last executing test programs: 2m2.166657383s ago: executing program 1 (id=62): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x18, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0x0) 1m57.794573565s ago: executing program 1 (id=67): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) open$dir(0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$igmp(0x2, 0x3, 0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x25, 0x0, @val=@netfilter}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) 1m56.541818884s ago: executing program 1 (id=69): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea00090587033b"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="5bc78da172d276315c3a86869d5a6413889b7a71f7a10fc7425f55c7ca530a6d4e1e8d4ef803e49edbaa7346afedd915160938d87d42ac11e0933c", 0x3b}, {0x0}, {&(0x7f0000000300)='<', 0x1}, {&(0x7f0000000340)="a3a5c9078407a30ccfd33b6e572f42a988b1f4faf502a76a99b07f17f4dd0e82df3f76d3ebe33e2f269f0468676dda1da997fa3a3566f19c5c6bf9d60a1c85111405dc8cad5441bb2ab554337cf37653870edc80d8af37ee71b0884352e32dcf4cea6e60cf82bd000e930b10295c4dd8fea8605664d246", 0x77}, {&(0x7f00000003c0)}], 0x5) 1m54.744780749s ago: executing program 1 (id=77): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x18, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0x0) 1m54.481332242s ago: executing program 1 (id=78): syz_mount_image$xfs(&(0x7f0000009580), &(0x7f00000095c0)='./file2\x00', 0x0, &(0x7f0000009600), 0xff, 0x9600, &(0x7f000001c180)="$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") socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a991", 0x10}], 0x1}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE) madvise(&(0x7f000029f000/0x2000)=nil, 0x2000, 0x10) 1m50.366220915s ago: executing program 1 (id=87): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, 0x0, 0xffdd) 14.49596985s ago: executing program 0 (id=227): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0xfff, 0xda, 0x9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000019c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x74}}, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f0000000280)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @initial, @broadcast, {0x9, 0x2}, "", @void, @value=@ver_80211n={0x0, 0x0, 0x0, 0x2, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0xb7, "38201f26814b64e11e9d6bac348ea78d186b8b429841f709ff84a05c4bf88ad8554cc541d6c57f3a78e896cf783b130ce18d0a5760bac18087e216bf5e6e5da6cf6774de76a9cac478c0c4759c57ec23a4ab9e05e857106a856dfebe4470a29a0fc5746b0de3511b93d40752593312d9c5f252361da97af814001f7b0a1fb2a7e9ee619aa95be0ddaf2e15818b8580cea250cb69199a06c40781e843da19ed2e34de04220622d4eb715fc21b32b9243200095f7648146d"}]}, 0xe4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x7c, r6, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3, {0x0, 0xb5}}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a, {0x0, 0x1, 0x1, 0x0, {0x80f, 0x1fe1, 0x0, 0xff, 0x0, 0x0, 0x1, 0x3}, 0x400, 0x101, 0x8}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xe, 0x69}}, @val={0x76, 0x6, {0x6, 0x3, 0xa, 0xc9f6}}, [{0xdd, 0x51, "c8d55bff4a56364f02248f8a3520e3fa464a8188e703455bb39bd96ca6f0bd20356e5a425f7c72b75e5784e369a506207cac653bc1277272510bb60972f71f46e4e799230b670f7ad042309f078725d420"}]}, 0xc7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="ad7f8a90ba9e50000000", @ANYRES16=r10, @ANYBLOB="010000000000000000003d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x38, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) r12 = socket(0x27, 0x5, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, @broadcast}}}}) getsockopt$MRT(r1, 0x0, 0xcf, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x8, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private=0xa010102}}}, 0x108) 13.178164455s ago: executing program 4 (id=230): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180), &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xc9, "df894d92364b233d014020729f123f3f5069bc6f2aedb75823d5eae82408bf53bf4a9dcc35955e9fab147f2ea7a3b0cafe912931e6e7481d1431de6268f3fb60931471f7f9e4b5e2c20c099a0b04a82b203222a235eff71de70e3364fe5fa727b02db8f00f6cb349c06a0a46775fa421e9a0f14898f2a1253b25d52e4353ff1a458b9491ecc30be90249a13bdff4c79104947a7ae45e93064b40c9ae05f491e679a6e4fefd1a5eb5199e483b914ae476bed588a919bc729eaff7ccb4936267f66ded2f90d8ea7e2cf0"}, &(0x7f0000000100)=0xd1) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04120800aaaaaaaaaa103a"], 0xb) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) 12.325002911s ago: executing program 2 (id=231): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea00090587033b"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="5bc78da172d276315c3a86869d5a6413889b7a71f7a10fc7425f55c7ca530a6d4e1e8d4ef803e49edbaa7346afedd915160938d87d42ac11e0933c", 0x3b}, {0x0}, {&(0x7f0000000300)='<', 0x1}, {&(0x7f00000003c0)="a0475ca633c6d2c6", 0x8}], 0x4) 11.805482906s ago: executing program 0 (id=232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) syz_emit_vhci(0x0, 0x5a) bind$netlink(r3, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = dup(r2) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002a000900000000000000000004"], 0x30}, 0x1, 0x3000000}, 0x0) syz_usb_connect$uac1(0x5, 0xf7, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0xd, 0xa0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x4}, [@mixer_unit={0x9, 0x24, 0x4, 0x2, 0xdc, "7118ce1a"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x5, 0x8d, 0x6, 0x80, 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0xfe, 0x4, 0x49, 0x95, 0x5, 0x3}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x3, 0x5, [0x3, 0x6, 0x6, 0x2, 0x5], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x3, 0x9, 0x5, "3511c396221085c831"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xb924, 0x9, 0x1, "9f4c3277"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xf691, 0xd50, 0x6}, @as_header={0x7, 0x24, 0x1, 0x6, 0x14}]}, {{0x9, 0x5, 0x1, 0x9, 0x800, 0x4, 0x2, 0x3, {0x7, 0x25, 0x1, 0x2, 0x5, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x7}, @as_header={0x7, 0x24, 0x1, 0x5, 0xf2, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0x10, 0x7, "80", "8b"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x33, 0x2}, @as_header={0x7, 0x24, 0x1, 0xe4, 0xc7, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x49, 0x7, 0x4, {0x7, 0x25, 0x1, 0x0, 0x5, 0x4}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x2, 0x0, 0x7, 0x40, 0x4}, 0x50, &(0x7f0000000240)={0x5, 0xf, 0x50, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x20, 0x4, 0xa, 0x0, 0xa9, [0x3fcf, 0xffc017, 0xff3fcf, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "8819c7ac774913570bcd00cdfa173cae"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xf7, 0x58, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x2, 0x3, 0xbc2d}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x2, 0x2}, @ptm_cap={0x3}]}, 0x3, [{0x68, &(0x7f0000000440)=ANY=[@ANYBLOB="680343f171bb752d4410e936e13cde6ddf5679bd404328ea815224326565a3cdfee2dec3d497f5620e6d64cfc442cbb2ee4101c07c6c9056a7201ce4b01f43b69938c984cc664eb87afb74881a207c8cdf1bd5ea373e5210a97f51eb786616ff8b37"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x444}}, {0xa, &(0x7f0000000500)=@string={0xa, 0x3, "7fc448d21d0a7bc4"}}]}) 10.455060896s ago: executing program 2 (id=233): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4001}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001600156f00000000000000", @ANYRESDEC, @ANYBLOB="140001000000000000000000000000ef36efef4e1a6bfaf02db50000000000714cb0cb2104d8c543a711a52cff09932f1d40f7be405c8da89a19ca11bbe68f7710fa394524f6235c9e8d7fad14b64f32de1702087a35374a7379d87b1070"], 0x2c}}, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfb, 0x4b1, &(0x7f0000001d00)="$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") r1 = syz_usbip_server_init(0x3) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) socket(0x0, 0x5, 0xfffffffd) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000480)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@block_validity}, {@quota}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, 'umask'}}]}, 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") getdents64(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000080)={@broadcast, @empty, 0x0, "d64724f6257e43b341dc333940c0ca00", 0xffffffff, 0x0, 0x409}, 0x3c) close(0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000400)={[{@umask}, {}, {@force}, {@uid={'uid', 0x3d, 0xee01}}, {@nobarrier}, {@part={'part', 0x3d, 0x4}}]}, 0x20, 0x6de, &(0x7f0000000840)="$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") ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='bridge0\x00') write$usbip_server(r1, &(0x7f0000000080)=@ret_unlink={{0x4, 0x5, 0x0, 0x0, 0x3}, {0x5}}, 0x30) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 10.026496855s ago: executing program 4 (id=234): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x90}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000300)={0x0, @pix_mp}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat, @flat=@weak_binder, @flat=@weak_binder}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) read$snddsp(r0, &(0x7f0000000740)=""/56, 0x38) fsmount(0xffffffffffffffff, 0x0, 0x0) 9.905260592s ago: executing program 0 (id=235): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9000000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) renameat2(r2, &(0x7f0000000080)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x0) 9.136065036s ago: executing program 4 (id=236): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x3, [{{0xa, 0x4e24, 0x80000001, @remote}}, {{0xa, 0x4e21, 0x2, @private1, 0x1}}, {{0xa, 0x4e23, 0x1ff, @empty, 0x20000100}}]}, 0x210) 8.892198393s ago: executing program 4 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x129082, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r3, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000100)=0x4) write$dsp(r3, &(0x7f0000000240)="755a5398d512d39077459e67ee110daaf0413bc3deef85b89f2141d512b2c14020e625b0d98e6f09000000ac3c", 0x2d) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400192340834b00000d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000010000000000", 0x58}], 0x1) 7.629677849s ago: executing program 4 (id=238): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e031c00008c71ef28"], 0xffdd) 7.421433185s ago: executing program 0 (id=239): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x70, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="a5fcc8639e98"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x70}}, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x40000001}) syz_emit_ethernet(0x504, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x4ce, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xe, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d983b10420fa979"}, {0x0, 0x8, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c5"}, {0x0, 0x2, "d429145c793e823829b4376332b2c98aee"}, {0x0, 0x7e, "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"}]}}}}}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000240), 0x3af4701e) sendfile(r11, r4, 0x0, 0x10000a007) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000340)={{r3}, "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"}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000008000840"], 0x60}}, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 6.915997893s ago: executing program 2 (id=242): getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000180)=@known='security.apparmor\x00', &(0x7f00000003c0)='\xec\xff', 0x2, 0x0) 6.522516863s ago: executing program 2 (id=243): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x90}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000300)={0x0, @pix_mp}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat, @flat=@weak_binder, @flat=@weak_binder}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) read$snddsp(r0, &(0x7f0000000740)=""/56, 0x38) fsmount(0xffffffffffffffff, 0x0, 0x0) 5.716550742s ago: executing program 2 (id=244): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) epoll_create(0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff3f) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0104000109021200010000000009040000000206"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x2365, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0x80111500, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) 4.701479523s ago: executing program 3 (id=245): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000180)={[{}, {@codepage={'codepage', 0x3d, 'iso8859-6'}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {}, {@part={'part', 0x3d, 0x5}}]}, 0x11, 0x2b6, &(0x7f0000000200)="$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") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) close(0xffffffffffffffff) 3.273109835s ago: executing program 3 (id=246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) 2.286508366s ago: executing program 0 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x129082, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r3, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000100)=0x4) write$dsp(r3, &(0x7f0000000240)="755a5398d512d39077459e67ee110daaf0413bc3deef85b89f2141d512b2c14020e625b0d98e6f09000000ac3c", 0x2d) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400192340834b00000d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000010000000000", 0x58}], 0x1) 2.236214146s ago: executing program 3 (id=248): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000180)={[{}, {@codepage={'codepage', 0x3d, 'iso8859-6'}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {}, {@part={'part', 0x3d, 0x5}}]}, 0x11, 0x2b6, &(0x7f0000000200)="$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") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mq_open(&(0x7f0000000040)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') r3 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) close(0xffffffffffffffff) 2.199680908s ago: executing program 4 (id=249): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9000000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) renameat2(r2, &(0x7f0000000080)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x0) 1.893448673s ago: executing program 2 (id=250): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000240)={[{@lazytime}, {}, {@filestreams}, {@uqnoenforce}, {@prjquota}]}, 0x4, 0x9606, &(0x7f0000009680)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a40cc4, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESOCT=0x0, @ANYRES16, @ANYRES32, @ANYRESHEX, @ANYRES8], 0xdf, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000001c0)='./bus\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) creat(&(0x7f0000000040)='./bus\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='.\x02\x00') syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(0x0, &(0x7f0000000280)='./file0\x00') 910.577294ms ago: executing program 3 (id=251): r0 = socket(0x1, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10063, 0x0) 476.577068ms ago: executing program 3 (id=252): socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) 408.167036ms ago: executing program 0 (id=253): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b508020000000000db8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff06ffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000080000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0x10, &(0x7f0000001e00)=""/4087}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000012400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000080)='jbd2_handle_stats\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2a920, 0x80000000, 0xfffffffc, 0x200, 0xffffffffffffffff, 0xa, '\x00', 0x0, r1, 0x5, 0x0, 0x4, 0x6}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) socket$packet(0x11, 0xa, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r5, 0x0, 0x0, 0x20008802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800009d7f000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa00001580e24b0000000086dd60000000005400000000000006000000000000002001000000000900000000000000000200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800071a68dfb6a2a1104d2d8cac39d631ecfaeeff589ef050265d5309cca585a2ba76e597007f533796b7727701f7edfa921059d404f522c3c4c9b37914faae268aae"], 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000002380)='map_files\x00') getdents64(r10, &(0x7f00000035c0)=""/4084, 0xff4) 0s ago: executing program 3 (id=254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a991", 0x10}], 0x1}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE) madvise(&(0x7f000029f000/0x2000)=nil, 0x2000, 0x10) kernel console output (not intermixed with test programs): ffff88807f36dc08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 132.500200][ C1] #1: ffffffff8f667110 ((netlink_chain).rwsem){++++}-{3:3}, at: blocking_notifier_call_chain+0x53/0x90 [ 132.511569][ C1] #2: ffff8880232256b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nft_rcv_nl_event+0x123/0x6d0 [ 132.522202][ C1] #3: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 132.533687][ C1] 3 locks held by syz.3.103/5562: [ 132.539247][ C1] #0: ffff888051606580 (&u->iolock){+.+.}-{3:3}, at: __unix_dgram_recvmsg+0x246/0x12f0 [ 132.549241][ C1] #1: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 132.559575][ C1] #2: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 132.569582][ C1] 2 locks held by syz.2.101/5560: [ 132.574712][ C1] #0: ffffffff8f668fb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 132.583091][ C1] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 132.592712][ C1] 2 locks held by syz.2.101/5561: [ 132.597829][ C1] #0: ffffffff8f668fb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 132.606796][ C1] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 132.617330][ C1] 1 lock held by syz-executor/5566: [ 132.622742][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 132.632351][ C1] 1 lock held by syz-executor/5568: [ 132.637634][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 132.647813][ C1] [ 132.650268][ C1] ============================================= [ 132.650268][ C1] [ 133.303874][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.312281][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.364308][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 133.506544][ T5574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.107'. [ 133.534499][ T5107] Bluetooth: hci5: command tx timeout [ 133.614484][ T25] usb 4-1: device descriptor read/64, error -71 [ 133.694634][ T5107] Bluetooth: hci6: command tx timeout [ 133.966798][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 134.194333][ T25] usb 4-1: device descriptor read/64, error -71 [ 134.314797][ T25] usb usb4-port1: attempt power cycle [ 134.915321][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 134.988956][ T25] usb 4-1: device descriptor read/8, error -71 [ 135.075616][ T5591] loop2: detected capacity change from 0 to 512 [ 135.092649][ T5591] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 135.112957][ T5591] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz.2.111: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 135.195637][ T5591] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.111: couldn't read orphan inode 15 (err -117) [ 135.223533][ T2921] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.246242][ T5591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.281386][ T5591] ext2 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.304394][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 135.364420][ T25] usb 4-1: device descriptor read/8, error -71 [ 135.423144][ T29] audit: type=1800 audit(1720135228.328:9): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.111" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 135.459368][ T5105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.615996][ T5107] Bluetooth: hci5: command tx timeout [ 135.733643][ T2921] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.775495][ T5107] Bluetooth: hci6: command tx timeout [ 136.202457][ T25] usb usb4-port1: unable to enumerate USB device [ 136.336048][ T2921] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.977582][ T5566] chnl_net:caif_netlink_parms(): no params data found [ 137.342678][ T29] audit: type=1326 audit(1720135230.248:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5605 comm="syz.3.114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff480575bd9 code=0x0 [ 137.554729][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 137.693145][ T2921] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.766320][ T5107] Bluetooth: hci5: command tx timeout [ 137.858808][ T5107] Bluetooth: hci6: command tx timeout [ 137.999104][ T25] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 138.030347][ T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 45523, setting to 1024 [ 138.083936][ T25] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 138.128449][ T5568] chnl_net:caif_netlink_parms(): no params data found [ 138.149007][ T25] usb 5-1: language id specifier not provided by device, defaulting to English [ 138.166707][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.176611][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.186119][ T25] usb 5-1: Product: 坍ὅ䔅昩刹햯࡬쏜䙅穚ﰈ헙澠檪숴珳员短⊈᜘ꁫ㉂ퟮ⮱ᵣ禼鳀ઈ꽵䔗ᰨ霂☚騹ꪲ翊䮼㫈⾩齃㸼뒿ᡣ㶐뎩嗵岊 [ 138.203778][ T25] usb 5-1: Manufacturer: 쑿 [ 138.208776][ T25] usb 5-1: SerialNumber: syz [ 138.400218][ T5566] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.417432][ T5566] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.450390][ T5610] loop0: detected capacity change from 0 to 7 [ 138.457063][ T5566] bridge_slave_0: entered allmulticast mode [ 138.458776][ T5566] bridge_slave_0: entered promiscuous mode [ 138.488912][ T5610] Dev loop0: unable to read RDB block 7 [ 138.497054][ T5610] loop0: unable to read partition table [ 138.504072][ T5610] loop0: partition table beyond EOD, truncated [ 138.521376][ T5610] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 138.521376][ T5610] ) failed (rc=-5) [ 138.561037][ T25] cdc_ncm 5-1:1.0: bind() failure [ 138.582762][ T5566] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.620860][ T25] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 138.625045][ T5566] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.644851][ T25] cdc_ncm 5-1:1.1: bind() failure [ 138.662029][ T25] usb 5-1: USB disconnect, device number 8 [ 138.662419][ T5566] bridge_slave_1: entered allmulticast mode [ 138.691688][ T5566] bridge_slave_1: entered promiscuous mode [ 138.696809][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 138.863885][ T5568] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.873631][ T5568] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.886650][ T5568] bridge_slave_0: entered allmulticast mode [ 138.893856][ T5568] bridge_slave_0: entered promiscuous mode [ 138.903694][ T5568] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.911595][ T5568] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.918978][ T5568] bridge_slave_1: entered allmulticast mode [ 138.932513][ T9] usb 3-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 138.943750][ T5568] bridge_slave_1: entered promiscuous mode [ 138.949820][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.959058][ T9] usb 3-1: Product: syz [ 138.963289][ T9] usb 3-1: Manufacturer: syz [ 138.968556][ T9] usb 3-1: SerialNumber: syz [ 138.976250][ T9] usb 3-1: config 0 descriptor?? [ 138.995523][ T5566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.006161][ T4839] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 139.018083][ T9] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 139.051607][ T2921] bridge_slave_1: left allmulticast mode [ 139.069412][ T2921] bridge_slave_1: left promiscuous mode [ 139.078164][ T2921] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.095347][ T2921] bridge_slave_0: left allmulticast mode [ 139.101238][ T2921] bridge_slave_0: left promiscuous mode [ 139.108401][ T2921] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.235015][ T4839] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.246389][ T4839] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.274522][ T4839] usb 4-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 139.304370][ T4839] usb 4-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 139.333691][ T4839] usb 4-1: config 1 interface 1 has no altsetting 0 [ 139.348107][ T4839] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.382920][ T4839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.412240][ T4839] usb 4-1: Product: syz [ 139.418580][ T4839] usb 4-1: Manufacturer: syz [ 139.425049][ T4839] usb 4-1: SerialNumber: syz [ 139.459247][ T4839] usb 4-1: selecting invalid altsetting 1 [ 139.491364][ T4839] usb 4-1: selecting invalid altsetting 0 [ 139.524290][ T4839] usb 4-1: selecting invalid altsetting 0 [ 139.530249][ T4839] cdc_ncm 4-1:1.0: bind() failure [ 139.922245][ T5107] Bluetooth: hci5: command tx timeout [ 139.945412][ T5107] Bluetooth: hci6: command tx timeout [ 140.600240][ T5648] loop4: detected capacity change from 0 to 512 [ 140.636524][ T5648] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 140.763921][ T5648] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz.4.121: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 140.814081][ T2921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.953881][ T5648] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.121: couldn't read orphan inode 15 (err -117) [ 140.966757][ T2921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.970225][ T5648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.998271][ T5648] ext2 filesystem being mounted at /23/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.008138][ T2921] bond0 (unregistering): Released all slaves [ 141.033147][ T29] audit: type=1800 audit(1720135233.938:11): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.121" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 141.105428][ T5566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.155622][ T5095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.572293][ T5568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.793606][ T4839] usb 4-1: selecting invalid altsetting 0 [ 141.854932][ T4839] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 141.920458][ T4839] usb 4-1: USB disconnect, device number 13 [ 142.044116][ T5566] team0: Port device team_slave_0 added [ 142.095306][ T5568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.170874][ T5566] team0: Port device team_slave_1 added [ 143.129184][ T5143] usb 3-1: USB disconnect, device number 8 [ 143.279838][ T5653] loop4: detected capacity change from 0 to 32768 [ 143.736308][ T5678] dccp_invalid_packet: P.Data Offset(0) too small [ 144.127892][ T5653] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 144.147106][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 144.413730][ T5568] team0: Port device team_slave_0 added [ 144.530712][ T5653] XFS (loop4): Ending clean mount [ 144.598663][ T5695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.606843][ T5566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.639470][ T5095] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 144.660189][ T5566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.743807][ T5566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.801776][ T5568] team0: Port device team_slave_1 added [ 144.842045][ T5566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.861036][ T5566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.898351][ T5566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.958976][ T2921] hsr_slave_0: left promiscuous mode [ 144.993633][ T2921] hsr_slave_1: left promiscuous mode [ 145.014115][ T2921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.032100][ T2921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.043334][ T2921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.068499][ T2921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.113969][ T2921] veth1_macvtap: left promiscuous mode [ 145.133153][ T2921] veth0_macvtap: left promiscuous mode [ 145.185679][ T2921] veth1_vlan: left promiscuous mode [ 145.191405][ T2921] veth0_vlan: left promiscuous mode [ 145.197026][ T5143] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 146.054686][ T5143] usb 3-1: Using ep0 maxpacket: 32 [ 146.073994][ T5143] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 146.085211][ T5143] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 146.098324][ T5143] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 146.175096][ T5143] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 146.226907][ T2921] pimreg (unregistering): left allmulticast mode [ 146.233696][ T5143] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.286784][ T5143] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 146.309218][ T5143] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 146.364458][ T5143] usb 3-1: Product: syz [ 146.385895][ T5143] usb 3-1: Manufacturer: syz [ 146.410233][ T5143] usb 3-1: SerialNumber: syz [ 146.550776][ T5143] usb 3-1: config 0 descriptor?? [ 146.571246][ T5143] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 146.595199][ T5143] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 146.692953][ T5710] loop4: detected capacity change from 0 to 512 [ 146.718838][ T5710] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 146.787870][ T5710] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz.4.130: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 146.806969][ T5710] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.130: couldn't read orphan inode 15 (err -117) [ 146.828544][ T5710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.844738][ T5710] ext2 filesystem being mounted at /26/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.865069][ T9] usb 3-1: USB disconnect, device number 9 [ 146.865139][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 146.893555][ T29] audit: type=1800 audit(1720135239.798:12): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.130" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 146.897923][ T9] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 146.966090][ T5095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.150159][ T5695] ldusb: No device or device unplugged -19 [ 147.670633][ T5694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.774138][ T2921] team0 (unregistering): Port device team_slave_1 removed [ 147.886185][ T2921] team0 (unregistering): Port device team_slave_0 removed [ 149.698689][ T5568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.709359][ T5568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.739339][ T5568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.867947][ T5726] team0: entered promiscuous mode [ 149.873133][ T5726] team_slave_1: entered promiscuous mode [ 149.907447][ T5568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.931383][ T5568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.001358][ T5568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.056598][ T5566] hsr_slave_0: entered promiscuous mode [ 150.065387][ T5566] hsr_slave_1: entered promiscuous mode [ 150.077343][ T5566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.087622][ T5566] Cannot create hsr debugfs directory [ 150.105761][ T5725] team0: left promiscuous mode [ 150.110717][ T5725] team_slave_1: left promiscuous mode [ 150.175055][ T5739] dccp_invalid_packet: P.Data Offset(0) too small [ 150.291931][ T5745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 150.838637][ T5749] syzkaller0: entered promiscuous mode [ 150.854348][ T5749] syzkaller0: entered allmulticast mode [ 150.901813][ T5568] hsr_slave_0: entered promiscuous mode [ 150.952931][ T5763] loop4: detected capacity change from 0 to 512 [ 150.960262][ T5568] hsr_slave_1: entered promiscuous mode [ 150.991894][ T5568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.007338][ T5763] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 151.031993][ T5568] Cannot create hsr debugfs directory [ 151.039783][ T5763] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz.4.139: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 151.468377][ T5763] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.139: couldn't read orphan inode 15 (err -117) [ 151.491198][ T5763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.506155][ T5763] ext2 filesystem being mounted at /29/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.533120][ T29] audit: type=1800 audit(1720135244.438:13): pid=5763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.139" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 151.568845][ T5095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.174316][ T4839] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 155.979443][ T4839] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 156.001113][ T4839] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 45523, setting to 1024 [ 156.041750][ T4839] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 156.286485][ T4839] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.382120][ T4839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.544097][ T4839] usb 5-1: Product: 坍ὅ䔅昩刹햯࡬쏜䙅穚ﰈ헙澠檪숴珳员短⊈᜘ꁫ㉂ퟮ⮱ᵣ禼鳀ઈ꽵䔗ᰨ霂☚騹ꪲ翊䮼㫈⾩齃㸼뒿ᡣ㶐뎩嗵岊 [ 156.583598][ T2921] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.672696][ T4839] usb 5-1: Manufacturer: 쑿 [ 156.726779][ T4839] usb 5-1: SerialNumber: syz [ 157.000894][ T5785] loop0: detected capacity change from 0 to 7 [ 157.022429][ T5785] Dev loop0: unable to read RDB block 7 [ 157.030119][ T2921] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.044594][ T5785] loop0: unable to read partition table [ 157.074895][ T5785] loop0: partition table beyond EOD, truncated [ 157.085697][ T5803] loop2: detected capacity change from 0 to 512 [ 157.113503][ T5785] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 157.113503][ T5785] ) failed (rc=-5) [ 157.157398][ T5803] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 157.224907][ T4839] cdc_ncm 5-1:1.0: bind() failure [ 157.234551][ T5803] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 157.262956][ T4839] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 157.286685][ T4839] cdc_ncm 5-1:1.1: bind() failure [ 157.303873][ T4839] usb 5-1: USB disconnect, device number 9 [ 157.343740][ T5803] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 157.378930][ T2921] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.393610][ T5803] System zones: 1-12 [ 157.417094][ T5803] EXT4-fs (loop2): 1 truncate cleaned up [ 157.451574][ T5803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.527271][ T2921] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.671205][ T5794] loop3: detected capacity change from 0 to 32768 [ 157.757307][ T5794] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 157.810604][ T5105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.973772][ T2921] bridge_slave_1: left allmulticast mode [ 157.995073][ T2921] bridge_slave_1: left promiscuous mode [ 158.000948][ T2921] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.009389][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 158.103477][ T5794] XFS (loop3): Ending clean mount [ 158.149250][ T5794] XFS (loop3): Quotacheck needed: Please wait. [ 158.165850][ T2921] bridge_slave_0: left allmulticast mode [ 158.198033][ T2921] bridge_slave_0: left promiscuous mode [ 158.218417][ T2921] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.294378][ T5794] XFS (loop3): Quotacheck: Done. [ 158.461157][ T5794] ======================================================= [ 158.461157][ T5794] WARNING: The mand mount option has been deprecated and [ 158.461157][ T5794] and is ignored by this kernel. Remove the mand [ 158.461157][ T5794] option from the mount to silence this warning. [ 158.461157][ T5794] ======================================================= [ 158.510093][ T29] audit: type=1326 audit(1720135251.358:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.4.149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe813375bd9 code=0x0 [ 159.005990][ T5100] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.379121][ T2921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.392326][ T2921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.413078][ T2921] bond0 (unregistering): Released all slaves [ 159.650546][ T5838] syzkaller0: entered promiscuous mode [ 159.656392][ T5838] syzkaller0: entered allmulticast mode [ 160.453590][ T5843] loop2: detected capacity change from 0 to 32768 [ 160.465998][ T5843] XFS: ikeep mount option is deprecated. [ 160.488178][ T5843] XFS: ikeep mount option is deprecated. [ 160.551513][ T5843] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.664159][ T5843] XFS (loop2): Ending clean mount [ 160.970098][ T5105] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.794577][ T47] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 162.994465][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 163.024553][ T5147] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 163.032563][ T47] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.068706][ T47] usb 3-1: config 1 interface 0 has no altsetting 0 [ 163.089789][ T47] usb 3-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.40 [ 163.124307][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.134914][ T47] usb 3-1: Product: syz [ 163.144573][ T47] usb 3-1: Manufacturer: 㠍 [ 163.149255][ T47] usb 3-1: SerialNumber: syz [ 163.262841][ T2921] hsr_slave_0: left promiscuous mode [ 163.269352][ T2921] hsr_slave_1: left promiscuous mode [ 163.276162][ T2921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.280707][ T5147] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 163.283649][ T2921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.304536][ T5147] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 45523, setting to 1024 [ 163.321307][ T2921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.334271][ T5147] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 163.346579][ T2921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.379428][ T5147] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.405157][ T2921] veth1_macvtap: left promiscuous mode [ 163.407907][ T5147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.415372][ T2921] veth0_macvtap: left promiscuous mode [ 163.425513][ T5147] usb 5-1: Product: 坍ὅ䔅昩刹햯࡬쏜䙅穚ﰈ헙澠檪숴珳员短⊈᜘ꁫ㉂ퟮ⮱ᵣ禼鳀ઈ꽵䔗ᰨ霂☚騹ꪲ翊䮼㫈⾩齃㸼뒿ᡣ㶐뎩嗵岊 [ 163.445396][ T5147] usb 5-1: Manufacturer: 쑿 [ 163.450936][ T5147] usb 5-1: SerialNumber: syz [ 163.457850][ T2921] veth1_vlan: left promiscuous mode [ 163.463508][ T2921] veth0_vlan: left promiscuous mode [ 163.707665][ T5862] loop0: detected capacity change from 0 to 7 [ 163.716728][ T5862] Dev loop0: unable to read RDB block 7 [ 163.734468][ T5862] loop0: unable to read partition table [ 163.753081][ T5862] loop0: partition table beyond EOD, truncated [ 163.793160][ T5862] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 163.793160][ T5862] ) failed (rc=-5) [ 163.910111][ T5147] cdc_ncm 5-1:1.0: bind() failure [ 163.976005][ T5147] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 164.025338][ T5147] cdc_ncm 5-1:1.1: bind() failure [ 164.088083][ T5147] usb 5-1: USB disconnect, device number 10 [ 164.134933][ T2921] pimreg (unregistering): left allmulticast mode [ 165.390578][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.159'. [ 166.018701][ T29] audit: type=1326 audit(1720135258.928:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5884 comm="syz.3.160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff480575bd9 code=0x0 [ 166.857189][ T2921] team0 (unregistering): Port device team_slave_1 removed [ 166.932568][ T2921] team0 (unregistering): Port device team_slave_0 removed [ 167.489882][ T5882] team_slave_0: entered promiscuous mode [ 167.504585][ T5882] team_slave_0: entered allmulticast mode [ 167.555155][ T5882] team0: Port device team_slave_0 removed [ 167.877672][ T5568] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 167.924991][ T47] usbhid 3-1:1.0: can't add hid device: -71 [ 167.950399][ T47] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 167.975145][ T5568] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 168.016540][ T47] usb 3-1: USB disconnect, device number 10 [ 168.038038][ T5568] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 168.070463][ T5568] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 168.080828][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'. [ 168.169941][ T5897] team0: entered promiscuous mode [ 168.179471][ T5897] team_slave_1: entered promiscuous mode [ 168.264299][ T5896] team0: left promiscuous mode [ 168.281413][ T5896] team_slave_1: left promiscuous mode [ 168.433273][ T5566] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 168.482722][ T5566] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 168.570980][ T5566] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.753388][ T5906] syzkaller0: entered promiscuous mode [ 168.759522][ T5906] syzkaller0: entered allmulticast mode [ 168.784301][ T5566] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 169.091339][ T5890] loop4: detected capacity change from 0 to 32768 [ 169.125256][ T5890] XFS: ikeep mount option is deprecated. [ 169.130986][ T5890] XFS: ikeep mount option is deprecated. [ 169.214700][ T5890] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.370780][ T5890] XFS (loop4): Ending clean mount [ 169.470417][ T5907] loop2: detected capacity change from 0 to 32768 [ 169.502735][ T5095] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.554532][ T5907] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 169.638896][ T5907] XFS (loop2): Ending clean mount [ 169.935997][ T5944] qrtr: Invalid version 48 [ 169.951873][ T5944] qrtr: Invalid version 0 [ 170.590836][ T5944] syz.2.165 (5944) used greatest stack depth: 18928 bytes left [ 171.172240][ T5964] loop4: detected capacity change from 0 to 1024 [ 171.202528][ T5964] EXT4-fs: Ignoring removed orlov option [ 171.253186][ T5964] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.295777][ T5964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.343597][ T5907] syz.2.165 (5907) used greatest stack depth: 18176 bytes left [ 172.395746][ T5105] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 172.463774][ T5095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.249150][ T29] audit: type=1326 audit(1720135267.138:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe813375bd9 code=0x0 [ 174.274358][ C1] DEBUG: holding rtnl_mutex for 549 jiffies. [ 174.274390][ C1] task:syz.3.164 state:R running task stack:24248 pid:5902 tgid:5902 ppid:5100 flags:0x00004006 [ 174.274450][ C1] Call Trace: [ 174.274461][ C1] [ 174.274479][ C1] __schedule+0x1800/0x4a60 [ 174.274528][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 174.274567][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.274605][ C1] ? __pfx___schedule+0x10/0x10 [ 174.274637][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 174.274686][ C1] ? mark_lock+0x9a/0x360 [ 174.274724][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 174.274756][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 174.274787][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 174.274828][ C1] irqentry_exit+0x5e/0x90 [ 174.274963][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 174.275004][ C1] RIP: 0010:lockdep_unregister_key+0x56d/0x610 [ 174.275045][ C1] Code: ff 92 48 c7 c6 10 bc 6f 81 e8 8f 04 0a 00 e8 fa 18 0a 00 e9 e5 fb ff ff e8 c0 62 21 0a 41 f7 c7 00 02 00 00 74 d0 fb 45 84 f6 <75> cf eb e0 90 0f 0b 90 45 31 f6 e9 62 ff ff ff 90 0f 0b 90 e9 a1 [ 174.275069][ C1] RSP: 0018:ffffc90004727820 EFLAGS: 00000246 [ 174.275097][ C1] RAX: dffffc0000000000 RBX: 1ffff920008e4f0c RCX: ffffffff947f4803 [ 174.275119][ C1] RDX: 0000000000000001 RSI: ffffffff8bcad5e0 RDI: ffffffff8c207f20 [ 174.275139][ C1] RBP: ffffc900047278f8 R08: ffffffff930058a7 R09: 1ffffffff2600b14 [ 174.275160][ C1] R10: dffffc0000000000 R11: fffffbfff2600b15 R12: ffffc90004727860 [ 174.275179][ C1] R13: 1ffff920008e4f08 R14: 0000000000000000 R15: 0000000000000a06 [ 174.275221][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 174.275259][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 174.275303][ C1] ? __qdisc_destroy+0x150/0x410 [ 174.275329][ C1] ? kfree+0x149/0x360 [ 174.275363][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 174.275393][ C1] __qdisc_destroy+0x165/0x410 [ 174.275425][ C1] dev_shutdown+0x9b/0x440 [ 174.275458][ C1] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 174.275503][ C1] ? rcu_is_watching+0x15/0xb0 [ 174.275551][ C1] ? __mod_timer+0xb89/0xeb0 [ 174.275583][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 174.275624][ C1] ? mark_lock+0x9a/0x360 [ 174.275663][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 174.275701][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.275741][ C1] ? queue_delayed_work_on+0x1eb/0x390 [ 174.275776][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 174.275822][ C1] unregister_netdevice_queue+0x303/0x370 [ 174.275861][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 174.275915][ C1] __tun_detach+0x6b6/0x1600 [ 174.275963][ C1] tun_chr_close+0x108/0x1b0 [ 174.275991][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 174.276018][ C1] __fput+0x24a/0x8a0 [ 174.276069][ C1] task_work_run+0x24f/0x310 [ 174.276103][ C1] ? __pfx_task_work_run+0x10/0x10 [ 174.276134][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 174.276173][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 174.276215][ C1] do_syscall_64+0x100/0x230 [ 174.276241][ C1] ? clear_bhb_loop+0x35/0x90 [ 174.276274][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.276304][ C1] RIP: 0033:0x7ff480575bd9 [ 174.276327][ C1] RSP: 002b:00007ffee408f638 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 174.276358][ C1] RAX: 0000000000000000 RBX: 00007ff480705a60 RCX: 00007ff480575bd9 [ 174.276377][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 174.276394][ C1] RBP: 00007ff480705a60 R08: 00007ff47fc01000 R09: 00000008e408f96f [ 174.276414][ C1] R10: 00000000003ff44c R11: 0000000000000246 R12: 0000000000029502 [ 174.276432][ C1] R13: 0000000000000032 R14: 00007ff480705a60 R15: 00007ff480704038 [ 174.276471][ C1] [ 174.276484][ C1] DEBUG: waiting rtnl_mutex for 544 jiffies. [ 174.276500][ C1] task:kworker/u8:10 state:D stack:21008 pid:2485 tgid:2485 ppid:2 flags:0x00004000 [ 174.276549][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 174.276588][ C1] Call Trace: [ 174.276599][ C1] [ 174.276616][ C1] __schedule+0x1800/0x4a60 [ 174.276673][ C1] ? __pfx___schedule+0x10/0x10 [ 174.276708][ C1] ? __pfx_lock_release+0x10/0x10 [ 174.276743][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 174.276782][ C1] ? kthread_data+0x52/0xd0 [ 174.276813][ C1] ? schedule+0x90/0x320 [ 174.276842][ C1] ? wq_worker_sleeping+0x66/0x240 [ 174.276876][ C1] ? schedule+0x90/0x320 [ 174.276913][ C1] schedule+0x14b/0x320 [ 174.276946][ C1] schedule_preempt_disabled+0x13/0x30 [ 174.276977][ C1] __mutex_lock+0x6a4/0xd70 [ 174.277008][ C1] ? mark_lock+0x9a/0x360 [ 174.277046][ C1] ? __mutex_lock+0x527/0xd70 [ 174.277081][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 174.277115][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 174.277160][ C1] ? get_rtnl_holder+0x144/0x190 [ 174.277192][ C1] addrconf_dad_work+0xd0/0x16f0 [ 174.277236][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 174.277269][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.277316][ C1] ? process_scheduled_works+0x945/0x1830 [ 174.277347][ C1] process_scheduled_works+0xa2c/0x1830 [ 174.277410][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 174.277450][ C1] ? assign_work+0x364/0x3d0 [ 174.277487][ C1] worker_thread+0x86d/0xd40 [ 174.277531][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 174.277568][ C1] ? __kthread_parkme+0x169/0x1d0 [ 174.277605][ C1] ? __pfx_worker_thread+0x10/0x10 [ 174.277636][ C1] kthread+0x2f0/0x390 [ 174.277671][ C1] ? __pfx_worker_thread+0x10/0x10 [ 174.277701][ C1] ? __pfx_kthread+0x10/0x10 [ 174.277737][ C1] ret_from_fork+0x4b/0x80 [ 174.277771][ C1] ? __pfx_kthread+0x10/0x10 [ 174.277806][ C1] ret_from_fork_asm+0x1a/0x30 [ 174.277859][ C1] [ 174.277870][ C1] DEBUG: waiting rtnl_mutex for 543 jiffies. [ 174.277884][ C1] task:syz-executor state:D stack:21024 pid:5566 tgid:5566 ppid:5564 flags:0x00004000 [ 174.277936][ C1] Call Trace: [ 174.277946][ C1] [ 174.277962][ C1] __schedule+0x1800/0x4a60 [ 174.278017][ C1] ? __pfx___schedule+0x10/0x10 [ 174.278051][ C1] ? __pfx_lock_release+0x10/0x10 [ 174.278084][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 174.278134][ C1] ? schedule+0x90/0x320 [ 174.278162][ C1] schedule+0x14b/0x320 [ 174.278194][ C1] schedule_preempt_disabled+0x13/0x30 [ 174.278224][ C1] __mutex_lock+0x6a4/0xd70 [ 174.278262][ C1] ? __mutex_lock+0x527/0xd70 [ 174.278296][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 174.278335][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 174.278381][ C1] ? get_rtnl_holder+0x144/0x190 [ 174.278410][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 174.278452][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 174.278493][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 174.278528][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 174.278572][ C1] ? __pfx_validate_chain+0x10/0x10 [ 174.278610][ C1] ? __pfx_validate_chain+0x10/0x10 [ 174.278664][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 174.278702][ C1] ? mark_lock+0x9a/0x360 [ 174.278733][ C1] ? __pfx_validate_chain+0x10/0x10 [ 174.278773][ C1] ? __lock_acquire+0x1359/0x2000 [ 174.278821][ C1] ? mark_lock+0x9a/0x360 [ 174.278858][ C1] ? __lock_acquire+0x1359/0x2000 [ 174.278930][ C1] netlink_rcv_skb+0x1e3/0x430 [ 174.278974][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 174.279014][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.279079][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 174.279107][ C1] netlink_unicast+0x7f0/0x990 [ 174.279337][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 174.279375][ C1] ? __virt_addr_valid+0x183/0x530 [ 174.279417][ C1] ? __check_object_size+0x49c/0x900 [ 174.279450][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 174.279488][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 174.279529][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.279552][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 174.279589][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 174.279621][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 174.279655][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 174.279694][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.279718][ C1] __sock_sendmsg+0x221/0x270 [ 174.279767][ C1] __sys_sendto+0x3a4/0x4f0 [ 174.279805][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 174.279870][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 174.279913][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.279953][ C1] __x64_sys_sendto+0xde/0x100 [ 174.279987][ C1] do_syscall_64+0xf3/0x230 [ 174.280012][ C1] ? clear_bhb_loop+0x35/0x90 [ 174.280045][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.280075][ C1] RIP: 0033:0x7f34c337796c [ 174.280097][ C1] RSP: 002b:00007fff21e65bf0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 174.280127][ C1] RAX: ffffffffffffffda RBX: 00007f34c4034620 RCX: 00007f34c337796c [ 174.280157][ C1] RDX: 0000000000000028 RSI: 00007f34c4034670 RDI: 0000000000000003 [ 174.280175][ C1] RBP: 0000000000000000 R08: 00007fff21e65c44 R09: 000000000000000c [ 174.280193][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 174.280209][ C1] R13: 0000000000000000 R14: 00007f34c4034670 R15: 0000000000000000 [ 174.280246][ C1] [ 174.280258][ C1] DEBUG: waiting rtnl_mutex for 543 jiffies. [ 174.280273][ C1] task:syz-executor state:D stack:21024 pid:5568 tgid:5568 ppid:5565 flags:0x00004000 [ 174.280317][ C1] Call Trace: [ 174.280328][ C1] [ 174.280343][ C1] __schedule+0x1800/0x4a60 [ 174.280396][ C1] ? __pfx___schedule+0x10/0x10 [ 174.280428][ C1] ? __pfx_lock_release+0x10/0x10 [ 174.280461][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 174.280514][ C1] ? schedule+0x90/0x320 [ 174.280544][ C1] schedule+0x14b/0x320 [ 174.280576][ C1] schedule_preempt_disabled+0x13/0x30 [ 174.280606][ C1] __mutex_lock+0x6a4/0xd70 [ 174.280644][ C1] ? __mutex_lock+0x527/0xd70 [ 174.280679][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 174.280718][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 174.280764][ C1] ? get_rtnl_holder+0x144/0x190 [ 174.280847][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 174.280890][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 174.281022][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 174.281060][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 174.281110][ C1] ? __pfx_validate_chain+0x10/0x10 [ 174.281170][ C1] ? __pfx_validate_chain+0x10/0x10 [ 174.281210][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 174.281249][ C1] ? mark_lock+0x9a/0x360 [ 174.281281][ C1] ? __pfx_validate_chain+0x10/0x10 [ 174.281322][ C1] ? __lock_acquire+0x1359/0x2000 [ 174.281372][ C1] ? mark_lock+0x9a/0x360 [ 174.281410][ C1] ? __lock_acquire+0x1359/0x2000 [ 174.281467][ C1] netlink_rcv_skb+0x1e3/0x430 [ 174.281510][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 174.281549][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.281614][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 174.281642][ C1] netlink_unicast+0x7f0/0x990 [ 174.281687][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 174.281721][ C1] ? __virt_addr_valid+0x183/0x530 [ 174.281762][ C1] ? __check_object_size+0x49c/0x900 [ 174.281814][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 174.281850][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 174.281891][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.281916][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 174.281955][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 174.281985][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 174.282020][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 174.282060][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.282085][ C1] __sock_sendmsg+0x221/0x270 [ 174.282129][ C1] __sys_sendto+0x3a4/0x4f0 [ 174.282175][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 174.282235][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 174.282274][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.282318][ C1] __x64_sys_sendto+0xde/0x100 [ 174.282355][ C1] do_syscall_64+0xf3/0x230 [ 174.282383][ C1] ? clear_bhb_loop+0x35/0x90 [ 174.282420][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.282450][ C1] RIP: 0033:0x7faa02d7796c [ 174.282474][ C1] RSP: 002b:00007ffe71fe6020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 174.282507][ C1] RAX: ffffffffffffffda RBX: 00007faa03a34620 RCX: 00007faa02d7796c [ 174.282528][ C1] RDX: 0000000000000028 RSI: 00007faa03a34670 RDI: 0000000000000003 [ 174.282546][ C1] RBP: 0000000000000000 R08: 00007ffe71fe6074 R09: 000000000000000c [ 174.282565][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 174.282581][ C1] R13: 0000000000000000 R14: 00007faa03a34670 R15: 0000000000000000 [ 174.282619][ C1] [ 174.282632][ C1] [ 174.282632][ C1] Showing all locks held in the system: [ 174.282649][ C1] 4 locks held by kauditd/29: [ 174.282693][ C1] #0: ffffffff8e2110a0 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 174.282778][ C1] #1: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 174.282851][ C1] #2: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 174.282949][ C1] #3: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 174.283049][ C1] 3 locks held by kworker/u8:6/1042: [ 174.283082][ C1] 3 locks held by kworker/u8:10/2485: [ 174.283098][ C1] #0: ffff888029fb4948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 174.283184][ C1] #1: ffffc90009037d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 174.283260][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 174.283340][ C1] 3 locks held by kworker/1:2/2940: [ 174.283356][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 174.283434][ C1] #1: ffffc90009727d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 174.283509][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 174.283583][ C1] 2 locks held by getty/4854: [ 174.283599][ C1] #0: ffff88802a8c60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 174.283680][ C1] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 174.283762][ C1] 1 lock held by syz-executor/5566: [ 174.283778][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 174.283859][ C1] 1 lock held by syz-executor/5568: [ 174.283875][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 174.283956][ C1] 1 lock held by syz.3.164/5902: [ 174.283974][ C1] 2 locks held by syz.2.167/5992: [ 174.283989][ C1] #0: ffff888065b260a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 174.284069][ C1] #1: ffff888065b26130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write+0x1f3/0x9c0 [ 174.284224][ C1] 1 lock held by syz.2.167/5995: [ 174.284240][ C1] #0: ffff888065b260a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 174.284319][ C1] 1 lock held by syz.4.170/6003: [ 174.284335][ C1] 1 lock held by syz.4.170/6005: [ 174.284350][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e4/0x3630 [ 174.284431][ C1] 4 locks held by dhcpcd-run-hook/6004: [ 174.284447][ C1] [ 174.284455][ C1] ============================================= [ 174.284455][ C1] [ 175.204858][ T4839] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 175.304300][ C1] DEBUG: waiting rtnl_mutex for 568 jiffies. [ 175.494378][ T4839] usb 3-1: Using ep0 maxpacket: 16 [ 175.497956][ C1] task:kworker/1:2 state:D [ 175.509062][ T4839] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.514639][ C1] stack:23192 pid:2940 tgid:2940 ppid:2 flags:0x00004000 [ 175.514674][ C1] Workqueue: events linkwatch_event [ 175.523182][ T4839] usb 3-1: config 1 interface 0 has no altsetting 0 [ 175.530842][ C1] [ 175.530858][ C1] Call Trace: [ 175.530869][ C1] [ 175.530884][ C1] __schedule+0x1800/0x4a60 [ 175.530948][ C1] ? __pfx___schedule+0x10/0x10 [ 175.547107][ T4839] usb 3-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.40 [ 175.550148][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 175.550196][ C1] ? __pfx_lock_release+0x10/0x10 [ 175.558606][ T4839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.563045][ C1] ? kick_pool+0x1bd/0x620 [ 175.571858][ T4839] usb 3-1: Product: syz [ 175.581277][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 175.581317][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 175.606883][ T4839] usb 3-1: Manufacturer: 㠍 [ 175.612121][ C1] ? schedule+0x90/0x320 [ 175.649376][ T4839] usb 3-1: SerialNumber: syz [ 175.651416][ C1] schedule+0x14b/0x320 [ 175.966323][ C1] schedule_preempt_disabled+0x13/0x30 [ 175.971948][ C1] __mutex_lock+0x6a4/0xd70 [ 175.977470][ C1] ? __mutex_lock+0x527/0xd70 [ 175.982534][ C1] ? linkwatch_event+0xe/0x60 [ 175.988022][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 175.993470][ C1] ? get_rtnl_holder+0x144/0x190 [ 175.998627][ C1] ? process_scheduled_works+0x945/0x1830 [ 176.004578][ C1] linkwatch_event+0xe/0x60 [ 176.009160][ C1] process_scheduled_works+0xa2c/0x1830 [ 176.014868][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 176.021048][ C1] ? assign_work+0x364/0x3d0 [ 176.025777][ C1] worker_thread+0x86d/0xd40 [ 176.030434][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 176.036448][ C1] ? __kthread_parkme+0x169/0x1d0 [ 176.041578][ C1] ? __pfx_worker_thread+0x10/0x10 [ 176.046980][ C1] kthread+0x2f0/0x390 [ 176.051227][ C1] ? __pfx_worker_thread+0x10/0x10 [ 176.056474][ C1] ? __pfx_kthread+0x10/0x10 [ 176.061183][ C1] ret_from_fork+0x4b/0x80 [ 176.065703][ C1] ? __pfx_kthread+0x10/0x10 [ 176.070432][ C1] ret_from_fork_asm+0x1a/0x30 [ 176.075415][ C1] [ 176.078674][ C1] DEBUG: holding rtnl_mutex for 729 jiffies. [ 176.085015][ C1] task:syz.3.164 state:D stack:24248 pid:5902 tgid:5902 ppid:5100 flags:0x00004006 [ 176.096067][ C1] Call Trace: [ 176.099592][ C1] [ 176.102609][ C1] __schedule+0x1800/0x4a60 [ 176.107320][ C1] ? __pfx___schedule+0x10/0x10 [ 176.112288][ C1] ? __pfx_lock_release+0x10/0x10 [ 176.117625][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 176.123777][ C1] ? schedule+0x90/0x320 [ 176.128218][ C1] schedule+0x14b/0x320 [ 176.132436][ C1] synchronize_rcu_expedited+0x684/0x830 [ 176.138331][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 176.144922][ C1] ? poison_slab_object+0xe0/0x150 [ 176.150263][ C1] ? __kasan_slab_free+0x37/0x60 [ 176.155354][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 176.160716][ C1] ? __pfx___might_resched+0x10/0x10 [ 176.166117][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 176.172525][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 176.178199][ C1] synchronize_rcu+0x11b/0x360 [ 176.183129][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 176.188520][ C1] ? lockdep_unlock+0x16a/0x300 [ 176.193610][ C1] ? __pfx_lockdep_unlock+0x10/0x10 [ 176.198926][ C1] lockdep_unregister_key+0x556/0x610 [ 176.204406][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 176.210383][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 176.216049][ C1] ? __qdisc_destroy+0x150/0x410 [ 176.221089][ C1] ? kfree+0x149/0x360 [ 176.225354][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 176.231060][ C1] __qdisc_destroy+0x165/0x410 [ 176.236089][ C1] dev_shutdown+0x9b/0x440 [ 176.241071][ C1] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 176.247601][ C1] ? rcu_is_watching+0x15/0xb0 [ 176.252438][ C1] ? __mod_timer+0xb89/0xeb0 [ 176.257154][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 176.263999][ C1] ? mark_lock+0x9a/0x360 [ 176.268778][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 176.274854][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.281686][ C1] ? queue_delayed_work_on+0x1eb/0x390 [ 176.287301][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 176.292672][ C1] unregister_netdevice_queue+0x303/0x370 [ 176.298688][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 176.305163][ C1] __tun_detach+0x6b6/0x1600 [ 176.311155][ C1] tun_chr_close+0x108/0x1b0 [ 176.316141][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 176.321486][ C1] __fput+0x24a/0x8a0 [ 176.325608][ C1] task_work_run+0x24f/0x310 [ 176.330803][ C1] ? __pfx_task_work_run+0x10/0x10 [ 176.336645][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 176.342860][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 176.348730][ C1] do_syscall_64+0x100/0x230 [ 176.353427][ C1] ? clear_bhb_loop+0x35/0x90 [ 176.358625][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.364611][ C1] RIP: 0033:0x7ff480575bd9 [ 176.369084][ C1] RSP: 002b:00007ffee408f638 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 176.377591][ C1] RAX: 0000000000000000 RBX: 00007ff480705a60 RCX: 00007ff480575bd9 [ 176.385633][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 176.393821][ C1] RBP: 00007ff480705a60 R08: 00007ff47fc01000 R09: 00000008e408f96f [ 176.401891][ C1] R10: 00000000003ff44c R11: 0000000000000246 R12: 0000000000029502 [ 176.410136][ C1] R13: 0000000000000032 R14: 00007ff480705a60 R15: 00007ff480704038 [ 176.418646][ C1] [ 176.421837][ C1] DEBUG: waiting rtnl_mutex for 758 jiffies. [ 176.427905][ C1] task:kworker/u8:10 state:D stack:21008 pid:2485 tgid:2485 ppid:2 flags:0x00004000 [ 176.438796][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 176.445171][ C1] Call Trace: [ 176.451587][ C1] [ 176.455316][ C1] __schedule+0x1800/0x4a60 [ 176.460546][ C1] ? __pfx___schedule+0x10/0x10 [ 176.465529][ C1] ? __pfx_lock_release+0x10/0x10 [ 176.470908][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 176.476694][ C1] ? kthread_data+0x52/0xd0 [ 176.481313][ C1] ? schedule+0x90/0x320 [ 176.485659][ C1] ? wq_worker_sleeping+0x66/0x240 [ 176.490904][ C1] ? schedule+0x90/0x320 [ 176.495446][ C1] schedule+0x14b/0x320 [ 176.499766][ C1] schedule_preempt_disabled+0x13/0x30 [ 176.505421][ C1] __mutex_lock+0x6a4/0xd70 [ 176.511049][ C1] ? mark_lock+0x9a/0x360 [ 176.515573][ C1] ? __mutex_lock+0x527/0xd70 [ 176.520370][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 176.525810][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 176.531154][ C1] ? get_rtnl_holder+0x144/0x190 [ 176.536329][ C1] addrconf_dad_work+0xd0/0x16f0 [ 176.541534][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 176.547320][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.554562][ C1] ? process_scheduled_works+0x945/0x1830 [ 176.561203][ C1] process_scheduled_works+0xa2c/0x1830 [ 176.566984][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 176.573063][ C1] ? assign_work+0x364/0x3d0 [ 176.577781][ C1] worker_thread+0x86d/0xd40 [ 176.582453][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 176.588533][ C1] ? __kthread_parkme+0x169/0x1d0 [ 176.593715][ C1] ? __pfx_worker_thread+0x10/0x10 [ 176.599038][ C1] kthread+0x2f0/0x390 [ 176.603182][ C1] ? __pfx_worker_thread+0x10/0x10 [ 176.608405][ C1] ? __pfx_kthread+0x10/0x10 [ 176.613066][ C1] ret_from_fork+0x4b/0x80 [ 176.617762][ C1] ? __pfx_kthread+0x10/0x10 [ 176.622420][ C1] ret_from_fork_asm+0x1a/0x30 [ 176.627419][ C1] [ 176.630480][ C1] DEBUG: waiting rtnl_mutex for 778 jiffies. [ 176.636543][ C1] task:syz-executor state:D stack:21024 pid:5566 tgid:5566 ppid:5564 flags:0x00004000 [ 176.647007][ C1] Call Trace: [ 176.650431][ C1] [ 176.653530][ C1] __schedule+0x1800/0x4a60 [ 176.658573][ C1] ? __pfx___schedule+0x10/0x10 [ 176.663515][ C1] ? __pfx_lock_release+0x10/0x10 [ 176.668683][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 176.674320][ C1] ? schedule+0x90/0x320 [ 176.678789][ C1] schedule+0x14b/0x320 [ 176.683010][ C1] schedule_preempt_disabled+0x13/0x30 [ 176.688586][ C1] __mutex_lock+0x6a4/0xd70 [ 176.693344][ C1] ? __mutex_lock+0x527/0xd70 [ 176.698167][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 176.703461][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 176.708728][ C1] ? get_rtnl_holder+0x144/0x190 [ 176.713751][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 176.719022][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 176.724413][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 176.730470][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 176.735946][ C1] ? __pfx_validate_chain+0x10/0x10 [ 176.741226][ C1] ? __pfx_validate_chain+0x10/0x10 [ 176.747123][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 176.752201][ C1] ? mark_lock+0x9a/0x360 [ 176.756921][ C1] ? __pfx_validate_chain+0x10/0x10 [ 176.762203][ C1] ? __lock_acquire+0x1359/0x2000 [ 176.767348][ C1] ? mark_lock+0x9a/0x360 [ 176.771750][ C1] ? __lock_acquire+0x1359/0x2000 [ 176.776913][ C1] netlink_rcv_skb+0x1e3/0x430 [ 176.781876][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 176.787483][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.793115][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.798440][ C1] netlink_unicast+0x7f0/0x990 [ 176.803272][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 176.809560][ C1] ? __virt_addr_valid+0x183/0x530 [ 176.814886][ C1] ? __check_object_size+0x49c/0x900 [ 176.821374][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 176.827041][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 176.831882][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.837394][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 176.843617][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 176.848836][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 176.854237][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 176.859772][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.865777][ C1] __sock_sendmsg+0x221/0x270 [ 176.870531][ C1] __sys_sendto+0x3a4/0x4f0 [ 176.875221][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 176.880399][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 176.886711][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.893472][ C1] __x64_sys_sendto+0xde/0x100 [ 176.898344][ C1] do_syscall_64+0xf3/0x230 [ 176.903009][ C1] ? clear_bhb_loop+0x35/0x90 [ 176.907827][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.913782][ C1] RIP: 0033:0x7f34c337796c [ 176.918358][ C1] RSP: 002b:00007fff21e65bf0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 176.927043][ C1] RAX: ffffffffffffffda RBX: 00007f34c4034620 RCX: 00007f34c337796c [ 176.935197][ C1] RDX: 0000000000000028 RSI: 00007f34c4034670 RDI: 0000000000000003 [ 176.943451][ C1] RBP: 0000000000000000 R08: 00007fff21e65c44 R09: 000000000000000c [ 176.951685][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 176.959947][ C1] R13: 0000000000000000 R14: 00007f34c4034670 R15: 0000000000000000 [ 176.968062][ C1] [ 176.971155][ C1] DEBUG: waiting rtnl_mutex for 812 jiffies. [ 176.977353][ C1] task:syz-executor state:D stack:21024 pid:5568 tgid:5568 ppid:5565 flags:0x00004000 [ 176.988168][ C1] Call Trace: [ 176.991670][ C1] [ 176.994757][ C1] __schedule+0x1800/0x4a60 [ 176.999346][ C1] ? __pfx___schedule+0x10/0x10 [ 177.004303][ C1] ? __pfx_lock_release+0x10/0x10 [ 177.009485][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 177.015081][ C1] ? schedule+0x90/0x320 [ 177.019574][ C1] schedule+0x14b/0x320 [ 177.023806][ C1] schedule_preempt_disabled+0x13/0x30 [ 177.029623][ C1] __mutex_lock+0x6a4/0xd70 [ 177.034283][ C1] ? __mutex_lock+0x527/0xd70 [ 177.039039][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 177.044344][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 177.049441][ C1] ? get_rtnl_holder+0x144/0x190 [ 177.054512][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 177.059603][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 177.065002][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.070992][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 177.076952][ C1] ? __pfx_validate_chain+0x10/0x10 [ 177.082493][ C1] ? __pfx_validate_chain+0x10/0x10 [ 177.087828][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 177.092925][ C1] ? mark_lock+0x9a/0x360 [ 177.097344][ C1] ? __pfx_validate_chain+0x10/0x10 [ 177.102648][ C1] ? __lock_acquire+0x1359/0x2000 [ 177.107831][ C1] ? mark_lock+0x9a/0x360 [ 177.112253][ C1] ? __lock_acquire+0x1359/0x2000 [ 177.117446][ C1] netlink_rcv_skb+0x1e3/0x430 [ 177.122315][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.128601][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.134018][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.139406][ C1] netlink_unicast+0x7f0/0x990 [ 177.144374][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 177.149879][ C1] ? __virt_addr_valid+0x183/0x530 [ 177.155233][ C1] ? __check_object_size+0x49c/0x900 [ 177.160611][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 177.166453][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 177.171299][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.176692][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 177.182813][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 177.187861][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 177.193277][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 177.198843][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.204313][ C1] __sock_sendmsg+0x221/0x270 [ 177.209058][ C1] __sys_sendto+0x3a4/0x4f0 [ 177.213651][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 177.219073][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 177.225439][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.232451][ C1] __x64_sys_sendto+0xde/0x100 [ 177.237382][ C1] do_syscall_64+0xf3/0x230 [ 177.241962][ C1] ? clear_bhb_loop+0x35/0x90 [ 177.246994][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.253250][ C1] RIP: 0033:0x7faa02d7796c [ 177.257807][ C1] RSP: 002b:00007ffe71fe6020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 177.266318][ C1] RAX: ffffffffffffffda RBX: 00007faa03a34620 RCX: 00007faa02d7796c [ 177.274562][ C1] RDX: 0000000000000028 RSI: 00007faa03a34670 RDI: 0000000000000003 [ 177.282599][ C1] RBP: 0000000000000000 R08: 00007ffe71fe6074 R09: 000000000000000c [ 177.292229][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 177.300699][ C1] R13: 0000000000000000 R14: 00007faa03a34670 R15: 0000000000000000 [ 177.309086][ C1] [ 177.312174][ C1] [ 177.312174][ C1] Showing all locks held in the system: [ 177.320221][ C1] 3 locks held by kworker/u8:10/2485: [ 177.325673][ C1] #0: ffff888029fb4948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 177.337565][ C1] #1: ffffc90009037d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 177.350846][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 177.360712][ C1] 3 locks held by kworker/1:2/2940: [ 177.366020][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 177.377982][ C1] #1: ffffc90009727d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 177.389722][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 177.398937][ C1] 3 locks held by klogd/4538: [ 177.404370][ C1] #0: ffff8880b943ea18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 177.415067][ C1] #1: ffff8880b9428948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 177.426693][ C1] #2: ffff8880b942c898 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0x109/0xca0 [ 177.437785][ C1] 2 locks held by dhcpcd/4763: [ 177.442671][ C1] #0: ffff88802e691678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x780 [ 177.453371][ C1] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x9e/0x210 [ 177.462607][ C1] 4 locks held by kworker/0:3/4839: [ 177.469135][ C1] #0: ffff88801ce89948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 177.481132][ C1] #1: ffffc900032dfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 177.493868][ C1] #2: ffff88802374c190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 177.502927][ C1] #3: ffff88802e697190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 177.512443][ C1] 2 locks held by getty/4854: [ 177.517237][ C1] #0: ffff88802a8c60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 177.527780][ C1] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 177.538805][ C1] 1 lock held by syz-executor/5566: [ 177.544476][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 177.554283][ C1] 1 lock held by syz-executor/5568: [ 177.559530][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 177.569331][ C1] 2 locks held by syz.3.164/5902: [ 177.574442][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 177.583649][ C1] #1: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 177.595198][ C1] 4 locks held by syz.4.170/5996: [ 177.600274][ C1] #0: ffff88807b549a08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 177.610714][ C1] #1: ffffffff8f667110 ((netlink_chain).rwsem){++++}-{3:3}, at: blocking_notifier_call_chain+0x53/0x90 [ 177.622863][ C1] #2: ffff888021a41eb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nft_rcv_nl_event+0x123/0x6d0 [ 177.633577][ C1] #3: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 177.644677][ C1] 1 lock held by syz.4.170/6005: [ 177.649665][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e4/0x3630 [ 177.659486][ C1] 3 locks held by syz.2.171/6008: [ 177.664620][ C1] #0: ffff888029be6220 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 177.675628][ C1] #1: ffff88802f36c518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f0/0xdf0 [ 177.685591][ C1] #2: ffff88802f370950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x203f/0x22a0 [ 177.695477][ C1] 1 lock held by syz.2.171/6009: [ 177.700633][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48f/0x2400 [ 177.710070][ C1] [ 177.712434][ C1] ============================================= [ 177.712434][ C1] [ 178.713377][ T5568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.899599][ T5568] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.943708][ T5566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.993814][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.002247][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.060836][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.068271][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.110178][ T6026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.174'. [ 179.127757][ T5566] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.163623][ T6027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.187847][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.195427][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.226314][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.233677][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.558369][ T5566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.057661][ T4839] usbhid 3-1:1.0: can't add hid device: -32 [ 181.063812][ T4839] usbhid 3-1:1.0: probe with driver usbhid failed with error -32 [ 181.155139][ T5147] usb 3-1: USB disconnect, device number 11 [ 181.836282][ T5566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.858838][ T5568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.076879][ T5566] veth0_vlan: entered promiscuous mode [ 182.177059][ T5566] veth1_vlan: entered promiscuous mode [ 182.291842][ T5566] veth0_macvtap: entered promiscuous mode [ 182.329051][ T6051] loop2: detected capacity change from 0 to 128 [ 182.343951][ T5568] veth0_vlan: entered promiscuous mode [ 182.389473][ T5566] veth1_macvtap: entered promiscuous mode [ 182.411934][ T6051] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 182.841011][ T5568] veth1_vlan: entered promiscuous mode [ 183.219238][ T5566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.261487][ T6051] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 183.268110][ T6051] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 183.277715][ T5566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.289724][ T5566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.303027][ T5566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.306239][ T6051] vhci_hcd vhci_hcd.0: Device attached [ 183.318676][ T5566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.318752][ T5566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.321435][ T5566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.541102][ T5566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.570076][ T5566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.582155][ T6069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.583379][ T5566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.604747][ T5566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.605386][ T25] usb 13-1: new high-speed USB device number 3 using vhci_hcd [ 183.615010][ T5566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.637284][ T5566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.681695][ T5566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.814899][ T6064] syzkaller0: entered promiscuous mode [ 183.822947][ T6064] syzkaller0: entered allmulticast mode [ 183.841560][ T5566] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.852532][ T5566] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.863617][ T6059] vhci_hcd: cannot find the pending unlink 5 [ 183.864108][ T5566] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.881637][ T5566] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.911573][ T5568] veth0_macvtap: entered promiscuous mode [ 183.997141][ T6059] vhci_hcd: connection reset by peer [ 184.003229][ T62] vhci_hcd: stop threads [ 184.022434][ T62] vhci_hcd: release socket [ 184.027313][ T47] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 184.034587][ T62] vhci_hcd: disconnect device [ 184.226843][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 184.236320][ T47] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 184.245078][ T47] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 184.265001][ T47] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 184.291581][ T47] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 184.315022][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 184.325018][ T47] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 184.344252][ T47] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 184.352823][ T47] usb 5-1: Product: syz [ 184.358069][ T47] usb 5-1: Manufacturer: syz [ 184.362888][ T47] usb 5-1: SerialNumber: syz [ 184.380279][ T47] usb 5-1: config 0 descriptor?? [ 184.399491][ T47] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 184.419753][ T47] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 184.700651][ T5146] usb 5-1: USB disconnect, device number 11 [ 184.700727][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 184.716602][ T5146] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 184.931849][ T6069] ldusb: No device or device unplugged -19 [ 185.392410][ T6068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.692032][ T6080] loop2: detected capacity change from 0 to 128 [ 185.720451][ T6080] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 185.757069][ T6080] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 185.763743][ T6080] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 185.779656][ T6080] vhci_hcd vhci_hcd.0: Device attached [ 186.070478][ T6081] vhci_hcd: cannot find the pending unlink 5 [ 186.551588][ T6081] vhci_hcd: connection closed [ 186.561381][ T2921] vhci_hcd: stop threads [ 186.583375][ T2921] vhci_hcd: release socket [ 186.588428][ T2921] vhci_hcd: disconnect device [ 187.200047][ T5568] veth1_macvtap: entered promiscuous mode [ 187.284000][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.314493][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.325155][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.363506][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.377735][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.389299][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.412560][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.524643][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.608306][ T5568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.451586][ T6093] netlink: 56 bytes leftover after parsing attributes in process `syz.3.187'. [ 188.467151][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.490736][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.535669][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.562349][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.604213][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.650953][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.662845][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.674706][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.699804][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.716697][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.735188][ T25] vhci_hcd: vhci_device speed not set [ 188.743581][ T5568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.838754][ T5568] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.853375][ T5568] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.865449][ T5568] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.889057][ T5568] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.913641][ T6110] netlink: 'syz.2.189': attribute type 10 has an invalid length. [ 188.946678][ T6111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.189'. [ 188.998406][ T6110] team0: Failed to send options change via netlink (err -105) [ 189.047208][ T6110] team0: Port device netdevsim0 added [ 189.187530][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.226554][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.309337][ T5144] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 189.350717][ T2940] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 189.574140][ T2940] usb 3-1: Using ep0 maxpacket: 8 [ 189.798625][ T2940] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.009567][ T2940] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 190.282966][ T2940] usb 3-1: config 1 has no interface number 1 [ 190.290740][ T2940] usb 3-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 190.302765][ T2940] usb 3-1: config 1 interface 2 altsetting 220 has an invalid endpoint descriptor of length 3, skipping [ 190.315221][ T2940] usb 3-1: config 1 interface 2 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 190.328915][ T2940] usb 3-1: config 1 interface 2 has no altsetting 0 [ 190.347012][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.636048][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.892841][ T6129] team0: entered promiscuous mode [ 190.902088][ T6129] team_slave_1: entered promiscuous mode [ 190.922072][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.977902][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.080674][ T2940] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.094288][ T2940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.102646][ T2940] usb 3-1: Product: 쑿퉈ਝ쑻 [ 191.110010][ T2940] usb 3-1: Manufacturer: ф [ 191.114643][ T2940] usb 3-1: SerialNumber: syz [ 191.654570][ T2940] usb 3-1: USB disconnect, device number 12 [ 192.284318][ T6139] syzkaller0: entered promiscuous mode [ 192.328967][ T6139] syzkaller0: entered allmulticast mode [ 192.503475][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 192.513599][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 192.523498][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 192.538295][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 192.547040][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 192.562611][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.570744][ T6127] team0: left promiscuous mode [ 192.614444][ T6127] team_slave_1: left promiscuous mode [ 192.647283][ T5258] udevd[5258]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.929484][ T6153] netlink: 56 bytes leftover after parsing attributes in process `syz.2.198'. [ 193.941390][ T2940] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 194.154542][ T2940] usb 3-1: Using ep0 maxpacket: 16 [ 194.164010][ T2940] usb 3-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 194.176850][ T2940] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 194.188600][ T2940] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 194.199234][ T2940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.222129][ T2940] usb 3-1: config 0 descriptor?? [ 194.432775][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 194.510180][ T6164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.523631][ T6164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.625410][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 194.639640][ T8] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.652825][ T8] usb 5-1: config 1 interface 0 has no altsetting 0 [ 194.662337][ T5107] Bluetooth: hci2: command tx timeout [ 194.668970][ T8] usb 5-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.40 [ 194.680501][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.696723][ T8] usb 5-1: Product: syz [ 194.700949][ T8] usb 5-1: Manufacturer: 㠍 [ 194.707693][ T8] usb 5-1: SerialNumber: syz [ 194.750050][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.756865][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.837447][ T2940] usb 3-1: string descriptor 0 read error: -71 [ 195.878292][ T2940] usb 3-1: USB disconnect, device number 13 [ 195.936146][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.140122][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.344594][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.406232][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 196.946475][ T4493] Bluetooth: hci2: command tx timeout [ 196.952026][ T5097] Bluetooth: hci1: command 0x0406 tx timeout [ 196.959104][ T5102] Bluetooth: hci0: command 0x0406 tx timeout [ 197.078036][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.137768][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.155108][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.172347][ T9] usb 1-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 197.197616][ T9] usb 1-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 197.225960][ T9] usb 1-1: config 1 interface 1 has no altsetting 0 [ 197.466699][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.482841][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.716576][ T9] usb 1-1: Product: syz [ 197.751566][ T9] usb 1-1: Manufacturer: syz [ 197.787156][ T9] usb 1-1: SerialNumber: syz [ 198.306178][ T9] usb 1-1: selecting invalid altsetting 1 [ 198.312062][ T9] usb 1-1: selecting invalid altsetting 0 [ 198.328493][ T9] usb 1-1: selecting invalid altsetting 0 [ 198.335361][ T9] cdc_ncm 1-1:1.0: bind() failure [ 198.946082][ T9] usb 1-1: selecting invalid altsetting 0 [ 198.951900][ T9] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 198.975634][ T5107] Bluetooth: hci2: command tx timeout [ 199.024587][ T9] usb 1-1: USB disconnect, device number 9 [ 199.063302][ T5258] udevd[5258]: setting mode of /dev/bus/usb/001/009 to 020664 failed: No such file or directory [ 199.105091][ T5258] udevd[5258]: setting owner of /dev/bus/usb/001/009 to uid=0, gid=0 failed: No such file or directory [ 199.147391][ T62] bridge_slave_1: left allmulticast mode [ 199.156482][ T62] bridge_slave_1: left promiscuous mode [ 199.162639][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.230969][ T62] bridge_slave_0: left allmulticast mode [ 199.265241][ T62] bridge_slave_0: left promiscuous mode [ 199.283518][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.828482][ T8] usbhid 5-1:1.0: can't add hid device: -32 [ 200.884821][ T8] usbhid 5-1:1.0: probe with driver usbhid failed with error -32 [ 201.128584][ T5107] Bluetooth: hci2: command tx timeout [ 201.697755][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.724839][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.757461][ T62] bond0 (unregistering): Released all slaves [ 201.936500][ T5107] Bluetooth: hci4: command 0x0406 tx timeout [ 201.971441][ T47] usb 5-1: USB disconnect, device number 12 [ 202.056250][ T6202] loop0: detected capacity change from 0 to 32768 [ 202.074867][ T6202] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.211 (6202) [ 202.143578][ T6202] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.155867][ T6206] syzkaller0: entered promiscuous mode [ 202.170605][ T6206] syzkaller0: entered allmulticast mode [ 202.182116][ T6202] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 202.198500][ T6202] BTRFS info (device loop0): using free-space-tree [ 202.266836][ T6225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.213'. [ 202.328063][ T6227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.708420][ T6233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.851901][ T5566] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.677793][ T5147] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 203.705072][ T6236] loop2: detected capacity change from 0 to 32768 [ 203.777943][ T6236] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 203.824023][ T6236] XFS (loop2): Ending clean mount [ 203.884277][ T5147] usb 1-1: Using ep0 maxpacket: 16 [ 203.891849][ T5147] usb 1-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config [ 203.903524][ T5147] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.917204][ T5147] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 203.926585][ T5147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.953935][ T5147] usb 1-1: config 0 descriptor?? [ 203.981786][ T5147] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 204.049933][ T6247] qrtr: Invalid version 48 [ 204.745862][ T6249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.782772][ T6249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.989572][ T5105] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 206.315209][ T62] hsr_slave_0: left promiscuous mode [ 206.334675][ T5142] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 206.384740][ T62] hsr_slave_1: left promiscuous mode [ 206.414711][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.434354][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.464409][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.492538][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.557078][ T5142] usb 5-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 206.570505][ T62] veth1_macvtap: left promiscuous mode [ 206.582559][ T5142] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 206.600706][ T62] veth0_macvtap: left promiscuous mode [ 206.606707][ T62] veth1_vlan: left promiscuous mode [ 206.612013][ T5142] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.626524][ T62] veth0_vlan: left promiscuous mode [ 206.643075][ T5142] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.689439][ T2940] usb 1-1: USB disconnect, device number 10 [ 206.695481][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.695516][ T5142] usb 5-1: Product: syz [ 206.695536][ T5142] usb 5-1: Manufacturer: syz [ 206.695556][ T5142] usb 5-1: SerialNumber: syz [ 206.701787][ T5142] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 206.808288][ T5142] cdc_ncm 5-1:1.0: bind() failure [ 208.168300][ T6277] kvm: kvm [6276]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 208.200656][ T6277] kvm: kvm [6276]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 208.249942][ T6277] kvm: kvm [6276]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 208.290923][ T6277] kvm: kvm [6276]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 208.345298][ T6277] kvm: kvm [6276]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 208.373414][ T6277] kvm: kvm [6276]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 208.397325][ T6267] loop2: detected capacity change from 0 to 32768 [ 208.407864][ T6277] kvm: kvm [6276]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 208.467914][ T6277] kvm: kvm [6276]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 208.505740][ T6267] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 208.530786][ T6277] kvm: kvm [6276]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 208.557953][ T6277] kvm: kvm [6276]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 208.719147][ T6267] XFS (loop2): Ending clean mount [ 211.232445][ T2940] usb 5-1: USB disconnect, device number 13 [ 211.352600][ T6297] loop3: detected capacity change from 0 to 128 [ 211.448782][ T6297] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 211.646905][ T62] team0 (unregistering): Port device team_slave_1 removed [ 211.826165][ T62] team0 (unregistering): Port device team_slave_0 removed [ 212.015102][ C1] DEBUG: waiting rtnl_mutex for 584 jiffies. [ 212.021353][ C1] task:syz-executor state:D stack:21024 pid:6147 tgid:6147 ppid:6134 flags:0x00004000 [ 212.032123][ C1] Call Trace: [ 212.035542][ C1] [ 212.038568][ C1] __schedule+0x1800/0x4a60 [ 212.043799][ C1] ? __pfx___schedule+0x10/0x10 [ 212.050086][ C1] ? __pfx_lock_release+0x10/0x10 [ 212.055340][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 212.060954][ C1] ? schedule+0x90/0x320 [ 212.065352][ C1] schedule+0x14b/0x320 [ 212.069702][ C1] schedule_preempt_disabled+0x13/0x30 [ 212.075529][ C1] __mutex_lock+0x6a4/0xd70 [ 212.080110][ C1] ? __mutex_lock+0x527/0xd70 [ 212.084901][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 212.090312][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 212.095491][ C1] ? get_rtnl_holder+0x144/0x190 [ 212.100509][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 212.105756][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 212.111170][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 212.116744][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 212.122138][ C1] ? __pfx_validate_chain+0x10/0x10 [ 212.127562][ C1] ? __pfx_validate_chain+0x10/0x10 [ 212.132868][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 212.137986][ C1] ? mark_lock+0x9a/0x360 [ 212.142430][ C1] ? __pfx_validate_chain+0x10/0x10 [ 212.147779][ C1] ? __lock_acquire+0x1359/0x2000 [ 212.152924][ C1] ? mark_lock+0x9a/0x360 [ 212.157408][ C1] ? __lock_acquire+0x1359/0x2000 [ 212.162602][ C1] netlink_rcv_skb+0x1e3/0x430 [ 212.167497][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 212.173162][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.178699][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.184111][ C1] netlink_unicast+0x7f0/0x990 [ 212.189493][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 212.194945][ C1] ? __virt_addr_valid+0x183/0x530 [ 212.200163][ C1] ? __check_object_size+0x49c/0x900 [ 212.206056][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 212.211970][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 212.216969][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.222576][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 212.227703][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 212.233205][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 212.239099][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.244718][ C1] __sock_sendmsg+0x221/0x270 [ 212.250878][ C1] __sys_sendto+0x3a4/0x4f0 [ 212.255647][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 212.260795][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 212.266138][ C1] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 212.272330][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 212.278503][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 212.284971][ C1] __x64_sys_sendto+0xde/0x100 [ 212.289853][ C1] do_syscall_64+0xf3/0x230 [ 212.294515][ C1] ? clear_bhb_loop+0x35/0x90 [ 212.299278][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.305334][ C1] RIP: 0033:0x7f936617796c [ 212.310013][ C1] RSP: 002b:00007ffe75dd7070 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 212.318621][ C1] RAX: ffffffffffffffda RBX: 00007f9366e34620 RCX: 00007f936617796c [ 212.326726][ C1] RDX: 000000000000003c RSI: 00007f9366e34670 RDI: 0000000000000003 [ 212.334827][ C1] RBP: 0000000000000000 R08: 00007ffe75dd70c4 R09: 000000000000000c [ 212.342927][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 212.351036][ C1] R13: 0000000000000000 R14: 00007f9366e34670 R15: 0000000000000000 [ 212.359136][ C1] [ 212.362232][ C1] DEBUG: holding rtnl_mutex for 612 jiffies. [ 212.368600][ C1] task:kworker/u8:4 state:R running task stack:19688 pid:62 tgid:62 ppid:2 flags:0x00004000 [ 212.380591][ C1] Workqueue: netns cleanup_net [ 212.385836][ C1] Call Trace: [ 212.389286][ C1] [ 212.392298][ C1] __schedule+0x1800/0x4a60 [ 212.397250][ C1] ? __pfx___schedule+0x10/0x10 [ 212.402278][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 212.408435][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 212.414008][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 212.419298][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 212.425193][ C1] irqentry_exit+0x5e/0x90 [ 212.429720][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 212.435825][ C1] RIP: 0010:lockdep_unregister_key+0x56d/0x610 [ 212.442183][ C1] Code: ff 92 48 c7 c6 10 bc 6f 81 e8 8f 04 0a 00 e8 fa 18 0a 00 e9 e5 fb ff ff e8 c0 62 21 0a 41 f7 c7 00 02 00 00 74 d0 fb 45 84 f6 <75> cf eb e0 90 0f 0b 90 45 31 f6 e9 62 ff ff ff 90 0f 0b 90 e9 a1 [ 212.462009][ C1] RSP: 0000:ffffc900015df5c0 EFLAGS: 00000202 [ 212.468849][ C1] RAX: dffffc0000000000 RBX: 1ffff920002bbec0 RCX: ffffffff947f4803 [ 212.476959][ C1] RDX: 0000000000000001 RSI: ffffffff8bcad5e0 RDI: ffffffff8c207f20 [ 212.485058][ C1] RBP: ffffc900015df698 R08: ffffffff92ffdc87 R09: 1ffffffff25ffb90 [ 212.493125][ C1] R10: dffffc0000000000 R11: fffffbfff25ffb91 R12: ffffc900015df600 [ 212.501370][ C1] R13: 1ffff920002bbebc R14: ffff8880650f6a01 R15: 0000000000000203 [ 212.510304][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 212.516385][ C1] ? rcu_is_watching+0x15/0xb0 [ 212.521285][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 212.526042][ C1] __qdisc_destroy+0x165/0x410 [ 212.530935][ C1] dev_shutdown+0x9b/0x440 [ 212.535503][ C1] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 212.542069][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 212.549126][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 212.555189][ C1] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 212.561544][ C1] default_device_exit_batch+0xa0f/0xa90 [ 212.567545][ C1] ? __pfx___might_resched+0x10/0x10 [ 212.573469][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 212.579813][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 212.585243][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 212.591543][ C1] cleanup_net+0x89d/0xcc0 [ 212.596405][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 212.601480][ C1] ? process_scheduled_works+0x945/0x1830 [ 212.607430][ C1] process_scheduled_works+0xa2c/0x1830 [ 212.613123][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 212.619288][ C1] ? assign_work+0x364/0x3d0 [ 212.623975][ C1] worker_thread+0x86d/0xd40 [ 212.629214][ C1] ? __kthread_parkme+0x169/0x1d0 [ 212.634401][ C1] ? __pfx_worker_thread+0x10/0x10 [ 212.639872][ C1] kthread+0x2f0/0x390 [ 212.644615][ C1] ? __pfx_worker_thread+0x10/0x10 [ 212.649864][ C1] ? __pfx_kthread+0x10/0x10 [ 212.654579][ C1] ret_from_fork+0x4b/0x80 [ 212.659100][ C1] ? __pfx_kthread+0x10/0x10 [ 212.663800][ C1] ret_from_fork_asm+0x1a/0x30 [ 212.668876][ C1] [ 212.672044][ C1] DEBUG: waiting rtnl_mutex for 601 jiffies. [ 212.678451][ C1] task:kworker/0:1 state:D stack:22928 pid:9 tgid:9 ppid:2 flags:0x00004000 [ 212.688815][ C1] Workqueue: events linkwatch_event [ 212.694264][ C1] Call Trace: [ 212.697632][ C1] [ 212.700741][ C1] __schedule+0x1800/0x4a60 [ 212.705450][ C1] ? __pfx___schedule+0x10/0x10 [ 212.708715][ T6301] loop0: detected capacity change from 0 to 32768 [ 212.710406][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 212.710455][ C1] ? __pfx_lock_release+0x10/0x10 [ 212.710488][ C1] ? kick_pool+0x1bd/0x620 [ 212.710525][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 212.710553][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 212.710589][ C1] ? schedule+0x90/0x320 [ 212.710617][ C1] schedule+0x14b/0x320 [ 212.710650][ C1] schedule_preempt_disabled+0x13/0x30 [ 212.710680][ C1] __mutex_lock+0x6a4/0xd70 [ 212.710718][ C1] ? __mutex_lock+0x527/0xd70 [ 212.710753][ C1] ? linkwatch_event+0xe/0x60 [ 212.710782][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 212.710826][ C1] ? get_rtnl_holder+0x144/0x190 [ 212.710855][ C1] ? process_scheduled_works+0x945/0x1830 [ 212.710885][ C1] linkwatch_event+0xe/0x60 [ 212.710910][ C1] process_scheduled_works+0xa2c/0x1830 [ 212.710971][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 212.804589][ C1] ? assign_work+0x364/0x3d0 [ 212.809232][ C1] worker_thread+0x86d/0xd40 [ 212.813863][ C1] ? __kthread_parkme+0x169/0x1d0 [ 212.819003][ C1] ? __pfx_worker_thread+0x10/0x10 [ 212.824306][ C1] kthread+0x2f0/0x390 [ 212.828652][ C1] ? __pfx_worker_thread+0x10/0x10 [ 212.833944][ C1] ? __pfx_kthread+0x10/0x10 [ 212.838785][ C1] ret_from_fork+0x4b/0x80 [ 212.840289][ T6301] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.843229][ C1] ? __pfx_kthread+0x10/0x10 [ 212.843270][ C1] ret_from_fork_asm+0x1a/0x30 [ 212.843321][ C1] [ 212.864625][ C1] [ 212.864625][ C1] Showing all locks held in the system: [ 212.872739][ C1] 3 locks held by kworker/0:1/9: [ 212.877762][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 212.888848][ C1] #1: ffffc900000e7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 212.899957][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 212.909090][ C1] 5 locks held by kworker/u8:4/62: [ 212.914299][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 212.925324][ C1] #1: ffffc900015dfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 212.936012][ C1] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 212.945670][ C1] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 212.956045][ C1] #4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 212.964063][ T6301] XFS (loop0): Ending clean mount [ 212.967075][ C1] 1 lock held by dhcpcd/4763: [ 212.967096][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 212.967174][ C1] 2 locks held by getty/4854: [ 212.991743][ C1] #0: ffff88802a8c60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 212.997355][ T6301] XFS (loop0): Quotacheck needed: Please wait. [ 213.001600][ C1] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 213.018575][ C1] 1 lock held by syz-executor/6147: [ 213.023901][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 213.033563][ C1] 2 locks held by syz.3.221/6294: [ 213.038669][ C1] #0: ffff88806e110678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x780 [ 213.049292][ C1] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x9e/0x210 [ 213.058263][ C1] 1 lock held by syz.3.221/6297: [ 213.063251][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x706/0x1340 [ 213.072296][ C1] 2 locks held by syz.3.221/6302: [ 213.077410][ C1] #0: ffffffff8f5e4328 (br_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x5c6/0x8e0 [ 213.086674][ C1] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: br_ioctl_stub+0xa4/0xb00 [ 213.093760][ T6301] XFS (loop0): Quotacheck: Done. [ 213.095803][ C1] 3 locks held by syz.4.222/6296: [ 213.095825][ C1] #0: ffff8880687b9c40 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 213.095910][ C1] #1: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 213.126807][ C1] #2: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 213.136794][ C1] [ 213.139159][ C1] ============================================= [ 213.139159][ C1] [ 213.604473][ T5566] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 214.016830][ T6296] loop4: detected capacity change from 0 to 32768 [ 214.184522][ C1] DEBUG: waiting rtnl_mutex for 625 jiffies. [ 214.190657][ C1] task:dhcpcd state:D stack:20384 pid:4763 tgid:4763 ppid:4762 flags:0x00000002 [ 214.200944][ C1] Call Trace: [ 214.204299][ C1] [ 214.207280][ C1] __schedule+0x1800/0x4a60 [ 214.211870][ C1] ? __pfx___schedule+0x10/0x10 [ 214.216823][ C1] ? __pfx_lock_release+0x10/0x10 [ 214.221907][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 214.227562][ C1] ? schedule+0x90/0x320 [ 214.231874][ C1] schedule+0x14b/0x320 [ 214.236266][ C1] schedule_preempt_disabled+0x13/0x30 [ 214.242077][ C1] __mutex_lock+0x6a4/0xd70 [ 214.246721][ C1] ? __mutex_lock+0x527/0xd70 [ 214.251462][ C1] ? devinet_ioctl+0x2ce/0x1bc0 [ 214.256434][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 214.261530][ C1] ? bpf_lsm_capable+0x9/0x10 [ 214.266377][ C1] ? security_capable+0x90/0xb0 [ 214.271292][ C1] ? get_rtnl_holder+0x144/0x190 [ 214.276325][ C1] devinet_ioctl+0x2ce/0x1bc0 [ 214.281237][ C1] ? get_user_ifreq+0x1bb/0x200 [ 214.286292][ C1] inet_ioctl+0x3d7/0x4f0 [ 214.290678][ C1] ? __pfx_inet_ioctl+0x10/0x10 [ 214.295668][ C1] sock_do_ioctl+0x158/0x460 [ 214.300344][ C1] ? __pfx_sock_do_ioctl+0x10/0x10 [ 214.305595][ C1] sock_ioctl+0x629/0x8e0 [ 214.309994][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 214.314952][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 214.321082][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 214.326636][ C1] ? security_file_ioctl+0x87/0xb0 [ 214.331797][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 214.336804][ C1] __se_sys_ioctl+0xfc/0x170 [ 214.341459][ C1] do_syscall_64+0xf3/0x230 [ 214.346469][ C1] ? clear_bhb_loop+0x35/0x90 [ 214.351319][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.357470][ C1] RIP: 0033:0x7f2cedfd9d49 [ 214.361944][ C1] RSP: 002b:00007ffdbfca0e48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.370493][ C1] RAX: ffffffffffffffda RBX: 00007f2cedf0b6c0 RCX: 00007f2cedfd9d49 [ 214.378565][ C1] RDX: 00007ffdbfcb1038 RSI: 0000000000008914 RDI: 0000000000000005 [ 214.386737][ C1] RBP: 00007ffdbfcc11f8 R08: 00007ffdbfcb0ff8 R09: 00007ffdbfcb0fa8 [ 214.395288][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.403344][ C1] R13: 00007ffdbfcb1038 R14: 0000000000000028 R15: 0000000000008914 [ 214.411574][ C1] [ 214.414671][ C1] DEBUG: waiting rtnl_mutex for 824 jiffies. [ 214.420869][ C1] task:syz-executor state:D stack:21024 pid:6147 tgid:6147 ppid:6134 flags:0x00004000 [ 214.431137][ C1] Call Trace: [ 214.434527][ C1] [ 214.437599][ C1] __schedule+0x1800/0x4a60 [ 214.442244][ C1] ? __pfx___schedule+0x10/0x10 [ 214.447310][ C1] ? __pfx_lock_release+0x10/0x10 [ 214.452418][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 214.458010][ C1] ? schedule+0x90/0x320 [ 214.462408][ C1] schedule+0x14b/0x320 [ 214.466850][ C1] schedule_preempt_disabled+0x13/0x30 [ 214.472520][ C1] __mutex_lock+0x6a4/0xd70 [ 214.477461][ C1] ? __mutex_lock+0x527/0xd70 [ 214.482210][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 214.487526][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 214.492876][ C1] ? get_rtnl_holder+0x144/0x190 [ 214.498304][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 214.504116][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 214.509448][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.515115][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 214.520444][ C1] ? __pfx_validate_chain+0x10/0x10 [ 214.525831][ C1] ? __pfx_validate_chain+0x10/0x10 [ 214.531090][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 214.536283][ C1] ? mark_lock+0x9a/0x360 [ 214.541387][ C1] ? __pfx_validate_chain+0x10/0x10 [ 214.546698][ C1] ? __lock_acquire+0x1359/0x2000 [ 214.551780][ C1] ? mark_lock+0x9a/0x360 [ 214.556228][ C1] ? __lock_acquire+0x1359/0x2000 [ 214.561335][ C1] netlink_rcv_skb+0x1e3/0x430 [ 214.566260][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.571826][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.577722][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.582992][ C1] netlink_unicast+0x7f0/0x990 [ 214.587980][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 214.593517][ C1] ? __virt_addr_valid+0x183/0x530 [ 214.598860][ C1] ? __check_object_size+0x49c/0x900 [ 214.604273][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 214.609538][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 214.614446][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.619886][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 214.624982][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 214.630331][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 214.635925][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.641280][ C1] __sock_sendmsg+0x221/0x270 [ 214.646109][ C1] __sys_sendto+0x3a4/0x4f0 [ 214.650721][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 214.655883][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 214.661253][ C1] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 214.667439][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 214.673481][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 214.679928][ C1] __x64_sys_sendto+0xde/0x100 [ 214.684833][ C1] do_syscall_64+0xf3/0x230 [ 214.689400][ C1] ? clear_bhb_loop+0x35/0x90 [ 214.694181][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.700127][ C1] RIP: 0033:0x7f936617796c [ 214.704631][ C1] RSP: 002b:00007ffe75dd7070 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 214.713549][ C1] RAX: ffffffffffffffda RBX: 00007f9366e34620 RCX: 00007f936617796c [ 214.721703][ C1] RDX: 000000000000003c RSI: 00007f9366e34670 RDI: 0000000000000003 [ 214.729762][ C1] RBP: 0000000000000000 R08: 00007ffe75dd70c4 R09: 000000000000000c [ 214.737909][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 214.746679][ C1] R13: 0000000000000000 R14: 00007f9366e34670 R15: 0000000000000000 [ 214.755024][ C1] [ 214.758082][ C1] DEBUG: holding rtnl_mutex for 852 jiffies. [ 214.764094][ C1] task:kworker/u8:4 state:D stack:19688 pid:62 tgid:62 ppid:2 flags:0x00004000 [ 214.774515][ C1] Workqueue: netns cleanup_net [ 214.779335][ C1] Call Trace: [ 214.782648][ C1] [ 214.785794][ C1] __schedule+0x1800/0x4a60 [ 214.790378][ C1] ? __pfx___schedule+0x10/0x10 [ 214.795326][ C1] ? __pfx_lock_release+0x10/0x10 [ 214.800924][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 214.806913][ C1] ? kthread_data+0x52/0xd0 [ 214.811557][ C1] ? wq_worker_sleeping+0x66/0x240 [ 214.816759][ C1] ? schedule+0x90/0x320 [ 214.821058][ C1] schedule+0x14b/0x320 [ 214.825309][ C1] synchronize_rcu_expedited+0x684/0x830 [ 214.831096][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 214.837369][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 214.842894][ C1] ? __pfx___might_resched+0x10/0x10 [ 214.848497][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 214.854656][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 214.860883][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 214.867457][ C1] synchronize_rcu+0x11b/0x360 [ 214.872361][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 214.877786][ C1] lockdep_unregister_key+0x556/0x610 [ 214.883239][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 214.889235][ C1] ? rcu_is_watching+0x15/0xb0 [ 214.894206][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 214.898853][ C1] __qdisc_destroy+0x165/0x410 [ 214.903672][ C1] dev_shutdown+0x357/0x440 [ 214.908268][ C1] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 214.914978][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 214.921816][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 214.927922][ C1] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 214.934255][ C1] default_device_exit_batch+0xa0f/0xa90 [ 214.939971][ C1] ? __pfx___might_resched+0x10/0x10 [ 214.945369][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 214.951606][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 214.956996][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 214.963320][ C1] cleanup_net+0x89d/0xcc0 [ 214.967843][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 214.973513][ C1] ? process_scheduled_works+0x945/0x1830 [ 214.979418][ C1] process_scheduled_works+0xa2c/0x1830 [ 214.985172][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 214.991583][ C1] ? assign_work+0x364/0x3d0 [ 214.996284][ C1] worker_thread+0x86d/0xd40 [ 215.000952][ C1] ? __kthread_parkme+0x169/0x1d0 [ 215.006087][ C1] ? __pfx_worker_thread+0x10/0x10 [ 215.011259][ C1] kthread+0x2f0/0x390 [ 215.015431][ C1] ? __pfx_worker_thread+0x10/0x10 [ 215.020597][ C1] ? __pfx_kthread+0x10/0x10 [ 215.025295][ C1] ret_from_fork+0x4b/0x80 [ 215.029857][ C1] ? __pfx_kthread+0x10/0x10 [ 215.034630][ C1] ret_from_fork_asm+0x1a/0x30 [ 215.039490][ C1] [ 215.042664][ C1] DEBUG: waiting rtnl_mutex for 838 jiffies. [ 215.048812][ C1] task:kworker/0:1 state:D stack:22928 pid:9 tgid:9 ppid:2 flags:0x00004000 [ 215.059081][ C1] Workqueue: events linkwatch_event [ 215.064469][ C1] Call Trace: [ 215.067832][ C1] [ 215.070806][ C1] __schedule+0x1800/0x4a60 [ 215.075514][ C1] ? __pfx___schedule+0x10/0x10 [ 215.080497][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 215.087020][ C1] ? __pfx_lock_release+0x10/0x10 [ 215.092104][ C1] ? kick_pool+0x1bd/0x620 [ 215.096649][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.102110][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 215.107434][ C1] ? schedule+0x90/0x320 [ 215.111780][ C1] schedule+0x14b/0x320 [ 215.116037][ C1] schedule_preempt_disabled+0x13/0x30 [ 215.121566][ C1] __mutex_lock+0x6a4/0xd70 [ 215.126177][ C1] ? __mutex_lock+0x527/0xd70 [ 215.130934][ C1] ? linkwatch_event+0xe/0x60 [ 215.135711][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 215.140807][ C1] ? get_rtnl_holder+0x144/0x190 [ 215.145853][ C1] ? process_scheduled_works+0x945/0x1830 [ 215.151628][ C1] linkwatch_event+0xe/0x60 [ 215.156251][ C1] process_scheduled_works+0xa2c/0x1830 [ 215.161896][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 215.168331][ C1] ? assign_work+0x364/0x3d0 [ 215.172982][ C1] worker_thread+0x86d/0xd40 [ 215.178260][ C1] ? __kthread_parkme+0x169/0x1d0 [ 215.183603][ C1] ? __pfx_worker_thread+0x10/0x10 [ 215.188926][ C1] kthread+0x2f0/0x390 [ 215.193049][ C1] ? __pfx_worker_thread+0x10/0x10 [ 215.198338][ C1] ? __pfx_kthread+0x10/0x10 [ 215.203173][ C1] ret_from_fork+0x4b/0x80 [ 215.207813][ C1] ? __pfx_kthread+0x10/0x10 [ 215.212461][ C1] ret_from_fork_asm+0x1a/0x30 [ 215.217646][ C1] [ 215.220716][ C1] [ 215.220716][ C1] Showing all locks held in the system: [ 215.228585][ C1] 3 locks held by kworker/0:1/9: [ 215.233569][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 215.244765][ C1] #1: ffffc900000e7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 215.255880][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 215.264979][ C1] 5 locks held by kworker/u8:4/62: [ 215.270126][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 215.281274][ C1] #1: ffffc900015dfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 215.291926][ C1] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 215.301570][ C1] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 215.311702][ C1] #4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 215.322769][ C1] 1 lock held by dhcpcd/4763: [ 215.327695][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 215.336965][ C1] 2 locks held by getty/4854: [ 215.341758][ C1] #0: ffff88802a8c60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 215.351867][ C1] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 215.362192][ C1] 1 lock held by syz-executor/6147: [ 215.367500][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 215.377227][ C1] 2 locks held by syz.3.221/6294: [ 215.382283][ C1] #0: ffff88806e110678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x780 [ 215.392905][ C1] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x9e/0x210 [ 215.401841][ C1] 1 lock held by syz.3.221/6297: [ 215.406872][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x706/0x1340 [ 215.415795][ C1] 2 locks held by syz.3.221/6302: [ 215.420940][ C1] #0: ffffffff8f5e4328 (br_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x5c6/0x8e0 [ 215.430242][ C1] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: br_ioctl_stub+0xa4/0xb00 [ 215.439337][ C1] 2 locks held by syz.4.222/6295: [ 215.444624][ C1] #0: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 215.454851][ C1] #1: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 215.464952][ C1] 2 locks held by syz.0.224/6315: [ 215.470061][ C1] [ 215.472417][ C1] ============================================= [ 215.472417][ C1] [ 215.593658][ T5105] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 215.982641][ T6322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.227'. [ 216.048260][ T6325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.131829][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.139673][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.264567][ T6319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.564479][ T29] audit: type=1326 audit(1720135309.458:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.4.226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe813375bd9 code=0x0 [ 216.960706][ T6147] chnl_net:caif_netlink_parms(): no params data found [ 218.283105][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.316982][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.342772][ T6147] bridge_slave_0: entered allmulticast mode [ 218.364480][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 218.370895][ T6147] bridge_slave_0: entered promiscuous mode [ 218.418847][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.438013][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.462928][ T6147] bridge_slave_1: entered allmulticast mode [ 218.487260][ T6147] bridge_slave_1: entered promiscuous mode [ 218.567519][ T6345] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 218.588675][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 218.605755][ T6363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.232'. [ 218.607637][ T9] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 218.633851][ T6362] netlink: 'syz.0.232': attribute type 10 has an invalid length. [ 218.657583][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 218.696419][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 218.711372][ T9] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 218.720350][ T9] usb 3-1: Product: syz [ 218.725518][ T9] usb 3-1: Manufacturer: syz [ 218.730247][ T9] usb 3-1: SerialNumber: syz [ 218.739015][ T6362] team0: Failed to send options change via netlink (err -105) [ 218.749501][ T9] usb 3-1: config 0 descriptor?? [ 218.758181][ T6362] team0: Port device netdevsim0 added [ 218.767453][ T9] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 218.784386][ T9] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 218.784513][ T5147] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 218.847648][ T6147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.899536][ T6147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.944565][ T5142] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 218.989909][ T9] usb 3-1: USB disconnect, device number 14 [ 218.989988][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 219.009318][ T5146] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 219.033147][ T5147] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 219.035246][ T9] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 219.053068][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.107799][ T5147] usb 4-1: config 0 descriptor?? [ 219.138577][ T6147] team0: Port device team_slave_0 added [ 219.150702][ T6147] team0: Port device team_slave_1 added [ 219.174501][ T5142] usb 1-1: Using ep0 maxpacket: 8 [ 219.182569][ T6349] ldusb: No device or device unplugged -19 [ 219.191944][ T5142] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.222387][ T5142] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 219.234281][ T5142] usb 1-1: config 1 has no interface number 1 [ 219.240559][ T5142] usb 1-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 219.262468][ T5142] usb 1-1: config 1 interface 2 altsetting 220 has an invalid endpoint descriptor of length 3, skipping [ 219.295376][ T5142] usb 1-1: config 1 interface 2 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 219.332180][ T5142] usb 1-1: config 1 interface 2 has no altsetting 0 [ 219.341818][ T6147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.354441][ T6147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.357272][ T5142] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.387454][ T6147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.413327][ T6147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.423721][ T6147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.444315][ T5142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.470138][ T6147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.496356][ T5142] usb 1-1: Product: 쑿퉈ਝ쑻 [ 219.501371][ T5142] usb 1-1: Manufacturer: ф [ 219.514302][ T5142] usb 1-1: SerialNumber: syz [ 219.631270][ T6147] hsr_slave_0: entered promiscuous mode [ 219.647486][ T6147] hsr_slave_1: entered promiscuous mode [ 219.660908][ T6147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.673878][ T6147] Cannot create hsr debugfs directory [ 219.885816][ T5142] usb 1-1: USB disconnect, device number 11 [ 220.038959][ T6379] loop2: detected capacity change from 0 to 128 [ 220.094365][ T6379] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 220.171312][ T6379] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 220.177904][ T6379] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 220.213088][ T5196] udevd[5196]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.214051][ T6379] vhci_hcd vhci_hcd.0: Device attached [ 220.318563][ T5147] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 220.484529][ T5144] usb 13-1: new high-speed USB device number 4 using vhci_hcd [ 220.905087][ T5147] usb 4-1: USB disconnect, device number 14 [ 221.050940][ T6397] loop0: detected capacity change from 0 to 1024 [ 221.095579][ T6397] EXT4-fs: Ignoring removed orlov option [ 221.173575][ T6397] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.313801][ T6397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.393755][ T6383] vhci_hcd: cannot find the pending unlink 5 [ 222.665066][ T6383] vhci_hcd: connection reset by peer [ 222.671286][ T128] vhci_hcd: stop threads [ 222.675928][ T128] vhci_hcd: release socket [ 222.681774][ T128] vhci_hcd: disconnect device [ 222.898536][ T5566] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.155685][ T6424] team0: entered promiscuous mode [ 223.175780][ T6424] team_slave_0: entered promiscuous mode [ 223.216311][ T6424] team_slave_1: entered promiscuous mode [ 223.222237][ T6424] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 223.449620][ T6423] syzkaller0: entered promiscuous mode [ 223.484067][ T6423] syzkaller0: entered allmulticast mode [ 223.542108][ T6433] loop2: detected capacity change from 0 to 512 [ 223.627758][ T6433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.664423][ T6433] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.743451][ T5105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.649099][ T6428] loop3: detected capacity change from 0 to 32768 [ 224.701326][ T6428] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 224.798580][ T6428] XFS (loop3): Ending clean mount [ 224.847187][ T2940] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 225.044887][ T2940] usb 3-1: Using ep0 maxpacket: 16 [ 225.068553][ T6455] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x41/0xd0, xfs_finobt block 0x20 [ 225.078712][ T2940] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 225.091455][ T6455] XFS (loop3): Unmount and run xfs_repair [ 225.104023][ T6455] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 225.122608][ T6455] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 225.148265][ T2940] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 225.156037][ T6455] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 225.164244][ T2940] usb 3-1: Product: syz [ 225.172050][ T6455] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 225.179491][ T2940] usb 3-1: Manufacturer: syz [ 225.198325][ T6455] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 225.218497][ T6455] 00000040: ff ff ff ff ff ff fe 00 00 00 cf 01 00 00 00 00 ................ [ 225.220882][ T2940] r8152-cfgselector 3-1: Unknown version 0x0000 [ 225.271242][ T6455] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.280242][ T2940] r8152-cfgselector 3-1: config 0 descriptor?? [ 225.287179][ T6455] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.303101][ T6455] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.318117][ T6455] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x20 len 8 error 74 [ 225.503174][ T2940] r8152-cfgselector 3-1: Unknown version 0x0000 [ 225.551972][ T2940] r8152-cfgselector 3-1: bad CDC descriptors [ 225.571592][ T5100] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 225.589231][ T5100] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 225.913325][ T6459] loop3: detected capacity change from 0 to 64 [ 226.044422][ T5144] vhci_hcd: vhci_device speed not set [ 227.862095][ T6422] team0: left promiscuous mode [ 227.876760][ T6422] team_slave_0: left promiscuous mode [ 227.891491][ T6422] team_slave_1: left promiscuous mode [ 227.907560][ T6422] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 228.053317][ T6466] loop3: detected capacity change from 0 to 64 [ 228.117786][ T6468] loop4: detected capacity change from 0 to 1024 [ 228.140032][ T5142] r8152-cfgselector 3-1: USB disconnect, device number 15 [ 228.149955][ T6468] EXT4-fs: Ignoring removed orlov option [ 228.363779][ T6468] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.381820][ T6147] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 229.506360][ T6147] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 229.925990][ T6147] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 229.953650][ T6468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.991769][ T6147] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 230.293405][ T6491] [ 230.293421][ T6491] ====================================================== [ 230.293431][ T6491] WARNING: possible circular locking dependency detected [ 230.293441][ T6491] 6.10.0-rc6-next-20240703-syzkaller #0 Not tainted [ 230.293455][ T6491] ------------------------------------------------------ [ 230.293463][ T6491] syz.4.249/6491 is trying to acquire lock: [ 230.293475][ T6491] ffff8880691dabd8 (&ea_inode->i_rwsem#8/1){+.+.}-{3:3}, at: ext4_xattr_inode_iget+0x3fe/0x580 [ 230.293543][ T6491] [ 230.293543][ T6491] but task is already holding lock: [ 230.293551][ T6491] ffff88807b5cb460 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_truncate+0x991/0x11a0 [ 230.293612][ T6491] [ 230.293612][ T6491] which lock already depends on the new lock. [ 230.293612][ T6491] [ 230.293619][ T6491] [ 230.293619][ T6491] the existing dependency chain (in reverse order) is: [ 230.293626][ T6491] [ 230.293626][ T6491] -> #1 (&ei->i_data_sem/3){++++}-{3:3}: [ 230.293658][ T6491] lock_acquire+0x1ed/0x550 [ 230.293685][ T6491] down_write+0x3a/0x50 [ 230.293714][ T6491] ext4_xattr_inode_lookup_create+0x166b/0x1ee0 [ 230.293749][ T6491] ext4_xattr_ibody_set+0x214/0x730 [ 230.293780][ T6491] ext4_xattr_set_handle+0xba6/0x1580 [ 230.293812][ T6491] ext4_xattr_set+0x241/0x3d0 [ 230.293843][ T6491] __vfs_setxattr+0x468/0x4a0 [ 230.293863][ T6491] __vfs_setxattr_noperm+0x12e/0x660 [ 230.293883][ T6491] vfs_setxattr+0x221/0x430 [ 230.293902][ T6491] setxattr+0x25d/0x2f0 [ 230.293926][ T6491] do_setxattrat+0x21f/0x300 [ 230.293960][ T6491] __x64_sys_setxattr+0xbc/0xe0 [ 230.293982][ T6491] do_syscall_64+0xf3/0x230 [ 230.294001][ T6491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.294026][ T6491] [ 230.294026][ T6491] -> #0 (&ea_inode->i_rwsem#8/1){+.+.}-{3:3}: [ 230.294066][ T6491] validate_chain+0x18ef/0x5920 [ 230.294097][ T6491] __lock_acquire+0x1359/0x2000 [ 230.294122][ T6491] lock_acquire+0x1ed/0x550 [ 230.294149][ T6491] down_write+0x3a/0x50 [ 230.294177][ T6491] ext4_xattr_inode_iget+0x3fe/0x580 [ 230.294197][ T6491] ext4_xattr_inode_get+0x167/0x490 [ 230.294227][ T6491] ext4_expand_extra_isize_ea+0xf21/0x1cf0 [ 230.294260][ T6491] __ext4_expand_extra_isize+0x2fb/0x3e0 [ 230.294284][ T6491] __ext4_mark_inode_dirty+0x524/0x880 [ 230.294314][ T6491] ext4_ext_truncate+0x9f/0x2b0 [ 230.294338][ T6491] ext4_truncate+0xa18/0x11a0 [ 230.294367][ T6491] ext4_evict_inode+0x90f/0xf50 [ 230.294394][ T6491] evict+0x2a8/0x630 [ 230.294423][ T6491] __dentry_kill+0x20d/0x630 [ 230.294449][ T6491] dput+0x19f/0x2b0 [ 230.294472][ T6491] do_renameat2+0xda1/0x13f0 [ 230.294495][ T6491] __x64_sys_renameat2+0xce/0xe0 [ 230.294518][ T6491] do_syscall_64+0xf3/0x230 [ 230.294537][ T6491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.294561][ T6491] [ 230.294561][ T6491] other info that might help us debug this: [ 230.294561][ T6491] [ 230.294569][ T6491] Possible unsafe locking scenario: [ 230.294569][ T6491] [ 230.294575][ T6491] CPU0 CPU1 [ 230.294582][ T6491] ---- ---- [ 230.294588][ T6491] lock(&ei->i_data_sem/3); [ 230.294607][ T6491] lock(&ea_inode->i_rwsem#8/1); [ 230.294631][ T6491] lock(&ei->i_data_sem/3); [ 230.294650][ T6491] lock(&ea_inode->i_rwsem#8/1); [ 230.294673][ T6491] [ 230.294673][ T6491] *** DEADLOCK *** [ 230.294673][ T6491] [ 230.294678][ T6491] 7 locks held by syz.4.249/6491: [ 230.294690][ T6491] #0: ffff888052548420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 230.294748][ T6491] #1: ffff888052548730 (&type->s_vfs_rename_key){+.+.}-{3:3}, at: do_renameat2+0x5cf/0x13f0 [ 230.294795][ T6491] #2: ffff88807b4fc9c0 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: lock_two_directories+0x145/0x220 [ 230.294855][ T6491] #3: ffff88807b5cabd8 (&type->i_mutex_dir_key#3/5){+.+.}-{3:3}, at: lock_two_directories+0x16f/0x220 [ 230.294915][ T6491] #4: ffff888052548610 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2f4/0xf50 [ 230.294975][ T6491] #5: ffff88807b5cb460 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_truncate+0x991/0x11a0 [ 230.295032][ T6491] #6: ffff88807b5cb2a0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x491/0x880 [ 230.295086][ T6491] [ 230.295086][ T6491] stack backtrace: [ 230.295109][ T6491] CPU: 0 UID: 0 PID: 6491 Comm: syz.4.249 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 230.295140][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 230.295154][ T6491] Call Trace: [ 230.295164][ T6491] [ 230.295175][ T6491] dump_stack_lvl+0x241/0x360 [ 230.295216][ T6491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.295251][ T6491] ? __pfx__printk+0x10/0x10 [ 230.295288][ T6491] print_circular_bug+0x13a/0x1b0 [ 230.295324][ T6491] check_noncircular+0x36a/0x4a0 [ 230.295360][ T6491] ? __pfx_check_noncircular+0x10/0x10 [ 230.295394][ T6491] ? lockdep_lock+0x123/0x2b0 [ 230.295427][ T6491] validate_chain+0x18ef/0x5920 [ 230.295456][ T6491] ? mark_lock+0x9a/0x360 [ 230.295492][ T6491] ? __pfx_validate_chain+0x10/0x10 [ 230.295541][ T6491] ? mark_lock+0x9a/0x360 [ 230.295574][ T6491] __lock_acquire+0x1359/0x2000 [ 230.295611][ T6491] lock_acquire+0x1ed/0x550 [ 230.295639][ T6491] ? ext4_xattr_inode_iget+0x3fe/0x580 [ 230.295666][ T6491] ? __pfx_lock_acquire+0x10/0x10 [ 230.295696][ T6491] ? __pfx___might_resched+0x10/0x10 [ 230.295723][ T6491] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 230.295758][ T6491] down_write+0x3a/0x50 [ 230.295791][ T6491] ? ext4_xattr_inode_iget+0x3fe/0x580 [ 230.295812][ T6491] ext4_xattr_inode_iget+0x3fe/0x580 [ 230.295839][ T6491] ext4_xattr_inode_get+0x167/0x490 [ 230.295876][ T6491] ? __pfx_ext4_xattr_inode_get+0x10/0x10 [ 230.295908][ T6491] ? __kmalloc_node_noprof+0x247/0x440 [ 230.295959][ T6491] ext4_expand_extra_isize_ea+0xf21/0x1cf0 [ 230.296014][ T6491] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 230.296052][ T6491] ? down_write_trylock+0x209/0x3b0 [ 230.296073][ T6491] ? __ext4_mark_inode_dirty+0x491/0x880 [ 230.296104][ T6491] ? dquot_initialize_needed+0x130/0x320 [ 230.296137][ T6491] __ext4_expand_extra_isize+0x2fb/0x3e0 [ 230.296167][ T6491] __ext4_mark_inode_dirty+0x524/0x880 [ 230.296202][ T6491] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 230.296233][ T6491] ? ext4_discard_preallocations+0xcd8/0xf40 [ 230.296268][ T6491] ? __pfx_lock_acquire+0x10/0x10 [ 230.296297][ T6491] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 230.296333][ T6491] ? __down_write_common+0x162/0x200 [ 230.296361][ T6491] ext4_ext_truncate+0x9f/0x2b0 [ 230.296387][ T6491] ? __ext4_journal_start_sb+0x290/0x600 [ 230.296415][ T6491] ext4_truncate+0xa18/0x11a0 [ 230.296450][ T6491] ? __pfx_ext4_truncate+0x10/0x10 [ 230.296479][ T6491] ? ext4_journal_check_start+0x175/0x250 [ 230.296505][ T6491] ? ext4_inode_is_fast_symlink+0x2f3/0x3a0 [ 230.296537][ T6491] ext4_evict_inode+0x90f/0xf50 [ 230.296567][ T6491] ? _raw_spin_unlock+0x28/0x50 [ 230.296597][ T6491] ? __pfx_ext4_evict_inode+0x10/0x10 [ 230.296628][ T6491] ? do_raw_spin_unlock+0x13c/0x8b0 [ 230.296656][ T6491] ? __pfx_ext4_evict_inode+0x10/0x10 [ 230.296688][ T6491] evict+0x2a8/0x630 [ 230.296723][ T6491] __dentry_kill+0x20d/0x630 [ 230.296751][ T6491] ? dput+0x37/0x2b0 [ 230.296776][ T6491] dput+0x19f/0x2b0 [ 230.296802][ T6491] do_renameat2+0xda1/0x13f0 [ 230.296843][ T6491] ? __pfx_do_renameat2+0x10/0x10 [ 230.296900][ T6491] ? __virt_addr_valid+0x183/0x530 [ 230.296933][ T6491] ? __virt_addr_valid+0x183/0x530 [ 230.296975][ T6491] ? __check_object_size+0x49c/0x900 [ 230.297005][ T6491] ? strncpy_from_user+0x1a4/0x2f0 [ 230.297040][ T6491] ? getname_flags+0x1e3/0x540 [ 230.297067][ T6491] ? do_syscall_64+0x100/0x230 [ 230.297091][ T6491] __x64_sys_renameat2+0xce/0xe0 [ 230.297118][ T6491] do_syscall_64+0xf3/0x230 [ 230.297139][ T6491] ? clear_bhb_loop+0x35/0x90 [ 230.297168][ T6491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.297195][ T6491] RIP: 0033:0x7fe813375bd9 [ 230.297215][ T6491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.297234][ T6491] RSP: 002b:00007fe8140f3048 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 230.297258][ T6491] RAX: ffffffffffffffda RBX: 00007fe813504038 RCX: 00007fe813375bd9 [ 230.297275][ T6491] RDX: 0000000000000005 RSI: 0000000020000080 RDI: 0000000000000006 [ 230.297290][ T6491] RBP: 00007fe8133e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 230.297304][ T6491] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 230.297318][ T6491] R13: 000000000000006e R14: 00007fe813504038 R15: 00007ffe53a6d518 [ 230.297344][ T6491] [ 230.577010][ T6478] loop2: detected capacity change from 0 to 32768 [ 230.740240][ T6147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.132194][ T6478] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 231.226673][ T5095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.325340][ T6478] XFS (loop2): Ending clean mount [ 231.332810][ T6478] XFS (loop2): Quotacheck needed: Please wait. [ 231.341577][ T6147] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.361983][ T6478] XFS (loop2): Quotacheck: Done. [ 231.383786][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.390991][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.417491][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.424676][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.547751][ T5105] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 231.859607][ T6147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.951060][ T6147] veth0_vlan: entered promiscuous mode [ 231.971964][ T6147] veth1_vlan: entered promiscuous mode [ 232.020670][ T6147] veth0_macvtap: entered promiscuous mode [ 232.033401][ T6147] veth1_macvtap: entered promiscuous mode [ 232.058676][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.070660][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.083459][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.093999][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.107405][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.118037][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.132705][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.143841][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.157918][ T6147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.173835][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.187099][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.198370][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.210985][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.221086][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.237269][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.248966][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.260457][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.275138][ T6147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.293459][ T6147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.303262][ T6147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.316533][ T6147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.329043][ T6147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.380399][ T6147] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 232.416279][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.421277][ T6147] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 232.435432][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.479454][ T2485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.490743][ T2485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50