last executing test programs: 14m9.083039649s ago: executing program 3 (id=1827): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r0, &(0x7f0000000700)='(ddv/v\t\x00\x00\x00', 0x1) 14m8.839447998s ago: executing program 3 (id=1830): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1600, 0x0) poll$auto(&(0x7f0000000480)={r0, 0xffff, 0x29}, 0x6, 0x8) 14m8.659197136s ago: executing program 3 (id=1835): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/name\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4096, 0x1000) 14m8.50688178s ago: executing program 3 (id=1837): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/jfs/TxAnchor\x00', 0x0, 0x0) lseek$auto(r0, 0x5, 0x0) 14m8.383147688s ago: executing program 3 (id=1840): setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) tkill$auto(0x80000000000001, 0x7) 14m7.899971714s ago: executing program 3 (id=1850): symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 14m7.665100323s ago: executing program 32 (id=1850): symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 12m51.066988772s ago: executing program 4 (id=3352): r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x0, 0x29, 0x0, 0x2}) 12m50.926960621s ago: executing program 4 (id=3355): r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/tkip_mic_test\x00', 0x80002, 0x0) write$auto(r0, 0x0, 0x3) 12m50.872500637s ago: executing program 4 (id=3358): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/cache_timeout_msecs\x00', 0xca800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/255, 0xff) 12m50.740054421s ago: executing program 4 (id=3361): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/fib_trie\x00', 0x20200, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000003100)=""/4095, 0xfff) 12m50.578739179s ago: executing program 4 (id=3363): rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) migrate_pages$auto(0x1, 0x9, 0x0, &(0x7f0000000840)=0x2) 12m50.027073667s ago: executing program 4 (id=3373): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x14, 0xff, 0x7ffc, 0x400, 0x0) 12m49.7817647s ago: executing program 33 (id=3373): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x14, 0xff, 0x7ffc, 0x400, 0x0) 7m9.577043874s ago: executing program 1 (id=8978): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x5459, 0x0) 7m9.195236879s ago: executing program 1 (id=8984): pselect6$auto(0xe6d8, &(0x7f0000000000)={[0xd, 0x7f, 0x10001, 0x7ff, 0x0, 0x6, 0x9, 0x5, 0x8001, 0xa4, 0x8, 0x8001, 0x8, 0xffffffffffffffff, 0x2, 0xb5]}, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8947, &(0x7f0000000000)={'bond0\x00'}) 7m8.877904997s ago: executing program 1 (id=8991): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100085) 7m8.637384435s ago: executing program 1 (id=8996): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x121102, 0x0) setresuid$auto(0x60, 0x1000, 0x607) write$auto(r0, &(0x7f0000000080)='[#FQ:\x00', 0x83) 7m8.339699656s ago: executing program 1 (id=9002): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 7m7.45898112s ago: executing program 1 (id=9015): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto_VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x400}) 7m7.101879483s ago: executing program 34 (id=9015): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto_VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x400}) 5m31.971426964s ago: executing program 0 (id=10742): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/acpi/wakeup\x00', 0x22b47cd6c542b58, 0x0) mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) write$auto(r0, 0x0, 0x100000000fec) 5m31.814096151s ago: executing program 0 (id=10746): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/tasks\x00', 0x87a20, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) acct$auto(&(0x7f0000000000)='/sys/kernel/reb\x01ot/mode\x00') acct$auto(0x0) 5m31.549501065s ago: executing program 0 (id=10750): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x9, &(0x7f0000000180), 0x1) 5m31.394899216s ago: executing program 0 (id=10753): openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/set_event\x00', 0x802, 0x0) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xffd8) 5m31.205740662s ago: executing program 0 (id=10756): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) tkill$auto(0x80000000000001, 0x7) 5m30.855020625s ago: executing program 0 (id=10764): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) setrlimit$auto(0x1000000007, 0x0) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x2, 0x1000, 0x0, &(0x7f0000000040)={0x2, 0x2}) 5m30.690022591s ago: executing program 35 (id=10764): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) setrlimit$auto(0x1000000007, 0x0) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x2, 0x1000, 0x0, &(0x7f0000000040)={0x2, 0x2}) 56.196959618s ago: executing program 5 (id=14020): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/khugepaged/defrag\x00', 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/o2cb/interface_revision\x00', 0x100, 0x0) read$auto(r0, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 56.029411684s ago: executing program 5 (id=14022): mmap$auto(0x0, 0x20007, 0x80000000004000df, 0x10004000eb1, 0x8, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0) select$auto(0xd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0xff, 0x2000000000000002, 0x9, 0x8, 0x103, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) 55.842601083s ago: executing program 5 (id=14024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000f9dbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB="05002f00dd"], 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x0) 55.67092786s ago: executing program 5 (id=14026): r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x10000009, 0x7, 0x2c, 0x6, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x0, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x400000000005b8, 0xc, 0x3, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x7, 0x8000000000008, 0x0, 0x3, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x1000000002, 0x4000000000]}, 0x1fe, 0x200d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 55.436411041s ago: executing program 5 (id=14029): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) tkill$auto(0x1, 0x7) 54.81589831s ago: executing program 5 (id=14034): mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') socket(0x28, 0x1, 0x0) setsockopt$auto(0x1, 0x1, 0x12, &(0x7f0000000040)='\x00\x89e\xad\x97\xc5\xe8\x91g\xc1\xceE\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5oB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4\x05>ry\xa1\xf1)#\xc0\x8d(', 0xbb) 54.460291531s ago: executing program 36 (id=14034): mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') socket(0x28, 0x1, 0x0) setsockopt$auto(0x1, 0x1, 0x12, &(0x7f0000000040)='\x00\x89e\xad\x97\xc5\xe8\x91g\xc1\xceE\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5oB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4\x05>ry\xa1\xf1)#\xc0\x8d(', 0xbb) 2.395167254s ago: executing program 6 (id=14626): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x2, 0x0) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getsockopt$auto(0x6, 0x40000000029, 0x17, 0xfffffffffffffffe, 0x0) 2.235387488s ago: executing program 6 (id=14629): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) shmctl$auto(0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x3) 1.871911361s ago: executing program 8 (id=14633): mmap$auto(0x0, 0x400008, 0x400000080000002, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0xfffffffc, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=r0, 0x1, @old_prog_fd=r0}, 0x7) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) 1.693466424s ago: executing program 2 (id=14635): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(r0, 0x84, 0x17, 0x0, 0x27) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) 1.554989487s ago: executing program 7 (id=14636): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x2) socket(0xa, 0x1, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendto$auto(0x3, 0x0, 0x8, 0x4000000e, 0x0, 0x1c) 1.429332102s ago: executing program 8 (id=14637): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) ioctl$auto(0x3, 0x5420, 0x38) 1.427110354s ago: executing program 7 (id=14638): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x18, 0x4, 0x1) getpeername$auto(0x3, 0x0, 0x0) 1.328767298s ago: executing program 2 (id=14639): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) ioctl$auto(0x3, 0x89e0, 0x91) 1.219337716s ago: executing program 7 (id=14640): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x4840) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.218455036s ago: executing program 8 (id=14641): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x22000, 0x50) open(&(0x7f0000000800)='./file0\x00', 0x2040, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.121203549s ago: executing program 6 (id=14642): rt_sigprocmask$auto(0x2, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0x11, 0x3, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) 1.109223356s ago: executing program 2 (id=14643): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8000, 0x0) mincore$auto(0x0, 0xffffffff, 0x0) 1.059964798s ago: executing program 7 (id=14644): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff5d, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) 890.639005ms ago: executing program 8 (id=14645): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/arp\x00', 0x40100, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x4000, 0x0) pread64$auto(r0, 0x0, 0xf42c, 0x2) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x5602, 0x1) 794.404697ms ago: executing program 2 (id=14646): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000002f40)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x40) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r1) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf250a0000ff15000000140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 759.822077ms ago: executing program 6 (id=14647): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000000c0), 0x55) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x15, &(0x7f0000000100)={{0x0, 0x6, 0x0, 0x7f, 0x0, 0x8000, 0x2}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) 711.433636ms ago: executing program 8 (id=14648): mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) syz_genetlink_get_family_id$auto_thermal(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setresuid$auto(0x8000000000000001, 0x1, 0x200) 588.005114ms ago: executing program 2 (id=14649): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010026bd7000fcdbdf250f00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40010) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 293.869116ms ago: executing program 6 (id=14650): ioperm$auto(0xa, 0x7, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) timerfd_create$auto(0x1, 0x0) timerfd_gettime$auto(0x6, &(0x7f0000000200)={{0xfffffffffffffff9, 0x8000}, {0x81, 0x5}}) 105.747007ms ago: executing program 8 (id=14651): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r0, 0x0, 0x40) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x121000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto_I2C_RDWR(r1, 0x707, 0x0) 76.548786ms ago: executing program 7 (id=14652): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r0, 0x10f, 0x80, 0x0, 0x14) io_uring_setup$auto(0x3ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 44.659999ms ago: executing program 2 (id=14653): close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0xc4}, 0x6, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 21.635189ms ago: executing program 6 (id=14654): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x0) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/1/msr\x00', 0x2081, 0x0) pwritev2$auto(0x7, &(0x7f0000004500)={0x0, 0x7ff}, 0x9, 0x0, 0xffffffff, 0x0) 0s ago: executing program 7 (id=14655): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) madvise$auto(0x0, 0x3, 0x66) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r0, 0x0, 0x39b8) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      syzkaller syzkaller login: [ 646.290277][T28069] netlink: 'syz.6.10189': attribute type 1 has an invalid length. [ 648.806449][T28191] Scaler: ================= START STATUS ================= [ 648.807602][T28191] Scaler: ================== END STATUS ================== [ 652.119931][T28330] Process accounting resumed [ 652.380279][T28343] unsupported nla_type 32969 [ 654.015405][T28421] Process accounting paused [ 654.956179][T28468] openvswitch: netlink: Flow actions attr not present in new flow. [ 654.987858][T28470] vmstat_refresh: nr_hugetlb -1536 [ 655.343192][T28488] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 657.957599][T28589] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 658.851061][T28610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10439'. [ 663.013633][T28767] tipc: Started in network mode [ 663.041311][T28767] tipc: Node identity ffffffff, cluster identity 11 [ 663.048023][T28767] tipc: Node number set to 4294967295 [ 663.429428][T28787] vivid-013: ================= START STATUS ================= [ 663.447465][T28787] vivid-013: Generate PTS: true [ 663.457428][T28786] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 663.459614][T28787] vivid-013: Generate SCR: true [ 663.476625][T28787] tpg source WxH: 640x360 (Y'CbCr) [ 663.498662][T28787] tpg field: 1 [ 663.503784][T28787] tpg crop: 640x360@0x0 [ 663.508949][T28787] tpg compose: 640x360@0x0 [ 663.513522][T28787] tpg colorspace: 8 [ 663.517346][T28787] tpg transfer function: 0/0 [ 663.522960][T28787] tpg Y'CbCr encoding: 0/0 [ 663.527625][T28787] tpg quantization: 0/0 [ 663.539017][T28787] tpg RGB range: 0/2 [ 663.543083][T28787] vivid-013: ================== END STATUS ================== [ 664.997106][T28854] nbd: illegal input index -33554433 [ 665.588416][T28870] openvswitch: netlink: Flow key attr not present in new flow. [ 665.727948][T28874] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 666.317089][T28895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10567'. [ 667.341863][T28936] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 667.455080][T28939] HSR: entered promiscuous mode [ 668.693615][T28984] netlink: zone id is out of range [ 668.704296][T28984] netlink: set zone limit has 8 unknown bytes [ 669.499839][T29034] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 669.675369][T29042] netlink: 'syz.0.10637': attribute type 10 has an invalid length. [ 670.138235][T29059] : entered promiscuous mode [ 670.591112][T29078] openvswitch: netlink: Message has 4 unknown bytes. [ 670.795353][T29088] program syz.5.10659 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 671.726881][T29127] netlink: 'syz.0.10677': attribute type 11 has an invalid length. [ 671.765617][T29131] usb usb15: usbfs: process 29131 (syz.6.10678) did not claim interface 0 before use [ 671.882297][T29136] HSR: entered promiscuous mode [ 672.249244][T29151] netlink: Conntrack attr has 16 unknown bytes [ 672.682532][T29167] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 673.057647][T29179] sd 0:0:1:0: PR command failed: 1026 [ 673.070428][T29179] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 673.083805][T29179] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 673.294250][T29189] Process accounting resumed [ 673.309908][T29189] synth uevent: /devices/system/cpu/cpu0/cache: unknown uevent action string [ 673.337704][T29189] cache: uevent: failed to send synthetic uevent: -22 [ 673.930883][T29211] openvswitch: netlink: Message has 4 unknown bytes. [ 674.352797][T29221] Process accounting resumed [ 675.646190][T29279] Process accounting resumed [ 676.068311][T29298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10754'. [ 676.124400][T29298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10754'. [ 676.662265][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.827290][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.134169][ T5895] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 677.150450][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.175287][ T5895] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 677.186625][ T5895] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 677.214602][ T5895] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 677.228364][ T5895] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 677.243202][ T5895] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 677.329905][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.757195][ T11] bridge_slave_1: left allmulticast mode [ 677.762940][ T11] bridge_slave_1: left promiscuous mode [ 677.823383][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.865985][ T11] bridge_slave_0: left allmulticast mode [ 677.871686][ T11] bridge_slave_0: left promiscuous mode [ 677.878598][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.644243][T29380] Process accounting resumed [ 678.816576][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.830525][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.845943][ T11] bond0 (unregistering): Released all slaves [ 678.929865][T29387] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 678.964429][ T11] HSR: left promiscuous mode [ 679.042166][T29389] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 679.063003][T29326] chnl_net:caif_netlink_parms(): no params data found [ 679.316190][ T5893] Bluetooth: hci0: command tx timeout [ 679.451139][T29408] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 679.508473][T29411] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 679.803404][T29326] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.821838][T29326] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.853545][T29326] bridge_slave_0: entered allmulticast mode [ 679.884080][T29326] bridge_slave_0: entered promiscuous mode [ 679.945361][T29326] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.952648][T29326] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.974103][T29326] bridge_slave_1: entered allmulticast mode [ 679.994428][T29326] bridge_slave_1: entered promiscuous mode [ 680.184769][T29431] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 680.245505][T29435] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 680.265035][ T11] hsr_slave_0: left promiscuous mode [ 680.277595][T29436] netlink: 334 bytes leftover after parsing attributes in process `syz.2.10810'. [ 680.339090][T29436] netlink: 334 bytes leftover after parsing attributes in process `syz.2.10810'. [ 680.358603][ T11] hsr_slave_1: left promiscuous mode [ 680.419588][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.440397][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.489492][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.497248][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.544546][ T11] veth1_macvtap: left promiscuous mode [ 680.560830][ T11] veth0_macvtap: left promiscuous mode [ 680.566461][ T11] veth1_vlan: left promiscuous mode [ 680.589822][ T11] veth0_vlan: left promiscuous mode [ 681.355600][ T5893] Bluetooth: hci0: command tx timeout [ 681.759770][ T11] team0 (unregistering): Port device team_slave_1 removed [ 681.827140][ T11] team0 (unregistering): Port device team_slave_0 removed [ 682.655529][T29326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.731064][T29326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.911428][T29326] team0: Port device team_slave_0 added [ 683.020847][T29326] team0: Port device team_slave_1 added [ 683.048008][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.054435][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 683.448342][ T5893] Bluetooth: hci0: command tx timeout [ 683.451308][T29508] binder: 29506:29508 ioctl c00c620f 9 returned -22 [ 683.494525][T29326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.501506][T29326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.534488][T29326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.547025][T29326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.554017][T29326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.580258][T29326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.700608][T29510] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 683.739502][T29511] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 683.762933][T29326] hsr_slave_0: entered promiscuous mode [ 683.871984][T29326] hsr_slave_1: entered promiscuous mode [ 683.898318][T29326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 683.924025][T29326] Cannot create hsr debugfs directory [ 683.973639][T29520] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 684.227816][T29530] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 684.273799][T29531] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 684.395165][T29326] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 684.407142][T29535] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 684.426635][T29536] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 684.445274][T29326] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 684.473447][T29326] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 684.503548][T29326] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 684.603078][T29541] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 684.717627][T29544] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 684.733630][T29326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.752351][T29546] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 684.814620][T29326] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.827429][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.834623][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.850383][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.857541][ T3683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.914303][T29551] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 684.943390][T29552] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 685.163190][T29326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.382281][T29326] veth0_vlan: entered promiscuous mode [ 685.393480][T29326] veth1_vlan: entered promiscuous mode [ 685.432216][T29326] veth0_macvtap: entered promiscuous mode [ 685.441188][T29326] veth1_macvtap: entered promiscuous mode [ 685.456794][T29326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.469710][T29326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.480241][T29326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.490752][T29326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.494147][ T5893] Bluetooth: hci0: command tx timeout [ 685.501089][T29326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.522359][T29326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.541502][T29326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.554397][T29326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.569543][T29326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.580800][T29326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.591744][T29326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.601731][T29326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.628752][T29326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.667871][T29326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.690594][T29326] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.702446][T29326] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.729149][T29326] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.739510][T29326] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.859871][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.879612][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.916027][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.924582][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.227971][T29597] sctp: [Deprecated]: syz.6.10865 (pid 29597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.227971][T29597] Use struct sctp_sack_info instead [ 687.628778][T29642] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 689.035343][T29678] Process accounting resumed [ 689.722372][T29699] hugetlbfs: syz.6.10910 (29699): Using mlock ulimits for SHM_HUGETLB is obsolete [ 689.822000][T29701] XFS: irix_sgid_inherit sysctl option is deprecated. [ 690.056571][T29711] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 691.190104][T29759] Process accounting resumed [ 691.396818][T29763] Process accounting resumed [ 691.401667][T29763] warn_unsupported: 1 callbacks suppressed [ 691.401681][T29763] kernel write not supported for file /tomoyo/query (pid: 29763 comm: syz.6.10937) [ 692.342749][T29780] kernel write not supported for file /tomoyo/query (pid: 29780 comm: syz.6.10942) [ 692.541838][T29808] kernel write not supported for file /tomoyo/query (pid: 29808 comm: syz.6.10954) [ 692.650734][T29814] kernel write not supported for file /tomoyo/query (pid: 29814 comm: syz.6.10956) [ 692.808944][T29817] kernel write not supported for file /tomoyo/query (pid: 29817 comm: syz.6.10958) [ 692.936489][T29821] kernel write not supported for file /tomoyo/query (pid: 29821 comm: syz.6.10960) [ 693.030359][T29823] kernel write not supported for file /tomoyo/query (pid: 29823 comm: syz.6.10961) [ 693.327614][T29837] Process accounting resumed [ 694.029129][T29827] kernel write not supported for file /tomoyo/query (pid: 29827 comm: syz.6.10964) [ 694.229087][T29877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10986'. [ 694.243347][T29871] kernel write not supported for file /tomoyo/query (pid: 29871 comm: syz.6.10983) [ 695.163429][T29889] kernel write not supported for file /tomoyo/query (pid: 29889 comm: syz.6.10988) [ 695.275258][T29918] EXT4-fs error: 6 callbacks suppressed [ 695.275277][T29918] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 695.354472][T29920] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 695.466388][T29925] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 695.747591][T29937] synth uevent: /devices/platform/vhci_hcd.11: unknown uevent action string [ 695.783125][T29937] vhci_hcd vhci_hcd.11: uevent: failed to send synthetic uevent: -22 [ 695.841077][T29941] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 696.060867][T29948] Process accounting resumed [ 696.343505][T29953] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 696.384787][T29954] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 696.493783][T29957] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 696.739657][T29961] warn_unsupported: 2 callbacks suppressed [ 696.739677][T29961] kernel write not supported for file /tomoyo/query (pid: 29961 comm: syz.6.11015) [ 696.866792][T29969] bridge0: port 3(ipvlan1) entered blocking state [ 696.873445][T29969] bridge0: port 3(ipvlan1) entered disabled state [ 696.880240][T29969] ipvlan1: entered allmulticast mode [ 696.885668][T29969] veth0_vlan: entered allmulticast mode [ 696.892614][T29969] ipvlan1: left allmulticast mode [ 696.897924][T29969] veth0_vlan: left allmulticast mode [ 697.100804][T29970] kernel write not supported for file /tomoyo/query (pid: 29970 comm: syz.6.11021) [ 697.287471][T29982] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 697.348795][T29976] kernel write not supported for file /tomoyo/query (pid: 29976 comm: syz.6.11025) [ 697.451630][T29984] kernel write not supported for file /tomoyo/query (pid: 29984 comm: syz.6.11028) [ 698.411959][T29990] kernel write not supported for file /tomoyo/query (pid: 29990 comm: syz.6.11031) [ 698.572108][T30030] kernel write not supported for file /tomoyo/query (pid: 30030 comm: syz.6.11049) [ 698.767751][T30040] kernel write not supported for file /tomoyo/query (pid: 30040 comm: syz.6.11052) [ 699.041192][T30048] kernel write not supported for file /tomoyo/query (pid: 30048 comm: syz.6.11054) [ 699.187432][T30053] kernel write not supported for file /tomoyo/query (pid: 30053 comm: syz.6.11056) [ 699.328350][T30056] kernel write not supported for file /tomoyo/query (pid: 30056 comm: syz.6.11058) [ 699.454391][T30063] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11060'. [ 700.186799][T30085] Process accounting resumed [ 700.884729][T30114] Process accounting resumed [ 701.273524][T30127] rnbd_client L202: map_device: Unknown parameter or missing value 'Usa' [ 703.571354][T30179] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 703.579369][T30179] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 703.609958][T30179] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 703.626089][T30179] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 703.677303][T30179] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 703.688284][T30179] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 703.697094][T30179] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 703.705924][T30179] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 703.717394][T30179] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 703.872515][ T29] audit: type=1800 audit(4294967298.367:48): pid=30215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=FFFFF2FFFFFFF2FFFFFFF2FFFFFFF2 name="features" dev="configfs" ino=88301 res=0 errno=0 [ 704.556770][T30245] bridge0: port 3(batadv0) entered blocking state [ 704.580871][T30245] bridge0: port 3(batadv0) entered disabled state [ 704.613004][T30245] batadv0: entered allmulticast mode [ 704.624320][T30245] batadv0: entered promiscuous mode [ 704.630770][T30245] bridge0: port 3(batadv0) entered blocking state [ 704.638619][T30245] bridge0: port 3(batadv0) entered forwarding state [ 704.923450][ T5895] Bluetooth: hci2: command 0x0406 tx timeout [ 704.960438][T30264] kAFS: Invalid Command on /proc/fs/afs/cells file [ 705.016509][ T52] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 705.026347][ T52] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 705.290798][T30278] Process accounting resumed [ 705.655414][ T5895] Bluetooth: hci3: command 0x0406 tx timeout [ 705.709221][ T5895] Bluetooth: hci1: command 0x0406 tx timeout [ 705.715325][ T5895] Bluetooth: hci0: command 0x0c1a tx timeout [ 705.846151][T30299] program syz.2.11166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 706.982468][ T5893] Bluetooth: hci2: command 0x0406 tx timeout [ 707.693824][T30340] ptrace attach of "./syz-executor exec"[5898] was attempted by "úߤ&h´“ŽYu]A Ì®š+€õa\x0d”Ö&H1…0õ1’hľ_Qqeʀ؈âÖì*]ÞZ÷\x09YV™ß:\x07ømIßÙ_˜•å†™‰Ø ·Õιõ¦Uðü»û;‚;¦ìξ¬ð\x0bDÝý&{}ŠÐÀ°Ÿ[(R¿•‰p7%½?¯ªÕq²C\x0aœ9>F€ˆZ“œÔ\x22ôYÛ~òÇwì‹„¡Œ•Ùí5§¤+tÝ,#\x07íûa¾’“0„UÃ<¤Ô#!ðMÞÝu>´Û<º4\x0ahR\x0a›ÛÓ¾Û)M1*ïO<6÷E7Ñ \x0c)ê¥ÕyØšè!f‹ Pß]”ÔuâÀO½Ø_Y±Ì—©ÕÿZ¡õ®8@c)–Ž£5ÂÑ7–] JßÇ´¶ígÍ-°–þ\x07æ W,¤ü­B>v/üõýÐüäðÐy¿z¶\x22èÁøq©*+/cBæfwÆ·&Ç&°”öiúPgv›\x0a™Þe³\x22÷jŒ;Þ]tki}53äµjÙ]} Æ§{óŠ/l¢–~zL3½£ˆC[†¯)IÁ¤QÞ™…¡šßawW#­ê®ÿ¡Ê¦æ– Çi“1U‰kbVîÙ‡„ç¦v}\x22`•Ì7Åq#²G{EþጣT?ôÒêrÏÚÙÁ.é!1­Wæ&%„,XŽ××(c²äëo²7\x07@uõûA¬Ù8|ÐVt¶ßׇÑI\x5cpÍ\x22¥kªÛ5Œ‚.ÊUœ‹¾­x~ümp%5óÕyþ29®ô\x0b°”—uÖ}Õ]¤Ê>î¸U+¶NÅ»x”Ü[¦6¦ŸÏWÈë+(¸e%§*tÎÂÓ>i‚\x09¥ØïÊûÄZìHÝŽõëL9Em¡´D\x09|âWÄ+SJŠ(9“ß·ì-”«@Gͨ|\x07ž#²÷P»“ÏçàÖ¯Ý\x0cÒ%õtiÜ1gx{ôʈnLOþ0Q£bí€2ºL\x0cÒžf—£ãty‰#_í§U-Üèä¶tß™MzõNê=ÿ‡\x5cMð\x0aÇó'Kt\x0d6ÓÉ(¢9€ðLùiœ„Vs@Ý‹RÌtëuPE¥«àÐQª¯&­X°Tx' [ 805.310386][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 805.316816][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 806.180744][ T567] netlink: 'syz.2.12327': attribute type 11 has an invalid length. [ 807.772772][ T608] Process accounting resumed [ 809.216807][ T641] size and base must be multiples of 4 kiB [ 809.247036][ T641] CPU: 1 UID: 0 PID: 641 Comm: syz.7.12358 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 809.257775][ T641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 809.267866][ T641] Call Trace: [ 809.271176][ T641] [ 809.274133][ T641] dump_stack_lvl+0x16c/0x1f0 [ 809.278858][ T641] mtrr_del+0xd1/0x110 [ 809.282982][ T641] mtrr_ioctl+0x900/0xcd0 [ 809.287410][ T641] ? __pfx_mtrr_ioctl+0x10/0x10 [ 809.292321][ T641] ? __pfx_lock_release+0x10/0x10 [ 809.297400][ T641] ? __fget_files+0x206/0x3a0 [ 809.302121][ T641] ? __pfx_mtrr_ioctl+0x10/0x10 [ 809.307019][ T641] proc_reg_unlocked_ioctl+0x226/0x320 [ 809.312517][ T641] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 809.318541][ T641] __x64_sys_ioctl+0x190/0x200 [ 809.323346][ T641] do_syscall_64+0xcd/0x250 [ 809.327892][ T641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.333830][ T641] RIP: 0033:0x7f7b6fb85d29 [ 809.338278][ T641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.357977][ T641] RSP: 002b:00007f7b7096e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 809.366439][ T641] RAX: ffffffffffffffda RBX: 00007f7b6fd75fa0 RCX: 00007f7b6fb85d29 [ 809.374452][ T641] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 809.382497][ T641] RBP: 00007f7b6fc01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 809.390514][ T641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.398519][ T641] R13: 0000000000000000 R14: 00007f7b6fd75fa0 R15: 00007ffc6de54b28 [ 809.406580][ T641] [ 810.983082][ T667] netlink: 122 bytes leftover after parsing attributes in process `syz.7.12368'. [ 811.300599][ T672] netlink: 122 bytes leftover after parsing attributes in process `syz.7.12368'. [ 813.149258][ T726] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12392'. [ 813.343549][ T729] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.2097152.1), cmd(6) [ 814.449878][ T765] Process accounting resumed [ 814.861027][ T778] Process accounting resumed [ 814.892486][ T780] bridge0: port 5(syz_tun) entered blocking state [ 814.918600][ T780] bridge0: port 5(syz_tun) entered disabled state [ 814.935392][ T780] syz_tun: entered allmulticast mode [ 814.943605][ T780] syz_tun: entered promiscuous mode [ 814.949644][ T780] bridge0: port 5(syz_tun) entered blocking state [ 814.956260][ T780] bridge0: port 5(syz_tun) entered forwarding state [ 815.331212][ T791] netlink: 'syz.6.12420': attribute type 1 has an invalid length. [ 817.332317][ T851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.614732][ T865] netlink: 'syz.2.12453': attribute type 1 has an invalid length. [ 818.385814][ T899] netlink: 350 bytes leftover after parsing attributes in process `syz.6.12468'. [ 818.520339][ T911] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12472'. [ 818.582740][ T911] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12472'. [ 819.636030][ T958] program syz.7.12487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 820.292414][ T976] Process accounting resumed [ 820.650834][ T990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12500'. [ 820.743896][ T987] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12499'. [ 821.109255][ T1005] Process accounting resumed [ 821.203339][ T1007] rnbd_client L213: map_device: Parameters missing [ 821.440272][ T1019] Process accounting resumed [ 824.072976][ T1110] Process accounting resumed [ 825.872281][ T1159] Process accounting resumed                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  syzkaller syzkaller login: [ 868.005152][ T2447] kAFS: Invalid Command on /proc/fs/afs/cells file [ 868.220237][ T2453] sd 0:0:1:0: PR command failed: 1026 [ 868.263775][ T2453] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 868.323337][ T2453] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 870.417567][ T2544] netlink: 342 bytes leftover after parsing attributes in process `syz.5.13139'. [ 871.324630][ T2564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13146'. [ 871.368407][ T2565] netlink: 330 bytes leftover after parsing attributes in process `syz.2.13145'. [ 873.798843][ T2636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13167'. [ 873.994583][ T2642] netlink: 342 bytes leftover after parsing attributes in process `syz.2.13170'. [ 874.725159][ T2647] netlink: 330 bytes leftover after parsing attributes in process `syz.6.13172'. [ 876.129065][ T2674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13180'. [ 876.145219][ T2674] ipvlan1: entered allmulticast mode [ 876.157965][ T2674] veth0_vlan: entered allmulticast mode [ 876.585078][ T2683] netlink: 330 bytes leftover after parsing attributes in process `syz.5.13183'. [ 876.882708][ T2702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13189'. [ 876.929056][ T2702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13189'. [ 878.699438][ T2725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13198'. [ 878.720025][ T2724] netlink: 330 bytes leftover after parsing attributes in process `syz.7.13196'. [ 879.324294][ T2753] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13208'. [ 881.176676][ T2818] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13228'. [ 882.553355][ T2882] netlink: 334 bytes leftover after parsing attributes in process `syz.6.13250'. [ 882.610496][ T2882] netlink: 334 bytes leftover after parsing attributes in process `syz.6.13250'. [ 884.944458][ T2970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13289'. [ 885.391940][ T2982] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13295'. [ 885.994569][ T2998] netlink: 342 bytes leftover after parsing attributes in process `syz.5.13301'. [ 886.172735][ T3003] netlink: 'syz.6.13305': attribute type 19 has an invalid length. [ 886.203877][ T3003] netlink: 334 bytes leftover after parsing attributes in process `syz.6.13305'. [ 889.041856][ T3063] netlink: 342 bytes leftover after parsing attributes in process `syz.2.13328'. [ 889.762476][ T3071] netlink: 350 bytes leftover after parsing attributes in process `syz.2.13332'. [ 891.912281][ T3095] bond0: option arp_missed_max: invalid value () [ 891.970039][ T3095] bond0: option arp_missed_max: allowed values 1 - 255 [ 894.547685][ T3178] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13373'. [ 894.616501][ T3178] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13373'. [ 894.751783][ T3183] netlink: 334 bytes leftover after parsing attributes in process `syz.6.13375'. [ 895.617827][ T3222] FAULT_INJECTION: forcing a failure. [ 895.617827][ T3222] name fail_futex, interval 1, probability 0, space 0, times 1 [ 895.671399][ T3222] CPU: 0 UID: 0 PID: 3222 Comm: syz.5.13391 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 895.684355][ T3222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 895.696450][ T3222] Call Trace: [ 895.700397][ T3222] [ 895.703932][ T3222] dump_stack_lvl+0x16c/0x1f0 [ 895.709574][ T3222] should_fail_ex+0x497/0x5b0 [ 895.715233][ T3222] should_fail_futex+0x4c/0x60 [ 895.720987][ T3222] __x64_sys_futex+0x260/0x4c0 [ 895.726753][ T3222] ? __pfx___x64_sys_futex+0x10/0x10 [ 895.733132][ T3222] ? rcu_is_watching+0x12/0xc0 [ 895.738886][ T3222] do_syscall_64+0xcd/0x250 [ 895.744320][ T3222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.751415][ T3222] RIP: 0033:0x7f0bccb85d29 [ 895.756728][ T3222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 895.780269][ T3222] RSP: 002b:00007fffb727dc98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 895.790372][ T3222] RAX: ffffffffffffffda RBX: 00007fffb727ddc0 RCX: 00007f0bccb85d29 [ 895.799927][ T3222] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0bccd75fac [ 895.809483][ T3222] RBP: 00007f0bccd75fac R08: 00007f0bcd940000 R09: 00007fffb727df8f [ 895.819048][ T3222] R10: 00007fffb727dda0 R11: 0000000000000246 R12: 00000000000dba8e [ 895.828606][ T3222] R13: 00007fffb727dda0 R14: 0000000000000032 R15: 00000000000dba5c [ 895.838170][ T3222] [ 897.807974][ T3293] netlink: 346 bytes leftover after parsing attributes in process `syz.7.13420'. [ 898.205745][ T3304] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13424'. [ 898.548720][ T3310] netlink: 334 bytes leftover after parsing attributes in process `syz.6.13425'. [ 898.875466][ T3317] nbd2: detected capacity change from 0 to 68719476736 [ 898.949843][ T3323] netlink: 334 bytes leftover after parsing attributes in process `syz.2.13432'. [ 898.966197][ T3089] block nbd2: Send control failed (result -22) [ 898.976579][ T3089] block nbd2: Request send failed, requeueing [ 899.019672][T25478] block nbd2: Receive control failed (result -32) [ 899.029866][ T26] block nbd2: Dead connection, failed to find a fallback [ 899.041062][ T26] block nbd2: shutting down sockets [ 899.055833][ T26] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.067608][ T26] Buffer I/O error on dev nbd2, logical block 0, async page read [ 899.133639][ T3089] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.147410][ T3089] Buffer I/O error on dev nbd2, logical block 0, async page read [ 899.157862][ T3089] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.169098][ T3089] Buffer I/O error on dev nbd2, logical block 0, async page read [ 899.179076][ T3089] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.191948][ T3089] Buffer I/O error on dev nbd2, logical block 0, async page read [ 899.192922][ T3328] sctp: [Deprecated]: syz.7.13433 (pid 3328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 899.192922][ T3328] Use struct sctp_sack_info instead [ 899.201911][ T3089] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.235751][ T3089] Buffer I/O error on dev nbd2, logical block 0, async page read [ 899.246001][ T3089] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.257264][ T3089] Buffer I/O error on dev nbd2, logical block 0, async page read [ 899.267173][ T3089] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.310371][ T3089] Buffer I/O error on dev nbd2, logical block 0, async page read [ 899.321207][ T3089] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.343458][ T3089] Buffer I/O error on dev nbd2, logical block 0, async page read [ 899.361410][ T3089] ldm_validate_partition_table(): Disk read failed. [ 899.382060][ T3089] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.382548][ T3332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13436'. [ 899.399704][ T3089] Buffer I/O error on dev nbd2, logical block 0, async page read [ 899.419873][ T3089] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.431536][ T3089] Buffer I/O error on dev nbd2, logical block 0, async page read [ 899.441378][ T3089] Dev nbd2: unable to read RDB block 0 [ 899.458949][ T3089] nbd2: unable to read partition table [ 899.480013][ T3089] ldm_validate_partition_table(): Disk read failed. [ 899.489567][ T3089] Dev nbd2: unable to read RDB block 0 [ 899.497303][ T3089] nbd2: unable to read partition table [ 899.942491][ T3344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13442'. [ 901.326501][ T3387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13457'. [ 901.964294][ T3412] erspan0: entered allmulticast mode [ 903.628783][ T3483] netlink: 330 bytes leftover after parsing attributes in process `syz.2.13498'. [ 903.655869][ T29] audit: type=1326 audit(8277292208.728:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3474 comm="syz.6.13494" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6bd7985d29 code=0x0 [ 903.901470][ T3481] program syz.5.13496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 904.343952][ T3507] CIFS: VFS: Invalid SecurityFlags: 0 [ 904.343952][ T3507] [ 905.421176][ T3544] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13521'. [ 905.680734][ T3558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13526'. [ 905.710238][ T3558] bridge0: port 5(syz_tun) entered disabled state [ 905.718181][ T3558] bridge0: port 4(bond0) entered disabled state [ 905.725879][ T3558] bridge0: port 3(batadv0) entered disabled state [ 905.734054][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.742762][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.829415][ T3558] bridge0: entered allmulticast mode [ 906.962555][ T3590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13539'. [ 906.992405][ T3590] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 908.353269][ T3636] netlink: 'syz.5.13553': attribute type 1 has an invalid length. [ 909.480241][ T3676] netlink: 342 bytes leftover after parsing attributes in process `syz.2.13571'. [ 909.529380][ T3676] netlink: 342 bytes leftover after parsing attributes in process `syz.2.13571'. [ 910.086550][ T3691] netlink: 350 bytes leftover after parsing attributes in process `syz.7.13576'. [ 911.369905][ T3731] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13590'. [ 912.236288][ T3749] nbd3: detected capacity change from 0 to 68719476736 [ 912.269896][ T3529] block nbd3: Send control failed (result -22) [ 912.278281][ T3529] block nbd3: Request send failed, requeueing [ 912.300905][T25478] block nbd3: Receive control failed (result -32) [ 912.319228][ T58] block nbd3: Dead connection, failed to find a fallback [ 912.327871][ T58] block nbd3: shutting down sockets [ 912.334217][ T58] blk_print_req_error: 24 callbacks suppressed [ 912.334239][ T58] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 912.352795][ T58] buffer_io_error: 23 callbacks suppressed [ 912.352812][ T58] Buffer I/O error on dev nbd3, logical block 0, async page read [ 912.374061][ T3529] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 912.443931][ T3529] Buffer I/O error on dev nbd3, logical block 0, async page read [ 912.482615][ T3529] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 912.543530][ T3529] Buffer I/O error on dev nbd3, logical block 0, async page read [ 912.552988][ T3529] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 912.593352][ T3529] Buffer I/O error on dev nbd3, logical block 0, async page read [ 912.610676][ T3529] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 912.642978][ T3529] Buffer I/O error on dev nbd3, logical block 0, async page read [ 912.663315][ T3529] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 912.697358][ T3529] Buffer I/O error on dev nbd3, logical block 0, async page read [ 912.715415][ T3529] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 912.762328][ T3529] Buffer I/O error on dev nbd3, logical block 0, async page read [ 912.782436][ T3529] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 912.812301][ T3529] Buffer I/O error on dev nbd3, logical block 0, async page read [ 912.851933][ T3529] ldm_validate_partition_table(): Disk read failed. [ 912.859998][ T3529] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 912.908789][ T3529] Buffer I/O error on dev nbd3, logical block 0, async page read [ 912.953894][ T3529] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 912.998094][ T3529] Buffer I/O error on dev nbd3, logical block 0, async page read [ 913.029868][ T3529] Dev nbd3: unable to read RDB block 0 [ 913.077842][ T3771] EXT4-fs error: 4 callbacks suppressed [ 913.077860][ T3771] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 913.103974][ T3529] nbd3: unable to read partition table [ 913.118054][ T3772] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 913.142722][ T3529] ldm_validate_partition_table(): Disk read failed. [ 913.155218][ T3529] Dev nbd3: unable to read RDB block 0 [ 913.166712][ T3529] nbd3: unable to read partition table [ 913.235507][ T3773] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 914.127822][ T3795] netlink: 'syz.2.13614': attribute type 1 has an invalid length. [ 915.325416][ T3807] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13618'. [ 915.336521][ T3807] veth1_macvtap: entered allmulticast mode [ 915.607335][ T3811] binder: BINDER_SET_CONTEXT_MGR already set [ 915.665941][ T3811] binder: 3810:3811 ioctl 4018620d 9 returned -16 [ 916.245292][ T3820] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13633'. [ 917.826093][ T3851] netlink: 244 bytes leftover after parsing attributes in process `syz.6.13637'. [ 917.951910][ T3855] netlink: 330 bytes leftover after parsing attributes in process `syz.7.13638'. [ 918.025487][ T3855] ü: renamed from team0 [ 918.348581][ T3870] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13643'. [ 918.510011][ T3870] geneve0: entered allmulticast mode [ 919.687058][ T3878] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 919.696864][ T3878] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 919.708886][ T3878] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 919.720122][ T3878] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 920.075208][ T3907] netlink: 'syz.2.13661': attribute type 2 has an invalid length. [ 920.440831][ T3921] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 920.533558][ T3922] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 920.580709][ T3926] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 921.150039][T25478] Bluetooth: hci2: command 0x0406 tx timeout [ 921.705823][T25478] Bluetooth: hci0: command 0x0c1a tx timeout [ 921.705838][ T5893] Bluetooth: hci3: command 0x0406 tx timeout [ 921.786633][T25478] Bluetooth: hci1: command 0x041b tx timeout [ 922.388294][ T3967] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13684'. [ 923.761903][ T4002] netlink: 'syz.2.13701': attribute type 2 has an invalid length. [ 923.762384][ T4004] netlink: 334 bytes leftover after parsing attributes in process `syz.7.13702'. [ 923.795228][ T4002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13701'. [ 925.243415][ T4040] netlink: 342 bytes leftover after parsing attributes in process `syz.6.13715'. [ 925.674296][ T4050] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13719'. [ 925.799368][ T4050] macsec0: entered allmulticast mode [ 927.519066][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 927.526750][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 927.547552][ T4092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13735'. [ 927.867883][ T4100] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13739'. [ 927.897286][ T4100] ip_vti0: entered promiscuous mode [ 928.109742][ T4110] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 928.617268][ T4126] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13752'. [ 928.652511][ T4126] vxcan1: entered promiscuous mode [ 929.082465][ T4138] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13757'. [ 930.047279][ T4162] netlink: 330 bytes leftover after parsing attributes in process `syz.2.13767'. [ 931.911019][ T4216] netlink: 342 bytes leftover after parsing attributes in process `syz.6.13786'. [ 932.032443][ T4208] netlink: 342 bytes leftover after parsing attributes in process `syz.6.13786'. [ 934.096584][ T4260] nbd: socks must be embedded in a SOCK_ITEM attr [ 934.143200][ T4260] block nbd4: shutting down sockets [ 935.733540][ T4298] netlink: 334 bytes leftover after parsing attributes in process `syz.5.13822'. [ 938.683588][ T4397] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13862'. [ 939.553874][ T4420] sd 0:0:1:0: PR command failed: 1026 [ 939.569507][ T4420] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 939.586516][ T4420] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 940.989252][ T4469] netlink: 'syz.7.13893': attribute type 13 has an invalid length. [ 944.517991][ T4572] netlink: 'syz.5.13934': attribute type 21 has an invalid length. [ 944.528952][ T4572] netlink: 334 bytes leftover after parsing attributes in process `syz.5.13934'. [ 947.519280][ T4666] netlink: 'syz.6.13976': attribute type 6 has an invalid length. [ 947.561400][ T4666] netlink: 330 bytes leftover after parsing attributes in process `syz.6.13976'. [ 947.940922][ T4682] netlink: 342 bytes leftover after parsing attributes in process `syz.2.13983'. [ 950.765773][ T4764] lo: entered allmulticast mode [ 950.785222][ T4763] lo: left allmulticast mode [ 951.731898][ T4790] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14026'. [ 953.407398][ T4823] netlink: 330 bytes leftover after parsing attributes in process `syz.2.14039'. [ 953.465284][ T5893] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 953.480956][ T5893] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 953.491383][ T5893] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 953.543341][ T5893] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 953.561517][ T5893] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 953.570680][ T5893] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 953.988651][ T4824] chnl_net:caif_netlink_parms(): no params data found [ 954.137162][ T4852] netlink: 'syz.7.14047': attribute type 1 has an invalid length. [ 954.160061][ T4824] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.160903][ T4852] netlink: 'syz.7.14047': attribute type 1 has an invalid length. [ 954.176668][ T4824] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.197708][ T4824] bridge_slave_0: entered allmulticast mode [ 954.205918][ T4824] bridge_slave_0: entered promiscuous mode [ 954.227319][ T4824] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.250696][ T4824] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.261155][ T4824] bridge_slave_1: entered allmulticast mode [ 954.269919][ T4824] bridge_slave_1: entered promiscuous mode [ 954.328731][ T4824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.355078][ T4824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.360879][ T4859] netlink: 178 bytes leftover after parsing attributes in process `syz.7.14050'. [ 954.458664][ T4824] team0: Port device team_slave_0 added [ 954.474737][ T4824] team0: Port device team_slave_1 added [ 954.518326][ T4824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.532669][ T4824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.563717][ C1] vkms_vblank_simulate: vblank timer overrun [ 954.572722][ T4824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.587739][ T4824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.596181][ T4824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.627215][ C1] vkms_vblank_simulate: vblank timer overrun [ 954.634581][ T4824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.751227][ T4824] hsr_slave_0: entered promiscuous mode [ 954.758790][ T4824] hsr_slave_1: entered promiscuous mode [ 954.769354][ T4824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 954.769519][ T4871] netlink: 334 bytes leftover after parsing attributes in process `syz.7.14055'. [ 954.778972][ T4824] Cannot create hsr debugfs directory [ 955.105034][ T4824] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 955.133521][ T4824] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 955.147984][ T4824] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 955.167631][ T4824] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 955.359019][ T4824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.403565][ T4824] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.426022][T30906] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.434592][T30906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.475024][T30906] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.483625][T30906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.544848][ T4891] netlink: 334 bytes leftover after parsing attributes in process `syz.6.14065'. [ 955.609850][ T5893] Bluetooth: hci3: command tx timeout [ 955.832551][ T4824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.083155][ T4824] veth0_vlan: entered promiscuous mode [ 956.096279][ T4824] veth1_vlan: entered promiscuous mode [ 956.125579][ T4824] veth0_macvtap: entered promiscuous mode [ 956.137593][ T4824] veth1_macvtap: entered promiscuous mode [ 956.158713][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.171856][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.183964][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.197636][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.213991][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.226713][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.238640][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.256078][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.273637][ T4824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.304535][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.336966][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.355708][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.369102][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.383048][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.403127][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.418001][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.418024][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.419242][ T4824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.421911][ T4824] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.421952][ T4824] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.421989][ T4824] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.422026][ T4824] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.556508][T30906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.578898][T30906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.683573][ T3683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.701520][ T3683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.870004][ T4922] netlink: 330 bytes leftover after parsing attributes in process `syz.8.14035'. [ 957.679027][ T5893] Bluetooth: hci3: command tx timeout [ 958.539949][ T4967] nfsd: Unknown parameter 'IPVS' [ 958.746071][ T4972] netlink: 330 bytes leftover after parsing attributes in process `syz.8.14095'. [ 958.789476][ T4972] ü: renamed from team0 (while UP)                      [ 961.828247][ T5893] Bluetooth: hci3: command tx timeout [ 962.774812][ T5102] kAFS: bad VL server IP address [ 963.312557][ T5118] netlink: 74 bytes leftover after parsing attributes in process `syz.7.14158'. [ 963.322296][ T5119] netlink: 334 bytes leftover after parsing attributes in process `syz.6.14157'. [ 963.809260][ T5131] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14163'. [ 965.216400][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14179'. [ 965.421296][ T5182] netlink: 'syz.7.14181': attribute type 9 has an invalid length. [ 965.439569][ T5182] netlink: 330 bytes leftover after parsing attributes in process `syz.7.14181'. [ 965.667395][ T5190] netlink: 338 bytes leftover after parsing attributes in process `syz.7.14182'. [ 965.697660][ T5188] netlink: 338 bytes leftover after parsing attributes in process `syz.7.14182'. [ 965.765128][ T5194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14183'. [ 965.978567][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14185'. [ 966.061393][ T5200] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14187'. [ 966.953171][ T5225] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 969.637867][ T5297] __nla_validate_parse: 1 callbacks suppressed [ 969.637888][ T5297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14228'. [ 969.678999][ T5297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14228'. [ 972.198523][ T5374] bridge0: port 3(|) entered blocking state [ 972.213033][ T5374] bridge0: port 3(|) entered disabled state [ 972.220173][ T5374] |: entered allmulticast mode [ 972.273055][ T5374] team_slave_0: entered allmulticast mode [ 972.278844][ T5374] team_slave_1: entered allmulticast mode [ 972.318124][ T5374] |: entered promiscuous mode [ 972.323417][ T5374] team_slave_0: entered promiscuous mode [ 972.329582][ T5374] team_slave_1: entered promiscuous mode [ 973.384010][ T5421] Process accounting resumed [ 973.444567][ T5424] sd 0:0:1:0: PR command failed: 1026 [ 973.466771][ T5424] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 973.487779][ T5424] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 975.712612][ T5483] netlink: 338 bytes leftover after parsing attributes in process `syz.6.14306'. [ 976.043102][ T5502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14313'. [ 976.469828][ T5521] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14320'. [ 979.669631][ T5626] netlink: 342 bytes leftover after parsing attributes in process `syz.6.14362'. [ 979.693034][ T5626] netlink: 342 bytes leftover after parsing attributes in process `syz.6.14362'. [ 981.665868][ T5687] Console: switching to colour frame buffer device 128x48 [ 982.356147][ T5895] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 982.373621][ T5895] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 982.382557][ T5895] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 982.420386][ T5895] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 982.433789][ T5895] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 982.441222][ T5895] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 983.031212][ T5695] chnl_net:caif_netlink_parms(): no params data found [ 983.364436][ T5695] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.373050][ T5695] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.398884][ T5695] bridge_slave_0: entered allmulticast mode [ 983.420898][ T5695] bridge_slave_0: entered promiscuous mode [ 983.443891][ T5695] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.474779][ T5695] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.481965][ T5695] bridge_slave_1: entered allmulticast mode [ 983.501513][ T5695] bridge_slave_1: entered promiscuous mode [ 983.620131][ T5695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.646550][ T5695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.821351][ T5728] netlink: 11 bytes leftover after parsing attributes in process `syz.8.14400'. [ 983.864821][ T5695] team0: Port device team_slave_0 added [ 983.895785][ T5695] team0: Port device team_slave_1 added [ 984.263076][ T5695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.270087][ T5695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 984.296144][ T5695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.309171][ T5695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.316502][ T5695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 984.343145][ T5695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.481488][ T5695] hsr_slave_0: entered promiscuous mode [ 984.488156][ T5695] hsr_slave_1: entered promiscuous mode [ 984.499561][ T5895] Bluetooth: hci0: command tx timeout [ 984.598792][ T5695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 984.606393][ T5695] Cannot create hsr debugfs directory [ 985.059799][ T5695] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.316809][ T5695] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.470884][ T5695] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.626494][ T5695] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.906269][ T5695] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 985.920408][ T5695] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 985.935481][ T5695] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 985.961400][ T5695] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 986.079774][ T5695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.109767][ T5695] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.151052][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.158241][ T5755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.174029][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.181214][ T5755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.466901][ T5695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.570280][ T5768] Bluetooth: hci0: command tx timeout [ 986.770600][ T5806] netlink: 342 bytes leftover after parsing attributes in process `syz.6.14426'. [ 986.818613][ T5695] veth0_vlan: entered promiscuous mode [ 986.841532][ T5695] veth1_vlan: entered promiscuous mode [ 986.893915][ T5695] veth0_macvtap: entered promiscuous mode [ 986.902736][ T5695] veth1_macvtap: entered promiscuous mode [ 986.915743][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.915768][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.915781][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.915799][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.915812][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.915830][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.915843][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.915861][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.915873][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.915889][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.919892][ T5695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.067710][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.067735][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.067749][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.067766][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.067780][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.067798][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.067810][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.067828][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.067841][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.067859][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.068741][ T5695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.073141][ T5695] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.073184][ T5695] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.073223][ T5695] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.073262][ T5695] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.195897][ T5813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.321794][ T5813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.377056][ T5813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.385038][ T5813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.643138][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 988.649658][ T5768] Bluetooth: hci0: command tx timeout [ 988.655136][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 989.117285][ T5832] delete_channel: no stack [ 990.712123][ T5768] Bluetooth: hci0: command tx timeout [ 990.942797][ T5905] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14462'. [ 992.895705][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14478'. [ 995.624883][ T6014] RDS: rds_bind could not find a transport for 86a4:131b:e300:1000::, load rds_tcp or rds_rdma? [ 997.138237][ T6039] Process accounting resumed [ 997.880928][ T6065] netlink: 330 bytes leftover after parsing attributes in process `syz.7.14522'. [ 998.710286][ T6098] tc_dump_action: action bad kind [ 999.003099][ T6114] netlink: 342 bytes leftover after parsing attributes in process `syz.8.14542'. [ 999.234238][ T6120] i2c i2c-0: Invalid block write size 128 [ 999.478770][ T6129] netlink: 330 bytes leftover after parsing attributes in process `syz.7.14548'. [ 999.490788][ T6133] netlink: 'syz.2.14551': attribute type 16 has an invalid length. [ 999.546820][ T6133] netlink: 322 bytes leftover after parsing attributes in process `syz.2.14551'. [ 999.731191][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14555'. [ 999.747869][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14555'. [ 1002.655163][ T6240] netlink: 'syz.2.14592': attribute type 1 has an invalid length. [ 1003.121580][ T6255] netlink: 342 bytes leftover after parsing attributes in process `syz.2.14599'. [ 1003.412604][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14612'. [ 1003.442787][ T6275] netlink: 334 bytes leftover after parsing attributes in process `syz.8.14605'. [ 1003.530932][ T6278] Invalid ELF header magic: != ELF [ 1004.060027][ T6296] netlink: 338 bytes leftover after parsing attributes in process `syz.8.14613'. [ 1004.099918][ T6296] netlink: 338 bytes leftover after parsing attributes in process `syz.8.14613'. [ 1004.296121][ T6307] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1006.103081][ T6359] netlink: 342 bytes leftover after parsing attributes in process `syz.7.14640'. [ 1006.144735][ T6359] netlink: 342 bytes leftover after parsing attributes in process `syz.7.14640'. [ 1006.377537][ T6365] lo: entered promiscuous mode [ 1006.409263][ T6364] lo: left promiscuous mode [ 1007.312135][T25520] [ 1007.314501][T25520] ====================================================== [ 1007.321522][T25520] WARNING: possible circular locking dependency detected [ 1007.328551][T25520] 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 Not tainted [ 1007.335669][T25520] ------------------------------------------------------ [ 1007.342689][T25520] kworker/1:4/25520 is trying to acquire lock: [ 1007.348848][T25520] ffffffff8fabfb08 (rtnl_mutex){+.+.}-{4:4}, at: smc_vlan_by_tcpsk+0x251/0x620 [ 1007.357846][T25520] [ 1007.357846][T25520] but task is already holding lock: [ 1007.365226][T25520] ffff88805f3352d8 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53c/0xae0 [ 1007.374566][T25520] [ 1007.374566][T25520] which lock already depends on the new lock. [ 1007.374566][T25520] [ 1007.384971][T25520] [ 1007.384971][T25520] the existing dependency chain (in reverse order) is: [ 1007.393988][T25520] [ 1007.393988][T25520] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1007.401674][T25520] lock_sock_nested+0x3a/0xf0 [ 1007.406902][T25520] sockopt_lock_sock+0x54/0x70 [ 1007.412214][T25520] do_ip_setsockopt+0x101/0x38c0 [ 1007.417689][T25520] ip_setsockopt+0x59/0xf0 [ 1007.422649][T25520] raw_setsockopt+0xb8/0x290 [ 1007.427773][T25520] do_sock_setsockopt+0x222/0x480 [ 1007.433333][T25520] __sys_setsockopt+0x1a0/0x230 [ 1007.438729][T25520] __x64_sys_setsockopt+0xbd/0x160 [ 1007.444383][T25520] do_syscall_64+0xcd/0x250 [ 1007.449425][T25520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.455860][T25520] [ 1007.455860][T25520] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 1007.463148][T25520] __lock_acquire+0x249e/0x3c40 [ 1007.468548][T25520] lock_acquire.part.0+0x11b/0x380 [ 1007.474201][T25520] __mutex_lock+0x19b/0xa60 [ 1007.479242][T25520] smc_vlan_by_tcpsk+0x251/0x620 [ 1007.484720][T25520] __smc_connect+0x466/0x4890 [ 1007.489933][T25520] smc_connect_work+0x54f/0xae0 [ 1007.495319][T25520] process_one_work+0x958/0x1b30 [ 1007.500792][T25520] worker_thread+0x6c8/0xf00 [ 1007.505921][T25520] kthread+0x2c1/0x3a0 [ 1007.510531][T25520] ret_from_fork+0x45/0x80 [ 1007.515483][T25520] ret_from_fork_asm+0x1a/0x30 [ 1007.520789][T25520] [ 1007.520789][T25520] other info that might help us debug this: [ 1007.520789][T25520] [ 1007.531025][T25520] Possible unsafe locking scenario: [ 1007.531025][T25520] [ 1007.538477][T25520] CPU0 CPU1 [ 1007.543851][T25520] ---- ---- [ 1007.549219][T25520] lock(sk_lock-AF_INET); [ 1007.553651][T25520] lock(rtnl_mutex); [ 1007.560193][T25520] lock(sk_lock-AF_INET); [ 1007.567151][T25520] lock(rtnl_mutex); [ 1007.571152][T25520] [ 1007.571152][T25520] *** DEADLOCK *** [ 1007.571152][T25520] [ 1007.579298][T25520] 3 locks held by kworker/1:4/25520: [ 1007.584589][T25520] #0: ffff88814d948d48 ((wq_completion)smc_hs_wq){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 1007.595497][T25520] #1: ffffc9000c45fd80 ((work_completion)(&smc->connect_work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 1007.607272][T25520] #2: ffff88805f3352d8 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53c/0xae0 [ 1007.617052][T25520] [ 1007.617052][T25520] stack backtrace: [ 1007.622948][T25520] CPU: 1 UID: 0 PID: 25520 Comm: kworker/1:4 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 1007.633821][T25520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1007.643889][T25520] Workqueue: smc_hs_wq smc_connect_work [ 1007.649467][T25520] Call Trace: [ 1007.652750][T25520] [ 1007.655691][T25520] dump_stack_lvl+0x116/0x1f0 [ 1007.660403][T25520] print_circular_bug+0x41c/0x610 [ 1007.665473][T25520] check_noncircular+0x31a/0x400 [ 1007.670444][T25520] ? __pfx_check_noncircular+0x10/0x10 [ 1007.675929][T25520] ? __lock_acquire+0x2077/0x3c40 [ 1007.680995][T25520] ? lockdep_lock+0xc6/0x200 [ 1007.685608][T25520] ? __pfx_lockdep_lock+0x10/0x10 [ 1007.690657][T25520] __lock_acquire+0x249e/0x3c40 [ 1007.695548][T25520] ? __pfx___lock_acquire+0x10/0x10 [ 1007.700772][T25520] ? __pfx_lock_release+0x10/0x10 [ 1007.705812][T25520] lock_acquire.part.0+0x11b/0x380 [ 1007.710949][T25520] ? smc_vlan_by_tcpsk+0x251/0x620 [ 1007.716098][T25520] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1007.721748][T25520] ? rcu_is_watching+0x12/0xc0 [ 1007.726534][T25520] ? trace_lock_acquire+0x14e/0x1f0 [ 1007.731772][T25520] ? smc_vlan_by_tcpsk+0x251/0x620 [ 1007.736940][T25520] ? lock_acquire+0x2f/0xb0 [ 1007.741463][T25520] ? smc_vlan_by_tcpsk+0x251/0x620 [ 1007.746597][T25520] __mutex_lock+0x19b/0xa60 [ 1007.751120][T25520] ? smc_vlan_by_tcpsk+0x251/0x620 [ 1007.756253][T25520] ? smc_vlan_by_tcpsk+0x251/0x620 [ 1007.761385][T25520] ? __pfx___mutex_lock+0x10/0x10 [ 1007.766435][T25520] ? smc_vlan_by_tcpsk+0x32e/0x620 [ 1007.771568][T25520] ? smc_vlan_by_tcpsk+0x251/0x620 [ 1007.776705][T25520] smc_vlan_by_tcpsk+0x251/0x620 [ 1007.781662][T25520] ? __pfx_smc_vlan_by_tcpsk+0x10/0x10 [ 1007.787143][T25520] __smc_connect+0x466/0x4890 [ 1007.791844][T25520] ? __pfx___smc_connect+0x10/0x10 [ 1007.796974][T25520] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1007.802373][T25520] ? mark_held_locks+0x9f/0xe0 [ 1007.807167][T25520] ? __local_bh_enable_ip+0xa4/0x120 [ 1007.812473][T25520] smc_connect_work+0x54f/0xae0 [ 1007.817343][T25520] ? __pfx_smc_connect_work+0x10/0x10 [ 1007.822733][T25520] ? lock_acquire+0x2f/0xb0 [ 1007.827250][T25520] ? process_one_work+0x8bb/0x1b30 [ 1007.832383][T25520] process_one_work+0x958/0x1b30 [ 1007.837340][T25520] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1007.842999][T25520] ? __pfx_process_one_work+0x10/0x10 [ 1007.848384][T25520] ? rcu_is_watching+0x12/0xc0 [ 1007.853173][T25520] ? assign_work+0x1a0/0x250 [ 1007.857789][T25520] worker_thread+0x6c8/0xf00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1007.862398][T25520] ? __kthread_parkme+0x148/0x220 [ 1007.867443][T25520] ? __pfx_worker_thread+0x10/0x10 [ 1007.872572][T25520] kthread+0x2c1/0x3a0 [ 1007.876666][T25520] ? _raw_spin_unlock_irq+0x23/0x50 [ 1007.881884][T25520] ? __pfx_kthread+0x10/0x10 [ 1007.886497][T25520] ret_from_fork+0x45/0x80 [ 1007.890928][T25520] ? __pfx_kthread+0x10/0x10 [ 1007.895512][T25520] ret_from_fork_asm+0x1a/0x30 [ 1007.900289][T25520] [ 1008.188264][ T5889] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1008.209553][ T5889] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1008.523338][ T5898] syz_tun (unregistering): left allmulticast mode [ 1008.530017][ T5898] syz_tun (unregistering): left promiscuous mode [ 1008.536567][ T5898] bridge0: port 5(syz_tun) entered disabled state [ 1008.543850][ T5898] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 1008.570767][ T4824] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1008.586975][ T4824] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1008.677260][ T1394] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1008.685985][ T6403] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.7.14658: bg 3: bad block bitmap checksum [ 1008.686187][ T6403] EXT4-fs error (device sda1): ext4_discard_preallocations:5603: comm syz.7.14658: Error -74 reading block bitmap for 3 [ 1008.710306][ T1394] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1008.721429][ T6403] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1008.740863][ T6403] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem