syzkaller login: [ 92.039990][ T1929] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:46547' (ED25519) to the list of known hosts. 2026/11/05 09:16:07 parsed 1 programs 2026/11/05 09:16:07 serving rpc on tcp://35823 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x400000) [ 123.495154][ T5328] cgroup: Unknown subsys name 'net' [ 123.566626][ T5328] cgroup: Unknown subsys name 'cpuset' [ 123.574138][ T5328] cgroup: Unknown subsys name 'rlimit' [ 138.126896][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.127334][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 152.212065][ T1029] ata1.00: exception Emask 0x0 SAct 0x4000 SErr 0x0 action 0x6 frozen [ 152.212093][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 152.212101][ T1029] ata1.00: cmd 61/00:70:36:c1:04/20:00:00:00:00/40 tag 14 ncq dma 4194304 ou [ 152.212101][ T1029] res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout) [ 152.212131][ T1029] ata1.00: status: { DRDY } [ 152.212195][ T1029] ata1: hard resetting link [ 152.532628][ T1029] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 152.535757][ T1029] ata1.00: configured for UDMA/100 [ 152.539028][ T1029] ata1: EH complete Setting up swapspace version 1, size = 127995904 bytes [ 154.324244][ T5328] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 160.788682][ T5348] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 161.370695][ T5350] rxe_eth0 speed is unknown, defaulting to 1000 [ 161.417171][ T5350] rxe_eth0 speed is unknown, defaulting to 1000 [ 161.474230][ T5350] rxe_eth0 speed is unknown, defaulting to 1000 [ 162.487337][ T5349] syz-executor (5349) used greatest stack depth: 17968 bytes left [ 163.181565][ T5350] infiniband rxe0: set active [ 163.181583][ T5350] infiniband rxe0: added rxe_eth0 [ 163.262683][ T5350] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 163.262711][ T5350] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 163.262726][ T5350] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 164.045412][ T1929] rxe_eth0 speed is unknown, defaulting to 1000 [ 164.502912][ T5350] RDS/IB: rxe0: added [ 164.515655][ T5350] smc: adding ib device rxe0 with port count 1 [ 164.515753][ T5350] smc: ib device rxe0 port 1 has no pnetid [ 164.516634][ T1929] rxe_eth0 speed is unknown, defaulting to 1000 [ 164.566584][ T5350] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.670848][ T5395] rxe_eth0 speed is unknown, defaulting to 1000 [ 167.049173][ T5400] rxe_eth0 speed is unknown, defaulting to 1000 [ 167.451450][ T5401] rxe_eth0 speed is unknown, defaulting to 1000 [ 167.976788][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.976805][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.127190][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.127206][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.141541][ T5350] rxe_eth0 speed is unknown, defaulting to 1000 [ 168.743624][ T5350] rxe_eth0 speed is unknown, defaulting to 1000 [ 168.777710][ T5421] br_netfilter no longer supported in user namespaces [ 168.995506][ T5350] rxe_eth0 speed is unknown, defaulting to 1000 [ 169.190153][ T5350] rxe_eth0 speed is unknown, defaulting to 1000 [ 169.414160][ T5350] rxe_eth0 speed is unknown, defaulting to 1000 [ 169.671579][ T5350] rxe_eth0 speed is unknown, defaulting to 1000 [ 170.485732][ T5350] rxe_eth0 speed is unknown, defaulting to 1000 [ 171.872068][ T5452] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.884268][ T5452] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.885664][ T5452] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.898119][ T5452] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.898523][ T5452] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.061891][ T5451] rxe_eth0 speed is unknown, defaulting to 1000 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x8d000) [ 172.635743][ T1029] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 172.635762][ T1029] ata1: failed to read log page 10h (errno=-5) [ 172.635775][ T1029] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 172.635791][ T1029] ata1.00: irq_stat 0x41000008 [ 172.635801][ T1029] ata1.00: failed command: READ FPDMA QUEUED [ 172.635808][ T1029] ata1.00: cmd 60/68:70:7e:e4:04/04:00:00:00:00/40 tag 14 ncq dma 577536 in [ 172.635808][ T1029] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 172.635838][ T1029] ata1.00: status: { DRDY } [ 172.635845][ T1029] ata1.00: error: { ABRT } [ 172.671389][ T1029] ata1.00: configured for UDMA/100 [ 172.676891][ T1029] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 172.676926][ T1029] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 172.676952][ T1029] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 172.676977][ T1029] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 04 e4 7e 00 04 68 00 [ 172.677059][ T1029] I/O error, dev sda, sector 320638 op 0x0:(READ) flags 0x80700 phys_seg 48 prio class 2 [ 172.678855][ T1029] ata1: EH complete [ 172.902553][ T5450] rxe_eth0 speed is unknown, defaulting to 1000 [ 173.108262][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 173.864981][ T5350] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.866226][ T5350] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.866344][ T5350] bridge_slave_0: entered allmulticast mode [ 173.897080][ T5350] bridge_slave_0: entered promiscuous mode [ 173.952960][ T5452] Bluetooth: hci0: command tx timeout [ 173.979895][ T5350] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.979967][ T5350] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.980086][ T5350] bridge_slave_1: entered allmulticast mode [ 174.016456][ T5350] bridge_slave_1: entered promiscuous mode [ 174.188619][ T5350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.216767][ T5350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.425025][ T5350] team0: Port device team_slave_0 added [ 174.450268][ T5350] team0: Port device team_slave_1 added [ 174.661181][ T5350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.661198][ T5350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.661215][ T5350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.706011][ T5350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.706020][ T5350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.706030][ T5350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.931285][ T5350] hsr_slave_0: entered promiscuous mode [ 174.948658][ T5350] hsr_slave_1: entered promiscuous mode [ 175.907646][ T5350] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.934643][ T5350] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.937574][ T5350] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.971296][ T5350] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.978979][ T5350] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.004901][ T5350] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.007780][ T5350] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.027687][ T5350] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.036242][ T5452] Bluetooth: hci0: command tx timeout [ 176.256969][ T5350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.305432][ T5350] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.329778][ T1059] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.329891][ T1059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.348786][ T1059] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.348856][ T1059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.897972][ T5350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.118387][ T5350] veth0_vlan: entered promiscuous mode [ 177.129521][ T5350] veth1_vlan: entered promiscuous mode [ 177.168426][ T5350] veth0_macvtap: entered promiscuous mode [ 177.175839][ T5350] veth1_macvtap: entered promiscuous mode [ 177.191617][ T5350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.205500][ T5350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.253229][ T45] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.253521][ T45] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.253537][ T45] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.253549][ T45] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.836707][ T5505] rxe_eth0 speed is unknown, defaulting to 1000 [ 178.116684][ T5452] Bluetooth: hci0: command tx timeout 2026/11/05 09:17:06 executed programs: 0 [ 178.847711][ T5350] syz-executor (5350) used greatest stack depth: 16744 bytes left [ 178.911557][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.926828][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.930244][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.940210][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.946052][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.948012][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.969091][ T4669] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.977597][ T4669] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.986561][ T4669] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.995189][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 179.056861][ T5452] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.073342][ T5452] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.074952][ T5452] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.090284][ T4669] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.097084][ T4669] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.123940][ T4669] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.126831][ T4669] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.142020][ T4669] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.145708][ T4669] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.150727][ T4669] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 179.276954][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.292443][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.295331][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.299557][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.323428][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.446192][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 179.451000][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 179.464233][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 179.470994][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 179.481019][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 181.072326][ T5452] Bluetooth: hci1: command tx timeout [ 181.075463][ T49] Bluetooth: hci3: command tx timeout [ 181.101683][ T114] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.233937][ T49] Bluetooth: hci4: command tx timeout [ 181.234149][ T49] Bluetooth: hci2: command tx timeout [ 181.301235][ T114] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.472876][ T49] Bluetooth: hci5: command tx timeout [ 181.504029][ T114] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.552681][ T49] Bluetooth: hci6: command tx timeout [ 181.636228][ T114] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.684445][ T5517] rxe_eth0 speed is unknown, defaulting to 1000 [ 181.915243][ T114] bridge_slave_1: left allmulticast mode [ 181.915281][ T114] bridge_slave_1: left promiscuous mode [ 181.915984][ T114] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.935774][ T114] bridge_slave_0: left allmulticast mode [ 181.935794][ T114] bridge_slave_0: left promiscuous mode [ 181.935943][ T114] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.254651][ T114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.257071][ T114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.258328][ T114] bond0 (unregistering): Released all slaves [ 182.331222][ T5518] rxe_eth0 speed is unknown, defaulting to 1000 [ 182.900477][ T5532] rxe_eth0 speed is unknown, defaulting to 1000 [ 183.080765][ T5014] 8021q: adding VLAN 0 to HW filter on device eth2 [ 183.152192][ T49] Bluetooth: hci3: command tx timeout [ 183.152329][ T49] Bluetooth: hci1: command tx timeout [ 183.247176][ T5517] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.247239][ T5517] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.247323][ T5517] bridge_slave_0: entered allmulticast mode [ 183.261529][ T5517] bridge_slave_0: entered promiscuous mode [ 183.282679][ T5517] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.282757][ T5517] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.282862][ T5517] bridge_slave_1: entered allmulticast mode [ 183.287949][ T5517] bridge_slave_1: entered promiscuous mode [ 183.312292][ T5452] Bluetooth: hci2: command tx timeout [ 183.312319][ T5452] Bluetooth: hci4: command tx timeout [ 183.420431][ T5524] rxe_eth0 speed is unknown, defaulting to 1000 [ 183.479181][ T5517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.536895][ T5517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.555107][ T49] Bluetooth: hci5: command tx timeout [ 183.631888][ T49] Bluetooth: hci6: command tx timeout [ 183.726393][ T5517] team0: Port device team_slave_0 added [ 183.754430][ T5517] team0: Port device team_slave_1 added [ 183.909034][ T5517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.909049][ T5517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.909062][ T5517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.960630][ T5517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.960644][ T5517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.960660][ T5517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.097406][ T5516] rxe_eth0 speed is unknown, defaulting to 1000 [ 184.387214][ T5517] hsr_slave_0: entered promiscuous mode [ 184.388789][ T5517] hsr_slave_1: entered promiscuous mode [ 184.390235][ T5517] debugfs: 'hsr0' already exists in 'hsr' [ 184.390247][ T5517] Cannot create hsr debugfs directory [ 184.437724][ T5014] 8021q: adding VLAN 0 to HW filter on device eth3 [ 184.624549][ T5522] rxe_eth0 speed is unknown, defaulting to 1000 [ 184.624742][ T5518] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.624841][ T5518] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.624904][ T5518] bridge_slave_0: entered allmulticast mode [ 184.628141][ T5518] bridge_slave_0: entered promiscuous mode [ 184.725501][ T5518] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.725573][ T5518] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.725680][ T5518] bridge_slave_1: entered allmulticast mode [ 184.746618][ T5518] bridge_slave_1: entered promiscuous mode [ 185.025410][ T5518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.091590][ T5518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.232240][ T49] Bluetooth: hci1: command tx timeout [ 185.232269][ T49] Bluetooth: hci3: command tx timeout [ 185.392125][ T49] Bluetooth: hci2: command tx timeout [ 185.392201][ T5452] Bluetooth: hci4: command tx timeout [ 185.536108][ T5518] team0: Port device team_slave_0 added [ 185.632086][ T5452] Bluetooth: hci5: command tx timeout [ 185.712099][ T5452] Bluetooth: hci6: command tx timeout [ 185.749454][ T5518] team0: Port device team_slave_1 added [ 185.874797][ T5532] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.874885][ T5532] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.875017][ T5532] bridge_slave_0: entered allmulticast mode [ 185.892641][ T5532] bridge_slave_0: entered promiscuous mode [ 186.005520][ T5532] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.005586][ T5532] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.005677][ T5532] bridge_slave_1: entered allmulticast mode [ 186.009668][ T5532] bridge_slave_1: entered promiscuous mode [ 186.064650][ T5014] 8021q: adding VLAN 0 to HW filter on device eth4 [ 186.150694][ T5518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.150706][ T5518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.150715][ T5518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.362861][ T5518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.362877][ T5518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.362924][ T5518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.418671][ T5532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.547218][ T5532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.793928][ T5532] team0: Port device team_slave_0 added [ 186.835255][ T114] hsr_slave_0: left promiscuous mode [ 186.838780][ T114] hsr_slave_1: left promiscuous mode [ 186.839609][ T114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.839632][ T114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.840661][ T114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.840673][ T114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.869227][ T114] veth1_macvtap: left promiscuous mode [ 186.869307][ T114] veth0_macvtap: left promiscuous mode [ 186.869428][ T114] veth1_vlan: left promiscuous mode [ 186.869596][ T114] veth0_vlan: left promiscuous mode [ 187.094022][ T114] team0 (unregistering): Port device team_slave_1 removed [ 187.105517][ T114] team0 (unregistering): Port device team_slave_0 removed [ 187.250644][ T5518] hsr_slave_0: entered promiscuous mode [ 187.256192][ T5518] hsr_slave_1: entered promiscuous mode [ 187.312212][ T5452] Bluetooth: hci3: command tx timeout [ 187.312240][ T5452] Bluetooth: hci1: command tx timeout [ 187.314337][ T5532] team0: Port device team_slave_1 added [ 187.472305][ T49] Bluetooth: hci4: command tx timeout [ 187.472332][ T49] Bluetooth: hci2: command tx timeout [ 187.589090][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.589104][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.589118][ T5532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.716308][ T5452] Bluetooth: hci5: command tx timeout [ 187.750201][ T5524] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.750288][ T5524] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.750405][ T5524] bridge_slave_0: entered allmulticast mode [ 187.784032][ T5524] bridge_slave_0: entered promiscuous mode [ 187.791638][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.791648][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.791664][ T5532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.792620][ T5452] Bluetooth: hci6: command tx timeout [ 187.937601][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.937678][ T5524] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.937762][ T5524] bridge_slave_1: entered allmulticast mode [ 187.939585][ T5524] bridge_slave_1: entered promiscuous mode [ 188.051676][ T5014] 8021q: adding VLAN 0 to HW filter on device eth5 [ 188.209562][ T5524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.211203][ T5517] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 188.235536][ T5517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 188.264269][ T5532] hsr_slave_0: entered promiscuous mode [ 188.264997][ T5532] hsr_slave_1: entered promiscuous mode [ 188.265587][ T5532] debugfs: 'hsr0' already exists in 'hsr' [ 188.265597][ T5532] Cannot create hsr debugfs directory [ 188.268748][ T5524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.269944][ T5517] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 188.295564][ T5517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 188.347123][ T5517] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 188.359244][ T5517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 188.455997][ T5517] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 188.459319][ T5517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 188.475711][ T5516] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.475813][ T5516] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.475899][ T5516] bridge_slave_0: entered allmulticast mode [ 188.477365][ T5516] bridge_slave_0: entered promiscuous mode [ 188.509568][ T5524] team0: Port device team_slave_0 added [ 188.522678][ T5516] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.522937][ T5516] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.523027][ T5516] bridge_slave_1: entered allmulticast mode [ 188.524262][ T5516] bridge_slave_1: entered promiscuous mode [ 188.568176][ T5524] team0: Port device team_slave_1 added [ 188.745174][ T5516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.757379][ T5516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.779173][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.779188][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.779202][ T5524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.806664][ T5522] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.806740][ T5522] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.807095][ T5522] bridge_slave_0: entered allmulticast mode [ 188.810856][ T5522] bridge_slave_0: entered promiscuous mode [ 188.827995][ T5522] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.828865][ T5522] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.828953][ T5522] bridge_slave_1: entered allmulticast mode [ 188.844419][ T5522] bridge_slave_1: entered promiscuous mode [ 188.920202][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.920216][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.920231][ T5524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.975960][ T5516] team0: Port device team_slave_0 added [ 189.003870][ T5522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.006741][ T5516] team0: Port device team_slave_1 added [ 189.070465][ T5522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.133699][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.133710][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.133718][ T5516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.169869][ T5522] team0: Port device team_slave_0 added [ 189.171068][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.171078][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.171150][ T5516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.209294][ T5524] hsr_slave_0: entered promiscuous mode [ 189.209990][ T5524] hsr_slave_1: entered promiscuous mode [ 189.210387][ T5524] debugfs: 'hsr0' already exists in 'hsr' [ 189.210397][ T5524] Cannot create hsr debugfs directory [ 189.226159][ T5522] team0: Port device team_slave_1 added [ 189.286660][ T5518] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 189.290545][ T5518] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 189.300620][ T5518] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 189.314285][ T5518] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.367082][ T5518] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 189.376099][ T5518] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 189.376842][ T5518] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 189.379719][ T5518] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 189.407125][ T5522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.407140][ T5522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.407154][ T5522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.409243][ T5522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.409254][ T5522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.409268][ T5522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.457726][ T5516] hsr_slave_0: entered promiscuous mode [ 189.458549][ T5516] hsr_slave_1: entered promiscuous mode [ 189.459147][ T5516] debugfs: 'hsr0' already exists in 'hsr' [ 189.459158][ T5516] Cannot create hsr debugfs directory [ 189.681453][ T5522] hsr_slave_0: entered promiscuous mode [ 189.686452][ T5522] hsr_slave_1: entered promiscuous mode [ 189.687055][ T5522] debugfs: 'hsr0' already exists in 'hsr' [ 189.687065][ T5522] Cannot create hsr debugfs directory [ 189.768810][ T5532] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.779962][ T5532] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 189.781471][ T5532] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.795270][ T5532] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.907970][ T5532] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 189.924411][ T5532] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 189.930342][ T5532] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 189.947189][ T5532] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 190.480199][ T5517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.678783][ T5517] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.745655][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.745735][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.830075][ T186] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.830119][ T186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.867371][ T5516] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 190.884614][ T5516] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.911041][ T5516] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 190.921575][ T5516] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.927250][ T5516] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 190.938079][ T5516] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.966746][ T5518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.974570][ T5516] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 190.979615][ T5516] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.156104][ T5518] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.267191][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.267261][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.308107][ T5524] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.321014][ T5524] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 191.351590][ T5532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.361726][ T5524] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.384363][ T5524] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 191.388334][ T1062] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.388513][ T1062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.429960][ T5524] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.440958][ T5524] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 191.480519][ T5524] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.500265][ T5524] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.579943][ T5532] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.690875][ T114] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.690945][ T114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.801215][ T114] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.801346][ T114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.903341][ T5522] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.917108][ T5522] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 191.938517][ T5522] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.954434][ T5522] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 191.978891][ T5522] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.995292][ T5522] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.026250][ T5522] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 192.045228][ T5522] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 192.205050][ T5516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.379217][ T5516] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.531204][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.531278][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.657508][ T186] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.657593][ T186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.797877][ T5524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.008429][ T5524] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.131368][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.131442][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.179558][ T5522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.208098][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.208210][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.387846][ T5522] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.478552][ T186] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.478626][ T186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.569412][ T114] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.569484][ T114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.644168][ T5517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.270702][ T5517] veth0_vlan: entered promiscuous mode [ 194.383245][ T5517] veth1_vlan: entered promiscuous mode [ 194.707361][ T5517] veth0_macvtap: entered promiscuous mode [ 194.775917][ T5517] veth1_macvtap: entered promiscuous mode [ 194.806289][ T5518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.007139][ T5517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.029990][ T5532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.091115][ T5517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.262444][ T38] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.262898][ T38] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.336366][ T186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.459265][ T5518] veth0_vlan: entered promiscuous mode [ 195.514668][ T1060] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.630487][ T5518] veth1_vlan: entered promiscuous mode [ 195.970084][ T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.970101][ T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.055996][ T5516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.222568][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.222586][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.242638][ T5518] veth0_macvtap: entered promiscuous mode [ 196.303241][ T5518] veth1_macvtap: entered promiscuous mode [ 196.549653][ T5518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.627684][ T5518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.668318][ T5524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.726419][ T5516] veth0_vlan: entered promiscuous mode [ 196.850676][ T5516] veth1_vlan: entered promiscuous mode [ 196.872500][ T186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.873302][ T114] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.873329][ T114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.873352][ T114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.924528][ T5522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.050516][ T5532] veth0_vlan: entered promiscuous mode 2026/11/05 09:17:24 executed programs: 12 [ 197.390164][ T5532] veth1_vlan: entered promiscuous mode [ 197.440021][ T5516] veth0_macvtap: entered promiscuous mode [ 197.466854][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.466871][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.575644][ T5516] veth1_macvtap: entered promiscuous mode [ 197.681487][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.681505][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.740168][ T5522] veth0_vlan: entered promiscuous mode [ 197.799515][ T5516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.838027][ T5532] veth0_macvtap: entered promiscuous mode [ 197.854325][ T5516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.890910][ T5522] veth1_vlan: entered promiscuous mode [ 197.921110][ T5532] veth1_macvtap: entered promiscuous mode [ 197.953179][ T1062] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.953939][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.953975][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.953996][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.120646][ T5532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.199435][ T5532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.284405][ T5522] veth0_macvtap: entered promiscuous mode [ 198.302998][ T1059] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.303045][ T1059] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.303068][ T1059] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.303088][ T1059] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.345306][ T5825] [ 198.346297][ T5825] ====================================================== [ 198.349045][ T5825] WARNING: possible circular locking dependency detected [ 198.352020][ T5825] syzkaller #0 Not tainted [ 198.353882][ T5825] ------------------------------------------------------ [ 198.356627][ T5825] syz.0.24/5825 is trying to acquire lock: [ 198.358998][ T5825] ffff888030ffbc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 198.362500][ T5825] [ 198.362500][ T5825] but task is already holding lock: [ 198.365301][ T5825] ffff888013a46518 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 198.368437][ T5825] [ 198.368437][ T5825] which lock already depends on the new lock. [ 198.368437][ T5825] [ 198.372509][ T5825] [ 198.372509][ T5825] the existing dependency chain (in reverse order) is: [ 198.376030][ T5825] [ 198.376030][ T5825] -> #3 (&p->lock){+.+.}-{4:4}: [ 198.378946][ T5825] __mutex_lock+0x197/0x15a0 [ 198.381127][ T5825] seq_read_iter+0xa4/0xca0 [ 198.383071][ T5825] copy_splice_read+0x5ff/0xaa0 [ 198.385233][ T5825] splice_file_to_pipe+0x4ab/0x720 [ 198.387628][ T5825] do_sendfile+0x4d4/0x7c0 [ 198.389796][ T5825] __se_sys_sendfile64+0x144/0x1a0 [ 198.392210][ T5825] do_syscall_64+0x166/0x520 [ 198.394386][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.397019][ T5825] [ 198.397019][ T5825] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 198.400152][ T5825] __mutex_lock+0x197/0x15a0 [ 198.402342][ T5825] anon_pipe_write+0x28f/0x1a90 [ 198.404695][ T5825] __kernel_write_iter+0x44a/0x8f0 [ 198.407099][ T5825] __kernel_write+0x106/0x170 [ 198.409312][ T5825] autofs_notify_daemon+0x770/0xf10 [ 198.411756][ T5825] autofs_wait+0x11ad/0x18a0 [ 198.413828][ T5825] autofs_mount_wait+0x16b/0x390 [ 198.415923][ T5825] autofs_d_automount+0x64e/0x810 [ 198.418156][ T5825] __traverse_mounts+0x2fe/0x5d0 [ 198.420271][ T5825] step_into_slowpath+0x4ba/0x820 [ 198.422818][ T5825] path_lookupat+0x433/0x8c0 [ 198.424962][ T5825] filename_lookup+0x265/0x5d0 [ 198.427305][ T5825] kern_path+0x3d/0x150 [ 198.429207][ T5825] lookup_bdev+0xc8/0x2b0 [ 198.431230][ T5825] resume_store+0x181/0x500 [ 198.433319][ T5825] kernfs_fop_write_iter+0x3a4/0x540 [ 198.435689][ T5825] vfs_write+0x612/0xba0 [ 198.437650][ T5825] ksys_write+0x150/0x270 [ 198.439797][ T5825] do_syscall_64+0x166/0x520 [ 198.441983][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.444714][ T5825] [ 198.444714][ T5825] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 198.448045][ T5825] __mutex_lock+0x197/0x15a0 [ 198.450033][ T5825] autofs_notify_daemon+0x75d/0xf10 [ 198.452183][ T5825] autofs_wait+0x11ad/0x18a0 [ 198.454468][ T5825] autofs_mount_wait+0x16b/0x390 [ 198.456812][ T5825] autofs_d_automount+0x64e/0x810 [ 198.459169][ T5825] __traverse_mounts+0x2fe/0x5d0 [ 198.461501][ T5825] step_into_slowpath+0x4ba/0x820 [ 198.463741][ T5825] path_lookupat+0x433/0x8c0 [ 198.465859][ T5825] filename_lookup+0x265/0x5d0 [ 198.468156][ T5825] kern_path+0x3d/0x150 [ 198.470210][ T5825] lookup_bdev+0xc8/0x2b0 [ 198.472353][ T5825] resume_store+0x181/0x500 [ 198.474575][ T5825] kernfs_fop_write_iter+0x3a4/0x540 [ 198.477232][ T5825] vfs_write+0x612/0xba0 [ 198.479483][ T5825] ksys_write+0x150/0x270 [ 198.481731][ T5825] do_syscall_64+0x166/0x520 [ 198.484102][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.487120][ T5825] [ 198.487120][ T5825] -> #0 (&of->mutex){+.+.}-{4:4}: [ 198.490285][ T5825] __lock_acquire+0x164c/0x2de0 [ 198.492517][ T5825] lock_acquire+0x115/0x350 [ 198.494709][ T5825] __mutex_lock+0x197/0x15a0 [ 198.497110][ T5825] kernfs_seq_start+0x5d/0x420 [ 198.499582][ T5825] seq_read_iter+0x37e/0xca0 [ 198.501964][ T5825] copy_splice_read+0x5ff/0xaa0 [ 198.504341][ T5825] splice_file_to_pipe+0x4ab/0x720 [ 198.506767][ T5825] do_sendfile+0x4d4/0x7c0 [ 198.508986][ T5825] __se_sys_sendfile64+0x144/0x1a0 [ 198.511272][ T5825] do_syscall_64+0x166/0x520 [ 198.513587][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.516446][ T5825] [ 198.516446][ T5825] other info that might help us debug this: [ 198.516446][ T5825] [ 198.520885][ T5825] Chain exists of: [ 198.520885][ T5825] &of->mutex --> &pipe->mutex --> &p->lock [ 198.520885][ T5825] [ 198.526004][ T5825] Possible unsafe locking scenario: [ 198.526004][ T5825] [ 198.529262][ T5825] CPU0 CPU1 [ 198.533606][ T5825] ---- ---- [ 198.535892][ T5825] lock(&p->lock); [ 198.537633][ T5825] lock(&pipe->mutex); [ 198.540565][ T5825] lock(&p->lock); [ 198.543285][ T5825] lock(&of->mutex); [ 198.545015][ T5825] [ 198.545015][ T5825] *** DEADLOCK *** [ 198.545015][ T5825] [ 198.548443][ T5825] locks held by syz.0.24/5825: 2, last CPU#0: [ 198.551131][ T5825] #0: ffff88801f974c60 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x3e/0x720 [ 198.555170][ T5825] #1: ffff888013a46518 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 198.558814][ T5825] [ 198.558814][ T5825] stack backtrace: [ 198.561360][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full) [ 198.565284][ T5825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.569687][ T5825] Call Trace: [ 198.571251][ T5825] [ 198.572642][ T5825] dump_stack_lvl+0xe8/0x150 [ 198.574665][ T5825] print_circular_bug+0x2e2/0x300 [ 198.576883][ T5825] check_noncircular+0x12f/0x150 [ 198.579214][ T5825] __lock_acquire+0x164c/0x2de0 [ 198.581171][ T5825] ? stack_depot_save_flags+0x404/0x810 [ 198.583574][ T5825] ? kasan_save_track+0x4f/0x80 [ 198.585655][ T5825] ? kasan_save_track+0x3e/0x80 [ 198.587725][ T5825] ? __kasan_kmalloc+0x93/0xb0 [ 198.589753][ T5825] ? __kvmalloc_node_noprof+0x50a/0x820 [ 198.592082][ T5825] lock_acquire+0x115/0x350 [ 198.594012][ T5825] ? kernfs_seq_start+0x5d/0x420 [ 198.596184][ T5825] __mutex_lock+0x197/0x15a0 [ 198.598217][ T5825] ? kernfs_seq_start+0x5d/0x420 [ 198.600340][ T5825] ? kernfs_seq_start+0x5d/0x420 [ 198.602380][ T5825] ? __pfx___mutex_lock+0x10/0x10 [ 198.604490][ T5825] ? seq_read_iter+0x1ea/0xca0 [ 198.606515][ T5825] ? seq_read_iter+0x1ea/0xca0 [ 198.608680][ T5825] kernfs_seq_start+0x5d/0x420 [ 198.610821][ T5825] seq_read_iter+0x37e/0xca0 [ 198.612890][ T5825] copy_splice_read+0x5ff/0xaa0 [ 198.615044][ T5825] ? __pfx_aa_file_perm+0x10/0x10 [ 198.617223][ T5825] ? __pfx_copy_splice_read+0x10/0x10 [ 198.619592][ T5825] ? __fget_files+0x2a/0x420 [ 198.621675][ T5825] ? __pfx_copy_splice_read+0x10/0x10 [ 198.623930][ T5825] splice_file_to_pipe+0x4ab/0x720 [ 198.626107][ T5825] do_sendfile+0x4d4/0x7c0 [ 198.628160][ T5825] ? __pfx___seccomp_filter+0x10/0x10 [ 198.631030][ T5825] ? __pfx_do_sendfile+0x10/0x10 [ 198.633292][ T5825] ? __se_sys_futex+0x3a8/0x450 [ 198.635447][ T5825] __se_sys_sendfile64+0x144/0x1a0 [ 198.637616][ T5825] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 198.639984][ T5825] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 198.642194][ T5825] do_syscall_64+0x166/0x520 [ 198.644159][ T5825] ? trace_irq_disable+0x3b/0x140 [ 198.646289][ T5825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.648829][ T5825] ? clear_bhb_loop+0x70/0xc0 [ 198.650873][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.653246][ T5825] RIP: 0033:0x7f676259fb19 [ 198.654994][ T5825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.662703][ T5825] RSP: 002b:00007f67633f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 198.665964][ T5825] RAX: ffffffffffffffda RBX: 00007f6762826090 RCX: 00007f676259fb19 [ 198.669469][ T5825] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 198.673056][ T5825] RBP: 00007f6762637b70 R08: 0000000000000000 R09: 0000000000000000 [ 198.676574][ T5825] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 198.680011][ T5825] R13: 00007f6762826128 R14: 00007f6762826090 R15: 00007ffc4e37dcc8 [ 198.683278][ T5825] [ 198.697832][ T5516] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 198.723055][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.723069][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.723239][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.723248][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.757247][ T5522] veth1_macvtap: entered promiscuous mode [ 198.800460][ T5522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.814373][ T5522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.829888][ T5524] veth0_vlan: entered promiscuous mode [ 198.849850][ T5532] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' [ 198.879822][ T5524] veth1_vlan: entered promiscuous mode [ 198.895241][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.895253][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.899925][ T5532] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 198.957039][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.957055][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.046302][ T5522] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 199.050432][ T5823] PM: Image not found (code -22) [ 199.060691][ T5524] veth0_macvtap: entered promiscuous mode [ 199.082373][ T114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.082404][ T114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.082423][ T114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.082442][ T114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.111096][ T5524] veth1_macvtap: entered promiscuous mode [ 199.160742][ T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.160759][ T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.181193][ T5522] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 199.226848][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.230545][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.230558][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.265076][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.384382][ T5524] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 199.440414][ T1062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.440432][ T1062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.458008][ T5524] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 199.505674][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.505691][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.522406][ T1059] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.522812][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.522834][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.522852][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.529528][ T5827] PM: Image not found (code -22) [ 199.555909][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.555936][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.961309][ T5835] PM: Image not found (code -22) [ 199.968850][ T5836] PM: Image not found (code -22) [ 200.150046][ T5844] PM: Image not found (code -22) [ 200.431073][ T5851] PM: Image not found (code -22) [ 200.440519][ T5852] PM: Image not found (code -22) [ 200.518998][ T5859] PM: Image not found (code -22) [ 200.835349][ T5863] PM: Image not found (code -22) [ 200.839625][ T5866] PM: Image not found (code -22) [ 201.010468][ T5871] PM: Image not found (code -22) [ 201.308559][ T5875] PM: Image not found (code -22) [ 201.316654][ T5878] PM: Image not found (code -22) [ 201.384849][ T5883] PM: Image not found (code -22) [ 201.709451][ T5888] PM: Image not found (code -22) [ 201.716284][ T5889] PM: Image not found (code -22) [ 201.865667][ T5895] PM: Image not found (code -22) [ 202.180466][ T5900] PM: Image not found (code -22) [ 202.184528][ T5901] PM: Image not found (code -22) 2026/11/05 09:17:30 executed programs: 36 [ 202.242780][ T5906] PM: Image not found (code -22) [ 202.577526][ T5912] PM: Image not found (code -22) [ 202.579620][ T5913] PM: Image not found (code -22) [ 202.727747][ T5919] PM: Image not found (code -22) [ 203.049479][ T5924] PM: Image not found (code -22) [ 203.049678][ T5925] PM: Image not found (code -22) [ 203.092413][ T5929] PM: Image not found (code -22) [ 203.446065][ T5936] PM: Image not found (code -22) [ 203.446441][ T5938] PM: Image not found (code -22) [ 203.589619][ T5943] PM: Image not found (code -22) [ 203.920036][ T5948] PM: Image not found (code -22) [ 203.920651][ T5949] PM: Image not found (code -22) [ 203.943509][ T5953] PM: Image not found (code -22) [ 204.318805][ T5960] PM: Image not found (code -22) [ 204.319196][ T5961] PM: Image not found (code -22) [ 204.442723][ T5967] PM: Image not found (code -22) [ 204.809635][ T5972] PM: Image not found (code -22) [ 204.815395][ T5973] PM: Image not found (code -22) [ 204.836160][ T5976] PM: Image not found (code -22) [ 205.206100][ T5984] PM: Image not found (code -22) [ 205.206967][ T5985] PM: Image not found (code -22) [ 205.299936][ T5991] PM: Image not found (code -22) [ 205.685275][ T5996] PM: Image not found (code -22) [ 205.694116][ T5997] PM: Image not found (code -22) [ 205.710168][ T6001] PM: Image not found (code -22) [ 206.079070][ T6008] PM: Image not found (code -22) [ 206.085656][ T6009] PM: Image not found (code -22) [ 206.163800][ T6015] PM: Image not found (code -22) [ 206.566212][ T6020] PM: Image not found (code -22) [ 206.566909][ T6021] PM: Image not found (code -22) [ 206.584938][ T6025] PM: Image not found (code -22) [ 206.950850][ T6033] PM: Image not found (code -22) [ 206.951657][ T6032] PM: Image not found (code -22) [ 207.015083][ T6039] PM: Image not found (code -22) [ 207.440788][ T6044] PM: Image not found (code -22) [ 207.452539][ T6046] PM: Image not found (code -22) [ 207.463288][ T6049] PM: Image not found (code -22) 2026/11/05 09:17:35 executed programs: 72 [ 207.820063][ T6057] PM: Image not found (code -22) [ 207.824302][ T6056] PM: Image not found (code -22) [ 207.866194][ T6061] PM: Image not found (code -22) [ 208.300143][ T6067] PM: Image not found (code -22) [ 208.326216][ T6071] PM: Image not found (code -22) [ 208.338492][ T6073] PM: Image not found (code -22)