last executing test programs: 11.241690482s ago: executing program 2 (id=160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@empty}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@empty}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 10.943278847s ago: executing program 2 (id=163): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@file={0xa, './file0\x00'}, 0x6e, 0x0}, 0x0) 10.674220561s ago: executing program 2 (id=165): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000e4947c650200cd", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) socket$unix(0x1, 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @broadcast}}) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@fwd={0x5}, @const]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000540)=""/177, 0x37, 0xb1, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x2, 0x1}, 0x48) 9.009006825s ago: executing program 2 (id=167): syz_mount_image$udf(&(0x7f0000000ac0), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d63703933322c706172746974696f6e3d30303030303030303030303030303030303030332c6769643d666f726765742c6769643d666f726765742c6e6f6164696e6963622c756e64656c6574652c7569643d666f726765742c00fb5ebc1bbec00aea8217b7375ace1f91cad4e856ac3ce827902dd91a9a936650ca99205dc1adee73bc464ab6ea2dad7091eea47594f5ef5227a72684b2ed98640aa52eba3e04c81c829036f312ecb1c7483575d32ed9eef652c6b7284dc45cecea6a0ae3a01c5cd7b60af90431eddc00"/225], 0xfe, 0xc2e, &(0x7f0000003040)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x544, &(0x7f0000000580)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x4c02, &(0x7f0000000140)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 8.471766005s ago: executing program 2 (id=170): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$getown(r2, 0x9) ptrace$setsig(0x4203, r3, 0xb, &(0x7f0000000140)={0x33, 0xfff}) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300), 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x0, &(0x7f0000000240)={@private=0xa010100, @broadcast, @multicast1}, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x10, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x1, 0x0, 0x3}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) 8.156142666s ago: executing program 4 (id=173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@empty}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@empty}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 8.141758961s ago: executing program 2 (id=174): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000380)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@data_err_abort}, {@noblock_validity}, {@jqfmt_vfsv1}, {@norecovery}, {@auto_da_alloc}, {@orlov}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x39, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mount$fuse(0x0, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480), 0x3000000, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) open(0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xa, &(0x7f0000000240)=0x0) io_submit(r5, 0x1, &(0x7f0000000280)=[0x0]) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x2, 0x5001) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r6, r0, 0x0, 0x8000000d) 7.654614327s ago: executing program 4 (id=179): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000b00)) writev(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000000240)="e7", 0x1}], 0x1) r0 = getpid() ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x27, &(0x7f00000004c0)=""/153}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d}, 0x28) 7.456289232s ago: executing program 1 (id=180): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) 6.012276866s ago: executing program 1 (id=183): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000400)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\xa4y\x9e>\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\x8dr\xd5\xcd\xf2P\r.\"\x03\xa9\xab\xfa#\x01\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\x1a\x80=\xa72)\xd2\x00'/276, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 5.693834961s ago: executing program 4 (id=185): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff44}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x1c) 5.099869581s ago: executing program 4 (id=186): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000380)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@data_err_abort}, {@noblock_validity}, {@jqfmt_vfsv1}, {@norecovery}, {@auto_da_alloc}, {@orlov}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x39, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mount$fuse(0x0, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480), 0x3000000, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) open(0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xa, &(0x7f0000000240)=0x0) io_submit(r5, 0x1, &(0x7f0000000280)=[0x0]) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x2, 0x5001) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r6, r0, 0x0, 0x8000000d) 5.032498224s ago: executing program 3 (id=188): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 4.75175466s ago: executing program 3 (id=190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff44}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r4, &(0x7f0000000040), 0x0}, 0x20) 4.719124687s ago: executing program 0 (id=191): sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040), 0x8) setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff}) r0 = open(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1) open(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000003c0)=[@window, @mss, @window, @timestamp, @window, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd14b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x802, 0x0, 0x6) mount$fuse(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x2c00, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_i', @ANYRESDEC=0x0, @ANYRESDEC=r2, @ANYBLOB=',seclabel,audit,\x00']) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000300)={0x0, @tick=0x8, 0x0, {0x0, 0xd9}, 0xfe, 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000480)={{}, {}, 0x0, 0x5}) getpid() msgctl$IPC_RMID(0x0, 0x0) 4.448448621s ago: executing program 3 (id=192): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) 2.872301428s ago: executing program 1 (id=193): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002140)=""/4128, 0x4}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2.637555868s ago: executing program 4 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xe2, &(0x7f00000001c0)=""/226}, 0x90) 2.201990271s ago: executing program 1 (id=195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 2.162473856s ago: executing program 0 (id=196): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r0, 0xa, 0x0) close(r0) 2.004110446s ago: executing program 0 (id=197): setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'gretap0\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, 0x0, 0x0) r4 = openat$cgroup_pressure(r2, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r2}], 0x20000271, 0x0, 0x0, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r3) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) syz_emit_ethernet(0xcfe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0) socket$kcm(0x29, 0x7, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 912.203647ms ago: executing program 3 (id=198): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r3, @ANYBLOB="0018"], 0x34}}, 0x0) 748.396136ms ago: executing program 0 (id=199): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000200)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, &(0x7f0000000040)) 648.163415ms ago: executing program 1 (id=200): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@empty}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@empty}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 589.230031ms ago: executing program 4 (id=201): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff44}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r5, &(0x7f0000000040), 0x0}, 0x20) 585.06854ms ago: executing program 3 (id=202): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1/file4\x00', 0x0) 512.269653ms ago: executing program 0 (id=203): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x240) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, 0x0, 0x0) 276.899713ms ago: executing program 1 (id=205): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe9, 0x0, &(0x7f0000000040)) 200.301523ms ago: executing program 3 (id=206): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0x8004b706, 0x0) 0s ago: executing program 0 (id=207): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. [ 69.672549][ T5093] cgroup: Unknown subsys name 'net' [ 69.815683][ T5093] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.558917][ T5093] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.651835][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.658546][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.219577][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.244327][ T5121] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.253358][ T5121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.261174][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.263772][ T5122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.269744][ T5121] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.282712][ T5123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.284525][ T5121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.290790][ T5122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.298187][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.307045][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.313281][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.319748][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.327388][ T5121] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.333674][ T5122] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.340824][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.346557][ T5122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.361834][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.363137][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.371010][ T5121] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.387395][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.395060][ T5121] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.395629][ T5118] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.402649][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.418079][ T5121] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.426188][ T5121] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.428448][ T4500] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.441493][ T4500] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.451763][ T4500] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.460526][ T4500] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.069082][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 76.131752][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 76.166419][ T5106] chnl_net:caif_netlink_parms(): no params data found [ 76.239982][ T5104] chnl_net:caif_netlink_parms(): no params data found [ 76.262566][ T5103] chnl_net:caif_netlink_parms(): no params data found [ 76.428909][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.437587][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.444962][ T5112] bridge_slave_0: entered allmulticast mode [ 76.452890][ T5112] bridge_slave_0: entered promiscuous mode [ 76.481651][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.488927][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.496889][ T5111] bridge_slave_0: entered allmulticast mode [ 76.503957][ T5111] bridge_slave_0: entered promiscuous mode [ 76.512369][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.520282][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.527983][ T5112] bridge_slave_1: entered allmulticast mode [ 76.535038][ T5112] bridge_slave_1: entered promiscuous mode [ 76.572869][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.580210][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.587688][ T5111] bridge_slave_1: entered allmulticast mode [ 76.595247][ T5111] bridge_slave_1: entered promiscuous mode [ 76.650020][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.657435][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.664612][ T5106] bridge_slave_0: entered allmulticast mode [ 76.672749][ T5106] bridge_slave_0: entered promiscuous mode [ 76.708651][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.721657][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.745084][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.752584][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.760019][ T5106] bridge_slave_1: entered allmulticast mode [ 76.767703][ T5106] bridge_slave_1: entered promiscuous mode [ 76.840063][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.848379][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.855600][ T5104] bridge_slave_0: entered allmulticast mode [ 76.863648][ T5104] bridge_slave_0: entered promiscuous mode [ 76.883152][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.890566][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.901745][ T5103] bridge_slave_0: entered allmulticast mode [ 76.908959][ T5103] bridge_slave_0: entered promiscuous mode [ 76.918044][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.925229][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.932606][ T5103] bridge_slave_1: entered allmulticast mode [ 76.941258][ T5103] bridge_slave_1: entered promiscuous mode [ 76.950809][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.964849][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.988249][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.995414][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.006196][ T5104] bridge_slave_1: entered allmulticast mode [ 77.013298][ T5104] bridge_slave_1: entered promiscuous mode [ 77.023714][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.068036][ T5112] team0: Port device team_slave_0 added [ 77.102658][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.141352][ T5103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.154484][ T5112] team0: Port device team_slave_1 added [ 77.175320][ T5111] team0: Port device team_slave_0 added [ 77.214099][ T5103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.241769][ T5111] team0: Port device team_slave_1 added [ 77.269494][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.285185][ T5106] team0: Port device team_slave_0 added [ 77.307685][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.314675][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.341916][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.368670][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.375699][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.401918][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.416818][ T54] Bluetooth: hci4: command tx timeout [ 77.418097][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.433817][ T5106] team0: Port device team_slave_1 added [ 77.465570][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.472712][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.498869][ T54] Bluetooth: hci3: command tx timeout [ 77.505868][ T54] Bluetooth: hci2: command tx timeout [ 77.506667][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.511589][ T54] Bluetooth: hci1: command tx timeout [ 77.530529][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.537805][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.563822][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.574558][ T54] Bluetooth: hci0: command tx timeout [ 77.610807][ T5103] team0: Port device team_slave_0 added [ 77.625173][ T5103] team0: Port device team_slave_1 added [ 77.676569][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.683573][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.710291][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.723837][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.730948][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.756976][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.815258][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.822847][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.848968][ T5103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.862620][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.869807][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.896439][ T5103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.911621][ T5104] team0: Port device team_slave_0 added [ 77.921566][ T5104] team0: Port device team_slave_1 added [ 77.946527][ T5112] hsr_slave_0: entered promiscuous mode [ 77.953156][ T5112] hsr_slave_1: entered promiscuous mode [ 77.985880][ T5111] hsr_slave_0: entered promiscuous mode [ 77.992395][ T5111] hsr_slave_1: entered promiscuous mode [ 77.999215][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.007973][ T5111] Cannot create hsr debugfs directory [ 78.040020][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.047139][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.073313][ T5104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.133743][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.141620][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.167846][ T5104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.211848][ T5106] hsr_slave_0: entered promiscuous mode [ 78.218962][ T5106] hsr_slave_1: entered promiscuous mode [ 78.225135][ T5106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.233411][ T5106] Cannot create hsr debugfs directory [ 78.271656][ T5103] hsr_slave_0: entered promiscuous mode [ 78.278267][ T5103] hsr_slave_1: entered promiscuous mode [ 78.284580][ T5103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.292245][ T5103] Cannot create hsr debugfs directory [ 78.405235][ T5104] hsr_slave_0: entered promiscuous mode [ 78.412620][ T5104] hsr_slave_1: entered promiscuous mode [ 78.419771][ T5104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.427412][ T5104] Cannot create hsr debugfs directory [ 78.826286][ T5112] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.838762][ T5112] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.851331][ T5112] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.892999][ T5112] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.006836][ T5106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.021619][ T5106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.060270][ T5106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.086733][ T5106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.130061][ T5111] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.160402][ T5111] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.195945][ T5111] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.219027][ T5111] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.258325][ T5104] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.289520][ T5104] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.300790][ T5104] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.355045][ T5104] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.439361][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.461763][ T5103] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.484772][ T5103] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.487544][ T54] Bluetooth: hci4: command tx timeout [ 79.503705][ T5103] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.514561][ T5103] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.549822][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.569959][ T54] Bluetooth: hci1: command tx timeout [ 79.575439][ T54] Bluetooth: hci2: command tx timeout [ 79.580865][ T5109] Bluetooth: hci3: command tx timeout [ 79.593749][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.601472][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.632393][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.639600][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.649763][ T54] Bluetooth: hci0: command tx timeout [ 79.753863][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.808829][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.857340][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.909796][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.917009][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.961318][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.991901][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.012311][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.019544][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.061140][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.068564][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.079420][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.086667][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.129579][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.163417][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.170651][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.181393][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.188648][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.236408][ T5103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.314564][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.391925][ T5103] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.512331][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.520112][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.562577][ T5104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.595303][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.602570][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.702762][ T5112] veth0_vlan: entered promiscuous mode [ 80.799558][ T5112] veth1_vlan: entered promiscuous mode [ 80.872505][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.915169][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.006592][ T5112] veth0_macvtap: entered promiscuous mode [ 81.022921][ T5112] veth1_macvtap: entered promiscuous mode [ 81.123386][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.148445][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.179995][ T5112] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.189937][ T5112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.199541][ T5112] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.209866][ T5112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.249574][ T5106] veth0_vlan: entered promiscuous mode [ 81.283449][ T5104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.296259][ T5111] veth0_vlan: entered promiscuous mode [ 81.307806][ T5106] veth1_vlan: entered promiscuous mode [ 81.353996][ T5103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.397459][ T5111] veth1_vlan: entered promiscuous mode [ 81.561869][ T5106] veth0_macvtap: entered promiscuous mode [ 81.576093][ T54] Bluetooth: hci4: command tx timeout [ 81.604005][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.612903][ T5106] veth1_macvtap: entered promiscuous mode [ 81.625045][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.647113][ T54] Bluetooth: hci2: command tx timeout [ 81.647176][ T4500] Bluetooth: hci3: command tx timeout [ 81.652537][ T5109] Bluetooth: hci1: command tx timeout [ 81.660592][ T5111] veth0_macvtap: entered promiscuous mode [ 81.725373][ T5103] veth0_vlan: entered promiscuous mode [ 81.732360][ T54] Bluetooth: hci0: command tx timeout [ 81.762852][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.771815][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.786893][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.789356][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.808821][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.819668][ T5111] veth1_macvtap: entered promiscuous mode [ 81.840574][ T5103] veth1_vlan: entered promiscuous mode [ 81.852909][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.865160][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.878168][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.921243][ T5106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.937142][ T5106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.951248][ T5106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.960517][ T5106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.997171][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.022198][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.038558][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.049533][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.061862][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.088833][ T5103] veth0_macvtap: entered promiscuous mode [ 82.149900][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.162017][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.173510][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.190068][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.235019][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.275622][ T5104] veth0_vlan: entered promiscuous mode [ 82.288283][ T5103] veth1_macvtap: entered promiscuous mode [ 82.353501][ T5111] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.395865][ T5111] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.404649][ T5111] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.432427][ T5111] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.474855][ T5104] veth1_vlan: entered promiscuous mode [ 82.584758][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.596832][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.611011][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.623611][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.634338][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.645682][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.659165][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.758258][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.758940][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.775652][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.792058][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.803854][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.806007][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.814301][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.832341][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.845886][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.919172][ T5103] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.930707][ T5103] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.940165][ T5103] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.950804][ T5103] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.965303][ T5104] veth0_macvtap: entered promiscuous mode [ 83.005259][ T5104] veth1_macvtap: entered promiscuous mode [ 83.011271][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.027662][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.037513][ T2848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.050357][ T2848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.143049][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.182486][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.197920][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.219335][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.229810][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.240737][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.256974][ T1150] cfg80211: failed to load regulatory.db [ 83.270453][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.281094][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.310617][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.334696][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.359090][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.462528][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.496250][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.520450][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.535633][ T5203] ptrace attach of "./syz-executor exec"[5106] was attempted by "./syz-executor exec"[5203] [ 83.542516][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.560467][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.572968][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.590134][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.628661][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.643747][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.656970][ T54] Bluetooth: hci4: command tx timeout [ 83.692048][ T5104] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.726238][ T54] Bluetooth: hci3: command tx timeout [ 83.731204][ T5104] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.732337][ T5109] Bluetooth: hci2: command tx timeout [ 83.743949][ T4500] Bluetooth: hci1: command tx timeout [ 83.801409][ T5104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.816072][ T4500] Bluetooth: hci0: command tx timeout [ 83.835249][ T5104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.855655][ T29] audit: type=1326 audit(1721238931.594:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258b775a99 code=0x7ffc0000 [ 83.862995][ T2880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.905898][ T29] audit: type=1326 audit(1721238931.644:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258b775a99 code=0x7ffc0000 [ 83.930257][ T2880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.979854][ T29] audit: type=1326 audit(1721238931.724:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.3.11" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f258b775a99 code=0x0 [ 84.001929][ T2880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.012593][ T2880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.088295][ T29] audit: type=1326 audit(1721238931.834:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f258b775a99 code=0x7ffc0000 [ 84.089428][ T5210] process 'syz.3.11' launched './file2' with NULL argv: empty string added [ 84.153244][ T2880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.170849][ T2880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.196614][ T29] audit: type=1326 audit(1721238931.834:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258b775a99 code=0x7ffc0000 [ 84.321404][ T29] audit: type=1326 audit(1721238931.834:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258b775a99 code=0x7ffc0000 [ 84.342144][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.387994][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.418141][ T29] audit: type=1326 audit(1721238931.834:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f258b775a99 code=0x7ffc0000 [ 84.489095][ T29] audit: type=1326 audit(1721238932.124:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258b775a99 code=0x7ffc0000 [ 84.737971][ T29] audit: type=1326 audit(1721238932.124:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258b775a99 code=0x7ffc0000 [ 85.503235][ T5225] loop4: detected capacity change from 0 to 512 [ 85.558653][ T5228] loop3: detected capacity change from 0 to 256 [ 86.682924][ T5237] ptrace attach of "./syz-executor exec"[5106] was attempted by "./syz-executor exec"[5237] [ 86.809697][ T5225] EXT4-fs (loop4): Test dummy encryption mode enabled [ 86.904128][ T5221] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.938080][ T5225] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.5: corrupted in-inode xattr: invalid ea_ino [ 87.006695][ T5225] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5: couldn't read orphan inode 12 (err -117) [ 87.078792][ T5225] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.436812][ T5225] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 87.531570][ T5225] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.5: Directory hole found for htree leaf block 0 [ 87.671849][ T5249] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.5: Directory hole found for htree leaf block 0 [ 87.715707][ T5251] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.5: Directory hole found for htree leaf block 0 [ 87.934469][ T5104] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 88.377300][ T5162] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.607242][ T5162] usb 5-1: Using ep0 maxpacket: 32 [ 88.624017][ T5269] loop1: detected capacity change from 0 to 256 [ 88.634113][ T5162] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 16029, setting to 1024 [ 88.655901][ T5162] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 88.676702][ T5162] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 88.687125][ T5162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.696995][ T5162] usb 5-1: Product: syz [ 88.701299][ T5162] usb 5-1: Manufacturer: syz [ 88.711424][ T5162] usb 5-1: SerialNumber: syz [ 88.747416][ T5266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 89.068158][ T5162] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 89.724312][ T5273] veth0_vlan: entered allmulticast mode [ 89.748436][ T5162] usb 5-1: USB disconnect, device number 2 [ 89.772788][ T5162] usblp0: removed [ 90.085858][ T29] audit: type=1326 audit(1721238937.814:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad175a99 code=0x7ffc0000 [ 90.205832][ T29] audit: type=1326 audit(1721238937.854:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f59ad175a99 code=0x7ffc0000 [ 90.296902][ T29] audit: type=1326 audit(1721238937.854:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad175a99 code=0x7ffc0000 [ 91.302640][ T5292] syzkaller0: entered promiscuous mode [ 91.512209][ T5292] syzkaller0: entered allmulticast mode [ 92.135450][ T5301] loop0: detected capacity change from 0 to 256 [ 92.359211][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 92.580157][ T5110] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.786989][ T5110] usb 1-1: Using ep0 maxpacket: 16 [ 92.806629][ T5110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.841090][ T46] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.851363][ T5110] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.870460][ T5110] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 92.881687][ T5110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.911204][ T5110] usb 1-1: config 0 descriptor?? [ 93.070499][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 93.097303][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 16029, setting to 1024 [ 93.129802][ T46] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 93.190006][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 93.206291][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.215283][ T46] usb 3-1: Product: syz [ 93.220358][ T46] usb 3-1: Manufacturer: syz [ 93.225674][ T46] usb 3-1: SerialNumber: syz [ 93.281891][ T5305] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 93.395452][ T5110] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 93.413472][ T5110] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 93.449736][ T5110] microsoft 0003:045E:07DA.0001: no inputs found [ 93.458810][ T5110] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 93.575276][ T46] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 93.618784][ T46] usb 3-1: USB disconnect, device number 2 [ 94.298358][ T46] usblp0: removed [ 96.480629][ T5324] capability: warning: `syz.0.36' uses 32-bit capabilities (legacy support in use) [ 97.247489][ C1] DEBUG: waiting rtnl_mutex for 514 jiffies. [ 97.253939][ C1] task:kworker/1:6 state:D stack:21880 pid:5162 tgid:5162 ppid:2 flags:0x00004000 [ 97.264317][ C1] Workqueue: events linkwatch_event [ 97.269624][ C1] Call Trace: [ 97.272932][ C1] [ 97.275925][ C1] __schedule+0x1800/0x4a60 [ 97.280499][ C1] ? __pfx___schedule+0x10/0x10 [ 97.285390][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 97.291448][ C1] ? __pfx_lock_release+0x10/0x10 [ 97.296550][ C1] ? kick_pool+0x1bd/0x620 [ 97.301023][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.306292][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 97.311536][ C1] ? schedule+0x90/0x320 [ 97.315851][ C1] schedule+0x14b/0x320 [ 97.320059][ C1] schedule_preempt_disabled+0x13/0x30 [ 97.325584][ C1] __mutex_lock+0x6a4/0xd70 [ 97.330185][ C1] ? __mutex_lock+0x527/0xd70 [ 97.334912][ C1] ? linkwatch_event+0xe/0x60 [ 97.339661][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 97.344740][ C1] ? get_rtnl_holder+0x144/0x190 [ 97.349748][ C1] ? process_scheduled_works+0x945/0x1830 [ 97.355513][ C1] linkwatch_event+0xe/0x60 [ 97.360096][ C1] process_scheduled_works+0xa2c/0x1830 [ 97.365753][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 97.371792][ C1] ? assign_work+0x364/0x3d0 [ 97.376463][ C1] worker_thread+0x86d/0xd40 [ 97.381106][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 97.387079][ C1] ? __kthread_parkme+0x169/0x1d0 [ 97.392154][ C1] ? __pfx_worker_thread+0x10/0x10 [ 97.397339][ C1] kthread+0x2f0/0x390 [ 97.401451][ C1] ? __pfx_worker_thread+0x10/0x10 [ 97.406630][ C1] ? __pfx_kthread+0x10/0x10 [ 97.411255][ C1] ret_from_fork+0x4b/0x80 [ 97.415712][ C1] ? __pfx_kthread+0x10/0x10 [ 97.420365][ C1] ret_from_fork_asm+0x1a/0x30 [ 97.425190][ C1] [ 97.428275][ C1] DEBUG: holding rtnl_mutex for 563 jiffies. [ 97.434281][ C1] task:syz.3.34 state:R running task stack:24672 pid:5291 tgid:5291 ppid:5112 flags:0x00004006 [ 97.446122][ C1] Call Trace: [ 97.449444][ C1] [ 97.452430][ C1] __schedule+0x1800/0x4a60 [ 97.457049][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 97.463123][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.469574][ C1] ? __pfx___schedule+0x10/0x10 [ 97.474502][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 97.479794][ C1] ? mark_lock+0x9a/0x360 [ 97.484188][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 97.489400][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 97.495190][ C1] irqentry_exit+0x5e/0x90 [ 97.499691][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 97.505221][ C1] RIP: 0010:synchronize_rcu+0x0/0x360 [ 97.510842][ C1] Code: e1 07 80 c1 03 38 c1 0f 8c 97 fe ff ff 4c 89 f7 e8 f5 35 81 00 e9 8a fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 97.530555][ C1] RSP: 0018:ffffc90004617838 EFLAGS: 00000206 [ 97.536701][ C1] RAX: dffffc0000000000 RBX: 1ffff920008c2f10 RCX: ffffffff94807903 [ 97.544712][ C1] RDX: 0000000000000001 RSI: ffffffff8bcae2a0 RDI: ffffffff8c20a0e0 [ 97.552808][ C1] RBP: ffffc90004617918 R08: ffffffff947f3d9f R09: 1ffffffff28fe7b3 [ 97.560854][ C1] R10: dffffc0000000000 R11: fffffbfff28fe7b4 R12: ffffffff947f2eb8 [ 97.568900][ C1] R13: 1ffff920008c2f0c R14: 0000000000000202 R15: ffffc90004617880 [ 97.576970][ C1] lockdep_unregister_key+0x4b7/0x540 [ 97.582406][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 97.588377][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 97.593889][ C1] ? __qdisc_destroy+0x150/0x410 [ 97.598895][ C1] ? kfree+0x149/0x360 [ 97.603009][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 97.608623][ C1] __qdisc_destroy+0x165/0x410 [ 97.613542][ C1] dev_shutdown+0x9b/0x440 [ 97.618059][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 97.624462][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 97.631331][ C1] ? mark_lock+0x9a/0x360 [ 97.635773][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 97.641819][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.648265][ C1] ? __queue_work+0x199/0xf50 [ 97.653012][ C1] ? queue_delayed_work_on+0x1eb/0x390 [ 97.658568][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 97.663831][ C1] unregister_netdevice_queue+0x303/0x370 [ 97.669619][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 97.675967][ C1] __tun_detach+0x6b6/0x1600 [ 97.680653][ C1] tun_chr_close+0x108/0x1b0 [ 97.685406][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 97.690757][ C1] __fput+0x24a/0x8a0 [ 97.694876][ C1] task_work_run+0x24f/0x310 [ 97.699588][ C1] ? __pfx_task_work_run+0x10/0x10 [ 97.704842][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 97.710692][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 97.716421][ C1] do_syscall_64+0x100/0x230 [ 97.721067][ C1] ? clear_bhb_loop+0x35/0x90 [ 97.725848][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.731788][ C1] RIP: 0033:0x7f258b775a99 [ 97.736296][ C1] RSP: 002b:00007ffe27290b68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 97.744774][ C1] RAX: 0000000000000000 RBX: 00007f258b905a60 RCX: 00007f258b775a99 [ 97.753021][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 97.761097][ C1] RBP: 00007f258b905a60 R08: 0000000000000006 R09: 0000000c27290e8f [ 97.769173][ C1] R10: 00000000003ffd04 R11: 0000000000000246 R12: 0000000000016644 [ 97.777276][ C1] R13: 0000000000000032 R14: 00007f258b905a60 R15: 00007f258b904110 [ 97.785310][ C1] [ 97.788415][ C1] DEBUG: waiting rtnl_mutex for 598 jiffies. [ 97.794434][ C1] task:kworker/u8:3 state:D stack:22192 pid:52 tgid:52 ppid:2 flags:0x00004000 [ 97.804707][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 97.810815][ C1] Call Trace: [ 97.814145][ C1] [ 97.817159][ C1] __schedule+0x1800/0x4a60 [ 97.821746][ C1] ? __pfx___schedule+0x10/0x10 [ 97.826707][ C1] ? __pfx_lock_release+0x10/0x10 [ 97.831808][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 97.837382][ C1] ? kthread_data+0x52/0xd0 [ 97.842044][ C1] ? schedule+0x90/0x320 [ 97.846399][ C1] ? wq_worker_sleeping+0x66/0x240 [ 97.851585][ C1] ? schedule+0x90/0x320 [ 97.855930][ C1] schedule+0x14b/0x320 [ 97.860147][ C1] schedule_preempt_disabled+0x13/0x30 [ 97.865671][ C1] __mutex_lock+0x6a4/0xd70 [ 97.870300][ C1] ? mark_lock+0x9a/0x360 [ 97.874687][ C1] ? __mutex_lock+0x527/0xd70 [ 97.879514][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 97.884698][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 97.889861][ C1] ? get_rtnl_holder+0x144/0x190 [ 97.894884][ C1] addrconf_dad_work+0xd0/0x16f0 [ 97.899951][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 97.905477][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.911915][ C1] ? process_scheduled_works+0x945/0x1830 [ 97.917697][ C1] process_scheduled_works+0xa2c/0x1830 [ 97.923289][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 97.929307][ C1] ? assign_work+0x364/0x3d0 [ 97.933911][ C1] worker_thread+0x86d/0xd40 [ 97.938555][ C1] ? __kthread_parkme+0x169/0x1d0 [ 97.943954][ C1] ? __pfx_worker_thread+0x10/0x10 [ 97.949099][ C1] kthread+0x2f0/0x390 [ 97.953168][ C1] ? __pfx_worker_thread+0x10/0x10 [ 97.958313][ C1] ? __pfx_kthread+0x10/0x10 [ 97.962926][ C1] ret_from_fork+0x4b/0x80 [ 97.967381][ C1] ? __pfx_kthread+0x10/0x10 [ 97.971987][ C1] ret_from_fork_asm+0x1a/0x30 [ 97.976799][ C1] [ 97.979823][ C1] [ 97.979823][ C1] Showing all locks held in the system: [ 97.987567][ C1] 3 locks held by kworker/0:1/9: [ 97.992710][ C1] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 98.005118][ C1] #1: ffffc900000e7d00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 98.015977][ C1] #2: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50 [ 98.025248][ C1] 2 locks held by kworker/u8:0/11: [ 98.030393][ C1] 2 locks held by kworker/1:1/46: [ 98.035426][ C1] 3 locks held by kworker/u8:3/52: [ 98.040573][ C1] #0: ffff88802a2eb148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 98.052215][ C1] #1: ffffc90000bc7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 98.065405][ C1] #2: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 98.074881][ C1] 2 locks held by getty/4860: [ 98.079596][ C1] #0: ffff88802a94f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 98.089404][ C1] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 98.099550][ C1] 3 locks held by kworker/1:6/5162: [ 98.104773][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 98.115860][ C1] #1: ffffc900040b7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 98.126907][ C1] #2: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 98.136018][ C1] 1 lock held by syz.3.34/5291: [ 98.140874][ C1] 1 lock held by syz.4.45/5328: [ 98.145857][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 98.155414][ C1] 2 locks held by syz.1.47/5334: [ 98.160376][ C1] 3 locks held by syz.1.47/5335: [ 98.165314][ C1] #0: ffff88807bd2de68 (&u->lock){+.+.}-{2:2}, at: unix_dgram_sendmsg+0xb3b/0x1f80 [ 98.174768][ C1] #1: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 98.184920][ C1] #2: ffffffff8e337aa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 98.194809][ C1] 1 lock held by syz.1.47/5338: [ 98.199780][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e4/0x3630 [ 98.209404][ C1] 1 lock held by syz.1.47/5341: [ 98.214264][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e4/0x3630 [ 98.223890][ C1] 1 lock held by syz.1.47/5342: [ 98.228851][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e4/0x3630 [ 98.238493][ C1] 1 lock held by syz.2.49/5339: [ 98.243342][ C1] 2 locks held by syz.2.49/5340: [ 98.248303][ C1] 1 lock held by syz.2.49/5343: [ 98.253150][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: do_ip_setsockopt+0x127d/0x3cd0 [ 98.262704][ C1] 1 lock held by syz.2.49/5345: [ 98.267585][ C1] #0: ffff88802da5f098 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_recvmsg+0x23c/0x920 [ 98.276948][ C1] [ 98.279280][ C1] ============================================= [ 98.279280][ C1] [ 98.802029][ T5110] usb 1-1: USB disconnect, device number 2 [ 99.163538][ T5350] syz.0.50 uses obsolete (PF_INET,SOCK_PACKET) [ 99.253643][ T5351] netlink: 284 bytes leftover after parsing attributes in process `syz.0.50'. [ 99.327159][ T5352] sock: sock_timestamping_bind_phc: sock not bind to device [ 99.327185][ C1] DEBUG: waiting rtnl_mutex for 722 jiffies. [ 99.334541][ C1] task:kworker/1:6 state:D stack:21880 pid:5162 tgid:5162 ppid:2 flags:0x00004000 [ 99.351148][ C1] Workqueue: events linkwatch_event [ 99.356435][ C1] Call Trace: [ 99.359748][ C1] [ 99.362713][ C1] __schedule+0x1800/0x4a60 [ 99.367348][ C1] ? __pfx___schedule+0x10/0x10 [ 99.368665][ T5352] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.372233][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 99.372276][ C1] ? __pfx_lock_release+0x10/0x10 [ 99.372311][ C1] ? kick_pool+0x1bd/0x620 [ 99.372351][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.372379][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 99.372415][ C1] ? schedule+0x90/0x320 [ 99.372442][ C1] schedule+0x14b/0x320 [ 99.372475][ C1] schedule_preempt_disabled+0x13/0x30 [ 99.372505][ C1] __mutex_lock+0x6a4/0xd70 [ 99.372543][ C1] ? __mutex_lock+0x527/0xd70 [ 99.372578][ C1] ? linkwatch_event+0xe/0x60 [ 99.372607][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 99.372652][ C1] ? get_rtnl_holder+0x144/0x190 [ 99.372680][ C1] ? process_scheduled_works+0x945/0x1830 [ 99.372712][ C1] linkwatch_event+0xe/0x60 [ 99.372736][ C1] process_scheduled_works+0xa2c/0x1830 [ 99.372801][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 99.372845][ C1] ? assign_work+0x364/0x3d0 [ 99.372884][ C1] worker_thread+0x86d/0xd40 [ 99.372929][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 99.372964][ C1] ? __kthread_parkme+0x169/0x1d0 [ 99.373003][ C1] ? __pfx_worker_thread+0x10/0x10 [ 99.373037][ C1] kthread+0x2f0/0x390 [ 99.373062][ C1] ? __pfx_worker_thread+0x10/0x10 [ 99.373101][ C1] ? __pfx_kthread+0x10/0x10 [ 99.373127][ C1] ret_from_fork+0x4b/0x80 [ 99.373159][ C1] ? __pfx_kthread+0x10/0x10 [ 99.373182][ C1] ret_from_fork_asm+0x1a/0x30 [ 99.373232][ C1] [ 99.373243][ C1] DEBUG: waiting rtnl_mutex for 578 jiffies. [ 99.373258][ C1] task:kworker/0:1 state:D stack:22120 pid:9 tgid:9 ppid:2 flags:0x00004000 [ 99.373300][ C1] Workqueue: events_power_efficient crda_timeout_work [ 99.373336][ C1] Call Trace: [ 99.373347][ C1] [ 99.373363][ C1] __schedule+0x1800/0x4a60 [ 99.373417][ C1] ? __pfx___schedule+0x10/0x10 [ 99.373449][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 99.373484][ C1] ? __pfx_lock_release+0x10/0x10 [ 99.373520][ C1] ? kick_pool+0x45c/0x620 [ 99.373557][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 99.373590][ C1] ? schedule+0x90/0x320 [ 99.373618][ C1] schedule+0x14b/0x320 [ 99.373650][ C1] schedule_preempt_disabled+0x13/0x30 [ 99.373680][ C1] __mutex_lock+0x6a4/0xd70 [ 99.373718][ C1] ? __mutex_lock+0x527/0xd70 [ 99.373753][ C1] ? crda_timeout_work+0x15/0x50 [ 99.373788][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 99.373832][ C1] ? get_rtnl_holder+0x144/0x190 [ 99.625573][ C1] ? process_scheduled_works+0x945/0x1830 [ 99.631398][ C1] crda_timeout_work+0x15/0x50 [ 99.636260][ C1] process_scheduled_works+0xa2c/0x1830 [ 99.641894][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 99.647995][ C1] ? assign_work+0x364/0x3d0 [ 99.652651][ C1] worker_thread+0x86d/0xd40 [ 99.657368][ C1] ? __kthread_parkme+0x169/0x1d0 [ 99.662451][ C1] ? __pfx_worker_thread+0x10/0x10 [ 99.667664][ C1] kthread+0x2f0/0x390 [ 99.671782][ C1] ? __pfx_worker_thread+0x10/0x10 [ 99.676999][ C1] ? __pfx_kthread+0x10/0x10 [ 99.681636][ C1] ret_from_fork+0x4b/0x80 [ 99.686161][ C1] ? __pfx_kthread+0x10/0x10 [ 99.690823][ C1] ret_from_fork_asm+0x1a/0x30 [ 99.695793][ C1] [ 99.698854][ C1] DEBUG: holding rtnl_mutex for 790 jiffies. [ 99.704974][ C1] task:syz.3.34 state:R running task stack:24672 pid:5291 tgid:5291 ppid:5112 flags:0x0000400e [ 99.716829][ C1] Call Trace: [ 99.720147][ C1] [ 99.723144][ C1] sched_show_task+0x506/0x6d0 [ 99.728014][ C1] ? report_rtnl_holders+0x29e/0x3f0 [ 99.733363][ C1] ? __pfx__printk+0x10/0x10 [ 99.738241][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 99.743570][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 99.749568][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 99.755987][ C1] report_rtnl_holders+0x320/0x3f0 [ 99.761162][ C1] call_timer_fn+0x18e/0x650 [ 99.765868][ C1] ? call_timer_fn+0xc0/0x650 [ 99.770587][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 99.776325][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 99.781490][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 99.787222][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 99.792908][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 99.798636][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.803884][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 99.809275][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 99.814966][ C1] __run_timer_base+0x66a/0x8e0 [ 99.819922][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 99.825366][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 99.831815][ C1] run_timer_softirq+0xb7/0x170 [ 99.836757][ C1] handle_softirqs+0x2c4/0x970 [ 99.841587][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 99.846459][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 99.851799][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 99.857108][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 99.861877][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 99.867287][ C1] irq_exit_rcu+0x9/0x30 [ 99.871580][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 99.877318][ C1] [ 99.880285][ C1] [ 99.883251][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.889338][ C1] RIP: 0010:preempt_schedule_irq+0xf6/0x1c0 [ 99.895281][ C1] Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 8b 00 00 00 bf 01 00 00 00 e8 e5 02 c6 f5 e8 40 ad fe f5 fb bf 01 00 00 00 55 ad ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 35 81 5e f6 48 [ 99.914985][ C1] RSP: 0018:ffffc900046176c0 EFLAGS: 00000282 [ 99.921143][ C1] RAX: f80cb31b98e30600 RBX: 1ffff920008c2ee0 RCX: ffffffff8170233a [ 99.929206][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcad5c0 RDI: 0000000000000001 [ 99.937254][ C1] RBP: ffffc90004617770 R08: ffffffff9300f80f R09: 1ffffffff2601f01 [ 99.945267][ C1] R10: dffffc0000000000 R11: fffffbfff2601f02 R12: 1ffff920008c2ed8 [ 99.953336][ C1] R13: 1ffff920008c2edc R14: ffffc900046176e0 R15: dffffc0000000000 [ 99.961408][ C1] ? mark_lock+0x9a/0x360 [ 99.965850][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 99.971637][ C1] irqentry_exit+0x5e/0x90 [ 99.976155][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 99.981665][ C1] RIP: 0010:synchronize_rcu+0x0/0x360 [ 99.987139][ C1] Code: e1 07 80 c1 03 38 c1 0f 8c 97 fe ff ff 4c 89 f7 e8 f5 35 81 00 e9 8a fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 100.006847][ C1] RSP: 0018:ffffc90004617838 EFLAGS: 00000206 [ 100.012964][ C1] RAX: dffffc0000000000 RBX: 1ffff920008c2f10 RCX: ffffffff94807903 [ 100.021023][ C1] RDX: 0000000000000001 RSI: ffffffff8bcae2a0 RDI: ffffffff8c20a0e0 [ 100.029085][ C1] RBP: ffffc90004617918 R08: ffffffff947fbd97 R09: 1ffffffff28ff7b2 [ 100.037142][ C1] R10: dffffc0000000000 R11: fffffbfff28ff7b3 R12: ffffffff947faec8 [ 100.045154][ C1] R13: 1ffff920008c2f0c R14: 0000000000000202 R15: ffffc90004617880 [ 100.053246][ C1] lockdep_unregister_key+0x4b7/0x540 [ 100.058724][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 100.064683][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 100.070019][ C1] ? __qdisc_destroy+0x150/0x410 [ 100.075002][ C1] ? kfree+0x149/0x360 [ 100.079176][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 100.085202][ C1] __qdisc_destroy+0x165/0x410 [ 100.090079][ C1] dev_shutdown+0x9b/0x440 [ 100.094545][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 100.101000][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 100.107884][ C1] ? mark_lock+0x9a/0x360 [ 100.112270][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 100.118443][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.124907][ C1] ? __queue_work+0x199/0xf50 [ 100.129690][ C1] ? queue_delayed_work_on+0x1eb/0x390 [ 100.135200][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 100.140505][ C1] unregister_netdevice_queue+0x303/0x370 [ 100.146310][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 100.152609][ C1] __tun_detach+0x6b6/0x1600 [ 100.157308][ C1] tun_chr_close+0x108/0x1b0 [ 100.162033][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 100.167249][ C1] __fput+0x24a/0x8a0 [ 100.171303][ C1] task_work_run+0x24f/0x310 [ 100.176001][ C1] ? __pfx_task_work_run+0x10/0x10 [ 100.181160][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 100.186983][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 100.192718][ C1] do_syscall_64+0x100/0x230 [ 100.197422][ C1] ? clear_bhb_loop+0x35/0x90 [ 100.202234][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.208225][ C1] RIP: 0033:0x7f258b775a99 [ 100.212679][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.232374][ C1] RSP: 002b:00007ffe27290b68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 100.240876][ C1] RAX: 0000000000000000 RBX: 00007f258b905a60 RCX: 00007f258b775a99 [ 100.248937][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 100.256983][ C1] RBP: 00007f258b905a60 R08: 0000000000000006 R09: 0000000c27290e8f [ 100.264995][ C1] R10: 00000000003ffd04 R11: 0000000000000246 R12: 0000000000016644 [ 100.273056][ C1] R13: 0000000000000032 R14: 00007f258b905a60 R15: 00007f258b904110 [ 100.281177][ C1] [ 100.284231][ C1] DEBUG: waiting rtnl_mutex for 847 jiffies. [ 100.290279][ C1] task:kworker/u8:3 state:D stack:22192 pid:52 tgid:52 ppid:2 flags:0x00004000 [ 100.300544][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 100.306622][ C1] Call Trace: [ 100.310778][ C1] [ 100.313742][ C1] __schedule+0x1800/0x4a60 [ 100.318370][ C1] ? __pfx___schedule+0x10/0x10 [ 100.323273][ C1] ? __pfx_lock_release+0x10/0x10 [ 100.328401][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 100.333903][ C1] ? kthread_data+0x52/0xd0 [ 100.338502][ C1] ? schedule+0x90/0x320 [ 100.342791][ C1] ? wq_worker_sleeping+0x66/0x240 [ 100.348004][ C1] ? schedule+0x90/0x320 [ 100.352286][ C1] schedule+0x14b/0x320 [ 100.356542][ C1] schedule_preempt_disabled+0x13/0x30 [ 100.362042][ C1] __mutex_lock+0x6a4/0xd70 [ 100.366656][ C1] ? mark_lock+0x9a/0x360 [ 100.371215][ C1] ? __mutex_lock+0x527/0xd70 [ 100.375985][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 100.381155][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 100.386291][ C1] ? get_rtnl_holder+0x144/0x190 [ 100.391322][ C1] addrconf_dad_work+0xd0/0x16f0 [ 100.396378][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 100.401904][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.408363][ C1] ? process_scheduled_works+0x945/0x1830 [ 100.414136][ C1] process_scheduled_works+0xa2c/0x1830 [ 100.419814][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 100.425897][ C1] ? assign_work+0x364/0x3d0 [ 100.430542][ C1] worker_thread+0x86d/0xd40 [ 100.435207][ C1] ? __kthread_parkme+0x169/0x1d0 [ 100.440333][ C1] ? __pfx_worker_thread+0x10/0x10 [ 100.445489][ C1] kthread+0x2f0/0x390 [ 100.449659][ C1] ? __pfx_worker_thread+0x10/0x10 [ 100.454825][ C1] ? __pfx_kthread+0x10/0x10 [ 100.459505][ C1] ret_from_fork+0x4b/0x80 [ 100.463969][ C1] ? __pfx_kthread+0x10/0x10 [ 100.468649][ C1] ret_from_fork_asm+0x1a/0x30 [ 100.473473][ C1] [ 100.476560][ C1] [ 100.476560][ C1] Showing all locks held in the system: [ 100.484299][ C1] 3 locks held by kworker/0:1/9: [ 100.489402][ C1] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 100.501910][ C1] #1: ffffc900000e7d00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 100.512893][ C1] #2: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50 [ 100.522290][ C1] 3 locks held by kworker/u8:3/52: [ 100.527491][ C1] #0: ffff88802a2eb148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 100.539198][ C1] #1: ffffc90000bc7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 100.552147][ C1] #2: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 100.561717][ C1] 2 locks held by getty/4860: [ 100.566486][ C1] #0: ffff88802a94f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 100.576377][ C1] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 100.586640][ C1] 3 locks held by kworker/1:6/5162: [ 100.591879][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 100.603003][ C1] #1: ffffc900040b7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 100.614105][ C1] #2: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 100.623239][ C1] 3 locks held by syz.3.34/5291: [ 100.628249][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 100.637355][ C1] #1: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 100.647567][ C1] #2: ffffffff8e337aa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 100.657690][ C1] 1 lock held by syz.4.45/5328: [ 100.662577][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 100.672206][ C1] 1 lock held by syz.1.47/5338: [ 100.677137][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e4/0x3630 [ 100.686842][ C1] 1 lock held by syz.1.47/5341: [ 100.691723][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e4/0x3630 [ 100.701442][ C1] 1 lock held by syz.1.47/5342: [ 100.706363][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e4/0x3630 [ 100.716080][ C1] 2 locks held by syz.2.49/5340: [ 100.721048][ C1] 1 lock held by syz.2.49/5343: [ 100.725973][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: do_ip_setsockopt+0x127d/0x3cd0 [ 100.735559][ C1] 1 lock held by syz.2.49/5345: [ 100.740493][ C1] #0: ffff88802da5f098 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_recvmsg+0x23c/0x920 [ 100.749928][ C1] 1 lock held by syz.2.49/5346: [ 100.754824][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48f/0x2400 [ 100.764285][ C1] 2 locks held by syz.2.49/5347: [ 100.769297][ C1] #0: ffff88802350a678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x780 [ 100.779813][ C1] #1: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x9e/0x210 [ 100.788739][ C1] 2 locks held by syz.0.50/5349: [ 100.793709][ C1] #0: ffff88807aed2608 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 100.804052][ C1] #1: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8a0 [ 100.813059][ C1] 1 lock held by syz.0.50/5350: [ 100.817993][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x21e/0x1bc0 [ 100.827093][ C1] 2 locks held by syz.0.50/5351: [ 100.832062][ C1] #0: ffffffff8f66f010 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 100.840422][ C1] #1: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 100.849877][ C1] 1 lock held by syz.0.50/5352: [ 100.854774][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 100.864343][ C1] [ 100.866734][ C1] ============================================= [ 100.866734][ C1] [ 102.585149][ T5109] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.623190][ T5109] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.632160][ T5109] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.648494][ T5109] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.657599][ T5109] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 102.665038][ T5109] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.755270][ T5352] bond0: entered promiscuous mode [ 102.761678][ T5352] bond_slave_0: entered promiscuous mode [ 102.767964][ T5352] bond_slave_1: entered promiscuous mode [ 102.788513][ T5361] warning: `syz.1.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.205915][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.254778][ T5384] loop0: detected capacity change from 0 to 524288000 [ 104.165902][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 104.351130][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.453494][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.472071][ T9] usb 1-1: config 0 descriptor?? [ 104.486970][ T9] cp210x 1-1:0.0: cp210x converter detected [ 104.614390][ T5405] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.708664][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.730981][ T5410] netlink: 284 bytes leftover after parsing attributes in process `syz.2.69'. [ 104.743520][ T5408] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.763128][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 104.776084][ T5109] Bluetooth: hci4: command tx timeout [ 104.805643][ T5408] sock: sock_timestamping_bind_phc: sock not bind to device [ 104.824428][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.859464][ T5408] bond0: entered promiscuous mode [ 104.864735][ T5408] bond_slave_0: entered promiscuous mode [ 104.871298][ T5408] bond_slave_1: entered promiscuous mode [ 104.915568][ T9] usb 1-1: USB disconnect, device number 3 [ 104.960252][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 104.962765][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.982554][ T9] cp210x 1-1:0.0: device disconnected [ 105.058550][ T5366] chnl_net:caif_netlink_parms(): no params data found [ 105.333729][ T5417] loop2: detected capacity change from 0 to 4096 [ 105.367651][ T5417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.440237][ T5111] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.606611][ T5429] loop0: detected capacity change from 0 to 524288000 [ 105.703377][ T5431] Bluetooth: MGMT ver 1.23 [ 106.641080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 106.735927][ T1150] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.846969][ T5109] Bluetooth: hci4: command tx timeout [ 106.945252][ T1150] usb 3-1: New USB device found, idVendor=0bda, idProduct=818a, bcdDevice=e2.d8 [ 106.963999][ T1150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.983797][ T1150] usb 3-1: config 0 descriptor?? [ 107.571740][ T5443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.587006][ T5443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.197869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.410797][ T5366] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.429318][ T5456] loop1: detected capacity change from 0 to 256 [ 108.464391][ T5366] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.464656][ T5366] bridge_slave_0: entered allmulticast mode [ 108.477524][ T5366] bridge_slave_0: entered promiscuous mode [ 108.487720][ T5366] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.488019][ T5366] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.488214][ T5366] bridge_slave_1: entered allmulticast mode [ 108.489596][ T5366] bridge_slave_1: entered promiscuous mode [ 108.528724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.529865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.578040][ T5167] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 108.612278][ T5453] loop4: detected capacity change from 0 to 512 [ 108.618641][ T5453] EXT4-fs: quotafile must be on filesystem root [ 108.760158][ T5167] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 108.760220][ T5167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.803080][ T5167] usb 1-1: config 0 descriptor?? [ 108.818169][ T5167] cp210x 1-1:0.0: cp210x converter detected [ 108.869418][ T5366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.883318][ T5366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.897005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 108.958070][ T5109] Bluetooth: hci4: command tx timeout [ 109.038432][ T12] bridge_slave_1: left allmulticast mode [ 109.049176][ T5450] loop0: detected capacity change from 0 to 8 [ 109.054447][ T12] bridge_slave_1: left promiscuous mode [ 109.064414][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.158751][ T12] bridge_slave_0: left allmulticast mode [ 109.171071][ T5450] SQUASHFS error: Failed to read block 0x2d7: -5 [ 109.176632][ T12] bridge_slave_0: left promiscuous mode [ 109.194933][ T1750] usb 3-1: USB disconnect, device number 3 [ 109.238287][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.295551][ T5450] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 109.516801][ T5167] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 109.530657][ T5167] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 109.560301][ T5167] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 109.618805][ T5167] usb 1-1: cp210x converter now attached to ttyUSB0 [ 109.735546][ T5167] usb 1-1: USB disconnect, device number 4 [ 109.822631][ T5167] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 109.869748][ T5167] cp210x 1-1:0.0: device disconnected [ 110.007035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.315965][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.343680][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.396989][ T12] bond0 (unregistering): Released all slaves [ 110.476949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.666310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.689178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.709136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.772929][ T5366] team0: Port device team_slave_0 added [ 110.787995][ T5366] team0: Port device team_slave_1 added [ 111.006339][ T5109] Bluetooth: hci4: command tx timeout [ 111.227930][ T5366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.271157][ T5366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.332594][ T5366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.190485][ T5366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.212189][ T5366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.259251][ T5366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.406328][ T46] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.639619][ T5110] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 112.781195][ T5366] hsr_slave_0: entered promiscuous mode [ 112.869750][ T5366] hsr_slave_1: entered promiscuous mode [ 112.963527][ T5366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.067487][ T5366] Cannot create hsr debugfs directory [ 113.691653][ T5110] usb 5-1: Using ep0 maxpacket: 32 [ 113.713572][ T46] usb 2-1: New USB device found, idVendor=0bda, idProduct=818a, bcdDevice=e2.d8 [ 113.734188][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.747034][ T5110] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.767771][ T5110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.787671][ T5110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.803946][ T46] usb 2-1: config 0 descriptor?? [ 113.825287][ T5110] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 113.852401][ T5110] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 113.876115][ T5110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.904979][ T5110] usb 5-1: config 0 descriptor?? [ 113.951779][ T12] hsr_slave_0: left promiscuous mode [ 113.972224][ T12] hsr_slave_1: left promiscuous mode [ 113.988684][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.003902][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.038272][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.093980][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.197664][ T12] veth1_macvtap: left promiscuous mode [ 114.203924][ T12] veth0_macvtap: left promiscuous mode [ 114.230958][ T12] veth1_vlan: left promiscuous mode [ 114.237393][ T12] veth0_vlan: left promiscuous mode [ 114.373465][ T5110] hid-generic 0003:1B96:9F0A.0002: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.4-1/input0 [ 114.461795][ T5499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.471565][ T5499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.607138][ T5167] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.805994][ T5167] usb 3-1: Using ep0 maxpacket: 16 [ 114.824119][ T5167] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 114.848653][ T5167] usb 3-1: config 1 interface 1 has no altsetting 0 [ 114.868197][ T5167] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.885333][ T5167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.902492][ T5167] usb 3-1: Product: Ё [ 114.906758][ T5167] usb 3-1: Manufacturer: ф [ 114.960069][ T5510] hid-generic 0003:1B96:9F0A.0002: pid 5510 passed too short report [ 115.040725][ T12] team0 (unregistering): Port device team_slave_1 removed [ 115.083329][ T12] team0 (unregistering): Port device team_slave_0 removed [ 115.188338][ T5167] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 115.304187][ T5167] usb 3-1: USB disconnect, device number 4 [ 115.565419][ T1750] usb 2-1: USB disconnect, device number 2 [ 115.626261][ T5105] udevd[5105]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.702621][ T5552] loop1: detected capacity change from 0 to 16 [ 115.741472][ T5552] erofs: (device loop1): mounted with root inode @ nid 36. [ 115.812616][ T5552] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 115.864279][ T5552] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 115.882987][ T5552] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 116.147351][ T5561] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.560375][ T5158] usb 5-1: USB disconnect, device number 3 [ 117.900121][ T5604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.121'. [ 118.738538][ T5366] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 118.785513][ T5366] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 118.843047][ T5366] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 118.877473][ T5366] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.270771][ T5366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.294514][ T5627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.129'. [ 119.342741][ T5366] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.377406][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.385394][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.405933][ T5160] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.456550][ T1750] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.463748][ T1750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.686803][ T5366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.838327][ T5160] usb 3-1: Using ep0 maxpacket: 16 [ 119.846563][ T5160] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.865622][ T5160] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.883644][ T5160] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 119.896470][ T5160] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.905563][ T5160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.940351][ T5160] usb 3-1: Product: syz [ 120.044367][ T5160] usb 3-1: Manufacturer: syz [ 120.233360][ T5160] usb 3-1: SerialNumber: syz [ 120.756100][ T5160] usb 3-1: 0:2 : does not exist [ 120.822898][ T5160] usb 3-1: USB disconnect, device number 5 [ 121.065357][ T5366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.130226][ T5105] udevd[5105]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.423677][ T5366] veth0_vlan: entered promiscuous mode [ 122.527086][ T5366] veth1_vlan: entered promiscuous mode [ 123.883361][ T5366] veth0_macvtap: entered promiscuous mode [ 124.000382][ T5366] veth1_macvtap: entered promiscuous mode [ 124.113526][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.155853][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.187616][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.225972][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.245816][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.290697][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.332246][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.365109][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.414219][ T5366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.439379][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.505782][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.515657][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.600642][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.667838][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.710663][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.720730][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.008932][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.478060][ T5366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.569880][ T5724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.153'. [ 127.704064][ T5366] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.755236][ T5366] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.806285][ T5366] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.839592][ T5366] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.281635][ T5740] tipc: Started in network mode [ 128.290996][ T5740] tipc: Node identity 3a20300a74797065, cluster identity 4711 [ 128.302135][ T5740] tipc: Enabling of bearer rejected, failed to enable media [ 128.415150][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.667434][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.974050][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.014741][ T2880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.023849][ T2880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.156198][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 129.181678][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 16029, setting to 1024 [ 129.465280][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 129.482546][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 129.500393][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.525337][ T9] usb 5-1: Product: syz [ 129.555591][ T9] usb 5-1: Manufacturer: syz [ 129.596974][ T9] usb 5-1: SerialNumber: syz [ 129.916475][ T5736] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 131.017702][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 131.134768][ T5772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.166'. [ 131.183706][ T5774] loop2: detected capacity change from 0 to 2048 [ 131.247262][ T5774] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 131.267463][ T9] usb 5-1: USB disconnect, device number 4 [ 131.300643][ T9] usblp0: removed [ 131.304478][ T5774] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 131.385883][ T5774] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.510006][ T5783] tipc: Started in network mode [ 131.539993][ T5783] tipc: Node identity 3a20300a74797065, cluster identity 4711 [ 131.574183][ T5783] tipc: Enabling of bearer rejected, failed to enable media [ 131.612642][ T5111] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 131.658922][ T5111] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 131.860284][ T5791] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 132.052711][ T2848] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.280327][ T2848] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.463966][ T2848] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.095695][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.102425][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.906093][ T2848] bridge_slave_1: left allmulticast mode [ 133.911811][ T2848] bridge_slave_1: left promiscuous mode [ 133.996617][ T2848] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.100110][ T2848] bridge_slave_0: left allmulticast mode [ 134.118780][ T2848] bridge_slave_0: left promiscuous mode [ 134.156446][ T2848] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.172595][ T4500] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.182951][ T4500] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.196140][ T4500] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.204470][ T4500] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.213616][ T4500] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 134.221177][ T4500] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.415951][ T5158] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.636002][ T5158] usb 2-1: Using ep0 maxpacket: 32 [ 134.643390][ T5158] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 16029, setting to 1024 [ 134.654903][ T5158] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 134.668701][ T5158] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 134.678601][ T5158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.687146][ T5158] usb 2-1: Product: syz [ 134.691726][ T5158] usb 2-1: Manufacturer: syz [ 134.696870][ T5158] usb 2-1: SerialNumber: syz [ 134.708579][ T5837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 134.808413][ T2848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.818645][ T2848] bond_slave_0: left promiscuous mode [ 134.830571][ T2848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.842922][ T2848] bond_slave_1: left promiscuous mode [ 134.853308][ T2848] bond0 (unregistering): Released all slaves [ 134.976426][ T5158] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 135.053239][ T2848] tipc: Left network mode [ 135.100675][ T5850] loop4: detected capacity change from 0 to 1024 [ 135.151892][ T5850] EXT4-fs: Ignoring removed orlov option [ 135.206158][ T5158] usb 2-1: USB disconnect, device number 3 [ 135.242435][ T5850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.259052][ T5158] usblp0: removed [ 135.703608][ T5874] fuse: Bad value for 'group_id' [ 135.708820][ T5874] fuse: Bad value for 'group_id' [ 136.286054][ T5109] Bluetooth: hci3: command tx timeout [ 136.890469][ T5850] sched: RT throttling activated [ 137.971482][ T2848] hsr_slave_0: left promiscuous mode [ 138.013913][ T2848] hsr_slave_1: left promiscuous mode [ 138.037150][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.050650][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.059761][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.074822][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.142147][ T2848] veth1_macvtap: left promiscuous mode [ 138.157438][ T2848] veth0_macvtap: left promiscuous mode [ 138.167614][ T2848] veth1_vlan: left promiscuous mode [ 138.173078][ T2848] veth0_vlan: left promiscuous mode [ 138.378315][ T5109] Bluetooth: hci3: command tx timeout [ 138.701053][ T2848] team0 (unregistering): Port device team_slave_1 removed [ 138.741323][ T2848] team0 (unregistering): Port device team_slave_0 removed [ 139.296787][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 139.311098][ C1] eth0: bad gso: type: 1, size: 1408 [ 139.323673][ T5905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.198'. [ 139.423148][ T5104] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.827870][ T5915] tipc: Started in network mode [ 139.832814][ T5915] tipc: Node identity ac1414aa, cluster identity 4711 [ 139.869811][ T5915] tipc: Enabled bearer , priority 10 [ 139.901807][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.926346][ T5922] loop1: detected capacity change from 0 to 1024 [ 139.927428][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.975624][ T5834] bridge_slave_0: entered allmulticast mode [ 139.981712][ T5922] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 140.010410][ T5834] bridge_slave_0: entered promiscuous mode [ 140.037626][ T5922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.061967][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.072368][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.079700][ T5834] bridge_slave_1: entered allmulticast mode [ 140.087418][ T5834] bridge_slave_1: entered promiscuous mode [ 140.097953][ T5928] [ 140.097964][ T5928] ================================================ [ 140.097972][ T5928] WARNING: lock held when returning to user space! [ 140.097986][ T5928] 6.10.0-next-20240717-syzkaller #0 Not tainted [ 140.097998][ T5928] ------------------------------------------------ [ 140.098006][ T5928] syz.3.206/5928 is leaving the kernel with locks still held! [ 140.098018][ T5928] 1 lock held by syz.3.206/5928: [ 140.098030][ T5928] #0: ffffffff8e337aa0 (rcu_read_lock){....}-{1:2}, at: ns_ioctl+0x3e0/0x740 [ 140.173171][ T5928] ------------[ cut here ]------------ [ 140.178775][ T5928] Voluntary context switch within RCU read-side critical section! [ 140.178898][ T5928] WARNING: CPU: 0 PID: 5928 at kernel/rcu/tree_plugin.h:330 rcu_note_context_switch+0xcf4/0xff0 [ 140.178946][ T5928] Modules linked in: [ 140.178968][ T5928] CPU: 0 UID: 0 PID: 5928 Comm: syz.3.206 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 140.178991][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 140.179005][ T5928] RIP: 0010:rcu_note_context_switch+0xcf4/0xff0 [ 140.179036][ T5928] Code: 00 ba 02 00 00 00 e8 bb 02 fe ff 4c 8b b4 24 80 00 00 00 eb 91 c6 05 75 32 1f 0e 01 90 48 c7 c7 80 2f cc 8b e8 3d c5 da ff 90 <0f> 0b 90 90 e9 3b f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 00 f4 ff ff [ 140.179071][ T5928] RSP: 0000:ffffc9000cab7ba0 EFLAGS: 00010046 [ 140.179089][ T5928] RAX: 142fd4462f409e00 RBX: ffff888029aa8444 RCX: 0000000000040000 [ 140.179106][ T5928] RDX: ffffc9001210c000 RSI: 00000000000115f9 RDI: 00000000000115fa [ 140.179121][ T5928] RBP: ffffc9000cab7cf0 R08: ffffffff815593f2 R09: 1ffff1101728519a [ 140.179137][ T5928] R10: dffffc0000000000 R11: ffffed101728519b R12: ffff888029aa8000 [ 140.179154][ T5928] R13: 0000000000000000 R14: 1ffff92001956f8c R15: dffffc0000000000 [ 140.179169][ T5928] FS: 00007fb49c7136c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 140.179188][ T5928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.179202][ T5928] CR2: 00007f6383437d60 CR3: 00000000677fe000 CR4: 00000000003506f0 [ 140.179220][ T5928] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.179233][ T5928] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.179247][ T5928] Call Trace: [ 140.179255][ T5928] [ 140.179263][ T5928] ? __warn+0x168/0x4e0 [ 140.179287][ T5928] ? rcu_note_context_switch+0xcf4/0xff0 [ 140.179318][ T5928] ? report_bug+0x2b3/0x500 [ 140.179346][ T5928] ? rcu_note_context_switch+0xcf4/0xff0 [ 140.179377][ T5928] ? handle_bug+0x3e/0x70 [ 140.179397][ T5928] ? exc_invalid_op+0x1a/0x50 [ 140.179423][ T5928] ? asm_exc_invalid_op+0x1a/0x20 [ 140.179451][ T5928] ? __warn_printk+0x292/0x360 [ 140.179477][ T5928] ? rcu_note_context_switch+0xcf4/0xff0 [ 140.179507][ T5928] ? __schedule+0x1808/0x4a60 [ 140.179536][ T5928] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 140.179567][ T5928] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 140.179599][ T5928] ? rcu_is_watching+0x15/0xb0 [ 140.179621][ T5928] __schedule+0x348/0x4a60 [ 140.179654][ T5928] ? trace_irq_disable+0x3b/0x120 [ 140.179686][ T5928] ? preempt_schedule_irq+0x144/0x1c0 [ 140.179712][ T5928] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 140.179739][ T5928] ? __pfx___schedule+0x10/0x10 [ 140.179762][ T5928] ? trace_irq_disable+0x2c/0x120 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 140.179795][ T5928] ? rcu_is_watching+0x15/0xb0 [ 140.179823][ T5928] schedule+0x14b/0x320 [ 140.179849][ T5928] irqentry_exit_to_user_mode+0xe7/0x280 [ 140.179883][ T5928] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 140.179908][ T5928] RIP: 0033:0x7fb49b975a99 [ 140.179932][ T5928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.179949][ T5928] RSP: 002b:00007fb49c713048 EFLAGS: 00000246 [ 140.179967][ T5928] RAX: fffffffffffffffd RBX: 00007fb49bb03f60 RCX: 00007fb49b975a99 [ 140.179983][ T5928] RDX: 0000000000000000 RSI: 000000008004b706 RDI: 0000000000000003 [ 140.179997][ T5928] RBP: 00007fb49b9e4e5d R08: 0000000000000000 R09: 0000000000000000 [ 140.180010][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.180023][ T5928] R13: 000000000000000b R14: 00007fb49bb03f60 R15: 00007ffe8a5e9c68 [ 140.180045][ T5928] [ 140.180055][ T5928] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.535415][ T5928] CPU: 0 UID: 0 PID: 5928 Comm: syz.3.206 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 140.545150][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 140.555215][ T5928] Call Trace: [ 140.558545][ T5928] [ 140.561568][ T5928] dump_stack_lvl+0x241/0x360 [ 140.566277][ T5928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.571491][ T5928] ? __pfx__printk+0x10/0x10 [ 140.576098][ T5928] ? vscnprintf+0x5d/0x90 [ 140.580553][ T5928] panic+0x349/0x870 [ 140.584464][ T5928] ? __warn+0x177/0x4e0 [ 140.588626][ T5928] ? __pfx_panic+0x10/0x10 [ 140.593065][ T5928] __warn+0x34b/0x4e0 [ 140.597052][ T5928] ? rcu_note_context_switch+0xcf4/0xff0 [ 140.602696][ T5928] report_bug+0x2b3/0x500 [ 140.607036][ T5928] ? rcu_note_context_switch+0xcf4/0xff0 [ 140.612680][ T5928] handle_bug+0x3e/0x70 [ 140.616843][ T5928] exc_invalid_op+0x1a/0x50 [ 140.621351][ T5928] asm_exc_invalid_op+0x1a/0x20 [ 140.626253][ T5928] RIP: 0010:rcu_note_context_switch+0xcf4/0xff0 [ 140.632569][ T5928] Code: 00 ba 02 00 00 00 e8 bb 02 fe ff 4c 8b b4 24 80 00 00 00 eb 91 c6 05 75 32 1f 0e 01 90 48 c7 c7 80 2f cc 8b e8 3d c5 da ff 90 <0f> 0b 90 90 e9 3b f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 00 f4 ff ff [ 140.652197][ T5928] RSP: 0000:ffffc9000cab7ba0 EFLAGS: 00010046 [ 140.658279][ T5928] RAX: 142fd4462f409e00 RBX: ffff888029aa8444 RCX: 0000000000040000 [ 140.666268][ T5928] RDX: ffffc9001210c000 RSI: 00000000000115f9 RDI: 00000000000115fa [ 140.674246][ T5928] RBP: ffffc9000cab7cf0 R08: ffffffff815593f2 R09: 1ffff1101728519a [ 140.682327][ T5928] R10: dffffc0000000000 R11: ffffed101728519b R12: ffff888029aa8000 [ 140.690339][ T5928] R13: 0000000000000000 R14: 1ffff92001956f8c R15: dffffc0000000000 [ 140.698340][ T5928] ? __warn_printk+0x292/0x360 [ 140.703134][ T5928] ? __schedule+0x1808/0x4a60 [ 140.707828][ T5928] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 140.713215][ T5928] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 140.719210][ T5928] ? rcu_is_watching+0x15/0xb0 [ 140.723980][ T5928] __schedule+0x348/0x4a60 [ 140.728415][ T5928] ? trace_irq_disable+0x3b/0x120 [ 140.733458][ T5928] ? preempt_schedule_irq+0x144/0x1c0 [ 140.738840][ T5928] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 140.744575][ T5928] ? __pfx___schedule+0x10/0x10 [ 140.749441][ T5928] ? trace_irq_disable+0x2c/0x120 [ 140.754487][ T5928] ? rcu_is_watching+0x15/0xb0 [ 140.759295][ T5928] schedule+0x14b/0x320 [ 140.763467][ T5928] irqentry_exit_to_user_mode+0xe7/0x280 [ 140.769124][ T5928] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 140.774609][ T5928] RIP: 0033:0x7fb49b975a99 [ 140.779033][ T5928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.798835][ T5928] RSP: 002b:00007fb49c713048 EFLAGS: 00000246 [ 140.804910][ T5928] RAX: fffffffffffffffd RBX: 00007fb49bb03f60 RCX: 00007fb49b975a99 [ 140.812889][ T5928] RDX: 0000000000000000 RSI: 000000008004b706 RDI: 0000000000000003 [ 140.820883][ T5928] RBP: 00007fb49b9e4e5d R08: 0000000000000000 R09: 0000000000000000 [ 140.828874][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.836863][ T5928] R13: 000000000000000b R14: 00007fb49bb03f60 R15: 00007ffe8a5e9c68 [ 140.844859][ T5928] [ 140.848222][ T5928] Kernel Offset: disabled [ 140.852548][ T5928] Rebooting in 86400 seconds..