluetooth: hci4: adv larger than maximum supported [ 219.027003][ T5844] Bluetooth: hci4: Malformed LE Event: 0x0d [ 222.224305][ T5844] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 222.224349][ T5844] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 222.240585][ T5844] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 222.240624][ T5844] Bluetooth: hci1: adv larger than maximum supported [ 222.247864][ T5844] Bluetooth: hci1: Malformed LE Event: 0x0d [ 222.315517][ T8819] sg_write: data in/out 32732/16086 bytes for SCSI command 0x0-- guessing data in; [ 222.315517][ T8819] program syz.2.1143 not setting count and/or reply_len properly [ 222.433864][ T8822] [ 222.436257][ T8822] ====================================================== [ 222.443306][ T8822] WARNING: possible circular locking dependency detected [ 222.450360][ T8822] 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 Tainted: G I [ 222.459065][ T8822] ------------------------------------------------------ [ 222.466123][ T8822] syz.0.1150/8822 is trying to acquire lock: [ 222.472128][ T8822] ffff88801bb13f18 (sk_lock-AF_INET){+.+.}-{0:0}, at: sockopt_lock_sock+0x54/0x70 [ 222.477401][ T8716] caif:caif_disconnect_client(): nothing to disconnect [ 222.481424][ T8822] [ 222.481424][ T8822] but task is already holding lock: [ 222.481436][ T8822] ffffffff9012daa8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x1843/0x2220 [ 222.504815][ T8822] [ 222.504815][ T8822] which lock already depends on the new lock. [ 222.504815][ T8822] [ 222.515247][ T8822] [ 222.515247][ T8822] the existing dependency chain (in reverse order) is: [ 222.524275][ T8822] [ 222.524275][ T8822] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 222.531534][ T8822] __mutex_lock+0x199/0xb90 [ 222.536608][ T8822] smc_vlan_by_tcpsk+0x251/0x620 [ 222.542104][ T8822] __smc_connect+0x44b/0x4880 [ 222.547336][ T8822] smc_connect_work+0x54c/0xae0 [ 222.552761][ T8822] process_one_work+0x9cc/0x1b70 [ 222.558255][ T8822] worker_thread+0x6c8/0xf10 [ 222.563394][ T8822] kthread+0x3c2/0x780 [ 222.568018][ T8822] ret_from_fork+0x45/0x80 [ 222.572986][ T8822] ret_from_fork_asm+0x1a/0x30 [ 222.578310][ T8822] [ 222.578310][ T8822] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 222.585996][ T8822] __lock_acquire+0x1173/0x1ba0 [ 222.591412][ T8822] lock_acquire+0x179/0x350 [ 222.596472][ T8822] lock_sock_nested+0x41/0xf0 [ 222.601787][ T8822] sockopt_lock_sock+0x54/0x70 [ 222.607102][ T8822] do_ip_getsockopt+0x13e4/0x2220 [ 222.612667][ T8822] ip_getsockopt+0x9b/0x1e0 [ 222.617714][ T8822] raw_getsockopt+0x4d/0x1f0 [ 222.622843][ T8822] do_sock_getsockopt+0x3fc/0x800 [ 222.628426][ T8822] __sys_getsockopt+0x12f/0x260 [ 222.633822][ T8822] __x64_sys_getsockopt+0xbd/0x160 [ 222.639487][ T8822] do_syscall_64+0xcd/0x260 [ 222.644550][ T8822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.650990][ T8822] [ 222.650990][ T8822] other info that might help us debug this: [ 222.650990][ T8822] [ 222.661236][ T8822] Possible unsafe locking scenario: [ 222.661236][ T8822] [ 222.668694][ T8822] CPU0 CPU1 [ 222.674067][ T8822] ---- ---- [ 222.679442][ T8822] lock(rtnl_mutex); [ 222.683450][ T8822] lock(sk_lock-AF_INET); [ 222.690410][ T8822] lock(rtnl_mutex); [ 222.696934][ T8822] lock(sk_lock-AF_INET); [ 222.701368][ T8822] [ 222.701368][ T8822] *** DEADLOCK *** [ 222.701368][ T8822] [ 222.709519][ T8822] 1 lock held by syz.0.1150/8822: [ 222.714553][ T8822] #0: ffffffff9012daa8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x1843/0x2220 [ 222.724098][ T8822] [ 222.724098][ T8822] stack backtrace: [ 222.730008][ T8822] CPU: 1 UID: 0 PID: 8822 Comm: syz.0.1150 Tainted: G I 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 222.730048][ T8822] Tainted: [I]=FIRMWARE_WORKAROUND [ 222.730058][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.730073][ T8822] Call Trace: [ 222.730082][ T8822] [ 222.730093][ T8822] dump_stack_lvl+0x116/0x1f0 [ 222.730135][ T8822] print_circular_bug+0x275/0x350 [ 222.730178][ T8822] check_noncircular+0x14c/0x170 [ 222.730227][ T8822] __lock_acquire+0x1173/0x1ba0 [ 222.730272][ T8822] ? do_ip_getsockopt+0x1843/0x2220 [ 222.730301][ T8822] lock_acquire+0x179/0x350 [ 222.730323][ T8822] ? sockopt_lock_sock+0x54/0x70 [ 222.730362][ T8822] lock_sock_nested+0x41/0xf0 [ 222.730395][ T8822] ? sockopt_lock_sock+0x54/0x70 [ 222.730428][ T8822] sockopt_lock_sock+0x54/0x70 [ 222.730461][ T8822] do_ip_getsockopt+0x13e4/0x2220 [ 222.730490][ T8822] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 222.730515][ T8822] ? schedule+0x2d7/0x3a0 [ 222.730550][ T8822] ? schedule+0xf1/0x3a0 [ 222.730581][ T8822] ? futex_wait_queue+0x14c/0x220 [ 222.730605][ T8822] ? futex_unqueue+0xba/0x140 [ 222.730641][ T8822] ? __futex_wait+0x323/0x3c0 [ 222.730665][ T8822] ? __pfx___futex_wait+0x10/0x10 [ 222.730693][ T8822] ? __lock_acquire+0xaa4/0x1ba0 [ 222.730736][ T8822] ? __pfx___might_resched+0x10/0x10 [ 222.730775][ T8822] ip_getsockopt+0x9b/0x1e0 [ 222.730801][ T8822] ? __pfx_ip_getsockopt+0x10/0x10 [ 222.730825][ T8822] ? __might_fault+0xe3/0x190 [ 222.730864][ T8822] ? __might_fault+0x13b/0x190 [ 222.730906][ T8822] raw_getsockopt+0x4d/0x1f0 [ 222.730929][ T8822] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 222.730971][ T8822] do_sock_getsockopt+0x3fc/0x800 [ 222.731013][ T8822] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 222.731052][ T8822] ? __fget_files+0x204/0x3c0 [ 222.731097][ T8822] __sys_getsockopt+0x12f/0x260 [ 222.731132][ T8822] __x64_sys_getsockopt+0xbd/0x160 [ 222.731163][ T8822] ? do_syscall_64+0x91/0x260 [ 222.731207][ T8822] ? lockdep_hardirqs_on+0x7c/0x110 [ 222.731243][ T8822] do_syscall_64+0xcd/0x260 [ 222.731282][ T8822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.731309][ T8822] RIP: 0033:0x7f0a0b98d169 [ 222.731330][ T8822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.731355][ T8822] RSP: 002b:00007f0a0c7f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 222.731378][ T8822] RAX: ffffffffffffffda RBX: 00007f0a0bba5fa0 RCX: 00007f0a0b98d169 [ 222.731395][ T8822] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 222.731410][ T8822] RBP: 00007f0a0ba0e990 R08: 0000000000000000 R09: 0000000000000000 [ 222.731425][ T8822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.731440][ T8822] R13: 0000000000000000 R14: 00007f0a0bba5fa0 R15: 00007ffee4c470d8 [ 222.731465][ T8822] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 223.829362][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.925368][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.010965][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.081584][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.181517][ T13] bridge_slave_1: left allmulticast mode [ 224.190266][ T13] bridge_slave_1: left promiscuous mode [ 224.199878][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.219797][ T13] bridge_slave_0: left allmulticast mode [ 224.225507][ T13] bridge_slave_0: left promiscuous mode [ 224.231614][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.405400][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.416468][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.429223][ T13] bond0 (unregistering): Released all slaves [ 224.643318][ T13] hsr_slave_0: left promiscuous mode [ 224.655695][ T13] hsr_slave_1: left promiscuous mode [ 224.661984][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.673580][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.681717][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.693989][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.704104][ T13] veth1_macvtap: left promiscuous mode [ 224.712019][ T13] veth0_macvtap: left promiscuous mode [ 224.717800][ T13] veth1_vlan: left promiscuous mode [ 224.723172][ T13] veth0_vlan: left promiscuous mode [ 224.866243][ T13] team0 (unregistering): Port device team_slave_1 removed