last executing test programs: 1m41.974781399s ago: executing program 2 (id=557): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xcc, 0xc}, 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000740)="47ea1334", 0x4}], 0x1}, 0x810) 1m41.906157294s ago: executing program 2 (id=561): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="02"], 0x10) 1m41.804593532s ago: executing program 2 (id=565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000880)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b4876ce425106cecf403fbc9c91ff3f1394ac4ba3d024e34de099eedf5ca5b19e5e6f1b25", 0x3b}], 0x1) 1m41.322180031s ago: executing program 2 (id=596): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m34.838442714s ago: executing program 2 (id=596): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 8.991316784s ago: executing program 2 (id=596): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 7.846605137s ago: executing program 0 (id=952): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) set_tid_address(0x0) 7.723382706s ago: executing program 0 (id=953): r0 = socket(0x2a, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000002"], 0x50) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r4, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x7f, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000000, 0xfffffffa, 0xffffffff, 0x800, 0xf20d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x401, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x8, 0x4, 0x9, 0x200, 0x3ff, 0x8000, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0x6c, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x0, 0xf9, 0x8, 0x401, 0xffffffff, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x1d58, 0x401, 0x3, 0x8002, 0x8, 0x36, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x9c06, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xd, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0xccf1793, 0x2c800000, 0x5d, 0x1, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0x8, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0x9, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xffffffff, 0x5, 0xe8, 0x6, 0x8, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x7, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x2, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0xffffffd8, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x5, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x7, 0x3, 0x8, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x4, 0x7f, 0x0, {0x6, 0x0, 0x6, 0x7ff, 0x6e6, 0xd74}, {0x8, 0x0, 0xffff, 0x8, 0x7f, 0x7fff}, 0x0, 0x8000, 0xbab2}}]}]}}]}, 0x87c}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 7.085756978s ago: executing program 3 (id=955): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) sendfile(r1, r0, 0x0, 0x3a) 6.975737627s ago: executing program 3 (id=957): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.623590156s ago: executing program 0 (id=959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 5.523558804s ago: executing program 3 (id=960): setresgid(0xee00, 0xee01, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$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") open(0x0, 0x4000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffed4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sched_getaffinity(r1, 0x8, &(0x7f00000001c0)) ioctl$TCSETSF(r4, 0x5404, &(0x7f00000004c0)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, '\t\x00'}) syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 5.522784134s ago: executing program 1 (id=961): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="420bb6873bffebb42b", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="acbddf157a95c96807936bdc6c70aff7fda23f3ee0ad4319dc3585a18c5217b1fdd7c69bb02dfa21de5b35ddb2199c2f2134c9d0e3ec856dfae5e0e52540000000ef7d15e6852b88300b766ab70535837520a57571ae2e7ed0eec5530c9bbe7e3756ba577d82e21dca4343146d99cb3e", 0x70}, {&(0x7f0000000740)="17b12a16a78691c3f183230cc5904abefd641e5668369e13ee287081481be182e0fbde757cf702f1e99b6db51a0db96eaf7484543d3333dc113fd7dc366eb2125d94c6b04b35444e3f93a571adb8192641e8d8e5c5550e2256dc671da679713dee003e55335a23f4780a66cd179ef6cdd76dd3343757bf9ea2197998490a2e0cc60d749a1074345a9e", 0x89}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)="5bba4406c37b6c2e1662e1d37e5900e41d36d277c3616b73c16d4f56903b31d71bdb5137e8d3c7d31279cff9572da0f9e3fe1507188d69a979779e44d361571bafe5799eb6a677180ac595c871150624abc3c38ce1a4369aa6ea47e23ac6f5d98f55440f96647af83b1df3781ead1c", 0x6f}, {&(0x7f00000008c0)="7066dc66cff6f1d248399b17b5", 0xd}, {&(0x7f0000000900)="9a9e28610f5841d5fad44191e2e9c5cc70dc4301236e1d7903ed6e9b9963fb5d76c53baf500904106dbeebb395f0c6912db21635ae1bc6d062", 0x39}, {&(0x7f0000000940)="db34238ff8c24119302b2ed38d5edb804240484d6e3803875932c00ca77b8a680916c9e01b88f58ca4301fc55eeeee134a3ff0e0888762eb51e08225a15b1aab13dad338d43fcb8651bb7f359c810ded9bc47a11427f09022355425292c41f321b28cee590", 0x65}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000280)="01808d8e2707c513ff18766900d2a16406cbd2bf7405b1b3e3ea25b31806f69954d1d5c2b0b9d25f60dd5b5d811bde8c6601fcd8cf8f3f25812a2acf0b5e69e409282d7881044f440cfd74137b08c64b81fdfc83fa9aa4fb8fd661300c82816f37cf4e6c100cc73a1af35b2bb1024d51bc3af740de6b16f736f7ff5500be7c9656", 0x81}, {&(0x7f0000000d00)="987ed064a0f2ad23fbbaa7215ccbfedcd5587c725c02741a2a767b119e0f662893ce028ddac9056398d2236a52d332b4c03c542ff7e2bc0b4e427a168bcf96a84a71857005279c6cf404fa81b2c7e09bc11bcded6c934a346365338296e8ad8b6f0215a4bf190f318c3ea50746cb050db929f2f05e17a619ed12adbd69df1405214c6dd5a781411ba3210685f61b1f3bc306b3167b0bc927bfe0ef1c2ab69943a09bc06a2d0aafdbc82350f00fa6", 0xae}, {&(0x7f0000000dc0)="11b2f2357917d42f98899ebb1bfe1e01a3694356a88dd4", 0x17}], 0x3}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f00)="e8b5880486801e29aac1506ea21503664e4d6c408ee727aabae8f5e0ce9405fe5989baf51b2959cfba7dc341aef71a3fe3db7850827c331ac8ab17f3ee859f4a912321efca0c5a34a94dfcb1fb0cf43342e36c7faa7e0245bbb46ef714fc54601e7307b7e760a03dc5f40ae2509f6885fd394b9901a8434ce1084743c0ec70f5bfca1bfdf57aa010f39beefafb6b81805c61b8606d3077452491a22b15c844135f3c11d4", 0xa4}, {&(0x7f0000001340)="1435c475ff655bd18d564b6fd912016611af9363c8584d1b5418f29756c335f7c6ca9902ea932c22210b5344584f1b3be7a37b604e4675a6f5098b0e8a950edeb4d8445e534fb262b950f7512e50efa4e6cb7e7b746053c4a61ade3f3788ebd09c8cb461f8cf64d0f696f936d915ead80ef69228cde363e6e9c22024872dd1f4ab2ac3c579e321aca11b042d1faf574b0809243ac751b2a9392694f4168e819f912b83841056b56b1396b81dd6e2af37b3c455ed45fdb193bf353f94811aa216a5e268a85bdb", 0xc6}, {&(0x7f0000001080)="67ffd3610b524767a7760698340e3546bbd84f76794d0394f85a10164293e7e68b30c5ef4ea96e73a9b880d18090c35924611b1284407f1c553ca7207b5ffade1338b85187bc064978a5d9050eedee5f1f08aedb63", 0x55}], 0x3}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)="d3e7b4373ba9678b1eccb6697fa110ff29ffcc3ab370d555ea", 0x19}], 0x1}}], 0x6, 0x400c404) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c00)='s', 0x1}], 0x1}}], 0x1, 0x84) 5.191654681s ago: executing program 1 (id=962): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="dc", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000300)=""/247, 0xf7, 0x83edd77941d2b0cd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x20080005) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) 5.179087292s ago: executing program 0 (id=963): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 4.554224382s ago: executing program 0 (id=965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000380)=0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)={[], [{@fsmagic={'fsmagic', 0x3d, 0xe4a3}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, '@\\!/./.\xc5:'}}, {@fsname={'fsname', 0x3d, 'nogrpid'}}, {@subj_type={'subj_type', 0x3d, 'discard'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@uid_lt}, {@dont_appraise}, {@smackfsdef={'smackfsdef', 0x3d, 'iso8859-1'}}, {@obj_role={'obj_role', 0x3d, '$!\xf4'}}, {@dont_hash}]}, 0x0, 0x14f5, &(0x7f0000001580)="$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") getrusage(0x0, 0x0) keyctl$session_to_parent(0x12) 4.309153662s ago: executing program 4 (id=966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='fdb_delete\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 4.251625966s ago: executing program 3 (id=967): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20094) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, 0x0}}], 0x1, 0x20004040) sendmmsg$inet(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}}], 0x1, 0x4c66903511b1ce69) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r6, 0x0, 0x7ffff000, 0x0) 3.579516911s ago: executing program 1 (id=968): syz_emit_ethernet(0x4e, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) 3.488899708s ago: executing program 4 (id=969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 2.683477673s ago: executing program 3 (id=970): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x4, 0x53c, 0xb, 0x7f, 0x9132ca6aa4434d17, r3, 0x0, '\x00', 0x0, r3, 0x4, 0x0, 0x4, 0x0, @void, @value, @value=r3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 2.611081959s ago: executing program 4 (id=971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) 2.604476119s ago: executing program 1 (id=972): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="420bb6873bffebb42b", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="acbddf157a95c96807936bdc6c70aff7fda23f3ee0ad4319dc3585a18c5217b1fdd7c69bb02dfa21de5b35ddb2199c2f2134c9d0e3ec856dfae5e0e52540000000ef7d15e6852b88300b766ab70535837520a57571ae2e7ed0eec5530c9bbe7e3756ba577d82e21dca4343146d99cb3e", 0x70}, {&(0x7f0000000740)="17b12a16a78691c3f183230cc5904abefd641e5668369e13ee287081481be182e0fbde757cf702f1e99b6db51a0db96eaf7484543d3333dc113fd7dc366eb2125d94c6b04b35444e3f93a571adb8192641e8d8e5c5550e2256dc671da679713dee003e55335a23f4780a66cd179ef6cdd76dd3343757bf9ea2197998490a2e0cc60d749a1074345a9e", 0x89}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)="5bba4406c37b6c2e1662e1d37e5900e41d36d277c3616b73c16d4f56903b31d71bdb5137e8d3c7d31279cff9572da0f9e3fe1507188d69a979779e44d361571bafe5799eb6a677180ac595c871150624abc3c38ce1a4369aa6ea47e23ac6f5d98f55440f96647af83b1df3781ead1c", 0x6f}, {&(0x7f00000008c0)="7066dc66cff6f1d248399b17b5", 0xd}, {&(0x7f0000000900)="9a9e28610f5841d5fad44191e2e9c5cc70dc4301236e1d7903ed6e9b9963fb5d76c53baf500904106dbeebb395f0c6912db21635ae1bc6d062", 0x39}, {&(0x7f0000000940)="db34238ff8c24119302b2ed38d5edb804240484d6e3803875932c00ca77b8a680916c9e01b88f58ca4301fc55eeeee134a3ff0e0888762eb51e08225a15b1aab13dad338d43fcb8651bb7f359c810ded9bc47a11427f09022355425292c41f321b28cee590", 0x65}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000280)="01808d8e2707c513ff18766900d2a16406cbd2bf7405b1b3e3ea25b31806f69954d1d5c2b0b9d25f60dd5b5d811bde8c6601fcd8cf8f3f25812a2acf0b5e69e409282d7881044f440cfd74137b08c64b81fdfc83fa9aa4fb8fd661300c82816f37cf4e6c100cc73a1af35b2bb1024d51bc3af740de6b16f736f7ff5500be7c9656", 0x81}, {&(0x7f0000000d00)="987ed064a0f2ad23fbbaa7215ccbfedcd5587c725c02741a2a767b119e0f662893ce028ddac9056398d2236a52d332b4c03c542ff7e2bc0b4e427a168bcf96a84a71857005279c6cf404fa81b2c7e09bc11bcded6c934a346365338296e8ad8b6f0215a4bf190f318c3ea50746cb050db929f2f05e17a619ed12adbd69df1405214c6dd5a781411ba3210685f61b1f3bc306b3167b0bc927bfe0ef1c2ab69943a09bc06a2d0aafdbc82350f00fa6", 0xae}, {&(0x7f0000000dc0)="11b2f2357917d42f98899ebb1bfe1e01a3694356a88dd4", 0x17}], 0x3}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f00)="e8b5880486801e29aac1506ea21503664e4d6c408ee727aabae8f5e0ce9405fe5989baf51b2959cfba7dc341aef71a3fe3db7850827c331ac8ab17f3ee859f4a912321efca0c5a34a94dfcb1fb0cf43342e36c7faa7e0245bbb46ef714fc54601e7307b7e760a03dc5f40ae2509f6885fd394b9901a8434ce1084743c0ec70f5bfca1bfdf57aa010f39beefafb6b81805c61b8606d3077452491a22b15c844135f3c11d4", 0xa4}, {&(0x7f0000001340)="1435c475ff655bd18d564b6fd912016611af9363c8584d1b5418f29756c335f7c6ca9902ea932c22210b5344584f1b3be7a37b604e4675a6f5098b0e8a950edeb4d8445e534fb262b950f7512e50efa4e6cb7e7b746053c4a61ade3f3788ebd09c8cb461f8cf64d0f696f936d915ead80ef69228cde363e6e9c22024872dd1f4ab2ac3c579e321aca11b042d1faf574b0809243ac751b2a9392694f4168e819f912b83841056b56b1396b81dd6e2af37b3c455ed45fdb193bf353f94811aa216a5e268a85bdb", 0xc6}, {&(0x7f0000001080)="67ffd3610b524767a7760698340e3546bbd84f76794d0394f85a10164293e7e68b30c5ef4ea96e73a9b880d18090c35924611b1284407f1c553ca7207b5ffade1338b85187bc064978a5d9050eedee5f1f08aedb63", 0x55}], 0x3}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)="d3e7b4373ba9678b1eccb6697fa110ff29ffcc3ab370d555ea", 0x19}], 0x1}}], 0x6, 0x400c404) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c00)='s', 0x1}], 0x1}}], 0x1, 0x84) 964.349822ms ago: executing program 1 (id=973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 113.54755ms ago: executing program 3 (id=974): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="fb3e0021c551eb80c200000088a8300081"], 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pwrite64(r2, &(0x7f0000000040)="43572654b114b1a9e187499a390710a1", 0x16, 0x6) 108.98711ms ago: executing program 4 (id=975): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 105.372621ms ago: executing program 1 (id=976): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}], 0x1, 0x225, 0x12) 7.630518ms ago: executing program 4 (id=977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) getitimer(0x0, &(0x7f0000000080)) 7.194638ms ago: executing program 0 (id=978): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="90", 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x8801}}], 0x1, 0x20044034) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=979): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000180)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) kernel console output (not intermixed with test programs): 30.082758][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.085292][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.087024][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.088730][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.090271][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.092050][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.096548][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.099039][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.101418][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.116474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 30.118089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 30.119980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.121655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.124871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.126313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.127789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.129398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 30.132621][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.135007][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.136633][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.138072][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.139549][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.141234][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.142809][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.145191][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.146789][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.148433][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.150578][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.157895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.159678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.161184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.449197][ T4332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.475406][ T4332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.476786][ T4332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.478273][ T4332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.491184][ T4319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.492683][ T4319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.502800][ T4319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.507362][ T4319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.529002][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.530425][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.532228][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.539746][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.541060][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.916964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.933049][ T4441] random: crng reseeded on system resumption [ 30.985017][ T4415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.986453][ T4415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.988288][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 31.028362][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.029952][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.038514][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 31.049051][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.050376][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.052075][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 31.091709][ T27] audit: type=1326 audit(31.070:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4445 comm="syz.2.3" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9275c068 code=0x0 [ 31.096462][ T4415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.097752][ T4415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.101023][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 31.111153][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.112527][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.123959][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 31.139755][ T4331] Bluetooth: hci2: command 0x041b tx timeout [ 31.140753][ T4331] Bluetooth: hci3: command 0x041b tx timeout [ 31.141362][ T4326] Bluetooth: hci1: command 0x041b tx timeout [ 31.141688][ T4331] Bluetooth: hci0: command 0x041b tx timeout [ 31.142672][ T4326] Bluetooth: hci4: command 0x041b tx timeout [ 31.269361][ T4460] netlink: 'syz.1.10': attribute type 10 has an invalid length. [ 31.280973][ T4460] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 31.300970][ T4447] tipc: Started in network mode [ 31.301932][ T4447] tipc: Node identity aada20c5e18f, cluster identity 4711 [ 31.308005][ T4447] tipc: Enabled bearer , priority 0 [ 31.311322][ T4444] tipc: Resetting bearer [ 31.418455][ T4462] loop4: detected capacity change from 0 to 512 [ 31.435125][ T4462] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.437140][ T4462] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 31.462641][ T4462] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.467842][ T4462] EXT4-fs (loop4): 1 truncate cleaned up [ 31.468813][ T4462] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.047609][ T27] audit: type=1326 audit(32.030:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4465 comm="syz.1.21" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8395c068 code=0x0 [ 32.089454][ T4473] loop3: detected capacity change from 0 to 512 [ 32.384069][ T4473] EXT4-fs: Ignoring removed i_version option [ 32.385054][ T4473] EXT4-fs: Ignoring removed nobh option [ 32.387238][ T4473] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.391659][ T4473] EXT4-fs (loop3): 1 truncate cleaned up [ 32.392848][ T4473] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 32.401579][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 32.423788][ T7] tipc: Node number set to 1263870149 [ 32.476619][ T4482] Zero length message leads to an empty skb [ 33.213167][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 33.213344][ T4331] Bluetooth: hci1: command 0x040f tx timeout [ 33.214238][ T4330] Bluetooth: hci3: command 0x040f tx timeout [ 33.215144][ T4331] Bluetooth: hci2: command 0x040f tx timeout [ 33.223512][ T4331] Bluetooth: hci4: command 0x040f tx timeout [ 35.293184][ T4331] Bluetooth: hci3: command 0x0419 tx timeout [ 35.293584][ T4326] Bluetooth: hci1: command 0x0419 tx timeout [ 35.294163][ T4331] Bluetooth: hci0: command 0x0419 tx timeout [ 35.304173][ T4330] Bluetooth: hci4: command 0x0419 tx timeout [ 35.305113][ T4330] Bluetooth: hci2: command 0x0419 tx timeout [ 42.797719][ T4444] tipc: Disabling bearer [ 42.813705][ T4477] netlink: 'syz.2.11': attribute type 21 has an invalid length. [ 42.815065][ T4477] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11'. [ 42.816689][ T4477] netlink: 'syz.2.11': attribute type 5 has an invalid length. [ 42.817800][ T4477] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11'. [ 42.877596][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 42.904219][ T4507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 42.923902][ T4507] team0: No ports can be present during mode change [ 42.985773][ T4518] syz.0.23 uses obsolete (PF_INET,SOCK_PACKET) [ 43.115504][ T27] audit: type=1326 audit(43.100:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4522 comm="syz.4.26" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x0 [ 43.274216][ T4539] loop2: detected capacity change from 0 to 512 [ 43.278217][ T4539] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.448254][ T4539] EXT4-fs (loop2): 1 truncate cleaned up [ 43.449345][ T4539] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.477094][ T4534] tipc: Started in network mode [ 43.481604][ T4534] tipc: Node identity 6e75f5334f65, cluster identity 4711 [ 43.486788][ T4534] tipc: Enabled bearer , priority 0 [ 43.498426][ T4533] tipc: Resetting bearer [ 44.050319][ T4325] EXT4-fs (loop2): unmounting filesystem. [ 44.483193][ T4373] tipc: Node number set to 554759475 [ 54.867375][ T4533] tipc: Disabling bearer [ 54.889278][ T4548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 54.892753][ T4551] team0: No ports can be present during mode change [ 55.021171][ T27] audit: type=1326 audit(55.000:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.0.42" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x0 [ 55.045853][ T4579] Bluetooth: MGMT ver 1.22 [ 55.199969][ T4594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 55.212219][ T4594] team0: No ports can be present during mode change [ 55.287338][ T1964] syzkaller0: tun_net_xmit 76 [ 55.288353][ T1964] syzkaller0: tun_net_xmit 48 [ 55.313254][ T3898] syzkaller0: tun_net_xmit 76 [ 55.350137][ T4604] loop1: detected capacity change from 0 to 512 [ 55.393933][ T4604] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.437540][ T4604] EXT4-fs (loop1): 1 truncate cleaned up [ 55.438618][ T4604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.029969][ T4625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 56.125171][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 64.494405][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495508][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.509799][ T22] cfg80211: failed to load regulatory.db [ 66.831921][ T4610] tipc: Enabling of bearer rejected, failed to enable media [ 66.835910][ T4633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 66.874241][ T4642] netlink: 'syz.1.64': attribute type 10 has an invalid length. [ 66.887407][ T4642] bond0: (slave dummy0): Releasing backup interface [ 66.966757][ T4642] team0: Port device dummy0 added [ 67.004507][ T4660] loop3: detected capacity change from 0 to 512 [ 67.006533][ T4660] EXT4-fs: Ignoring removed i_version option [ 67.007542][ T4660] EXT4-fs: Ignoring removed nobh option [ 67.009853][ T4660] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.026879][ T4660] EXT4-fs (loop3): 1 truncate cleaned up [ 67.028077][ T4660] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 67.084861][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 67.123069][ T4671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 67.126784][ T4671] team0: No ports can be present during mode change [ 67.128550][ T22] syzkaller0: tun_net_xmit 76 [ 67.129958][ T22] syzkaller0: tun_net_xmit 48 [ 67.832524][ T27] audit: type=1326 audit(67.810:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 67.839474][ T27] audit: type=1326 audit(67.810:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 67.842582][ T27] audit: type=1326 audit(67.810:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=81 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 67.847377][ T27] audit: type=1326 audit(67.830:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 67.887228][ T4702] loop4: detected capacity change from 0 to 512 [ 67.888636][ T4702] EXT4-fs: Ignoring removed i_version option [ 67.889708][ T4702] EXT4-fs: Ignoring removed nobh option [ 67.891277][ T4702] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.898018][ T4702] EXT4-fs (loop4): 1 truncate cleaned up [ 67.899009][ T4702] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 78.255139][ T4690] tipc: Enabling of bearer rejected, failed to enable media [ 78.256580][ T4693] netlink: 'syz.2.81': attribute type 10 has an invalid length. [ 78.262590][ T4693] team0: Port device dummy0 added [ 78.297600][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 78.331329][ T4719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 78.350255][ T4719] team0: No ports can be present during mode change [ 78.439404][ T4737] tipc: Started in network mode [ 78.440236][ T4737] tipc: Node identity 3e6bcb972fe2, cluster identity 4711 [ 78.448132][ T4737] tipc: Enabled bearer , priority 0 [ 78.456903][ T4737] tipc: Disabling bearer [ 78.525153][ T4744] atomic_op 00000000ebb0e8af conn xmit_atomic 0000000000000000 [ 78.832032][ T4756] netlink: 88 bytes leftover after parsing attributes in process `syz.2.100'. [ 79.007221][ T4751] tipc: Enabled bearer , priority 0 [ 79.010027][ T4759] team0: No ports can be present during mode change [ 79.012509][ T4748] tipc: Resetting bearer [ 89.998170][ T4748] tipc: Disabling bearer [ 90.015034][ T4767] netlink: 'syz.4.108': attribute type 10 has an invalid length. [ 90.028188][ T4767] team0: Port device dummy0 added [ 90.043239][ T4772] netlink: 'syz.2.110': attribute type 10 has an invalid length. [ 90.062973][ T4772] team0: Port device dummy0 removed [ 90.071896][ T4772] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 90.128654][ T4787] team0: No ports can be present during mode change [ 90.179264][ T27] audit: type=1326 audit(90.160:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 90.182523][ T27] audit: type=1326 audit(90.160:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 90.191296][ T27] audit: type=1326 audit(90.160:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 90.201416][ T27] audit: type=1326 audit(90.160:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 90.203840][ T4802] netlink: 'syz.1.123': attribute type 10 has an invalid length. [ 90.209206][ T27] audit: type=1326 audit(90.160:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 90.212673][ T27] audit: type=1326 audit(90.160:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 90.218146][ T4802] netlink: 'syz.1.123': attribute type 10 has an invalid length. [ 90.225754][ T4802] team0: Port device dummy0 removed [ 90.228792][ T27] audit: type=1326 audit(90.170:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 90.232570][ T4802] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 90.232896][ T27] audit: type=1326 audit(90.170:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 90.242356][ T27] audit: type=1326 audit(90.170:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 90.249116][ T27] audit: type=1326 audit(90.170:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 90.258898][ T4805] tipc: Enabled bearer , priority 0 [ 90.266349][ T4804] tipc: Resetting bearer [ 101.377564][ T4804] tipc: Disabling bearer [ 101.386049][ T4809] netlink: 'syz.4.127': attribute type 10 has an invalid length. [ 101.394951][ T4809] team0: Port device dummy0 removed [ 101.397086][ T4809] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.426072][ T4826] team0: No ports can be present during mode change [ 101.523587][ T4837] netlink: 'syz.1.136': attribute type 10 has an invalid length. [ 101.528028][ T4837] bond0: (slave dummy0): Releasing backup interface [ 101.586006][ T4837] team0: Port device dummy0 added [ 101.587292][ T4848] netlink: 'syz.1.136': attribute type 10 has an invalid length. [ 101.600837][ T4848] team0: Port device dummy0 removed [ 101.606893][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 101.606900][ T27] audit: type=1326 audit(101.590:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.2.140" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9275c068 code=0x0 [ 101.612922][ T4848] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 102.435142][ T4869] netlink: 'syz.0.149': attribute type 2 has an invalid length. [ 102.440917][ T4869] netlink: 'syz.0.149': attribute type 1 has an invalid length. [ 102.484350][ T4871] tipc: Enabled bearer , priority 0 [ 102.487777][ T4870] tipc: Resetting bearer [ 102.773257][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.953209][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 102.958444][ T22] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 102.959983][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.963030][ T22] usb 1-1: config 0 descriptor?? [ 103.172721][ T22] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 104.785887][ T22] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 104.787540][ T22] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 104.789231][ T22] asix: probe of 1-1:0.0 failed with error -71 [ 104.797080][ T22] usb 1-1: USB disconnect, device number 2 [ 106.493195][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.683187][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 106.685198][ T14] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 106.686439][ T14] usb 1-1: config 0 has no interface number 0 [ 106.687394][ T14] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 106.688929][ T14] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 106.691945][ T14] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 106.693469][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.694780][ T14] usb 1-1: Product: syz [ 106.695493][ T14] usb 1-1: Manufacturer: syz [ 106.696208][ T14] usb 1-1: SerialNumber: syz [ 106.697940][ T14] usb 1-1: config 0 descriptor?? [ 106.699095][ T4899] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.700297][ T4899] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.904659][ T4899] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.905878][ T4899] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 107.309674][ T14] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 107.311362][ T14] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 107.313499][ T14] asix: probe of 1-1:0.251 failed with error -71 [ 107.317879][ T14] usb 1-1: USB disconnect, device number 3 [ 107.906039][ T27] audit: type=1326 audit(107.890:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.0.161" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x0 [ 113.228273][ T4870] tipc: Disabling bearer [ 113.233806][ T4885] netlink: 'syz.2.155': attribute type 10 has an invalid length. [ 113.246847][ T4885] bond0: (slave dummy0): Releasing backup interface [ 113.275588][ T4885] team0: Port device dummy0 added [ 113.276659][ T4886] netlink: 'syz.2.155': attribute type 10 has an invalid length. [ 113.282958][ T4886] team0: Port device dummy0 removed [ 113.285777][ T4886] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 113.344294][ T4926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.345918][ T4926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.366724][ T27] audit: type=1326 audit(113.350:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz.4.172" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x0 [ 113.388066][ T4932] binder: 4931:4932 got transaction to context manager from process owning it [ 113.389641][ T4932] binder: 4931:4932 transaction async to 4931:0 failed 2/29201/-22, size 96-24 line 3043 [ 113.397675][ T4383] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.490574][ T4942] tipc: Enabling of bearer rejected, failed to enable media [ 114.214519][ T4956] netlink: 'syz.4.183': attribute type 10 has an invalid length. [ 114.220343][ T4956] bond0: (slave dummy0): Releasing backup interface [ 114.224803][ T4956] team0: Port device dummy0 added [ 114.235136][ T4956] netlink: 'syz.4.183': attribute type 10 has an invalid length. [ 114.249648][ T4956] team0: Port device dummy0 removed [ 114.251961][ T4956] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.302450][ T4945] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.303665][ T4945] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.304793][ T4945] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 114.305830][ T4945] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.307389][ T4945] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.308646][ T4945] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 114.309870][ T4945] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.310732][ T4945] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.311760][ T4945] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 114.312997][ T4945] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.314269][ T4945] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.315220][ T4945] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 114.316544][ T4945] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 114.317754][ T4945] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 114.319316][ T4945] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 114.382749][ T4968] device macvlan2 entered promiscuous mode [ 114.410680][ T4978] tipc: Enabling of bearer rejected, failed to enable media [ 114.472031][ T4981] ./file0: Can't open blockdev [ 114.485358][ T27] audit: type=1326 audit(114.470:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4983 comm="syz.0.194" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x0 [ 114.522567][ T4991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.525800][ T4991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.599990][ T4994] netlink: 'syz.2.197': attribute type 10 has an invalid length. [ 115.120898][ T4994] bond0: (slave dummy0): Releasing backup interface [ 115.134523][ T5001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.135954][ T5001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.157433][ T4994] team0: Port device dummy0 added [ 115.158425][ T4995] netlink: 'syz.2.197': attribute type 10 has an invalid length. [ 115.166347][ T4995] team0: Port device dummy0 removed [ 115.169075][ T4995] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 115.194026][ T5003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.198944][ T5003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.226780][ T5007] device macvlan2 entered promiscuous mode [ 115.256061][ T5010] device syzkaller0 entered promiscuous mode [ 115.533227][ T4331] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.728967][ T5031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.731667][ T5031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.755869][ T5033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.757489][ T5033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.333360][ T4330] Bluetooth: hci4: command 0x0c1a tx timeout [ 116.333568][ T4331] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.334430][ T4330] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.335422][ T4331] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.613444][ T4331] Bluetooth: hci0: command 0x0406 tx timeout [ 118.413535][ T4331] Bluetooth: hci1: command 0x0406 tx timeout [ 118.423598][ T4326] Bluetooth: hci2: command 0x0406 tx timeout [ 118.424607][ T4326] Bluetooth: hci3: command 0x0406 tx timeout [ 118.425563][ T4326] Bluetooth: hci4: command 0x0406 tx timeout [ 125.933956][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.935092][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.270165][ T5022] tipc: Enabling of bearer rejected, failed to enable media [ 126.310698][ T5049] netlink: 'syz.0.215': attribute type 10 has an invalid length. [ 126.314748][ T27] audit: type=1326 audit(126.300:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.3.217" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c068 code=0x0 [ 126.326561][ T5049] team0: Port device dummy0 added [ 126.332018][ T5049] netlink: 'syz.0.215': attribute type 10 has an invalid length. [ 126.347477][ T5049] team0: Port device dummy0 removed [ 126.349745][ T5054] binder: 5052:5054 got transaction to context manager from process owning it [ 126.351229][ T5054] binder: 5052:5054 transaction async to 5052:0 failed 5/29201/-22, size 88-24 line 3043 [ 126.356612][ T5049] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 126.364835][ T5054] binder: 5052:5054 got transaction to context manager from process owning it [ 126.366482][ T5054] binder: 5052:5054 transaction async to 5052:0 failed 6/29201/-22, size 88-24 line 3043 [ 126.368209][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.376026][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.387427][ T5056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.388882][ T5056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.454182][ T5066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.455738][ T5066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.462762][ T5070] process 'syz.0.223' launched './file0' with NULL argv: empty string added [ 126.485856][ T5068] tipc: Enabling of bearer rejected, failed to enable media [ 126.548938][ T5078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.550548][ T5078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.916741][ T5080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.918269][ T5080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.072042][ T5088] netlink: 'syz.1.234': attribute type 10 has an invalid length. [ 127.082457][ T5088] bond0: (slave dummy0): Releasing backup interface [ 127.122038][ T5080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.123834][ T5080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.144801][ T5088] team0: Port device dummy0 added [ 127.146221][ T5090] tipc: Started in network mode [ 127.147054][ T5090] tipc: Node identity , cluster identity 4711 [ 127.148051][ T5090] tipc: Failed to obtain node identity [ 127.148958][ T5090] tipc: Enabling of bearer rejected, failed to enable media [ 127.152294][ T5091] netlink: 'syz.1.234': attribute type 10 has an invalid length. [ 127.169163][ T5091] team0: Port device dummy0 removed [ 127.181422][ T5091] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 127.257880][ T5105] tipc: Enabling of bearer rejected, failed to enable media [ 127.273679][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 127.277537][ T22] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.450259][ T5110] fido_id[5110]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 127.462980][ T5131] netlink: 'syz.1.251': attribute type 10 has an invalid length. [ 127.478243][ T5131] bond0: (slave dummy0): Releasing backup interface [ 127.490330][ T27] audit: type=1326 audit(127.470:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.3.246" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c068 code=0x0 [ 127.525505][ T5131] team0: Port device dummy0 added [ 127.575892][ T5135] netlink: 'syz.1.251': attribute type 10 has an invalid length. [ 127.580770][ T5135] team0: Port device dummy0 removed [ 127.582790][ T5135] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 127.605926][ T5139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.607422][ T5139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.685322][ T5147] tipc: Enabling of bearer rejected, failed to enable media [ 127.733005][ T5155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 127.771744][ T5159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.774424][ T5159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.977713][ T5168] netlink: 'syz.0.265': attribute type 10 has an invalid length. [ 127.982016][ T5168] bond0: (slave dummy0): Releasing backup interface [ 128.026231][ T5168] team0: Port device dummy0 added [ 128.029299][ T5168] netlink: 'syz.0.265': attribute type 10 has an invalid length. [ 128.037154][ T5168] team0: Port device dummy0 removed [ 128.039401][ T5168] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 128.068556][ T5172] tipc: Enabled bearer , priority 0 [ 128.071361][ T5171] tipc: Disabling bearer [ 128.132666][ T5178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.136167][ T5178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.162391][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.164627][ T14] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.311328][ T5195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.312964][ T5195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.349698][ T5197] netlink: 'syz.0.278': attribute type 10 has an invalid length. [ 128.377213][ T5199] tipc: Enabled bearer , priority 0 [ 128.379716][ T5198] tipc: Disabling bearer [ 128.517296][ T27] audit: type=1326 audit(128.500:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.1.283" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8395c068 code=0x0 [ 128.574604][ T5212] ======================================================= [ 128.574604][ T5212] WARNING: The mand mount option has been deprecated and [ 128.574604][ T5212] and is ignored by this kernel. Remove the mand [ 128.574604][ T5212] option from the mount to silence this warning. [ 128.574604][ T5212] ======================================================= [ 128.666842][ T5221] tipc: Enabled bearer , priority 0 [ 128.676344][ T5220] tipc: Disabling bearer [ 128.686280][ T5224] netlink: 'syz.4.291': attribute type 10 has an invalid length. [ 128.711604][ T5228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.713719][ T5228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.750927][ T5232] device macvlan2 entered promiscuous mode [ 128.752599][ T5232] bond3: (slave macvlan2): Opening slave failed [ 129.047680][ T5250] netlink: 108 bytes leftover after parsing attributes in process `syz.0.302'. [ 129.078489][ T5255] tipc: Enabled bearer , priority 0 [ 129.080824][ T5254] tipc: Disabling bearer [ 129.132316][ T5261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.133952][ T5261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.243038][ T5265] device macvlan3 entered promiscuous mode [ 129.245211][ T5265] bond2: (slave macvlan3): Opening slave failed [ 129.300993][ T5268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.302517][ T5268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.362990][ T5270] usb usb8: usbfs: process 5270 (syz.1.312) did not claim interface 0 before use [ 129.439598][ T5276] netlink: 168 bytes leftover after parsing attributes in process `syz.1.315'. [ 129.465639][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 129.513198][ T5282] tipc: Started in network mode [ 129.514180][ T5282] tipc: Node identity 5ef88ebbb38c, cluster identity 4711 [ 129.515383][ T5282] tipc: Enabled bearer , priority 0 [ 129.517893][ T5281] tipc: Disabling bearer [ 129.620749][ T5288] binder: 5287:5288 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 129.622054][ T5288] binder: 5287:5288 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 129.624393][ T5288] binder: 5287:5288 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 129.649142][ T27] audit: type=1326 audit(129.630:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5289 comm="syz.1.322" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8395c068 code=0x0 [ 129.663380][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 129.665742][ T22] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 129.666976][ T22] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 129.668260][ T22] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 129.669710][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.671089][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.671764][ T5292] device macvlan2 entered promiscuous mode [ 129.672386][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 129.675919][ T22] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 129.676548][ T5292] bond2: (slave macvlan2): Opening slave failed [ 129.677324][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.685427][ T22] usb 1-1: config 0 descriptor?? [ 129.875142][ T5302] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 129.890666][ T22] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 129.894502][ T22] usb 1-1: USB disconnect, device number 4 [ 129.897797][ T22] usblp0: removed [ 129.927518][ T5306] tipc: Enabled bearer , priority 0 [ 129.932111][ T5305] tipc: Disabling bearer [ 130.019275][ T5314] binder: 5314 RLIMIT_NICE not set [ 130.020506][ T5314] binder: 5314 RLIMIT_NICE not set [ 130.178944][ T5317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.181014][ T5317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.473182][ T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.527311][ T5335] tipc: Enabled bearer , priority 0 [ 130.529881][ T5332] tipc: Disabling bearer [ 130.552219][ T252] Bluetooth: hci5: Frame reassembly failed (-84) [ 130.653229][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 130.656638][ T22] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 130.657940][ T22] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 130.659153][ T22] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 130.660692][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.662141][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 130.664775][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 130.667911][ T22] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 130.670514][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.679496][ T22] usb 1-1: config 0 descriptor?? [ 130.766416][ T27] audit: type=1326 audit(130.750:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.3.350" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c068 code=0x0 [ 130.883566][ T22] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 131.149209][ T1964] usb 1-1: USB disconnect, device number 5 [ 131.151012][ T1964] usblp0: removed [ 131.609778][ T5358] validate_nla: 4 callbacks suppressed [ 131.609791][ T5358] netlink: 'syz.3.353': attribute type 10 has an invalid length. [ 131.661815][ T5362] tipc: Enabled bearer , priority 0 [ 131.671234][ T5361] tipc: Disabling bearer [ 131.721979][ T5366] netlink: 'syz.0.357': attribute type 4 has an invalid length. [ 131.732908][ T5366] netlink: 'syz.0.357': attribute type 4 has an invalid length. [ 131.901308][ T5381] netlink: 'syz.3.364': attribute type 10 has an invalid length. [ 131.912789][ T27] audit: type=1326 audit(131.890:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.363" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x0 [ 132.028903][ T5390] tipc: Started in network mode [ 132.029839][ T5390] tipc: Node identity 120ac13f334d, cluster identity 4711 [ 132.031177][ T5390] tipc: Enabled bearer , priority 0 [ 132.034432][ T5389] tipc: Disabling bearer [ 132.091818][ T5395] binder: 5395 RLIMIT_NICE not set [ 132.099711][ T252] Bluetooth: hci6: Frame reassembly failed (-84) [ 132.144224][ T5397] binder: 5393:5397 got transaction to context manager from process owning it [ 132.145660][ T5397] binder: 5393:5397 transaction call to 5393:0 failed 8/29201/-22, size 0-0 line 3043 [ 132.147537][ T5397] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.274596][ T5399] binder: 5398:5399 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 132.276786][ T5399] binder: 5399 RLIMIT_NICE not set [ 132.326701][ T5400] binder: 5398:5400 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 132.328055][ T5400] binder: 5398:5400 got transaction to context manager from process owning it [ 132.329274][ T5400] binder: 5398:5400 transaction call to 5398:0 failed 10/29201/-22, size 0-0 line 3043 [ 132.330951][ T5400] binder: 5398:5400 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 132.332099][ T5400] binder: 5398:5400 got reply transaction with no transaction stack [ 132.338625][ T5400] binder: 5398:5400 transaction reply to 0:0 failed 11/29201/-71, size 0-0 line 2955 [ 132.573176][ T4330] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 132.573191][ T4331] Bluetooth: hci5: command 0x1003 tx timeout [ 132.708855][ T5408] netlink: 'syz.4.376': attribute type 10 has an invalid length. [ 133.113023][ T1964] binder: undelivered TRANSACTION_ERROR: 29201 [ 134.173209][ T4330] Bluetooth: hci6: command 0x1003 tx timeout [ 134.173230][ T4326] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 134.252774][ T27] audit: type=1326 audit(134.230:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.3.386" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c068 code=0x0 [ 143.762817][ T5443] netlink: 36 bytes leftover after parsing attributes in process `syz.3.387'. [ 143.779547][ T5448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.781979][ T5448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.811777][ T5453] netlink: 'syz.0.389': attribute type 10 has an invalid length. [ 143.845089][ T5458] tipc: Enabling of bearer rejected, failed to enable media [ 143.953701][ T27] audit: type=1326 audit(143.940:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5466 comm="syz.1.397" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8395c068 code=0x0 [ 144.070342][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 144.088706][ T5479] netlink: 36 bytes leftover after parsing attributes in process `syz.0.401'. [ 144.764570][ T5496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.766083][ T5496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.306504][ T5501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.308119][ T5501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.310407][ T5501] binder: 5500:5501 ioctl 80089418 0 returned -22 [ 153.613150][ T4326] Bluetooth: hci1: command 0x0406 tx timeout [ 153.613229][ T4334] Bluetooth: hci3: command 0x0406 tx timeout [ 153.613254][ T4334] Bluetooth: hci4: command 0x0406 tx timeout [ 153.613272][ T4334] Bluetooth: hci0: command 0x0406 tx timeout [ 153.613289][ T4334] Bluetooth: hci2: command 0x0406 tx timeout [ 155.445180][ T5486] netlink: 'syz.2.404': attribute type 10 has an invalid length. [ 155.453420][ T5503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.412'. [ 155.621697][ T5530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.624204][ T27] audit: type=1326 audit(155.610:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.1.417" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8395c068 code=0x0 [ 155.637856][ T5530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.641221][ T5534] netlink: 'syz.2.424': attribute type 10 has an invalid length. [ 155.767637][ T5538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.768982][ T5538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.796603][ T5542] netlink: 36 bytes leftover after parsing attributes in process `syz.3.428'. [ 155.873283][ T14] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 156.055013][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 156.056860][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.058836][ T14] usb 1-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00 [ 156.060235][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.062932][ T14] usb 1-1: config 0 descriptor?? [ 156.065352][ T5527] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 156.472781][ T14] wacom 0003:056A:00B9.0003: Unknown device_type for 'HID 056a:00b9'. Assuming pen. [ 156.476507][ T14] wacom 0003:056A:00B9.0003: hidraw0: USB HID v1.01 Device [HID 056a:00b9] on usb-dummy_hcd.0-1/input0 [ 156.479462][ T14] input: Wacom Intuos4 6x9 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B9.0003/input/input2 [ 156.674466][ T3898] usb 1-1: USB disconnect, device number 6 [ 157.451631][ T27] audit: type=1326 audit(157.430:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.0.437" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x0 [ 158.513199][ T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 158.693211][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 158.696964][ T22] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 158.698487][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.699873][ T22] usb 1-1: Product: syz [ 158.700522][ T22] usb 1-1: Manufacturer: syz [ 158.701220][ T22] usb 1-1: SerialNumber: syz [ 158.702854][ T22] usb 1-1: config 0 descriptor?? [ 158.705090][ T22] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 158.706828][ T22] usb 1-1: Detected FT-X [ 158.907113][ T22] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 159.321017][ T22] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 159.520897][ T22] usb 1-1: USB disconnect, device number 7 [ 159.528153][ T22] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 159.530891][ T22] ftdi_sio 1-1:0.0: device disconnected [ 160.303201][ T14] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 160.484364][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 160.486140][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.488014][ T14] usb 1-1: New USB device found, idVendor=056a, idProduct=00a0, bcdDevice= 0.00 [ 160.489191][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.491317][ T14] usb 1-1: config 0 descriptor?? [ 160.492923][ T5571] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.901083][ T14] wacom 0003:056A:00A0.0004: unknown main item tag 0x0 [ 160.902415][ T14] wacom 0003:056A:00A0.0004: Unknown device_type for 'HID 056a:00a0'. Ignoring. [ 161.105266][ T14] usb 1-1: USB disconnect, device number 8 [ 166.642382][ T5558] netlink: 'syz.4.435': attribute type 10 has an invalid length. [ 166.652157][ T5573] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'. [ 166.671232][ T5576] tipc: Cannot configure node identity twice [ 166.702832][ T5580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.716874][ T5580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.793033][ T5593] input: syz1 as /devices/virtual/input/input8 [ 166.803097][ T5596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.809914][ T5596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.842501][ T27] audit: type=1326 audit(166.820:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5589 comm="syz.0.448" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x0 [ 167.013476][ T5596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.014974][ T5596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.708761][ T5606] netlink: 36 bytes leftover after parsing attributes in process `syz.2.455'. [ 177.714724][ T5615] netlink: 'syz.0.457': attribute type 10 has an invalid length. [ 177.742763][ T5625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.747079][ T5625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.752511][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.761483][ T7] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 177.880507][ T27] audit: type=1326 audit(177.860:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.3.467" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c068 code=0x0 [ 177.950340][ T5625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.951491][ T5650] netlink: 'syz.1.472': attribute type 10 has an invalid length. [ 177.951654][ T5625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.052943][ T5659] netlink: 60 bytes leftover after parsing attributes in process `syz.1.474'. [ 178.055100][ T5659] netlink: 60 bytes leftover after parsing attributes in process `syz.1.474'. [ 178.056779][ T5653] netlink: 60 bytes leftover after parsing attributes in process `syz.1.474'. [ 178.633438][ T5670] netlink: 'syz.2.480': attribute type 29 has an invalid length. [ 187.373478][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.374614][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.058951][ T5653] netlink: 60 bytes leftover after parsing attributes in process `syz.1.474'. [ 189.080635][ T5679] netlink: 'syz.1.484': attribute type 10 has an invalid length. [ 189.089090][ T5668] ÿÿÿÿÿÿ: renamed from vlan1 [ 189.124920][ T5670] netlink: 'syz.2.480': attribute type 29 has an invalid length. [ 189.250362][ T5702] netlink: 'syz.4.495': attribute type 10 has an invalid length. [ 189.258788][ T5703] netlink: 60 bytes leftover after parsing attributes in process `syz.1.490'. [ 189.260204][ T5703] netlink: 60 bytes leftover after parsing attributes in process `syz.1.490'. [ 189.272881][ T5694] netlink: 60 bytes leftover after parsing attributes in process `syz.1.490'. [ 189.275171][ T5694] netlink: 60 bytes leftover after parsing attributes in process `syz.1.490'. [ 189.315581][ T27] audit: type=1326 audit(189.300:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5691 comm="syz.3.491" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c068 code=0x0 [ 189.322716][ T5712] netlink: 36 bytes leftover after parsing attributes in process `syz.1.499'. [ 189.344784][ T5712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.495019][ T5730] netlink: 'syz.2.508': attribute type 10 has an invalid length. [ 200.733579][ T5797] netlink: 'syz.4.534': attribute type 10 has an invalid length. [ 200.753769][ T27] audit: type=1326 audit(200.740:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.3.531" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c068 code=0x0 [ 212.489667][ T5831] netlink: 'syz.3.547': attribute type 10 has an invalid length. [ 212.570910][ T5849] netlink: 'syz.4.555': attribute type 10 has an invalid length. [ 212.580681][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.583804][ T5849] team0: Port device batadv0 added [ 212.705432][ T5868] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 212.740603][ T27] audit: type=1326 audit(212.720:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz.3.556" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c068 code=0x0 [ 212.785958][ T5873] netlink: 'syz.0.566': attribute type 10 has an invalid length. [ 213.011179][ T5896] netlink: 'syz.4.577': attribute type 10 has an invalid length. [ 213.190272][ T27] audit: type=1326 audit(213.170:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5917 comm="syz.4.587" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x0 [ 213.198603][ T5933] netlink: 'syz.1.594': attribute type 10 has an invalid length. [ 213.416910][ T4326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.419597][ T4326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.421305][ T4326] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.423003][ T4326] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.425628][ T4326] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.427026][ T4326] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.512295][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 213.562171][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.563953][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.565421][ T5949] device bridge_slave_0 entered promiscuous mode [ 213.568660][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.569765][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.571197][ T5949] device bridge_slave_1 entered promiscuous mode [ 213.588402][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.591035][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.618183][ T5970] netlink: 'syz.4.607': attribute type 10 has an invalid length. [ 213.624353][ T5949] team0: Port device team_slave_0 added [ 213.626806][ T5949] team0: Port device team_slave_1 added [ 213.648354][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.649466][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.673410][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.701868][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.703012][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.714814][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.754297][ T5949] device hsr_slave_0 entered promiscuous mode [ 213.793762][ T5949] device hsr_slave_1 entered promiscuous mode [ 213.824028][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.825438][ T5949] Cannot create hsr debugfs directory [ 213.829798][ T27] audit: type=1326 audit(213.810:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.4.615" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x0 [ 213.977348][ T5949] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.018426][ T6013] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 214.110528][ T5949] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.247438][ T5949] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.252396][ T6037] netlink: 'syz.0.636': attribute type 10 has an invalid length. [ 214.326234][ T5949] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.352429][ T6059] loop3: detected capacity change from 0 to 512 [ 214.356144][ T6059] EXT4-fs: Ignoring removed nobh option [ 214.363211][ T6059] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.646: iget: bad i_size value: 38620345925642 [ 214.365587][ T6059] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.646: couldn't read orphan inode 15 (err -117) [ 214.367838][ T6059] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 214.380729][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 214.506329][ T5949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.535053][ T5949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.579593][ T5949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.634341][ T6076] netlink: 'syz.4.653': attribute type 10 has an invalid length. [ 214.635736][ T5949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.702723][ T6086] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 214.733225][ T6086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.807290][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.811661][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.823705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.825211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.886691][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.888598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.890107][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.891225][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.893412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.896488][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.898148][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.899667][ T1706] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.900805][ T1706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.906626][ T6080] loop4: detected capacity change from 0 to 40427 [ 214.926000][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.926237][ T6080] F2FS-fs (loop4): invalid crc value [ 214.929399][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.933020][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.218576][ T6080] F2FS-fs (loop4): Found nat_bits in checkpoint [ 215.233893][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.239366][ T5949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.240919][ T5949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.252499][ T6097] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 215.254165][ T6097] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 215.268315][ T6080] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 215.271691][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.273444][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.276044][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.277649][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.282385][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.285178][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.288899][ T6080] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 215.299265][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.311722][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.410592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.411950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.415799][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.429907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.431403][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.439202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.440904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.442628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.446046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.452056][ T5949] device veth0_vlan entered promiscuous mode [ 215.453478][ T4326] Bluetooth: hci1: command 0x0409 tx timeout [ 215.461378][ T5949] device veth1_vlan entered promiscuous mode [ 215.485681][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.487277][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 215.488616][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.490008][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.493050][ T5949] device veth0_macvtap entered promiscuous mode [ 215.499332][ T5949] device veth1_macvtap entered promiscuous mode [ 215.510145][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.516225][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.518970][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.522992][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.525261][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.527058][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.528670][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.530469][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.532262][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.537493][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.540631][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.542501][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.544233][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.545711][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.547111][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.636386][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.638076][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.639579][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.641082][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.642476][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.649951][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.651735][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.654595][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.656053][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.657559][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.673272][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.757324][ T5949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.758672][ T5949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.759990][ T5949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.761454][ T5949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.764470][ T27] audit: type=1326 audit(215.750:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.4.663" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x0 [ 215.771350][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.772865][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.110449][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.111882][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.117791][ T4415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.118805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.119450][ T4415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.122373][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.199011][ T6122] netlink: 'syz.0.665': attribute type 10 has an invalid length. [ 216.786726][ T6138] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 216.788205][ T6138] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 216.789856][ T6138] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 216.819344][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 216.826897][ T6141] team0: No ports can be present during mode change [ 217.295258][ T27] audit: type=1326 audit(217.280:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.0.678" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x0 [ 217.770590][ T6165] loop3: detected capacity change from 0 to 128 [ 217.861218][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 217.865736][ T6168] team0: No ports can be present during mode change [ 218.230115][ T6172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.234948][ T6172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.269272][ T6181] validate_nla: 1 callbacks suppressed [ 218.269281][ T6181] netlink: 'syz.0.687': attribute type 10 has an invalid length. [ 218.394365][ T27] audit: type=1326 audit(218.380:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.0.689" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x0 [ 218.810735][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'. [ 218.814125][ T6195] team0: No ports can be present during mode change [ 219.284586][ T6211] netlink: 'syz.0.699': attribute type 10 has an invalid length. [ 219.293701][ T6211] bond0: (slave dummy0): Releasing backup interface [ 219.376026][ T6211] team0: Port device dummy0 added [ 219.790671][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.792742][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.794596][ T4330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.796397][ T4330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.798081][ T4330] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.799552][ T4330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.017085][ T4408] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.028099][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 220.030933][ T6232] team0: No ports can be present during mode change [ 220.296213][ T27] audit: type=1326 audit(220.280:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.1.709" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8395c068 code=0x0 [ 220.529621][ T6252] loop4: detected capacity change from 0 to 512 [ 220.536873][ T6252] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 221.301189][ T6258] xt_TPROXY: Can be used only with -p tcp or -p udp [ 221.853200][ T4330] Bluetooth: hci1: command 0x0409 tx timeout [ 223.943201][ T4330] Bluetooth: hci1: command 0x041b tx timeout [ 226.023215][ T4330] Bluetooth: hci1: command 0x040f tx timeout [ 228.093182][ T4330] Bluetooth: hci1: command 0x0419 tx timeout [ 231.425495][ T6267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.717'. [ 231.432551][ T6268] team0: No ports can be present during mode change [ 231.500789][ T6227] chnl_net:caif_netlink_parms(): no params data found [ 231.528504][ T6227] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.529845][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.531329][ T6227] device bridge_slave_0 entered promiscuous mode [ 232.235375][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.236740][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.274098][ T6286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.495933][ T4408] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.509710][ T6227] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.510924][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.512306][ T6227] device bridge_slave_1 entered promiscuous mode [ 232.539732][ T6297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.550177][ T6227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.560448][ T6297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.579300][ T6227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.583224][ T27] audit: type=1326 audit(232.560:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.4.724" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x0 [ 232.647513][ T4408] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.662880][ T6227] team0: Port device team_slave_0 added [ 232.669145][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.704669][ T6301] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.708522][ T6227] team0: Port device team_slave_1 added [ 232.784533][ T4408] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.799202][ T6227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.803224][ T6227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.823099][ T6227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.836301][ T6227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.838497][ T6227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.849048][ T6227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.294995][ T6227] device hsr_slave_0 entered promiscuous mode [ 233.393563][ T6227] device hsr_slave_1 entered promiscuous mode [ 233.768376][ T6227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.791568][ T6227] Cannot create hsr debugfs directory [ 234.238686][ T6316] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 234.240281][ T6316] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 235.360912][ T6336] loop3: detected capacity change from 0 to 2048 [ 235.368604][ T6336] EXT4-fs: inline encryption not supported [ 235.369693][ T6336] EXT4-fs: Ignoring removed oldalloc option [ 235.379034][ T6336] ext4: Unknown parameter 'appraise_type' [ 235.387073][ T27] audit: type=1326 audit(235.370:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 235.390316][ T27] audit: type=1326 audit(235.370:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 235.402031][ T27] audit: type=1326 audit(235.370:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 235.436191][ T27] audit: type=1326 audit(235.370:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 235.439546][ T27] audit: type=1326 audit(235.370:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 235.442851][ T27] audit: type=1326 audit(235.370:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 235.449899][ T27] audit: type=1326 audit(235.370:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 235.453601][ T27] audit: type=1326 audit(235.370:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 235.456774][ T27] audit: type=1326 audit(235.370:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=11 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 236.122755][ T6368] loop3: detected capacity change from 0 to 256 [ 236.372764][ T6368] FAT-fs (loop3): Directory bread(block 64) failed [ 236.374188][ T6368] FAT-fs (loop3): Directory bread(block 65) failed [ 236.375442][ T6368] FAT-fs (loop3): Directory bread(block 66) failed [ 236.376531][ T6368] FAT-fs (loop3): Directory bread(block 67) failed [ 236.377816][ T6368] FAT-fs (loop3): Directory bread(block 68) failed [ 236.378976][ T6368] FAT-fs (loop3): Directory bread(block 69) failed [ 236.380218][ T6368] FAT-fs (loop3): Directory bread(block 70) failed [ 236.381379][ T6368] FAT-fs (loop3): Directory bread(block 71) failed [ 236.382733][ T6368] FAT-fs (loop3): Directory bread(block 72) failed [ 236.383992][ T6368] FAT-fs (loop3): Directory bread(block 73) failed [ 237.417949][ T6393] loop3: detected capacity change from 0 to 128 [ 238.433114][ C0] sched: RT throttling activated [ 238.441585][ T6393] EXT4-fs (loop3): Test dummy encryption mode enabled [ 238.790598][ T6393] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 239.173359][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 239.218715][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.220637][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.241396][ T4330] Bluetooth: hci5: command 0x1003 tx timeout [ 239.246309][ T4326] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 239.265618][ T6227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 240.528093][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 240.528104][ T27] audit: type=1326 audit(240.160:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.0.753" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x0 [ 240.556270][ T6227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.637861][ T6227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.664026][ T6435] loop4: detected capacity change from 0 to 256 [ 240.667262][ T6435] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 241.019298][ T27] audit: type=1326 audit(241.000:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8395c068 code=0x7ffc0000 [ 241.025476][ T27] audit: type=1326 audit(241.000:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=72 compat=0 ip=0xffff8395c068 code=0x7ffc0000 [ 241.051975][ T27] audit: type=1326 audit(241.010:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8395c068 code=0x7ffc0000 [ 241.056977][ T6227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 241.207282][ T6461] loop4: detected capacity change from 0 to 256 [ 242.147200][ T6466] loop3: detected capacity change from 0 to 128 [ 242.298965][ T6466] syz.3.765: attempt to access beyond end of device [ 242.298965][ T6466] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 242.332098][ T6466] syz.3.765: attempt to access beyond end of device [ 242.332098][ T6466] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 242.338212][ T6466] syz.3.765: attempt to access beyond end of device [ 242.338212][ T6466] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 242.340203][ T6466] syz.3.765: attempt to access beyond end of device [ 242.340203][ T6466] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 242.342076][ T6466] syz.3.765: attempt to access beyond end of device [ 242.342076][ T6466] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 242.347381][ T6466] syz.3.765: attempt to access beyond end of device [ 242.347381][ T6466] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 242.349135][ T6466] syz.3.765: attempt to access beyond end of device [ 242.349135][ T6466] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 242.350908][ T6466] syz.3.765: attempt to access beyond end of device [ 242.350908][ T6466] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 242.352898][ T6466] syz.3.765: attempt to access beyond end of device [ 242.352898][ T6466] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 242.355063][ T6466] syz.3.765: attempt to access beyond end of device [ 242.355063][ T6466] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 242.754192][ T6472] device erspan1 entered promiscuous mode [ 242.795775][ T6227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.799798][ T6424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.801281][ T6424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.805853][ T6227] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.831030][ T6477] loop4: detected capacity change from 0 to 256 [ 242.846959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.848566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.850087][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.851241][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.856702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.859264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.860900][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.862054][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.876287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.879197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.880925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.881002][ T6477] FAT-fs (loop4): Directory bread(block 64) failed [ 242.882627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.885722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.887249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.889770][ T6477] FAT-fs (loop4): Directory bread(block 65) failed [ 242.890911][ T6477] FAT-fs (loop4): Directory bread(block 66) failed [ 242.891972][ T6477] FAT-fs (loop4): Directory bread(block 67) failed [ 242.893067][ T6477] FAT-fs (loop4): Directory bread(block 68) failed [ 242.894692][ T6477] FAT-fs (loop4): Directory bread(block 69) failed [ 242.895902][ T6477] FAT-fs (loop4): Directory bread(block 70) failed [ 242.896966][ T6477] FAT-fs (loop4): Directory bread(block 71) failed [ 242.898030][ T6477] FAT-fs (loop4): Directory bread(block 72) failed [ 242.899082][ T6477] FAT-fs (loop4): Directory bread(block 73) failed [ 243.562733][ T27] audit: type=1326 audit(243.540:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6483 comm="syz.0.770" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x0 [ 243.670469][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.672443][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.678940][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.680610][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.684513][ T6227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.687272][ T6227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.688664][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.690547][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.496277][ T4408] device hsr_slave_0 left promiscuous mode [ 244.523924][ T4408] device hsr_slave_1 left promiscuous mode [ 244.553191][ T27] audit: type=1326 audit(244.530:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8395c068 code=0x7ffc0000 [ 244.556923][ T27] audit: type=1326 audit(244.530:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=11 compat=0 ip=0xffff8395c068 code=0x7ffc0000 [ 244.564790][ T27] audit: type=1326 audit(244.530:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8395c068 code=0x7ffc0000 [ 244.584026][ T4408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.585300][ T4408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.589974][ T4408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.591286][ T4408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.592831][ T4408] device bridge_slave_1 left promiscuous mode [ 244.595155][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.675065][ T4408] device bridge_slave_0 left promiscuous mode [ 244.676195][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.904322][ T4408] device veth1_macvtap left promiscuous mode [ 244.905677][ T4408] device veth0_macvtap left promiscuous mode [ 244.906882][ T4408] device veth1_vlan left promiscuous mode [ 244.950895][ T4408] device veth0_vlan left promiscuous mode [ 246.105916][ T27] audit: type=1326 audit(246.090:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.1.783" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8395c068 code=0x0 [ 247.065194][ T4408] team0 (unregistering): Port device team_slave_1 removed [ 247.341935][ T4408] team0 (unregistering): Port device team_slave_0 removed [ 247.633719][ T4408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.853685][ T4408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.824226][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.825367][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.461796][ T6555] random: crng reseeded on system resumption [ 250.270292][ T27] audit: type=1326 audit(250.250:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.1.794" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8395c068 code=0x0 [ 250.845787][ T4408] bond0 (unregistering): Released all slaves [ 251.364965][ T6589] loop4: detected capacity change from 0 to 512 [ 251.440159][ T6589] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.640522][ T6589] EXT4-fs (loop4): orphan cleanup on readonly fs [ 251.646237][ T6589] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 251.647937][ T6589] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 251.649483][ T6589] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.800: Failed to acquire dquot type 1 [ 251.658068][ T6589] EXT4-fs (loop4): 1 truncate cleaned up [ 251.666066][ T6589] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 252.419870][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 254.241896][ T27] audit: type=1326 audit(254.220:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz.4.805" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x0 [ 255.244639][ T6610] loop4: detected capacity change from 0 to 256 [ 263.604635][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.605926][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.607382][ T6595] netlink: 'syz.0.802': attribute type 10 has an invalid length. [ 263.614787][ T6595] team0: Port device dummy0 removed [ 263.616794][ T6595] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 263.640348][ T6227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.717349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.719204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.720728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.722278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.732124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.739773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.742020][ T6227] device veth0_vlan entered promiscuous mode [ 263.753008][ T6227] device veth1_vlan entered promiscuous mode [ 265.079286][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.080963][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.087247][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.088683][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.090551][ T6227] device veth0_macvtap entered promiscuous mode [ 265.092853][ T6227] device veth1_macvtap entered promiscuous mode [ 265.128026][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.129764][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.131300][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.132813][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.143083][ T6637] loop4: detected capacity change from 0 to 512 [ 265.148037][ T6634] loop3: detected capacity change from 0 to 1024 [ 265.149070][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.150663][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.152107][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.155006][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.156607][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.159525][ T6634] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.160115][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.162672][ T6637] EXT4-fs: Ignoring removed i_version option [ 265.167916][ T6227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.170321][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.172090][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.174392][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.175875][ T6637] EXT4-fs: Ignoring removed nobh option [ 265.177789][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.178273][ T6637] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 265.179306][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.182347][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.188524][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.191722][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.194680][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.196289][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.198549][ T6227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.201009][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 265.202669][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.207272][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.209029][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.211473][ T6637] EXT4-fs (loop4): 1 truncate cleaned up [ 265.212398][ T6637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 265.221424][ T6634] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 265.226145][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.227742][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.230741][ T6227] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.232044][ T6227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.233499][ T6227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.234907][ T6227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.271567][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 265.271687][ T6369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.272668][ T6369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.280189][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.315328][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 265.342248][ T4415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.348042][ T4415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.359579][ T6437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.155286][ T6646] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.157641][ T6646] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 266.158683][ T6646] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 266.159913][ T6646] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 266.160982][ T6646] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 266.161922][ T6646] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 266.163060][ T6646] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 266.164567][ T6646] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 266.165594][ T6646] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 266.280030][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 266.344219][ T6660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.509808][ T4330] Bluetooth: hci2: command 0x0c1a tx timeout [ 268.230202][ T6698] xt_hashlimit: max too large, truncated to 1048576 [ 268.233314][ T6698] No such timeout policy "syz1" [ 268.271811][ T4326] Bluetooth: hci4: command 0x0c1a tx timeout [ 268.272209][ T4330] Bluetooth: hci3: command 0x0c1a tx timeout [ 270.296964][ T6709] netlink: 'syz.0.834': attribute type 10 has an invalid length. [ 270.333180][ T4326] Bluetooth: hci4: command 0x0406 tx timeout [ 270.524412][ T4330] Bluetooth: hci2: command 0x0406 tx timeout [ 270.525462][ T4330] Bluetooth: hci3: command 0x0406 tx timeout [ 270.564823][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.567323][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.730433][ T27] audit: type=1326 audit(270.710:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 270.734293][ T27] audit: type=1326 audit(270.710:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 270.738210][ T27] audit: type=1326 audit(270.720:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=61 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 270.941441][ T6729] loop3: detected capacity change from 0 to 512 [ 271.056431][ T27] audit: type=1326 audit(270.720:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 271.060294][ T27] audit: type=1326 audit(270.720:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 271.066372][ T6729] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 271.077920][ T6729] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.841: iget: bad i_size value: 2533274857506816 [ 271.537932][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 271.590316][ T6744] loop3: detected capacity change from 0 to 128 [ 271.609590][ T6746] netlink: 'syz.1.848': attribute type 10 has an invalid length. [ 271.979939][ T6744] bio_check_eod: 11422 callbacks suppressed [ 271.979951][ T6744] syz.3.846: attempt to access beyond end of device [ 271.979951][ T6744] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 272.009100][ T6744] syz.3.846: attempt to access beyond end of device [ 272.009100][ T6744] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 272.012090][ T6744] syz.3.846: attempt to access beyond end of device [ 272.012090][ T6744] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 272.014980][ T6744] syz.3.846: attempt to access beyond end of device [ 272.014980][ T6744] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 272.017299][ T6744] syz.3.846: attempt to access beyond end of device [ 272.017299][ T6744] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 272.019504][ T6744] syz.3.846: attempt to access beyond end of device [ 272.019504][ T6744] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 272.021573][ T6744] syz.3.846: attempt to access beyond end of device [ 272.021573][ T6744] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 272.024829][ T6744] syz.3.846: attempt to access beyond end of device [ 272.024829][ T6744] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 272.027138][ T6744] syz.3.846: attempt to access beyond end of device [ 272.027138][ T6744] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 272.029461][ T6744] syz.3.846: attempt to access beyond end of device [ 272.029461][ T6744] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 280.084569][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.086526][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.088289][ T4330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.089684][ T4330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.090990][ T4330] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.092138][ T4330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.173167][ T4326] Bluetooth: hci1: command 0x0409 tx timeout [ 283.533525][ T6754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.693504][ T6780] loop3: detected capacity change from 0 to 512 [ 283.694929][ T6780] EXT4-fs: Ignoring removed i_version option [ 283.699323][ T6780] EXT4-fs: Ignoring removed nobh option [ 283.713443][ T6780] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 283.718848][ T6762] chnl_net:caif_netlink_parms(): no params data found [ 283.729357][ T6780] EXT4-fs (loop3): 1 truncate cleaned up [ 283.730240][ T6780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 283.755095][ T6762] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.756213][ T6762] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.757776][ T6762] device bridge_slave_0 entered promiscuous mode [ 283.760219][ T6762] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.761420][ T6762] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.763047][ T6762] device bridge_slave_1 entered promiscuous mode [ 284.254041][ T4326] Bluetooth: hci1: command 0x041b tx timeout [ 284.501151][ T6762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.511048][ T6762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.516199][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 285.014017][ T6798] device veth0_vlan left promiscuous mode [ 285.015361][ T6798] device veth0_vlan entered promiscuous mode [ 285.040870][ T6762] team0: Port device team_slave_0 added [ 285.042823][ T6423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.045041][ T6423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.046398][ T6423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 285.047528][ T6423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.070912][ T6762] team0: Port device team_slave_1 added [ 285.078412][ T6762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.079852][ T6762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.088168][ T6762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.091859][ T6762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.093019][ T6762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.098649][ T6762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.515890][ T6762] device hsr_slave_0 entered promiscuous mode [ 285.814608][ T6762] device hsr_slave_1 entered promiscuous mode [ 285.943261][ T6762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.944391][ T6762] Cannot create hsr debugfs directory [ 286.607711][ T4330] Bluetooth: hci1: command 0x040f tx timeout [ 286.615989][ T6831] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 286.653377][ T6831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.658285][ T27] audit: type=1326 audit(286.640:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 286.661735][ T27] audit: type=1326 audit(286.640:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 286.665209][ T27] audit: type=1326 audit(286.640:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 286.670067][ T27] audit: type=1326 audit(286.640:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 286.673699][ T27] audit: type=1326 audit(286.640:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 286.677267][ T27] audit: type=1326 audit(286.640:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=11 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 286.732814][ T27] audit: type=1326 audit(286.640:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 286.741007][ T27] audit: type=1326 audit(286.690:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 286.744523][ T27] audit: type=1326 audit(286.710:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 288.367727][ T6762] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.809101][ T4326] Bluetooth: hci1: command 0x0419 tx timeout [ 289.100114][ T6762] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.140351][ T6855] ipt_CLUSTERIP: Please specify destination IP [ 289.391262][ T6762] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.806682][ T6762] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.339027][ T6762] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 290.386961][ T6762] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 291.721523][ T27] audit: type=1326 audit(291.460:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c068 code=0x7ffc0000 [ 291.733489][ T27] audit: type=1326 audit(291.460:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c068 code=0x7ffc0000 [ 291.739196][ T27] audit: type=1326 audit(291.470:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=114 compat=0 ip=0xffffa9b5c068 code=0x7ffc0000 [ 291.744269][ T6762] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 291.757484][ T27] audit: type=1326 audit(291.470:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c068 code=0x7ffc0000 [ 291.769675][ T27] audit: type=1326 audit(291.470:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c068 code=0x7ffc0000 [ 291.773851][ T27] audit: type=1326 audit(291.480:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffa9b5c068 code=0x7ffc0000 [ 291.777477][ T27] audit: type=1326 audit(291.480:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c068 code=0x7ffc0000 [ 291.781165][ T27] audit: type=1326 audit(291.480:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c068 code=0x7ffc0000 [ 291.787883][ T6762] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 291.791417][ T27] audit: type=1326 audit(291.490:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffa9b5c068 code=0x7ffc0000 [ 291.795861][ T27] audit: type=1326 audit(291.490:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c068 code=0x7ffc0000 [ 291.971855][ T6762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.978124][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.979751][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.986552][ T6762] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.990447][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.992082][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.996140][ T6815] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.997330][ T6815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.091003][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.094436][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.098149][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.099567][ T6815] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.100747][ T6815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.105458][ T6902] loop3: detected capacity change from 0 to 512 [ 292.109027][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.110861][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.112561][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.116352][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.118293][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.119887][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.125712][ T6762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 292.127360][ T6762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.132665][ T6902] EXT4-fs: Ignoring removed i_version option [ 292.144135][ T6902] EXT4-fs: Ignoring removed nobh option [ 292.145510][ T6902] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 292.152884][ T6902] EXT4-fs (loop3): 1 truncate cleaned up [ 292.155674][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.157259][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.157910][ T6902] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 292.160172][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.162057][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.164381][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.167921][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.247061][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 292.320476][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.327521][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.631666][ T6762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.633517][ T6369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 292.637166][ T6369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 292.678424][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 292.681803][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.688722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.690323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.691948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 292.697241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 292.699945][ T6762] device veth0_vlan entered promiscuous mode [ 292.704400][ T6762] device veth1_vlan entered promiscuous mode [ 292.983946][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 292.991695][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 293.357741][ T6933] loop3: detected capacity change from 0 to 256 [ 293.361385][ T6933] exfat: Unknown parameter '' [ 294.613256][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.614835][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.617452][ T6762] device veth0_macvtap entered promiscuous mode [ 294.620257][ T6762] device veth1_macvtap entered promiscuous mode [ 294.727083][ T6951] netlink: 'syz.4.904': attribute type 10 has an invalid length. [ 294.729011][ T6951] bond0: (slave dummy0): Releasing backup interface [ 295.072114][ T6951] team0: Port device dummy0 added [ 295.086382][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.090250][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.092091][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.106264][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.107995][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.111989][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.113550][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.115127][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.116889][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.118564][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.120143][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.121907][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.124643][ T6762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.686006][ T6696] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 295.687657][ T6696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.689137][ T6696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.696900][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.701131][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.702713][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.704469][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.706159][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.707987][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.709526][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.711260][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.712859][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.717133][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.718714][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.720269][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.722943][ T6762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.727571][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.729239][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.776693][ T6762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.778145][ T6762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.779649][ T6762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.784019][ T6762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.788930][ T4408] device hsr_slave_0 left promiscuous mode [ 295.823611][ T4408] device hsr_slave_1 left promiscuous mode [ 295.893256][ T4408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.894537][ T4408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.896191][ T4408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.897418][ T4408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.898841][ T4408] device bridge_slave_1 left promiscuous mode [ 295.899835][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.943756][ T4408] device bridge_slave_0 left promiscuous mode [ 295.944808][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.093442][ T4408] device veth1_macvtap left promiscuous mode [ 296.094458][ T4408] device veth0_macvtap left promiscuous mode [ 296.095407][ T4408] device veth1_vlan left promiscuous mode [ 296.096323][ T4408] device veth0_vlan left promiscuous mode [ 296.890611][ T6989] loop4: detected capacity change from 0 to 128 [ 296.955189][ T6989] bio_check_eod: 4622 callbacks suppressed [ 296.955203][ T6989] syz.4.919: attempt to access beyond end of device [ 296.955203][ T6989] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 296.993906][ T6989] syz.4.919: attempt to access beyond end of device [ 296.993906][ T6989] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 296.996155][ T6989] syz.4.919: attempt to access beyond end of device [ 296.996155][ T6989] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 296.998294][ T6989] syz.4.919: attempt to access beyond end of device [ 296.998294][ T6989] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 297.000285][ T6989] syz.4.919: attempt to access beyond end of device [ 297.000285][ T6989] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 297.002331][ T6989] syz.4.919: attempt to access beyond end of device [ 297.002331][ T6989] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 297.007588][ T6989] syz.4.919: attempt to access beyond end of device [ 297.007588][ T6989] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 297.009663][ T6989] syz.4.919: attempt to access beyond end of device [ 297.009663][ T6989] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 297.011779][ T6989] syz.4.919: attempt to access beyond end of device [ 297.011779][ T6989] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 297.018146][ T6989] syz.4.919: attempt to access beyond end of device [ 297.018146][ T6989] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 298.867990][ T4408] team0 (unregistering): Port device team_slave_1 removed [ 299.033750][ T7013] xt_hashlimit: max too large, truncated to 1048576 [ 299.354806][ T4408] team0 (unregistering): Port device team_slave_0 removed [ 299.523696][ T4408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.763758][ T4408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.987731][ T4408] bond0 (unregistering): Released all slaves [ 303.221849][ T6984] netlink: 'syz.3.918': attribute type 10 has an invalid length. [ 303.226277][ T6984] bond0: (slave dummy0): Releasing backup interface [ 303.269351][ T6984] team0: Port device dummy0 added [ 303.394813][ T252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.396171][ T252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.399457][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 303.409969][ T4437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.411452][ T4437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.418189][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 303.465496][ T7042] loop3: detected capacity change from 0 to 512 [ 303.471048][ T7042] EXT4-fs: Ignoring removed i_version option [ 303.472068][ T7042] EXT4-fs: Ignoring removed nobh option [ 303.476826][ T7042] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 303.889653][ T7042] EXT4-fs (loop3): 1 truncate cleaned up [ 303.890715][ T7042] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 303.914939][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 304.029934][ T7053] random: crng reseeded on system resumption [ 304.459621][ T7060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.469058][ T7060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.586789][ T4326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.589037][ T4326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.590668][ T4326] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.592462][ T4326] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.597390][ T4326] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 306.598715][ T4326] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.626549][ T4408] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.630345][ T7079] netlink: 'syz.0.946': attribute type 10 has an invalid length. [ 306.639714][ T7079] bond0: (slave dummy0): Releasing backup interface [ 306.677261][ T7079] team0: Port device dummy0 added [ 306.728147][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 306.728156][ T27] audit: type=1326 audit(306.710:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 306.735483][ T27] audit: type=1326 audit(306.720:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 306.743899][ T27] audit: type=1326 audit(306.730:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 306.744539][ T4408] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.747268][ T27] audit: type=1326 audit(306.730:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 306.752306][ T27] audit: type=1326 audit(306.730:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 306.773175][ T27] audit: type=1326 audit(306.740:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 306.776426][ T27] audit: type=1326 audit(306.740:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 306.779686][ T27] audit: type=1326 audit(306.740:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 306.782799][ T27] audit: type=1326 audit(306.740:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 306.803262][ T27] audit: type=1326 audit(306.740:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a95c068 code=0x7ffc0000 [ 306.866453][ T4408] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.945931][ T4408] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.950204][ T7090] chnl_net:caif_netlink_parms(): no params data found [ 307.006882][ T7090] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.010354][ T7090] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.015170][ T7090] device bridge_slave_0 entered promiscuous mode [ 307.019653][ T7090] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.021718][ T7090] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.026652][ T7090] device bridge_slave_1 entered promiscuous mode [ 307.053810][ T7090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.056497][ T7090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.078745][ T7090] team0: Port device team_slave_0 added [ 307.085137][ T7090] team0: Port device team_slave_1 added [ 307.100272][ T7090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.103912][ T7090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.112530][ T7090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.126627][ T7090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.127840][ T7090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.131725][ T7090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.225036][ T7090] device hsr_slave_0 entered promiscuous mode [ 307.256626][ T7090] device hsr_slave_1 entered promiscuous mode [ 307.303345][ T7090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.304599][ T7090] Cannot create hsr debugfs directory [ 308.450207][ T7133] random: crng reseeded on system resumption [ 308.884116][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 309.008458][ T7142] loop3: detected capacity change from 0 to 128 [ 310.303964][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.305063][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.971532][ T4334] Bluetooth: hci1: command 0x041b tx timeout [ 311.286338][ T7185] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 311.287854][ T7185] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 312.277874][ T7194] xt_hashlimit: max too large, truncated to 1048576 [ 312.280334][ T7194] No such timeout policy "syz1" [ 313.584163][ T4326] Bluetooth: hci1: command 0x040f tx timeout [ 314.528345][ T4437] [ 314.528816][ T4437] ============================================ [ 314.529763][ T4437] WARNING: possible recursive locking detected [ 314.530702][ T4437] 6.1.148-syzkaller #0 Not tainted [ 314.531598][ T4437] -------------------------------------------- [ 314.532600][ T4437] kworker/u4:7/4437 is trying to acquire lock: [ 314.533585][ T4437] ffff0000e05601e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0x140/0x480 [ 314.535187][ T4437] [ 314.535187][ T4437] but task is already holding lock: [ 314.536465][ T4437] ffff0000e05611e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xa8/0x480 [ 314.538053][ T4437] [ 314.538053][ T4437] other info that might help us debug this: [ 314.539413][ T4437] Possible unsafe locking scenario: [ 314.539413][ T4437] [ 314.540605][ T4437] CPU0 [ 314.541126][ T4437] ---- [ 314.541692][ T4437] lock(rlock-AF_UNIX); [ 314.542408][ T4437] lock(rlock-AF_UNIX); [ 314.543132][ T4437] [ 314.543132][ T4437] *** DEADLOCK *** [ 314.543132][ T4437] [ 314.544463][ T4437] May be due to missing lock nesting notation [ 314.544463][ T4437] [ 314.545774][ T4437] 4 locks held by kworker/u4:7/4437: [ 314.546668][ T4437] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 314.548468][ T4437] #1: ffff800020d77c20 (unix_gc_work){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 314.549915][ T4437] #2: ffff800017818198 (unix_gc_lock){+.+.}-{2:2}, at: __unix_gc+0xb8/0x1334 [ 314.551354][ T4437] #3: ffff0000e05611e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xa8/0x480 [ 314.552867][ T4437] [ 314.552867][ T4437] stack backtrace: [ 314.553802][ T4437] CPU: 0 PID: 4437 Comm: kworker/u4:7 Not tainted 6.1.148-syzkaller #0 [ 314.555134][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 314.556828][ T4437] Workqueue: events_unbound __unix_gc [ 314.557752][ T4437] Call trace: [ 314.558313][ T4437] dump_backtrace+0x1c8/0x1f4 [ 314.559074][ T4437] show_stack+0x2c/0x3c [ 314.559715][ T4437] __dump_stack+0x30/0x40 [ 314.560343][ T4437] dump_stack_lvl+0xf8/0x160 [ 314.561055][ T4437] dump_stack+0x1c/0x5c [ 314.561643][ T4437] __lock_acquire+0x18b4/0x6544 [ 314.562327][ T4437] lock_acquire+0x20c/0x644 [ 314.562974][ T4437] _raw_spin_lock+0x54/0x6c [ 314.563623][ T4437] unix_collect_skb+0x140/0x480 [ 314.564303][ T4437] __unix_gc+0xd18/0x1334 [ 314.564920][ T4437] process_one_work+0x7f4/0x13a8 [ 314.565641][ T4437] worker_thread+0x8c8/0xfbc [ 314.566357][ T4437] kthread+0x250/0x2d8 [ 314.567027][ T4437] ret_from_fork+0x10/0x20 [ 314.611380][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 314.613905][ T7208] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 314.615262][ T7208] caif:caif_disconnect_client(): nothing to disconnect [ 314.634635][ T7208] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 314.635968][ T7208] chnl_net:chnl_net_open(): state disconnected [ 314.636944][ T7208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.835121][ T7090] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 314.875090][ T7090] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 314.957813][ T7090] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 315.004611][ T7090] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 315.082725][ T7090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.085775][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 315.087407][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.089771][ T7090] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.091918][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 315.095442][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.096938][ T6921] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.098113][ T6921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.100230][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 315.102731][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 315.104262][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.105647][ T6921] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.106797][ T6921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.109588][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 315.112104][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 315.156533][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 315.158219][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 315.159746][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 315.162176][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 315.163783][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.166318][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.167746][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.170071][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.171656][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.174537][ T7090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 315.209464][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.210928][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 315.213812][ T7090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.218307][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.219959][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.224843][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.226412][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.227873][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 315.229178][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 315.231312][ T7090] device veth0_vlan entered promiscuous mode [ 315.235856][ T7090] device veth1_vlan entered promiscuous mode [ 315.240830][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 315.242474][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 315.244355][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 315.246047][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 315.545575][ T7090] device veth0_macvtap entered promiscuous mode [ 315.547694][ T7090] device veth1_macvtap entered promiscuous mode [ 315.551229][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.552927][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.554606][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.556223][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.557769][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.559441][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.560931][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.562545][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.564331][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.566039][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.567616][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.569231][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.571297][ T7090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.574027][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 315.575554][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 315.577030][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.578537][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 315.580595][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.582246][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.584261][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.586481][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.587990][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.589567][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.590935][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.592352][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.593774][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.595239][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.596659][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.598135][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.600093][ T7090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.613238][ T4334] Bluetooth: hci1: command 0x0419 tx timeout [ 315.635737][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 315.637332][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 315.639708][ T7090] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.641098][ T7090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.642416][ T7090] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.643814][ T7090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.651765][ T7090] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 315.657249][ T4437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.657568][ T7090] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 315.660031][ T4437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.662488][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 315.665792][ T6921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.667105][ T6921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.668427][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 316.058860][ T4408] device hsr_slave_0 left promiscuous mode [ 316.093340][ T4408] device hsr_slave_1 left promiscuous mode [ 316.183203][ T4408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.184370][ T4408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.186205][ T4408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.187330][ T4408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.188608][ T4408] device bridge_slave_1 left promiscuous mode [ 316.189665][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.235020][ T4408] device bridge_slave_0 left promiscuous mode [ 316.236091][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.353214][ T4408] device veth1_macvtap left promiscuous mode [ 316.354194][ T4408] device veth0_macvtap left promiscuous mode [ 316.355177][ T4408] device veth1_vlan left promiscuous mode [ 316.356035][ T4408] device veth0_vlan left promiscuous mode [ 318.005406][ T4408] team0 (unregistering): Port device team_slave_1 removed [ 318.164002][ T4408] team0 (unregistering): Port device team_slave_0 removed [ 318.343546][ T4408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.543563][ T4408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.905256][ T4408] bond0 (unregistering): Released all slaves [ 322.663811][ T4408] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.834207][ T4408] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.924445][ T4408] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.004058][ T4408] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0