last executing test programs: 56.287811617s ago: executing program 3 (id=3358): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r2, 0xc028aa03, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 52.838576585s ago: executing program 3 (id=3362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$evdev(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) 51.958178333s ago: executing program 3 (id=3367): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0xad9, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 51.784093522s ago: executing program 3 (id=3369): openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x0, {0x0, 0xa}, {0x1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=r1, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 49.451899992s ago: executing program 0 (id=3375): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union, @ptr]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x20) 45.522095786s ago: executing program 0 (id=3378): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x29, 0x5, 0x7) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_RATE={0x6}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002fc0)=ANY=[], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x80) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000001c00)={0x0, 0x1, 0x6, @local}, 0xffffff40) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x80, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedreceive(r4, &(0x7f00000017c0)=""/86, 0x56, 0x8000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002cc0)={0x11, 0x5, &(0x7f0000002e40)=ANY=[@ANYRES32], &(0x7f00000019c0)='syzkaller\x00', 0x5, 0xa0, &(0x7f0000001a80)=""/160, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b80)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001bc0)={0x2, 0x7, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002c80)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000780)=""/126, 0x7e, 0x8, 0x0) preadv(r4, &(0x7f00000012c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x9, &(0x7f0000001a00)={0x0, 0x3938700}) clock_gettime(0x4, &(0x7f0000000700)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/stat\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0x5, &(0x7f0000001500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x9, 0x1, 0x0, 0x1}]}, &(0x7f0000001540)='GPL\x00', 0x100, 0xa7, &(0x7f0000001580)=""/167, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x10, 0xb051, 0x20}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001700)=[0xffffffffffffffff, r5]}, 0x80) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="180000006a000100"/18], 0x18}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001840)={r5}, 0x8) mq_timedreceive(r9, &(0x7f0000001880)=""/140, 0x8c, 0xfffffffffffff5ae, &(0x7f0000001940)={0x77359400}) setsockopt$sock_attach_bpf(r8, 0x1, 0x2c, &(0x7f0000000480), 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000), 0x4) readv(r8, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/9, 0x9}, {&(0x7f0000000100)=""/152, 0x98}, {&(0x7f0000001c40)=""/4097, 0x1001}, {0xfffffffffffffffe}], 0x4) 8.196511361s ago: executing program 2 (id=3377): prlimit64(0x0, 0x1, &(0x7f0000000140), 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$capi20_data(r3, 0x0, 0x12) 7.833168223s ago: executing program 2 (id=3395): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x30, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 7.547968792s ago: executing program 2 (id=3396): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001000000000030"], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000a0000001c0003800800010000000000080002"], 0x30}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000006"], 0x24d8}], 0x1}, 0x0) 7.131421088s ago: executing program 2 (id=3398): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000980)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',noquota,nodiscard,iocharset=macturkish,errors=continue,iocharset=iso8859-6,nointegrity\x00gid=', @ANYRESHEX=0x0, @ANYBLOB=',quota,usrquota,resize,gid=', @ANYRESHEX=0x0, @ANYRES64=0x0], 0x1, 0x60fd, &(0x7f000000c4c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/98, 0x62) 6.294306534s ago: executing program 2 (id=3401): r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) setuid(0x0) io_uring_enter(r0, 0x2ded, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]}) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000680)="bb", 0x1}], 0x1, 0x1000000, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r6}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r5, 0x0) fallocate(r5, 0x0, 0x0, 0x400) io_setup(0x400, &(0x7f0000000040)) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) 5.860614313s ago: executing program 2 (id=3402): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068) 5.497172329s ago: executing program 4 (id=3404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ee0000000000000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x22, &(0x7f0000000200)={@link_local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast}}}}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x21a402, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) landlock_restrict_self(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xc4382, 0x0) r8 = dup(r7) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendfile(r10, r8, 0x0, 0x8a000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000000500940003b2a6d682ad5a1200000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) getpid() 5.078916001s ago: executing program 4 (id=3405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200a8140900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000a0a010200000000000000d7d5"], 0x14}}, 0x0) 4.935297283s ago: executing program 4 (id=3406): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000002c0)={[{@dioread_lock}, {@usrquota}, {@errors_continue}, {@init_itable}, {@grpquota}, {@grpjquota, 0x2e}, {@resuid}, {@errors_remount}, {@nolazytime}, {@nomblk_io_submit}], [], 0x2c}, 0x84, 0x4ac, &(0x7f0000000740)="$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") syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000200)='./file0/../file0/file0\x00', 0x3210010, &(0x7f0000000100)={[{@nobarrier}, {}, {@order_strict}, {@order_strict}, {}, {}, {@order_relaxed}, {@order_relaxed}, {@nobarrier}], [], 0x2c}, 0x5, 0xed7, &(0x7f0000000f40)="$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") socket$igmp6(0xa, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0xfdef) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000f00000008000e72b8cb301212400000000011000300686173683a69702c706f72740000000005000500020000000500"], 0x60}}, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000400), &(0x7f0000000440)={0x0, "550e8fa8ad9ebc90f37648b12d9d933517e3c5c648d1e97ef0fddb8aa2d9307f364ca459419865e1ee600d641e0ad6ca7dbe078a95cd5ffeb2e1130000000093"}, 0x48, r4) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r2, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "87e41f3f2518cf22b058fe40b3bfb0888226e54e123436d75a884ae89b4b8ea5dc074df2550d8bfaf75fd05332be6fb3df1d0756f1193298e53b21d91ba047f0"}, 0x48, r4) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000711213000000000095000000000000000000000000000000605cac8b"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000a80)={0x0, "707bd611b8f4e886083e21e688904959352266d6fd710c43a62166cb72f41d97"}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "00ff00"}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fff, 0x0, "f8b566e785fc5b9c390467ff7eeeb133329dba"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xff) r7 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f00000001c0), 0x4) 4.51039087s ago: executing program 4 (id=3407): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file0\x00', 0x14012, &(0x7f0000002240)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@rodir}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8no}, {@uni_xlate}, {@rodir}, {@utf8}, {@uni_xlateno}, {@fat=@tz_utc}, {@rodir}, {@utf8}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@numtail}]}, 0x25, 0x2a5, &(0x7f0000002300)="$eJzs3T9rc1UYAPDnpmkSdUgHJxG8oINTaV1dUqSFYiYlgzposS1IE4QWCv7BaydXF0c/gSC4+SVc/AaCq+Bmh8KVe3Pvm7RvmjYvTfv++f2Wnp57nnOec3poKeU+/ez10dF+Godn3/4VnU4SjV704jyJtWhE7fu4pPdjAADPsvM8j3/zsUXikojoLC8tAGCJFv75/9vSUwIAluzDjz5+f6vf3/4gTTuxM/rhdFD8Zl98HD/fOowvYhgHsRHduIjIHxm3d/I8z5ppYS3eGmWngyJy9Okf1fxb/0SU8ZvRjbWy63L8bn97Mx2bis+KPF6u1u8V8e9EN16dsf5uP6n+QnEpPgatePvNqfzXoxt/fh5fxjD2yyQm63+3mabv5T/9980nxTRFfJKdDtrluIl85X6/MgAAAAAAAAAAAAAAAAAAAAAAPM/Wq9o77Sjr9xRdVf2dlYvik9VIa2V9nyzq+jzj+KSe6Ep9oCyPn+v6OhtpmubVwEl9n2a81ozmw+waAAAAAAAAAAAAAAAAAAAAni4nX319tDccHhzfSaOuBlC/1v+k8/Smet6I+YPbk7UaVXPOzLFSj0ki5qZRbOKOjuWmxkvX5fzLr4tO2Ll5zOq887mbRn27jvaS2WfYjrqnU1+S36fHtOKWa7Wue5QvdP1aMx91F95765Wykc0ZE8m8xN79e3xyVU9ydRet8lRnhq9WjanwK3djofv8+PeKRLUOAAAAAAAAAAAAAAAAAABYqslLvzMens0NbeTtpaUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPdq8v//F2hkVfAtBrfi+OSBtwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAL4P8AAAD//9MQYQA=") creat(&(0x7f0000000880)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xa1}, "1b8e23930d0fe8348ffcef75bce7d9b48f6d960923cbf7a8c346b56201706e851dbb837a90da63a1a184eeadf19bbfc7e957c4b853377c27165423ff120df0a404e9ab76c7e0231ec9cc70dcb0179d4b69ba5c9c4f9fd6800966419f3f4a5ce2a688f5071b561bfc99bddc971e072ecaaa12333291f2bdb49c35059d907ce91abc39c6003f6e98cf3252d2858165ae3b67a8f3dc9339a6706880de38cd08de1ecf"}}, 0xa4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a0000050000000000fc00ff00d87a970000100010000037ab7d818c7880beaf95677040357bab7d7a05c1bb0aa6aebef67ce4b0c51100f43ed1ed9f97ec6a859d46f82853825b67c84a908adca22e7266dfd4f239a3abbb98f982f6e8d4d652b4cc9d5fdab730c023e7cf262d889069e79c3ea45584d799dfdd019bf9611c91a31edc45c2f064bf78d886991b3c7941edf04673356b94520592b962a1dab9fa4c3c9d49d87496c1ce44b6dec02025820fb3ed3cc93d3d236c016a4253136fc97ff0e7026dc95bd3fc0a8e63f7da4659261c70f15ede"], 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0xffffffffffffff43) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x40, 0xc9}}}, 0x7) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x46, 0xc8, 0x7}}}, 0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.parent_freezing\x00', 0x275a, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f00000001c0), 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400), 0x208e24b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue={0x3, {0x7, 0x101}}}, {0x0, 0xfe, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2275, &(0x7f00000018c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001"], 0x2c}}, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x5c}, "2a9303016840f97616015d695a9f79ea4d7bf03e45b643649a41e689cf7577f00a503051fa9b9194578930452def6189c43fa8e40dec43828d6a57e2b7f4cc2113eb49d795a505dc181ca675da04518794680208080b0b5135a6e2a2"}, 0x60) syz_emit_vhci(0x0, 0xf) readahead(r0, 0x0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f0300000020"], 0x7) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x1, &(0x7f0000001680)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x90) 4.175622381s ago: executing program 4 (id=3408): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000980)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',noquota,nodiscard,iocharset=macturkish,errors=continue,iocharset=iso8859-6,nointegrity\x00gid=', @ANYRESHEX=0x0, @ANYBLOB=',quota,usrquota,resize,gid=', @ANYRESHEX=0x0, @ANYRES64=0x0], 0x1, 0x60fd, &(0x7f000000c4c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/98, 0x62) 3.600928855s ago: executing program 0 (id=3379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000804000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) truncate(0x0, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) sendfile(r4, r4, 0x0, 0x80000000) 3.524623669s ago: executing program 1 (id=3410): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) fchmod(0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x77359400}}, &(0x7f0000000240)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_emit_ethernet(0xb6, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000840)='\x9d#\x00\xe6Z\x00\xafq%\x85\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x064\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xaf@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x1) fallocate(r2, 0x8, 0x4, 0x3ffffd) fcntl$addseals(r2, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000005c0)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44900000c63d5f852c6769643d", @ANYBLOB="748e961413088258c4c8de4a9166dd7073507847f35cd47a85659368f58181c499e4cb210c9ab1329c78f6", @ANYRESOCT, @ANYRES64=0x0, @ANYRESOCT=r4, @ANYRES8, @ANYRESOCT, @ANYRES16=r4, @ANYBLOB="4599"], 0x1, 0x701, &(0x7f00000009c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5}) 2.61336276s ago: executing program 0 (id=3411): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000f00)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x110, 0x0, 0x328, 0x328, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev, @rand_addr, @multicast2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000006c0)=""/224, 0xe0}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "f7ef9ffbd8e6700354ce0000000000e5ff00"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) clock_adjtime(0x3, &(0x7f00000004c0)={0x17, 0x8000000000000000, 0x0, 0x10000, 0x100000000, 0x5, 0x0, 0x0, 0x8, 0x3, 0x100000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x1, 0x2}, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x3, 0x5, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xff, 0xc, 0x0, 0x2020, r0, 0x2, '\x00', 0x0, r0, 0x4, 0x1, 0x1, 0x5}, 0x48) unshare(0x6000080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000002b86dc71bb90ed2c0400000000000000000000d4d8b9f42d673b7c0d97891429e0fe22b5ba9e6be4297ee855f37bf358ce3baef264708ae4b3ca1ed9058069e20c5544ce1c2092f8fb4ffe2add1292158db3f2b86a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f00000001c0)) ioctl$EVIOCGRAB(r6, 0x40044590, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000100)={@mcast1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x40, 0x8, 0x100, 0xc, 0x1000080, r7}) 2.254884363s ago: executing program 4 (id=3412): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@map_normal}, {@mode={'mode', 0x3d, 0x3f}}, {@overriderock}, {@cruft}, {@nocompress}, {@cruft}, {@utf8}, {@block={'block', 0x3d, 0x200}}, {@nocompress}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {}, {@overriderock}, {@overriderock}, {@check_strict}]}, 0x1, 0x9e8, &(0x7f0000002400)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x9801) fchmodat(r0, &(0x7f0000000100)='./file0/../file0\x00', 0x0) 601.659045ms ago: executing program 1 (id=3413): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0xc01, 0x3, 0x1230, 0x10e8, 0x5002004a, 0xa, 0x10e8, 0x0, 0x1208, 0x3c8, 0x3c8, 0x1208, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'syzkaller0\x00', 'syzkaller0\x00'}, 0x60, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv6=@private0, 'wg2\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1290) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) 480.961723ms ago: executing program 0 (id=3414): r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8915, &(0x7f0000000240)={'lo\x00', {0x2, 0x0, @loopback}}) 375.101357ms ago: executing program 1 (id=3415): r0 = syz_open_dev$media(&(0x7f0000000000), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000440)=0x0) syz_io_uring_setup(0x131a, &(0x7f0000000200), &(0x7f0000000140)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) 336.051994ms ago: executing program 1 (id=3416): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)="27030200590200000000002f1eafbcf706e105000000894f000f1103ee162bd4b8bf4a82f6184b8a34f90186cee84400000008000000001900000000", 0x3c}, {&(0x7f0000001380)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b88a84465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b58144028420f6590138", 0x14}, {&(0x7f0000000440)="465c3135ec4b593d474a85bd3ed97d342253d12b5a3dacf52cd03633a6abadfb762cb3613fa20a42c1811f40a9ac6fc608a43b6d54cd01caf48c54b9c70b693c8ca2dcde13a64880d26b8e75397f377fac94f1698e46e781c5d95973fa50910997e4a1be1de7bcadc44fa26df6e2df26a1718a9f9e68087cc960d5778dda80", 0x7f}, {&(0x7f0000000600)="3260fc80ea2b8080d293d1c78e569b228cb871058715628b6b735735c7d074e6f01af06ea1ba7c14ea4c58472cd5ec2837a6d920d1d876c5be18ca5a8b421cf8e4a6cc6eb35ab96afcbdd97d53804d121a42eedf3221a19e3ac3d0ae1e1295c278cefe3cf8879e11688ab3ee1655de5621530001c54bf3e83e2fca31972d03d492205322d7d45b5dd2bf4a1c54e37173e8f952c00341929ae0c4145a", 0x9c}, {&(0x7f0000001440)="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", 0xbc7}], 0x7}, 0x0) 246.779023ms ago: executing program 1 (id=3417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x10) r1 = syz_io_uring_setup(0x7cda, &(0x7f0000000fc0), &(0x7f00000005c0), &(0x7f0000000a00)) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001340)={0x1, 0x2, 0x0, &(0x7f0000001280)=[{0x0}], 0x0}, 0x20) 223.412228ms ago: executing program 3 (id=3380): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x52, 0x1}, 0x14}}, 0x0) 206.26213ms ago: executing program 0 (id=3418): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0x82020000) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x3, 0x2, 0x0) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb701000008000000b7040000020000008500000082000000950000f347810d57"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r6, 0x1}, 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 58.421325ms ago: executing program 3 (id=3419): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x4}, 0x90) 0s ago: executing program 1 (id=3420): syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = syz_io_uring_setup(0x24b9, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x353, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) socket$unix(0x1, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x51000770) rmdir(&(0x7f00000003c0)='./file0\x00') kernel console output (not intermixed with test programs): C1] ? __pfx___mutex_lock+0x10/0x10 [ 961.313683][ C1] ? __alloc_skb+0x28f/0x440 [ 961.313711][ C1] ? get_rtnl_holder+0x144/0x190 [ 961.313733][ C1] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 961.313755][ C1] rtnl_dumpit+0x9e/0x210 [ 961.313789][ C1] netlink_dump+0x647/0xd80 [ 961.313834][ C1] ? __pfx_netlink_dump+0x10/0x10 [ 961.313885][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 961.313927][ C1] __netlink_dump_start+0x5a2/0x790 [ 961.313970][ C1] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 961.313995][ C1] rtnetlink_rcv_msg+0xb42/0xd00 [ 961.314032][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 961.314062][ C1] ? __pfx_rtnl_dumpit+0x10/0x10 [ 961.314092][ C1] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 961.314123][ C1] ? ref_tracker_free+0x643/0x7e0 [ 961.314158][ C1] netlink_rcv_skb+0x1e3/0x430 [ 961.314183][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 961.314218][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 961.314278][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 961.314305][ C1] netlink_unicast+0x7f6/0x990 [ 961.314349][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 961.314377][ C1] ? __virt_addr_valid+0x183/0x530 [ 961.314404][ C1] ? __check_object_size+0x49c/0x900 [ 961.314429][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 961.314464][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 961.314507][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 961.314534][ C1] ? __import_iovec+0x536/0x820 [ 961.314560][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 961.314590][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 961.314610][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 961.314645][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 961.314666][ C1] __sock_sendmsg+0x221/0x270 [ 961.314703][ C1] ____sys_sendmsg+0x525/0x7d0 [ 961.314745][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 961.314803][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 961.314834][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 961.314879][ C1] ? security_bpf+0x87/0xb0 [ 961.314951][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 961.314983][ C1] ? do_syscall_64+0x100/0x230 [ 961.315010][ C1] ? do_syscall_64+0xb6/0x230 [ 961.315037][ C1] do_syscall_64+0xf3/0x230 [ 961.315060][ C1] ? clear_bhb_loop+0x35/0x90 [ 961.315091][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.315116][ C1] RIP: 0033:0x7fe417d75f19 [ 961.315140][ C1] RSP: 002b:00007fe418b21048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 961.315167][ C1] RAX: ffffffffffffffda RBX: 00007fe417f06038 RCX: 00007fe417d75f19 [ 961.315185][ C1] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 961.315200][ C1] RBP: 00007fe417de4e68 R08: 0000000000000000 R09: 0000000000000000 [ 961.315216][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.315231][ C1] R13: 000000000000006e R14: 00007fe417f06038 R15: 00007ffcbe064828 [ 961.315271][ C1] [ 961.315282][ C1] [ 961.315282][ C1] Showing all locks held in the system: [ 961.315330][ C1] 4 locks held by kworker/u8:9/2817: [ 961.315346][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 961.315415][ C1] #1: ffffc90008e67d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 961.315478][ C1] #2: ffffffff8f5fddd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 961.315537][ C1] #3: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x25/0x2e0 [ 961.315603][ C1] 2 locks held by getty/4853: [ 961.315617][ C1] #0: ffff88802a92c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 961.315675][ C1] #1: ffffc900034c32f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 961.315740][ C1] 3 locks held by kworker/0:6/5224: [ 961.315754][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 961.315823][ C1] #1: ffffc900086d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 961.315886][ C1] #2: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 961.315950][ C1] 2 locks held by kworker/u8:7/13887: [ 961.315968][ C1] 1 lock held by syz-executor/14689: [ 961.315982][ C1] #0: ffffffff8e33ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 961.316044][ C1] 5 locks held by syz-executor/16487: [ 961.316058][ C1] #0: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 961.316122][ C1] #1: ffffffff8e213280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 961.316185][ C1] #2: ffffffff8e212e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 961.316243][ C1] #3: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 961.316302][ C1] #4: ffffffff8e337a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 961.316370][ C1] 2 locks held by syz.1.3354/16669: [ 961.316384][ C1] #0: ffffffff8f670390 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 961.316445][ C1] #1: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 961.316508][ C1] 3 locks held by syz.1.3354/16673: [ 961.316522][ C1] #0: ffff88805aa051c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_set_ldisc+0x52/0x560 [ 961.316577][ C1] #1: ffff88805aa050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x6c/0xc0 [ 961.316633][ C1] #2: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: slip_open+0xda/0xe80 [ 961.316693][ C1] 1 lock held by syz.1.3354/16674: [ 961.316707][ C1] #0: ffff88805aa050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 961.316764][ C1] 2 locks held by syz.1.3354/16677: [ 961.316778][ C1] #0: ffffffff8f5ef5a8 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x664/0x8e0 [ 961.316848][ C1] #1: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 961.316915][ C1] 1 lock held by syz.2.3355/16667: [ 961.316929][ C1] #0: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x21e/0x1bc0 [ 961.316989][ C1] 2 locks held by syz.2.3355/16671: [ 961.317002][ C1] #0: ffff888066c56678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 961.317069][ C1] #1: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x9e/0x210 [ 961.317134][ C1] 1 lock held by syz.3.3369/16732: [ 961.317147][ C1] #0: ffff88804e8db868 (&pipe->mutex){+.+.}-{3:3}, at: pipe_write+0xd60/0x1a40 [ 961.317207][ C1] 2 locks held by syz.3.3369/16733: [ 961.317221][ C1] #0: ffff88804e8db868 (&pipe->mutex){+.+.}-{3:3}, at: splice_to_socket+0xee/0x10b0 [ 961.317285][ C1] #1: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 961.317350][ C1] 1 lock held by syz-executor/16740: [ 961.317364][ C1] [ 961.317372][ C1] ============================================= [ 961.317372][ C1] [ 961.490299][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 961.589853][T16487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.797644][ T35] hfsplus: b-tree write err: -5, ino 4 [ 961.929634][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 961.969056][T16487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.019575][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 962.020636][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 962.031828][T16487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.035928][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 962.342021][ C1] DEBUG: waiting rtnl_mutex for 1096 jiffies. [ 962.342043][ C1] task:syz.2.3355 state:D stack:25632 pid:16667 tgid:16666 ppid:14565 flags:0x00000004 [ 962.342082][ C1] Call Trace: [ 962.342090][ C1] [ 962.342102][ C1] __schedule+0x1800/0x4a60 [ 962.342146][ C1] ? __pfx___schedule+0x10/0x10 [ 962.342170][ C1] ? __pfx_lock_release+0x10/0x10 [ 962.342195][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 962.342223][ C1] ? schedule+0x90/0x320 [ 962.342244][ C1] schedule+0x14b/0x320 [ 962.342268][ C1] schedule_preempt_disabled+0x13/0x30 [ 962.342290][ C1] __mutex_lock+0x6a4/0xd70 [ 962.342318][ C1] ? __mutex_lock+0x527/0xd70 [ 962.342343][ C1] ? dev_ethtool+0x21e/0x1bc0 [ 962.342367][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 962.342397][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 962.342418][ C1] ? get_rtnl_holder+0x144/0x190 [ 962.342441][ C1] dev_ethtool+0x21e/0x1bc0 [ 962.342469][ C1] ? dev_load+0x21/0x1f0 [ 962.342494][ C1] ? __pfx_dev_ethtool+0x10/0x10 [ 962.342538][ C1] ? dev_load+0x21/0x1f0 [ 962.342561][ C1] dev_ioctl+0x785/0x1340 [ 962.342589][ C1] sock_do_ioctl+0x240/0x460 [ 962.342623][ C1] ? __pfx_sock_do_ioctl+0x10/0x10 [ 962.342666][ C1] sock_ioctl+0x629/0x8e0 [ 962.342693][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 962.342716][ C1] ? __fget_files+0x29/0x470 [ 962.342737][ C1] ? __fget_files+0x3f6/0x470 [ 962.342753][ C1] ? __fget_files+0x29/0x470 [ 962.342776][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 962.342797][ C1] ? security_file_ioctl+0x87/0xb0 [ 962.342816][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 962.342839][ C1] __se_sys_ioctl+0xfc/0x170 [ 962.342864][ C1] do_syscall_64+0xf3/0x230 [ 962.342882][ C1] ? clear_bhb_loop+0x35/0x90 [ 962.342905][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.342926][ C1] RIP: 0033:0x7fe417d75f19 [ 962.342942][ C1] RSP: 002b:00007fe418b42048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 962.342963][ C1] RAX: ffffffffffffffda RBX: 00007fe417f05f60 RCX: 00007fe417d75f19 [ 962.342979][ C1] RDX: 0000000020000900 RSI: 0000000000008946 RDI: 0000000000000008 [ 962.342991][ C1] RBP: 00007fe417de4e68 R08: 0000000000000000 R09: 0000000000000000 [ 962.343004][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.343016][ C1] R13: 000000000000000b R14: 00007fe417f05f60 R15: 00007ffcbe064828 [ 962.343044][ C1] [ 962.343054][ C1] DEBUG: waiting rtnl_mutex for 1092 jiffies. [ 962.343066][ C1] task:syz.1.3354 state:D stack:25984 pid:16669 tgid:16658 ppid:16000 flags:0x00000004 [ 962.343103][ C1] Call Trace: [ 962.343112][ C1] [ 962.343127][ C1] __schedule+0x1800/0x4a60 [ 962.343174][ C1] ? __pfx___schedule+0x10/0x10 [ 962.343205][ C1] ? __pfx_lock_release+0x10/0x10 [ 962.343236][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 962.343268][ C1] ? schedule+0x90/0x320 [ 962.343288][ C1] schedule+0x14b/0x320 [ 962.343315][ C1] schedule_preempt_disabled+0x13/0x30 [ 962.343338][ C1] __mutex_lock+0x6a4/0xd70 [ 962.343367][ C1] ? __mutex_lock+0x527/0xd70 [ 962.343394][ C1] ? nl80211_pre_doit+0x5f/0x8b0 [ 962.343422][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 962.343456][ C1] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 962.343490][ C1] ? get_rtnl_holder+0x144/0x190 [ 962.343518][ C1] nl80211_pre_doit+0x5f/0x8b0 [ 962.343561][ C1] genl_rcv_msg+0xaaa/0xec0 [ 962.343586][ C1] ? mark_lock+0x9a/0x360 [ 962.343625][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 962.343659][ C1] ? mark_lock+0x9a/0x360 [ 962.343693][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 962.343735][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 962.343761][ C1] ? __pfx_nl80211_del_station+0x10/0x10 [ 962.343786][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 962.343829][ C1] netlink_rcv_skb+0x1e3/0x430 [ 962.343853][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 962.343882][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 962.343919][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 962.343957][ C1] genl_rcv+0x28/0x40 [ 962.343982][ C1] netlink_unicast+0x7f6/0x990 [ 962.344022][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 962.344049][ C1] ? __virt_addr_valid+0x183/0x530 [ 962.344080][ C1] ? __check_object_size+0x49c/0x900 [ 962.344105][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 962.344138][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 962.344174][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.344200][ C1] ? __import_iovec+0x536/0x820 [ 962.344226][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 962.344256][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 962.344276][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 962.344311][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.344332][ C1] __sock_sendmsg+0x221/0x270 [ 962.344368][ C1] ____sys_sendmsg+0x525/0x7d0 [ 962.344405][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 962.344449][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 962.344478][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 962.344556][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 962.344587][ C1] ? do_syscall_64+0x100/0x230 [ 962.344613][ C1] ? do_syscall_64+0xb6/0x230 [ 962.344637][ C1] do_syscall_64+0xf3/0x230 [ 962.344660][ C1] ? clear_bhb_loop+0x35/0x90 [ 962.344689][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.344715][ C1] RIP: 0033:0x7f1743575f19 [ 962.344735][ C1] RSP: 002b:00007f1742f9c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.344761][ C1] RAX: ffffffffffffffda RBX: 00007f17437061e8 RCX: 00007f1743575f19 [ 962.344779][ C1] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000006 [ 962.344795][ C1] RBP: 00007f17435e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 962.344811][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.344826][ C1] R13: 000000000000006e R14: 00007f17437061e8 R15: 00007ffe010395d8 [ 962.344860][ C1] [ 962.344870][ C1] DEBUG: waiting rtnl_mutex for 1076 jiffies. [ 962.344884][ C1] task:syz.1.3354 state:D stack:26408 pid:16673 tgid:16658 ppid:16000 flags:0x00000004 [ 962.344920][ C1] Call Trace: [ 962.344930][ C1] [ 962.344945][ C1] __schedule+0x1800/0x4a60 [ 962.344995][ C1] ? __pfx___schedule+0x10/0x10 [ 962.345026][ C1] ? __pfx_lock_release+0x10/0x10 [ 962.345056][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 962.345091][ C1] ? schedule+0x90/0x320 [ 962.345116][ C1] schedule+0x14b/0x320 [ 962.345145][ C1] schedule_preempt_disabled+0x13/0x30 [ 962.345171][ C1] __mutex_lock+0x6a4/0xd70 [ 962.345204][ C1] ? __mutex_lock+0x527/0xd70 [ 962.345235][ C1] ? slip_open+0xda/0xe80 [ 962.345260][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 962.345296][ C1] ? bpf_lsm_capable+0x9/0x10 [ 962.345325][ C1] ? get_rtnl_holder+0x144/0x190 [ 962.345352][ C1] slip_open+0xda/0xe80 [ 962.345384][ C1] ? up_write+0x1a9/0x590 [ 962.345413][ C1] ? __pfx_slip_open+0x10/0x10 [ 962.345437][ C1] ? n_tty_close+0x168/0x1e0 [ 962.345465][ C1] ? __pfx_up_write+0x10/0x10 [ 962.345494][ C1] tty_ldisc_open+0xa6/0x110 [ 962.345519][ C1] tty_set_ldisc+0x389/0x560 [ 962.345554][ C1] tty_ioctl+0xbdc/0xdc0 [ 962.345576][ C1] ? __pfx_tty_ioctl+0x10/0x10 [ 962.345601][ C1] __se_sys_ioctl+0xfc/0x170 [ 962.345634][ C1] do_syscall_64+0xf3/0x230 [ 962.345657][ C1] ? clear_bhb_loop+0x35/0x90 [ 962.345686][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.345712][ C1] RIP: 0033:0x7f1743575f19 [ 962.345731][ C1] RSP: 002b:00007f1742f7b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 962.345756][ C1] RAX: ffffffffffffffda RBX: 00007f17437062c0 RCX: 00007f1743575f19 [ 962.345773][ C1] RDX: 0000000020000040 RSI: 0000000000005423 RDI: 0000000000000008 [ 962.345789][ C1] RBP: 00007f17435e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 962.345805][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.345821][ C1] R13: 000000000000006e R14: 00007f17437062c0 R15: 00007ffe010395d8 [ 962.345855][ C1] [ 962.345865][ C1] DEBUG: waiting rtnl_mutex for 1064 jiffies. [ 962.345879][ C1] task:syz.1.3354 state:D stack:27392 pid:16677 tgid:16658 ppid:16000 flags:0x00000004 [ 962.345918][ C1] Call Trace: [ 962.345927][ C1] [ 962.345942][ C1] __schedule+0x1800/0x4a60 [ 962.345992][ C1] ? __pfx___schedule+0x10/0x10 [ 962.346023][ C1] ? __pfx_lock_release+0x10/0x10 [ 962.346053][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 962.346088][ C1] ? schedule+0x90/0x320 [ 962.346113][ C1] schedule+0x14b/0x320 [ 962.346142][ C1] schedule_preempt_disabled+0x13/0x30 [ 962.346169][ C1] __mutex_lock+0x6a4/0xd70 [ 962.346202][ C1] ? __mutex_lock+0x527/0xd70 [ 962.346233][ C1] ? vlan_ioctl_handler+0x112/0x9d0 [ 962.346266][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 962.346306][ C1] ? get_rtnl_holder+0x144/0x190 [ 962.346354][ C1] vlan_ioctl_handler+0x112/0x9d0 [ 962.346403][ C1] ? sock_ioctl+0x664/0x8e0 [ 962.346433][ C1] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 962.346477][ C1] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 962.346510][ C1] sock_ioctl+0x683/0x8e0 [ 962.346547][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 962.346575][ C1] ? __fget_files+0x29/0x470 [ 962.346600][ C1] ? __fget_files+0x3f6/0x470 [ 962.346621][ C1] ? __fget_files+0x29/0x470 [ 962.346650][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 962.346673][ C1] ? security_file_ioctl+0x87/0xb0 [ 962.346696][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 962.346727][ C1] __se_sys_ioctl+0xfc/0x170 [ 962.346760][ C1] do_syscall_64+0xf3/0x230 [ 962.346782][ C1] ? clear_bhb_loop+0x35/0x90 [ 962.346811][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.346837][ C1] RIP: 0033:0x7f1743575f19 [ 962.346856][ C1] RSP: 002b:00007f1742f39048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 962.346881][ C1] RAX: ffffffffffffffda RBX: 00007f1743706470 RCX: 00007f1743575f19 [ 962.346898][ C1] RDX: 0000000020000080 RSI: 0000000000008982 RDI: 0000000000000004 [ 962.346914][ C1] RBP: 00007f17435e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 962.346930][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.346945][ C1] R13: 000000000000006e R14: 00007f1743706470 R15: 00007ffe010395d8 [ 962.346980][ C1] [ 962.346990][ C1] DEBUG: holding rtnl_mutex for 1668 jiffies. [ 962.347003][ C1] task:kworker/0:6 state:D stack:20624 pid:5224 tgid:5224 ppid:2 flags:0x00004000 [ 962.347041][ C1] Workqueue: events linkwatch_event [ 962.347067][ C1] Call Trace: [ 962.347077][ C1] [ 962.347092][ C1] __schedule+0x1800/0x4a60 [ 962.347142][ C1] ? __pfx___schedule+0x10/0x10 [ 962.347172][ C1] ? __pfx_lock_release+0x10/0x10 [ 962.347199][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 962.347232][ C1] ? kthread_data+0x52/0xd0 [ 962.347263][ C1] ? wq_worker_sleeping+0x66/0x240 [ 962.347294][ C1] ? schedule+0x90/0x320 [ 962.347319][ C1] schedule+0x14b/0x320 [ 962.347349][ C1] synchronize_rcu_expedited+0x684/0x830 [ 962.347377][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 962.347419][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 962.347443][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 962.347471][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 962.347506][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 962.347535][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 962.347566][ C1] dev_deactivate_many+0x4a7/0xb10 [ 962.347592][ C1] ? dev_deactivate_many+0x250/0xb10 [ 962.347616][ C1] dev_deactivate+0x184/0x280 [ 962.347640][ C1] ? __pfx_dev_deactivate+0x10/0x10 [ 962.347661][ C1] ? veth_get_iflink+0x25/0x260 [ 962.347689][ C1] ? rfc2863_policy+0x1d7/0x300 [ 962.347714][ C1] linkwatch_do_dev+0x10a/0x170 [ 962.347737][ C1] __linkwatch_run_queue+0x44f/0x6c0 [ 962.347763][ C1] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 962.347788][ C1] ? get_rtnl_holder+0x144/0x190 [ 962.347810][ C1] ? process_scheduled_works+0x945/0x1830 [ 962.347835][ C1] linkwatch_event+0x4c/0x60 [ 962.347856][ C1] process_scheduled_works+0xa2c/0x1830 [ 962.347911][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 962.347948][ C1] ? assign_work+0x364/0x3d0 [ 962.347981][ C1] worker_thread+0x86d/0xd40 [ 962.348021][ C1] ? __kthread_parkme+0x169/0x1d0 [ 962.348051][ C1] ? __pfx_worker_thread+0x10/0x10 [ 962.348077][ C1] kthread+0x2f0/0x390 [ 962.348098][ C1] ? __pfx_worker_thread+0x10/0x10 [ 962.348123][ C1] ? __pfx_kthread+0x10/0x10 [ 962.348145][ C1] ret_from_fork+0x4b/0x80 [ 962.348172][ C1] ? __pfx_kthread+0x10/0x10 [ 962.348192][ C1] ret_from_fork_asm+0x1a/0x30 [ 962.348234][ C1] [ 962.348242][ C1] DEBUG: waiting rtnl_mutex for 834 jiffies. [ 962.348255][ C1] task:syz.2.3355 state:D stack:23800 pid:16671 tgid:16666 ppid:14565 flags:0x00000004 [ 962.348293][ C1] Call Trace: [ 962.348302][ C1] [ 962.348317][ C1] __schedule+0x1800/0x4a60 [ 962.348363][ C1] ? __pfx___schedule+0x10/0x10 [ 962.348393][ C1] ? __pfx_lock_release+0x10/0x10 [ 962.348423][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 962.348457][ C1] ? schedule+0x90/0x320 [ 962.348482][ C1] schedule+0x14b/0x320 [ 962.348509][ C1] schedule_preempt_disabled+0x13/0x30 [ 962.348541][ C1] __mutex_lock+0x6a4/0xd70 [ 962.348616][ C1] ? __mutex_lock+0x527/0xd70 [ 962.348646][ C1] ? rtnl_dumpit+0x9e/0x210 [ 962.348678][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 962.348711][ C1] ? __alloc_skb+0x28f/0x440 [ 962.348741][ C1] ? get_rtnl_holder+0x144/0x190 [ 962.348764][ C1] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 962.348789][ C1] rtnl_dumpit+0x9e/0x210 [ 962.348826][ C1] netlink_dump+0x647/0xd80 [ 962.348862][ C1] ? __pfx_netlink_dump+0x10/0x10 [ 962.348908][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 962.348947][ C1] __netlink_dump_start+0x5a2/0x790 [ 962.348986][ C1] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 962.349011][ C1] rtnetlink_rcv_msg+0xb42/0xd00 [ 962.349049][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 962.349080][ C1] ? __pfx_rtnl_dumpit+0x10/0x10 [ 962.349109][ C1] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 962.349134][ C1] ? ref_tracker_free+0x643/0x7e0 [ 962.349166][ C1] netlink_rcv_skb+0x1e3/0x430 [ 962.349190][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 962.349221][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 962.349264][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 962.349288][ C1] netlink_unicast+0x7f6/0x990 [ 962.349328][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 962.349354][ C1] ? __virt_addr_valid+0x183/0x530 [ 962.349380][ C1] ? __check_object_size+0x49c/0x900 [ 962.349404][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 962.349437][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 962.349473][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.349498][ C1] ? __import_iovec+0x536/0x820 [ 962.349530][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 962.349560][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 962.349580][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 962.349614][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.349635][ C1] __sock_sendmsg+0x221/0x270 [ 962.349670][ C1] ____sys_sendmsg+0x525/0x7d0 [ 962.349703][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 962.349739][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 962.349768][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 962.349803][ C1] ? security_bpf+0x87/0xb0 [ 962.349860][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 962.349893][ C1] ? do_syscall_64+0x100/0x230 [ 962.349919][ C1] ? do_syscall_64+0xb6/0x230 [ 962.349944][ C1] do_syscall_64+0xf3/0x230 [ 962.349963][ C1] ? clear_bhb_loop+0x35/0x90 [ 962.349990][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.350012][ C1] RIP: 0033:0x7fe417d75f19 [ 962.350031][ C1] RSP: 002b:00007fe418b21048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.350052][ C1] RAX: ffffffffffffffda RBX: 00007fe417f06038 RCX: 00007fe417d75f19 [ 962.350070][ C1] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 962.350085][ C1] RBP: 00007fe417de4e68 R08: 0000000000000000 R09: 0000000000000000 [ 962.350100][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.350114][ C1] R13: 000000000000006e R14: 00007fe417f06038 R15: 00007ffcbe064828 [ 962.350143][ C1] [ 962.350153][ C1] DEBUG: waiting rtnl_mutex for 507 jiffies. [ 962.350165][ C1] task:syz.3.3369 state:D stack:26208 pid:16733 tgid:16731 ppid:13910 flags:0x00004004 [ 962.350207][ C1] Call Trace: [ 962.350217][ C1] [ 962.350231][ C1] __schedule+0x1800/0x4a60 [ 962.350283][ C1] ? __pfx___schedule+0x10/0x10 [ 962.350313][ C1] ? __pfx_lock_release+0x10/0x10 [ 962.350343][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 962.350374][ C1] ? schedule+0x90/0x320 [ 962.350398][ C1] schedule+0x14b/0x320 [ 962.350422][ C1] schedule_preempt_disabled+0x13/0x30 [ 962.350445][ C1] __mutex_lock+0x6a4/0xd70 [ 962.350476][ C1] ? __mutex_lock+0x527/0xd70 [ 962.350505][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 962.350541][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 962.350581][ C1] ? get_rtnl_holder+0x144/0x190 [ 962.350606][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 962.350634][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 962.350669][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 962.350706][ C1] ? ref_tracker_free+0x643/0x7e0 [ 962.350737][ C1] netlink_rcv_skb+0x1e3/0x430 [ 962.350760][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 962.350790][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 962.350837][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 962.350861][ C1] netlink_unicast+0x7f6/0x990 [ 962.350899][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 962.350924][ C1] ? __virt_addr_valid+0x183/0x530 [ 962.350948][ C1] ? __check_object_size+0x49c/0x900 [ 962.350971][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 962.351003][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 962.351039][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.351061][ C1] ? __mutex_trylock_common+0x183/0x2e0 [ 962.351088][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 962.351116][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 962.351136][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 962.351170][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.351190][ C1] __sock_sendmsg+0x221/0x270 [ 962.351225][ C1] sock_sendmsg+0x134/0x200 [ 962.351261][ C1] ? __pfx_sock_sendmsg+0x10/0x10 [ 962.351309][ C1] ? iov_iter_bvec+0x4e/0x180 [ 962.351339][ C1] splice_to_socket+0xa13/0x10b0 [ 962.351369][ C1] ? __pfx_lock_release+0x10/0x10 [ 962.351421][ C1] ? __pfx_splice_to_socket+0x10/0x10 [ 962.351477][ C1] ? __lock_acquire+0x1384/0x2050 [ 962.351527][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 962.351550][ C1] ? security_file_permission+0x7f/0xa0 [ 962.351577][ C1] ? rw_verify_area+0x1d2/0x6b0 [ 962.351607][ C1] ? __pfx_splice_to_socket+0x10/0x10 [ 962.351634][ C1] do_splice+0xd77/0x1900 [ 962.351670][ C1] ? __pfx_lock_release+0x10/0x10 [ 962.351706][ C1] ? __pfx_reacquire_held_locks+0x10/0x10 [ 962.351735][ C1] ? pipe_clear_nowait+0x196/0x220 [ 962.351760][ C1] ? __pfx_do_splice+0x10/0x10 [ 962.351800][ C1] __se_sys_splice+0x331/0x4a0 [ 962.351840][ C1] ? __pfx___se_sys_splice+0x10/0x10 [ 962.351871][ C1] ? exc_page_fault+0x590/0x8c0 [ 962.351903][ C1] ? __x64_sys_splice+0x21/0xf0 [ 962.351936][ C1] do_syscall_64+0xf3/0x230 [ 962.351958][ C1] ? clear_bhb_loop+0x35/0x90 [ 962.351988][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.352013][ C1] RIP: 0033:0x7f355b375f19 [ 962.352032][ C1] RSP: 002b:00007f355c110048 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 962.352059][ C1] RAX: ffffffffffffffda RBX: 00007f355b506038 RCX: 00007f355b375f19 [ 962.352077][ C1] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 962.352093][ C1] RBP: 00007f355b3e4e68 R08: 000000000004ffe2 R09: 0000000000000000 [ 962.352109][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.352124][ C1] R13: 000000000000006e R14: 00007f355b506038 R15: 00007fff4a7c6ab8 [ 962.352159][ C1] [ 962.352172][ C1] [ 962.352172][ C1] Showing all locks held in the system: [ 962.352183][ C1] 2 locks held by kworker/u8:1/12: [ 962.352206][ C1] 6 locks held by kworker/u9:0/55: [ 962.352220][ C1] #0: ffff8880758ef148 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 962.352295][ C1] #1: ffffc90000bf7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 962.352361][ C1] #2: ffffffff8e213280 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0x4ed/0x900 [ 962.352421][ C1] #3: ffffffff8e212e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 962.352482][ C1] #4: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 962.352548][ C1] #5: ffffffff8e337a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 962.352644][ C1] 4 locks held by kworker/u8:9/2817: [ 962.352658][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 962.352723][ C1] #1: ffffc90008e67d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 962.352786][ C1] #2: ffffffff8f5fddd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 962.352847][ C1] #3: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x25/0x2e0 [ 962.352913][ C1] 2 locks held by getty/4853: [ 962.352927][ C1] #0: ffff88802a92c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 962.352986][ C1] #1: ffffc900034c32f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 962.353052][ C1] 4 locks held by kworker/0:6/5224: [ 962.353066][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 962.353126][ C1] #1: ffffc900086d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 962.353190][ C1] #2: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 962.353250][ C1] #3: ffffffff8e33ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 962.353320][ C1] 3 locks held by kworker/u9:2/15047: [ 962.353334][ C1] #0: ffff8880758ef948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 962.353398][ C1] #1: ffffc90008af7d00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 962.353462][ C1] #2: ffff888068c28d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1bf/0x6b0 [ 962.353533][ C1] 1 lock held by syz-executor/16487: [ 962.353547][ C1] #0: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 962.353616][ C1] 2 locks held by syz.1.3354/16669: [ 962.353630][ C1] #0: ffffffff8f670390 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 962.353691][ C1] #1: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 962.353755][ C1] 3 locks held by syz.1.3354/16673: [ 962.353768][ C1] #0: ffff88805aa051c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_set_ldisc+0x52/0x560 [ 962.353820][ C1] #1: ffff88805aa050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x6c/0xc0 [ 962.353873][ C1] #2: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: slip_open+0xda/0xe80 [ 962.353930][ C1] 1 lock held by syz.1.3354/16674: [ 962.353945][ C1] #0: ffff88805aa050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 962.354003][ C1] 2 locks held by syz.1.3354/16677: [ 962.354017][ C1] #0: ffffffff8f5ef5a8 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x664/0x8e0 [ 962.354083][ C1] #1: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 962.354150][ C1] 1 lock held by syz.2.3355/16667: [ 962.354164][ C1] #0: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x21e/0x1bc0 [ 962.354226][ C1] 2 locks held by syz.2.3355/16671: [ 962.354240][ C1] #0: ffff888066c56678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 962.354308][ C1] #1: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x9e/0x210 [ 962.354374][ C1] 1 lock held by syz.3.3369/16732: [ 962.354387][ C1] #0: ffff88804e8db868 (&pipe->mutex){+.+.}-{3:3}, at: pipe_write+0xd60/0x1a40 [ 962.354449][ C1] 2 locks held by syz.3.3369/16733: [ 962.354462][ C1] #0: ffff88804e8db868 (&pipe->mutex){+.+.}-{3:3}, at: splice_to_socket+0xee/0x10b0 [ 962.354532][ C1] #1: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 962.354599][ C1] 3 locks held by syz-executor/16743: [ 962.354614][ C1] [ 962.354622][ C1] ============================================= [ 962.354622][ C1] [ 962.397807][T13518] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 962.409573][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 962.428960][T13518] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 963.378624][ C1] DEBUG: waiting rtnl_mutex for 1200 jiffies. [ 964.510329][ T5113] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 964.514297][ C1] DEBUG: waiting rtnl_mutex for 1309 jiffies. [ 970.627663][ C1] task:syz.1.3354 state:R running task stack:25984 pid:16669 tgid:16658 ppid:16000 flags:0x00000004 [ 970.639407][ C1] Call Trace: [ 970.642671][ C1] [ 970.645588][ C1] __schedule+0x1800/0x4a60 [ 970.650137][ C1] ? __pfx___schedule+0x10/0x10 [ 970.654975][ C1] ? __pfx_lock_release+0x10/0x10 [ 970.660010][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 970.665457][ C1] ? schedule+0x90/0x320 [ 970.669723][ C1] schedule+0x14b/0x320 [ 970.673882][ C1] schedule_preempt_disabled+0x13/0x30 [ 970.679350][ C1] __mutex_lock+0x6a4/0xd70 [ 970.683851][ C1] ? __mutex_lock+0x527/0xd70 [ 970.688523][ C1] ? nl80211_pre_doit+0x5f/0x8b0 [ 970.693480][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 970.698502][ C1] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 970.704764][ C1] ? get_rtnl_holder+0x144/0x190 [ 970.709709][ C1] nl80211_pre_doit+0x5f/0x8b0 [ 970.714470][ C1] genl_rcv_msg+0xaaa/0xec0 [ 970.718985][ C1] ? mark_lock+0x9a/0x360 [ 970.723308][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 970.728336][ C1] ? mark_lock+0x9a/0x360 [ 970.732700][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 970.738694][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 970.744052][ C1] ? __pfx_nl80211_del_station+0x10/0x10 [ 970.749699][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 970.755154][ C1] netlink_rcv_skb+0x1e3/0x430 [ 970.759921][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 970.764932][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 970.770222][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 970.775669][ C1] genl_rcv+0x28/0x40 [ 970.779651][ C1] netlink_unicast+0x7f6/0x990 [ 970.784404][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 970.789691][ C1] ? __virt_addr_valid+0x183/0x530 [ 970.794787][ C1] ? __check_object_size+0x49c/0x900 [ 970.800091][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 970.805216][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 970.809997][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 970.815272][ C1] ? __import_iovec+0x536/0x820 [ 970.820131][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 970.825055][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 970.830358][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 970.835831][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 970.841130][ C1] __sock_sendmsg+0x221/0x270 [ 970.845798][ C1] ____sys_sendmsg+0x525/0x7d0 [ 970.850570][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 970.855850][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 970.860444][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 970.865562][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 970.871892][ C1] ? do_syscall_64+0x100/0x230 [ 970.876637][ C1] ? do_syscall_64+0xb6/0x230 [ 970.881314][ C1] do_syscall_64+0xf3/0x230 [ 970.885799][ C1] ? clear_bhb_loop+0x35/0x90 [ 970.890479][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.896355][ C1] RIP: 0033:0x7f1743575f19 [ 970.900772][ C1] RSP: 002b:00007f1742f9c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 970.909219][ C1] RAX: ffffffffffffffda RBX: 00007f17437061e8 RCX: 00007f1743575f19 [ 970.917194][ C1] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000006 [ 970.925174][ C1] RBP: 00007f17435e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 970.933171][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 970.941164][ C1] R13: 000000000000006e R14: 00007f17437061e8 R15: 00007ffe010395d8 [ 970.949152][ C1] [ 970.952154][ C1] DEBUG: waiting rtnl_mutex for 1937 jiffies. [ 970.958224][ C1] task:syz.1.3354 state:D stack:26408 pid:16673 tgid:16658 ppid:16000 flags:0x00000004 [ 970.968411][ C1] Call Trace: [ 970.971692][ C1] [ 970.974624][ C1] __schedule+0x1800/0x4a60 [ 970.979157][ C1] ? __pfx___schedule+0x10/0x10 [ 970.984004][ C1] ? __pfx_lock_release+0x10/0x10 [ 970.989059][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 970.994527][ C1] ? schedule+0x90/0x320 [ 970.998782][ C1] schedule+0x14b/0x320 [ 971.002924][ C1] schedule_preempt_disabled+0x13/0x30 [ 971.008455][ C1] __mutex_lock+0x6a4/0xd70 [ 971.012971][ C1] ? __mutex_lock+0x527/0xd70 [ 971.017720][ C1] ? slip_open+0xda/0xe80 [ 971.022057][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 971.027163][ C1] ? bpf_lsm_capable+0x9/0x10 [ 971.031875][ C1] ? get_rtnl_holder+0x144/0x190 [ 971.036802][ C1] slip_open+0xda/0xe80 [ 971.040974][ C1] ? up_write+0x1a9/0x590 [ 971.045289][ C1] ? __pfx_slip_open+0x10/0x10 [ 971.050056][ C1] ? n_tty_close+0x168/0x1e0 [ 971.054634][ C1] ? __pfx_up_write+0x10/0x10 [ 971.059317][ C1] tty_ldisc_open+0xa6/0x110 [ 971.063892][ C1] tty_set_ldisc+0x389/0x560 [ 971.068465][ C1] tty_ioctl+0xbdc/0xdc0 [ 971.072736][ C1] ? __pfx_tty_ioctl+0x10/0x10 [ 971.077481][ C1] __se_sys_ioctl+0xfc/0x170 [ 971.082079][ C1] do_syscall_64+0xf3/0x230 [ 971.086568][ C1] ? clear_bhb_loop+0x35/0x90 [ 971.091252][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.097128][ C1] RIP: 0033:0x7f1743575f19 [ 971.101547][ C1] RSP: 002b:00007f1742f7b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.109992][ C1] RAX: ffffffffffffffda RBX: 00007f17437062c0 RCX: 00007f1743575f19 [ 971.117969][ C1] RDX: 0000000020000040 RSI: 0000000000005423 RDI: 0000000000000008 [ 971.125995][ C1] RBP: 00007f17435e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 971.133980][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.142303][ C1] R13: 000000000000006e R14: 00007f17437062c0 R15: 00007ffe010395d8 [ 971.151687][ C1] [ 971.154708][ C1] DEBUG: waiting rtnl_mutex for 1945 jiffies. [ 971.160782][ C1] task:syz.1.3354 state:D stack:27392 pid:16677 tgid:16658 ppid:16000 flags:0x00000004 [ 971.170980][ C1] Call Trace: [ 971.174249][ C1] [ 971.177199][ C1] __schedule+0x1800/0x4a60 [ 971.181735][ C1] ? __pfx___schedule+0x10/0x10 [ 971.186581][ C1] ? __pfx_lock_release+0x10/0x10 [ 971.191614][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 971.197061][ C1] ? schedule+0x90/0x320 [ 971.201320][ C1] schedule+0x14b/0x320 [ 971.205469][ C1] schedule_preempt_disabled+0x13/0x30 [ 971.210943][ C1] __mutex_lock+0x6a4/0xd70 [ 971.215441][ C1] ? __mutex_lock+0x527/0xd70 [ 971.220125][ C1] ? vlan_ioctl_handler+0x112/0x9d0 [ 971.225316][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 971.230363][ C1] ? get_rtnl_holder+0x144/0x190 [ 971.235288][ C1] vlan_ioctl_handler+0x112/0x9d0 [ 971.240351][ C1] ? sock_ioctl+0x664/0x8e0 [ 971.244868][ C1] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 971.250432][ C1] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 971.255991][ C1] sock_ioctl+0x683/0x8e0 [ 971.260337][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 971.265193][ C1] ? __fget_files+0x29/0x470 [ 971.269807][ C1] ? __fget_files+0x3f6/0x470 [ 971.274471][ C1] ? __fget_files+0x29/0x470 [ 971.279071][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 971.283997][ C1] ? security_file_ioctl+0x87/0xb0 [ 971.289118][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 971.293965][ C1] __se_sys_ioctl+0xfc/0x170 [ 971.298543][ C1] do_syscall_64+0xf3/0x230 [ 971.303056][ C1] ? clear_bhb_loop+0x35/0x90 [ 971.307724][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.313637][ C1] RIP: 0033:0x7f1743575f19 [ 971.318038][ C1] RSP: 002b:00007f1742f39048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.326467][ C1] RAX: ffffffffffffffda RBX: 00007f1743706470 RCX: 00007f1743575f19 [ 971.334475][ C1] RDX: 0000000020000080 RSI: 0000000000008982 RDI: 0000000000000004 [ 971.342484][ C1] RBP: 00007f17435e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 971.350483][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.358445][ C1] R13: 000000000000006e R14: 00007f1743706470 R15: 00007ffe010395d8 [ 971.366439][ C1] [ 971.369465][ C1] DEBUG: waiting rtnl_mutex for 884 jiffies. [ 971.375425][ C1] task:syz.0.3378 state:D stack:24504 pid:16750 tgid:16746 ppid:14689 flags:0x00000000 [ 971.385596][ C1] Call Trace: [ 971.388985][ C1] [ 971.391907][ C1] __schedule+0x1800/0x4a60 [ 971.396414][ C1] ? __pfx___schedule+0x10/0x10 [ 971.401275][ C1] ? __pfx_lock_release+0x10/0x10 [ 971.406288][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 971.411763][ C1] ? schedule+0x90/0x320 [ 971.415999][ C1] schedule+0x14b/0x320 [ 971.420170][ C1] schedule_preempt_disabled+0x13/0x30 [ 971.425630][ C1] __mutex_lock+0x6a4/0xd70 [ 971.430149][ C1] ? __mutex_lock+0x527/0xd70 [ 971.434816][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 971.440375][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 971.445404][ C1] ? get_rtnl_holder+0x144/0x190 [ 971.450360][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 971.455293][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 971.460411][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 971.465857][ C1] ? ref_tracker_free+0x643/0x7e0 [ 971.470894][ C1] netlink_rcv_skb+0x1e3/0x430 [ 971.475641][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 971.481136][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 971.486412][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 971.491610][ C1] netlink_unicast+0x7f6/0x990 [ 971.496363][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 971.501649][ C1] ? __virt_addr_valid+0x183/0x530 [ 971.506746][ C1] ? __check_object_size+0x49c/0x900 [ 971.512034][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 971.517155][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 971.521949][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 971.527231][ C1] ? __import_iovec+0x536/0x820 [ 971.532088][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 971.537013][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 971.542299][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 971.547761][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 971.553052][ C1] __sock_sendmsg+0x221/0x270 [ 971.557716][ C1] ____sys_sendmsg+0x525/0x7d0 [ 971.562495][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 971.567770][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 971.572362][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 971.577477][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 971.583822][ C1] ? do_syscall_64+0x100/0x230 [ 971.588603][ C1] ? do_syscall_64+0xb6/0x230 [ 971.593280][ C1] do_syscall_64+0xf3/0x230 [ 971.597761][ C1] ? clear_bhb_loop+0x35/0x90 [ 971.602450][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.608323][ C1] RIP: 0033:0x7f6a34b75f19 [ 971.612750][ C1] RSP: 002b:00007f6a358d4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 971.621174][ C1] RAX: ffffffffffffffda RBX: 00007f6a34d06038 RCX: 00007f6a34b75f19 [ 971.629149][ C1] RDX: 0000000000000000 RSI: 0000000020001300 RDI: 0000000000000009 [ 971.637105][ C1] RBP: 00007f6a34be4e68 R08: 0000000000000000 R09: 0000000000000000 [ 971.645079][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.653070][ C1] R13: 000000000000006e R14: 00007f6a34d06038 R15: 00007fffcb0a6918 [ 971.661058][ C1] [ 971.664061][ C1] DEBUG: waiting rtnl_mutex for 1766 jiffies. [ 971.670122][ C1] task:syz.2.3355 state:D stack:23800 pid:16671 tgid:16666 ppid:14565 flags:0x00000004 [ 971.680283][ C1] Call Trace: [ 971.683546][ C1] [ 971.686460][ C1] __schedule+0x1800/0x4a60 [ 971.690981][ C1] ? __pfx___schedule+0x10/0x10 [ 971.695817][ C1] ? __pfx_lock_release+0x10/0x10 [ 971.700846][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 971.706292][ C1] ? schedule+0x90/0x320 [ 971.710533][ C1] schedule+0x14b/0x320 [ 971.714671][ C1] schedule_preempt_disabled+0x13/0x30 [ 971.720130][ C1] __mutex_lock+0x6a4/0xd70 [ 971.724625][ C1] ? __mutex_lock+0x527/0xd70 [ 971.729308][ C1] ? rtnl_dumpit+0x9e/0x210 [ 971.733796][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 971.738830][ C1] ? __alloc_skb+0x28f/0x440 [ 971.743496][ C1] ? get_rtnl_holder+0x144/0x190 [ 971.748420][ C1] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 971.753799][ C1] rtnl_dumpit+0x9e/0x210 [ 971.758118][ C1] netlink_dump+0x647/0xd80 [ 971.762631][ C1] ? __pfx_netlink_dump+0x10/0x10 [ 971.767650][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 971.772682][ C1] __netlink_dump_start+0x5a2/0x790 [ 971.777874][ C1] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 971.783249][ C1] rtnetlink_rcv_msg+0xb42/0xd00 [ 971.788177][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 971.793640][ C1] ? __pfx_rtnl_dumpit+0x10/0x10 [ 971.798564][ C1] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 971.803969][ C1] ? ref_tracker_free+0x643/0x7e0 [ 971.809001][ C1] netlink_rcv_skb+0x1e3/0x430 [ 971.813748][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 971.819212][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 971.824510][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 971.829734][ C1] netlink_unicast+0x7f6/0x990 [ 971.834488][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 971.839780][ C1] ? __virt_addr_valid+0x183/0x530 [ 971.844873][ C1] ? __check_object_size+0x49c/0x900 [ 971.850155][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 971.855256][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 971.860031][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 971.865299][ C1] ? __import_iovec+0x536/0x820 [ 971.870151][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 971.875071][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 971.880352][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 971.885796][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 971.891077][ C1] __sock_sendmsg+0x221/0x270 [ 971.895745][ C1] ____sys_sendmsg+0x525/0x7d0 [ 971.900520][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 971.905795][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 971.910388][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 971.915488][ C1] ? security_bpf+0x87/0xb0 [ 971.920011][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 971.926334][ C1] ? do_syscall_64+0x100/0x230 [ 971.931120][ C1] ? do_syscall_64+0xb6/0x230 [ 971.935782][ C1] do_syscall_64+0xf3/0x230 [ 971.940308][ C1] ? clear_bhb_loop+0x35/0x90 [ 971.944994][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.950893][ C1] RIP: 0033:0x7fe417d75f19 [ 971.955291][ C1] RSP: 002b:00007fe418b21048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 971.963714][ C1] RAX: ffffffffffffffda RBX: 00007fe417f06038 RCX: 00007fe417d75f19 [ 971.971692][ C1] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 971.979669][ C1] RBP: 00007fe417de4e68 R08: 0000000000000000 R09: 0000000000000000 [ 971.987620][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.995595][ C1] R13: 000000000000006e R14: 00007fe417f06038 R15: 00007ffcbe064828 [ 972.003577][ C1] [ 972.006578][ C1] DEBUG: waiting rtnl_mutex for 1472 jiffies. [ 972.012638][ C1] task:syz.3.3369 state:D stack:26208 pid:16733 tgid:16731 ppid:13910 flags:0x00004004 [ 972.022802][ C1] Call Trace: [ 972.026082][ C1] [ 972.029041][ C1] __schedule+0x1800/0x4a60 [ 972.033581][ C1] ? __pfx___schedule+0x10/0x10 [ 972.038420][ C1] ? __pfx_lock_release+0x10/0x10 [ 972.043460][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 972.048933][ C1] ? schedule+0x90/0x320 [ 972.053193][ C1] schedule+0x14b/0x320 [ 972.057333][ C1] schedule_preempt_disabled+0x13/0x30 [ 972.062817][ C1] __mutex_lock+0x6a4/0xd70 [ 972.067324][ C1] ? __mutex_lock+0x527/0xd70 [ 972.072026][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 972.077137][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 972.082186][ C1] ? get_rtnl_holder+0x144/0x190 [ 972.087110][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 972.092064][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 972.097184][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 972.102676][ C1] ? ref_tracker_free+0x643/0x7e0 [ 972.107698][ C1] netlink_rcv_skb+0x1e3/0x430 [ 972.112490][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 972.117941][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 972.123247][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 972.128431][ C1] netlink_unicast+0x7f6/0x990 [ 972.133217][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 972.138489][ C1] ? __virt_addr_valid+0x183/0x530 [ 972.143607][ C1] ? __check_object_size+0x49c/0x900 [ 972.148901][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 972.154004][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 972.158807][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.164105][ C1] ? __mutex_trylock_common+0x183/0x2e0 [ 972.169677][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 972.174627][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 972.179935][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 972.185388][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.190690][ C1] __sock_sendmsg+0x221/0x270 [ 972.195363][ C1] sock_sendmsg+0x134/0x200 [ 972.199881][ C1] ? __pfx_sock_sendmsg+0x10/0x10 [ 972.204925][ C1] ? iov_iter_bvec+0x4e/0x180 [ 972.209612][ C1] splice_to_socket+0xa13/0x10b0 [ 972.214541][ C1] ? __pfx_lock_release+0x10/0x10 [ 972.219584][ C1] ? __pfx_splice_to_socket+0x10/0x10 [ 972.224958][ C1] ? __lock_acquire+0x1384/0x2050 [ 972.230010][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 972.235392][ C1] ? security_file_permission+0x7f/0xa0 [ 972.240948][ C1] ? rw_verify_area+0x1d2/0x6b0 [ 972.245786][ C1] ? __pfx_splice_to_socket+0x10/0x10 [ 972.251169][ C1] do_splice+0xd77/0x1900 [ 972.255492][ C1] ? __pfx_lock_release+0x10/0x10 [ 972.260525][ C1] ? __pfx_reacquire_held_locks+0x10/0x10 [ 972.266242][ C1] ? pipe_clear_nowait+0x196/0x220 [ 972.271365][ C1] ? __pfx_do_splice+0x10/0x10 [ 972.276126][ C1] __se_sys_splice+0x331/0x4a0 [ 972.280902][ C1] ? __pfx___se_sys_splice+0x10/0x10 [ 972.286172][ C1] ? exc_page_fault+0x590/0x8c0 [ 972.291057][ C1] ? __x64_sys_splice+0x21/0xf0 [ 972.296003][ C1] do_syscall_64+0xf3/0x230 [ 972.300524][ C1] ? clear_bhb_loop+0x35/0x90 [ 972.305200][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.311113][ C1] RIP: 0033:0x7f355b375f19 [ 972.315511][ C1] RSP: 002b:00007f355c110048 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 972.323935][ C1] RAX: ffffffffffffffda RBX: 00007f355b506038 RCX: 00007f355b375f19 [ 972.331913][ C1] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 972.339895][ C1] RBP: 00007f355b3e4e68 R08: 000000000004ffe2 R09: 0000000000000000 [ 972.347855][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 972.355863][ C1] R13: 000000000000006e R14: 00007f355b506038 R15: 00007fff4a7c6ab8 [ 972.363864][ C1] [ 972.366889][ C1] DEBUG: waiting rtnl_mutex for 1423 jiffies. [ 972.372982][ C1] task:kworker/u8:9 state:D stack:20472 pid:2817 tgid:2817 ppid:2 flags:0x00004000 [ 972.383158][ C1] Workqueue: netns cleanup_net [ 972.387922][ C1] Call Trace: [ 972.391212][ C1] [ 972.394138][ C1] __schedule+0x1800/0x4a60 [ 972.398701][ C1] ? __pfx___schedule+0x10/0x10 [ 972.403560][ C1] ? __pfx_lock_release+0x10/0x10 [ 972.408627][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 972.414105][ C1] ? kthread_data+0x52/0xd0 [ 972.418639][ C1] ? schedule+0x90/0x320 [ 972.422885][ C1] ? wq_worker_sleeping+0x66/0x240 [ 972.427991][ C1] ? schedule+0x90/0x320 [ 972.432241][ C1] schedule+0x14b/0x320 [ 972.436385][ C1] schedule_preempt_disabled+0x13/0x30 [ 972.441858][ C1] __mutex_lock+0x6a4/0xd70 [ 972.446360][ C1] ? __mutex_lock+0x527/0xd70 [ 972.451051][ C1] ? wg_destruct+0x25/0x2e0 [ 972.455545][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 972.460597][ C1] ? __pfx_free_percpu+0x10/0x10 [ 972.465537][ C1] ? get_rtnl_holder+0x144/0x190 [ 972.470499][ C1] ? __pfx_wg_destruct+0x10/0x10 [ 972.475426][ C1] ? __pfx_wg_destruct+0x10/0x10 [ 972.480371][ C1] wg_destruct+0x25/0x2e0 [ 972.484691][ C1] ? __pfx_wg_destruct+0x10/0x10 [ 972.489643][ C1] netdev_run_todo+0xe1a/0x1000 [ 972.494486][ C1] ? __pfx_netdev_run_todo+0x10/0x10 [ 972.499778][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 972.505661][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 972.511821][ C1] default_device_exit_batch+0xa14/0xa90 [ 972.517445][ C1] ? __pfx___might_resched+0x10/0x10 [ 972.522739][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 972.528903][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 972.534173][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 972.540337][ C1] cleanup_net+0x89d/0xcc0 [ 972.544748][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 972.549703][ C1] ? process_scheduled_works+0x945/0x1830 [ 972.555412][ C1] process_scheduled_works+0xa2c/0x1830 [ 972.560984][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 972.567139][ C1] ? assign_work+0x364/0x3d0 [ 972.571831][ C1] worker_thread+0x86d/0xd40 [ 972.576415][ C1] ? __kthread_parkme+0x169/0x1d0 [ 972.581448][ C1] ? __pfx_worker_thread+0x10/0x10 [ 972.586591][ C1] kthread+0x2f0/0x390 [ 972.590696][ C1] ? __pfx_worker_thread+0x10/0x10 [ 972.595803][ C1] ? __pfx_kthread+0x10/0x10 [ 972.600403][ C1] ret_from_fork+0x4b/0x80 [ 972.604814][ C1] ? __pfx_kthread+0x10/0x10 [ 972.609409][ C1] ret_from_fork_asm+0x1a/0x30 [ 972.614172][ C1] [ 972.617173][ C1] DEBUG: waiting rtnl_mutex for 1057 jiffies. [ 972.623239][ C1] task:syz-executor state:D stack:21728 pid:16487 tgid:16487 ppid:16465 flags:0x00000000 [ 972.633411][ C1] Call Trace: [ 972.636694][ C1] [ 972.639630][ C1] __schedule+0x1800/0x4a60 [ 972.644144][ C1] ? __pfx___schedule+0x10/0x10 [ 972.649014][ C1] ? __pfx_lock_release+0x10/0x10 [ 972.654027][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 972.659500][ C1] ? schedule+0x90/0x320 [ 972.663733][ C1] schedule+0x14b/0x320 [ 972.667872][ C1] schedule_preempt_disabled+0x13/0x30 [ 972.673346][ C1] __mutex_lock+0x6a4/0xd70 [ 972.677846][ C1] ? __mutex_lock+0x527/0xd70 [ 972.682533][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 972.687721][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 972.692758][ C1] ? get_rtnl_holder+0x144/0x190 [ 972.697679][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 972.702624][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 972.707726][ C1] ? __lock_acquire+0x1384/0x2050 [ 972.712759][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 972.718212][ C1] netlink_rcv_skb+0x1e3/0x430 [ 972.722978][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 972.728440][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 972.733848][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 972.739152][ C1] netlink_unicast+0x7f6/0x990 [ 972.743905][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 972.749201][ C1] ? __virt_addr_valid+0x183/0x530 [ 972.754298][ C1] ? __check_object_size+0x49c/0x900 [ 972.759590][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 972.764691][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 972.769466][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.774735][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 972.779688][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 972.785045][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 972.790514][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.795870][ C1] __sock_sendmsg+0x221/0x270 [ 972.800558][ C1] __sys_sendto+0x3a4/0x4f0 [ 972.805050][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 972.810083][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 972.815265][ C1] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 972.821352][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 972.827405][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 972.833753][ C1] __x64_sys_sendto+0xde/0x100 [ 972.838508][ C1] do_syscall_64+0xf3/0x230 [ 972.843015][ C1] ? clear_bhb_loop+0x35/0x90 [ 972.847679][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.853583][ C1] RIP: 0033:0x7f622b377cac [ 972.857979][ C1] RSP: 002b:00007ffed1b90700 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 972.866403][ C1] RAX: ffffffffffffffda RBX: 00007f622c034620 RCX: 00007f622b377cac [ 972.874379][ C1] RDX: 0000000000000044 RSI: 00007f622c034670 RDI: 0000000000000003 [ 972.882356][ C1] RBP: 0000000000000000 R08: 00007ffed1b90754 R09: 000000000000000c [ 972.890331][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 972.898295][ C1] R13: 0000000000000000 R14: 00007f622c034670 R15: 0000000000000000 [ 972.906280][ C1] [ 972.909321][ C1] [ 972.909321][ C1] Showing all locks held in the system: [ 972.917064][ C1] 4 locks held by kworker/u8:9/2817: [ 972.922353][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 972.933244][ C1] #1: ffffc90008e67d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 972.943778][ C1] #2: ffffffff8f5fddd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 972.953187][ C1] #3: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x25/0x2e0 [ 972.961995][ C1] 2 locks held by getty/4853: [ 972.966651][ C1] #0: ffff88802a92c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 972.976403][ C1] #1: ffffc900034c32f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 972.986510][ C1] 3 locks held by kworker/u9:3/5113: [ 972.991800][ C1] #0: ffff88804d616148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 973.002595][ C1] #1: ffffc9000404fd00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 973.014697][ C1] #2: ffff888060800d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1bf/0x6b0 [ 973.024109][ C1] 2 locks held by kworker/u9:1/13518: [ 973.029483][ C1] 1 lock held by syz-executor/16487: [ 973.034742][ C1] #0: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 973.044145][ C1] 2 locks held by syz.1.3354/16669: [ 973.049338][ C1] 3 locks held by syz.1.3354/16673: [ 973.054518][ C1] #0: ffff88805aa051c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_set_ldisc+0x52/0x560 [ 973.064181][ C1] #1: ffff88805aa050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x6c/0xc0 [ 973.073587][ C1] #2: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: slip_open+0xda/0xe80 [ 973.082213][ C1] 1 lock held by syz.1.3354/16674: [ 973.087391][ C1] #0: ffff88805aa050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 973.097156][ C1] 2 locks held by syz.1.3354/16677: [ 973.102352][ C1] #0: ffffffff8f5ef5a8 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x664/0x8e0 [ 973.111668][ C1] #1: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 973.121183][ C1] 2 locks held by syz.2.3355/16671: [ 973.126357][ C1] #0: ffff888066c56678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 973.136724][ C1] #1: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x9e/0x210 [ 973.145521][ C1] 1 lock held by syz.3.3369/16732: [ 973.150630][ C1] #0: ffff88804e8db868 (&pipe->mutex){+.+.}-{3:3}, at: pipe_write+0xd60/0x1a40 [ 973.159695][ C1] 2 locks held by syz.3.3369/16733: [ 973.164870][ C1] #0: ffff88804e8db868 (&pipe->mutex){+.+.}-{3:3}, at: splice_to_socket+0xee/0x10b0 [ 973.174363][ C1] #1: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 973.183770][ C1] 1 lock held by syz-executor/16741: [ 973.189062][ C1] #0: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 973.198451][ C1] 2 locks held by syz.0.3378/16746: [ 973.203659][ C1] #0: ffff88805847a008 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 973.213848][ C1] #1: ffffffff8e33ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 973.224760][ C1] 1 lock held by syz.0.3378/16750: [ 973.229892][ C1] #0: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 973.239317][ C1] [ 973.241649][ C1] ============================================= [ 973.241649][ C1] [ 973.258344][T15047] Bluetooth: hci4: command tx timeout [ 973.269432][T15047] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 973.285469][T15047] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 973.335414][T15047] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 973.349324][T15047] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 973.362173][T15047] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 973.369485][T15047] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 973.464274][T16733] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.3369'. [ 973.509900][T16733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3369'. [ 974.084085][T16487] hsr_slave_0: entered promiscuous mode [ 974.241542][T16487] hsr_slave_1: entered promiscuous mode [ 974.280186][T15047] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 974.298364][T15047] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 974.306824][T16487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 974.324622][T15047] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 974.368893][T15047] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 974.375965][T16487] Cannot create hsr debugfs directory [ 974.386490][T15047] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 974.394134][T15047] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 974.558269][T15047] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 974.581240][T15047] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 974.631308][T15047] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 974.640906][T15047] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 974.649466][T15047] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 974.656776][T15047] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 974.744934][ T5102] usb 3-1: USB disconnect, device number 36 [ 975.298958][T13518] Bluetooth: hci4: command tx timeout [ 975.362607][T16741] chnl_net:caif_netlink_parms(): no params data found [ 975.459082][T13518] Bluetooth: hci7: command tx timeout [ 975.594918][ T2817] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.689675][T16748] chnl_net:caif_netlink_parms(): no params data found [ 975.743970][ T2817] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.821466][ T2817] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.962593][T16741] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.970823][T16741] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.978056][T16741] bridge_slave_0: entered allmulticast mode [ 975.987466][T16741] bridge_slave_0: entered promiscuous mode [ 975.998297][T16741] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.007378][T16741] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.015039][T16741] bridge_slave_1: entered allmulticast mode [ 976.025541][T16741] bridge_slave_1: entered promiscuous mode [ 976.063064][ T2817] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.154286][T16754] chnl_net:caif_netlink_parms(): no params data found [ 976.208945][T16748] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.216177][T16748] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.223539][T16748] bridge_slave_0: entered allmulticast mode [ 976.232177][T16748] bridge_slave_0: entered promiscuous mode [ 976.243525][T16741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.262310][T16741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.305761][T16756] chnl_net:caif_netlink_parms(): no params data found [ 976.323166][T16748] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.333671][T16748] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.341814][T16748] bridge_slave_1: entered allmulticast mode [ 976.350669][T16748] bridge_slave_1: entered promiscuous mode [ 976.499718][T13518] Bluetooth: hci2: command tx timeout [ 976.531410][T16748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.546020][T16748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.566224][T16741] team0: Port device team_slave_0 added [ 976.577135][T16741] team0: Port device team_slave_1 added [ 976.606997][T16754] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.614658][T16754] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.622045][T16754] bridge_slave_0: entered allmulticast mode [ 976.629231][T16754] bridge_slave_0: entered promiscuous mode [ 976.708510][T16754] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.716066][T16754] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.723430][T16754] bridge_slave_1: entered allmulticast mode [ 976.731636][T16754] bridge_slave_1: entered promiscuous mode [ 976.741312][T13518] Bluetooth: hci0: command tx timeout [ 976.790673][T16741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.797645][T16741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.824450][T16741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.836424][T16487] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 976.929081][T16748] team0: Port device team_slave_0 added [ 976.936461][T16741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.945328][T16741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.972883][T16741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.991556][T16487] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 977.005598][T16754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.018558][T16754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.099055][ T2817] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.125263][T16756] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.138904][T16756] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.146098][T16756] bridge_slave_0: entered allmulticast mode [ 977.157017][T16756] bridge_slave_0: entered promiscuous mode [ 977.167949][T16748] team0: Port device team_slave_1 added [ 977.197486][ T2817] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.231576][T16487] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 977.243105][T16487] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 977.271281][T16756] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.278442][T16756] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.288427][T16756] bridge_slave_1: entered allmulticast mode [ 977.296098][T16756] bridge_slave_1: entered promiscuous mode [ 977.378941][T13518] Bluetooth: hci4: command tx timeout [ 977.400698][ T2817] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.434104][T16754] team0: Port device team_slave_0 added [ 977.453907][T16756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.490511][T16741] hsr_slave_0: entered promiscuous mode [ 977.496866][T16741] hsr_slave_1: entered promiscuous mode [ 977.508317][T16741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 977.515936][T16741] Cannot create hsr debugfs directory [ 977.524419][T16754] team0: Port device team_slave_1 added [ 977.550028][T13518] Bluetooth: hci7: command tx timeout [ 977.561927][ T2817] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.577182][T16756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.603470][T16748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.612389][T16748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.639230][T16748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.652342][T16748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.662767][T16748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.689742][T16748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.803681][T16756] team0: Port device team_slave_0 added [ 977.850484][T16754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.857471][T16754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.886974][T16754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.915984][T16756] team0: Port device team_slave_1 added [ 977.948399][T16748] hsr_slave_0: entered promiscuous mode [ 977.955007][T16748] hsr_slave_1: entered promiscuous mode [ 977.961474][T16748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 977.970650][T16748] Cannot create hsr debugfs directory [ 977.979456][T16754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.986726][T16754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.014839][T16754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.055247][T16756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.062533][T16756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.090681][T16756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.110461][T16756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.117449][T16756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.146183][T16756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.333320][T16754] hsr_slave_0: entered promiscuous mode [ 978.340478][T16754] hsr_slave_1: entered promiscuous mode [ 978.346814][T16754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 978.354853][T16754] Cannot create hsr debugfs directory [ 978.496506][ T2817] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.529928][T16756] hsr_slave_0: entered promiscuous mode [ 978.536242][T16756] hsr_slave_1: entered promiscuous mode [ 978.543528][T16756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 978.551522][T16756] Cannot create hsr debugfs directory [ 978.581485][T13518] Bluetooth: hci2: command tx timeout [ 978.636763][ T2817] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.718783][ T2817] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.789970][T16487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.819328][T15047] Bluetooth: hci0: command tx timeout [ 978.876568][ T2817] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.065838][T16487] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.087272][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.094460][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.126040][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.133261][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.262883][ T2817] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.378018][ T2817] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.459448][T15047] Bluetooth: hci4: command tx timeout [ 979.512689][ T2817] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.619204][T15047] Bluetooth: hci7: command tx timeout [ 979.649409][ T2817] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.684958][T16487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.816579][ T2817] bridge_slave_1: left allmulticast mode [ 979.828999][ T2817] bridge_slave_1: left promiscuous mode [ 979.834774][ T2817] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.845348][ T2817] bridge_slave_0: left allmulticast mode [ 979.851812][ T2817] bridge_slave_0: left promiscuous mode [ 979.857573][ T2817] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.872833][ T2817] bridge_slave_1: left allmulticast mode [ 979.878502][ T2817] bridge_slave_1: left promiscuous mode [ 979.887081][ T2817] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.899476][ T2817] bridge_slave_0: left allmulticast mode [ 979.905637][ T2817] bridge_slave_0: left promiscuous mode [ 979.911999][ T2817] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.923327][ T2817] bridge_slave_1: left allmulticast mode [ 979.930290][ T2817] bridge_slave_1: left promiscuous mode [ 979.936096][ T2817] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.946807][ T2817] bridge_slave_0: left allmulticast mode [ 979.952823][ T2817] bridge_slave_0: left promiscuous mode [ 979.958534][ T2817] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.969935][ T2817] bridge_slave_1: left allmulticast mode [ 979.975603][ T2817] bridge_slave_1: left promiscuous mode [ 979.983440][ T2817] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.999374][ T2817] bridge_slave_0: left allmulticast mode [ 980.005040][ T2817] bridge_slave_0: left promiscuous mode [ 980.014182][ T2817] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.027354][ T2817] bridge_slave_1: left allmulticast mode [ 980.033801][ T2817] bridge_slave_1: left promiscuous mode [ 980.040062][ T2817] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.052482][ T2817] bridge_slave_0: left allmulticast mode [ 980.058154][ T2817] bridge_slave_0: left promiscuous mode [ 980.064647][ T2817] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.077332][ T2817] tipc: Resetting bearer [ 980.665314][T15047] Bluetooth: hci2: command tx timeout [ 980.900755][T15047] Bluetooth: hci0: command tx timeout [ 981.543698][ T2817] tipc: Disabling bearer [ 981.698942][T15047] Bluetooth: hci7: command tx timeout [ 982.168268][ T2817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.187999][ T2817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.201374][ T2817] bond0 (unregistering): Released all slaves [ 982.216200][ T2817] bond1 (unregistering): left allmulticast mode [ 982.222784][ T2817] batadv1: left allmulticast mode [ 982.227891][ T2817] bond1 (unregistering): left promiscuous mode [ 982.235441][ T2817] batadv1: left promiscuous mode [ 982.271438][ T2817] bond1 (unregistering): (slave batadv1): Releasing active interface [ 982.286000][ T2817] bond1 (unregistering): Released all slaves [ 982.483693][ T2817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.497918][ T2817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.515352][ T2817] bond0 (unregistering): Released all slaves [ 982.530671][ T2817] bond1 (unregistering): Released all slaves [ 982.740825][T15047] Bluetooth: hci2: command tx timeout [ 982.750109][ T2817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.763173][ T2817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.775658][ T2817] bond0 (unregistering): Released all slaves [ 982.978516][ T2817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.987558][T15047] Bluetooth: hci0: command tx timeout [ 983.002711][ T2817] bond0 (unregistering): Released all slaves [ 983.217447][ T2817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 983.229870][ T2817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.241512][ T2817] bond0 (unregistering): Released all slaves [ 983.256244][ T2817] bond1 (unregistering): Released all slaves [ 983.467965][ T2817] tipc: Left network mode [ 983.553072][ T2817] tipc: Disabling bearer [ 983.559387][ T2817] tipc: Left network mode [ 983.564504][T16487] veth0_vlan: entered promiscuous mode [ 983.651867][T16487] veth1_vlan: entered promiscuous mode [ 983.721991][T16487] veth0_macvtap: entered promiscuous mode [ 983.760541][T16487] veth1_macvtap: entered promiscuous mode [ 983.824751][T16487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.845442][T16487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.859425][T16487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.876361][T16487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.886571][T16487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.897141][T16487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.908036][T16487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.919231][T16487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.929708][T16487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.942157][T16487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.952076][T16487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.963028][T16487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.973133][T16487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.983779][T16487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.993624][T16487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.005181][T16487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.032921][T16487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.120858][T16487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.135412][T16487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.146802][T16487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.157555][T16487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.167503][T16487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.178163][T16487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.188424][T16487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.199074][T16487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.209165][T16487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.221533][T16487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.232276][T16487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.243064][T16487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.253633][T16487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.264510][T16487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.274670][T16487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.285270][T16487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.309642][T16487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.424603][T16487] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.434518][T16487] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.444181][T16487] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.453905][T16487] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.497462][T16748] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 984.526727][T16748] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 984.591932][T16748] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 984.606471][T16748] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 984.899471][ T2803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.907319][ T2803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.036275][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.045056][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.258349][T16795] capability: warning: `syz.4.3381' uses 32-bit capabilities (legacy support in use) [ 985.326909][T16748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.524877][T16748] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.632390][T16748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 985.648718][T16748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 985.663692][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.670889][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.681538][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.688708][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.911915][T16799] loop4: detected capacity change from 0 to 512 [ 986.195665][T16799] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 986.813789][T16748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.006130][ T2817] hsr_slave_0: left promiscuous mode [ 987.011600][T16811] netlink: 644 bytes leftover after parsing attributes in process `syz.4.3386'. [ 987.040795][ T2817] hsr_slave_1: left promiscuous mode [ 987.053853][ T2817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.068711][ T2817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.087791][ T2817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.099252][ T2817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.129391][ T2817] hsr_slave_0: left promiscuous mode [ 987.136554][ T2817] hsr_slave_1: left promiscuous mode [ 987.146292][ T2817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.154059][ T2817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.162802][ T2817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.170535][ T2817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.187970][ T2817] hsr_slave_0: left promiscuous mode [ 987.194078][ T2817] hsr_slave_1: left promiscuous mode [ 987.204082][ T2817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.212475][ T2817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.221897][ T2817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.229645][ T2817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.242407][ T2817] hsr_slave_0: left promiscuous mode [ 987.248255][ T2817] hsr_slave_1: left promiscuous mode [ 987.259316][ T2817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.266850][ T2817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.275305][ T2817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.282983][ T2817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.297852][ T2817] hsr_slave_0: left promiscuous mode [ 987.304928][ T2817] hsr_slave_1: left promiscuous mode [ 987.312729][ T2817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.321068][ T2817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.330082][ T2817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.337626][ T2817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.476118][ T2817] veth1_macvtap: left promiscuous mode [ 987.481962][ T2817] veth0_macvtap: left promiscuous mode [ 987.487677][ T2817] veth1_vlan: left promiscuous mode [ 987.494085][ T2817] veth0_vlan: left promiscuous mode [ 987.507751][ T2817] veth1_macvtap: left promiscuous mode [ 987.515179][ T2817] veth0_macvtap: left promiscuous mode [ 987.521185][ T2817] veth1_vlan: left promiscuous mode [ 987.527120][ T2817] veth0_vlan: left promiscuous mode [ 987.537149][ T2817] veth1_macvtap: left promiscuous mode [ 987.544269][ T2817] veth0_macvtap: left promiscuous mode [ 987.550242][ T2817] veth1_vlan: left promiscuous mode [ 987.555648][ T2817] veth0_vlan: left promiscuous mode [ 987.562814][ T2817] veth1_macvtap: left promiscuous mode [ 987.568440][ T2817] veth0_macvtap: left promiscuous mode [ 987.574211][ T2817] veth1_vlan: left promiscuous mode [ 987.579990][ T2817] veth0_vlan: left promiscuous mode [ 987.586775][ T2817] veth1_macvtap: left promiscuous mode [ 987.592460][ T2817] veth0_macvtap: left promiscuous mode [ 987.598546][ T2817] veth1_vlan: left promiscuous mode [ 987.604244][ T2817] veth0_vlan: left promiscuous mode [ 989.491706][ T2817] team0 (unregistering): Port device team_slave_1 removed [ 989.576470][ T2817] team0 (unregistering): Port device team_slave_0 removed [ 990.971354][ T2817] team0 (unregistering): Port device team_slave_1 removed [ 991.041932][ T2817] team0 (unregistering): Port device team_slave_0 removed [ 992.387825][ T2817] team0 (unregistering): Port device team_slave_1 removed [ 992.457403][ T2817] team0 (unregistering): Port device team_slave_0 removed [ 993.312644][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.323069][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.775903][ T2817] team0 (unregistering): Port device team_slave_1 removed [ 993.838225][ T2817] team0 (unregistering): Port device team_slave_0 removed [ 994.498664][ C1] DEBUG: waiting rtnl_mutex for 541 jiffies. [ 994.504717][ C1] task:syz.4.3389 state:D stack:25200 pid:16829 tgid:16828 ppid:16487 flags:0x00000004 [ 994.514960][ C1] Call Trace: [ 994.518231][ C1] [ 994.521173][ C1] __schedule+0x1800/0x4a60 [ 994.525677][ C1] ? __pfx___schedule+0x10/0x10 [ 994.530544][ C1] ? __pfx_lock_release+0x10/0x10 [ 994.535560][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 994.541063][ C1] ? schedule+0x90/0x320 [ 994.545314][ C1] schedule+0x14b/0x320 [ 994.549480][ C1] schedule_preempt_disabled+0x13/0x30 [ 994.554923][ C1] __mutex_lock+0x6a4/0xd70 [ 994.559469][ C1] ? __mutex_lock+0x527/0xd70 [ 994.564163][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 994.569291][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 994.574321][ C1] ? get_rtnl_holder+0x144/0x190 [ 994.579278][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 994.584201][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 994.589355][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 994.594833][ C1] ? ref_tracker_free+0x643/0x7e0 [ 994.599950][ C1] netlink_rcv_skb+0x1e3/0x430 [ 994.604700][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 994.610170][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 994.615481][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 994.620683][ C1] netlink_unicast+0x7f6/0x990 [ 994.625439][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 994.630742][ C1] ? __virt_addr_valid+0x183/0x530 [ 994.635840][ C1] ? __check_object_size+0x49c/0x900 [ 994.641142][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 994.646246][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 994.651023][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 994.656316][ C1] ? __import_iovec+0x536/0x820 [ 994.661207][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 994.666138][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 994.671433][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 994.676890][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 994.682216][ C1] __sock_sendmsg+0x221/0x270 [ 994.686945][ C1] ____sys_sendmsg+0x525/0x7d0 [ 994.691761][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 994.697068][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 994.701678][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 994.706802][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 994.713152][ C1] ? do_syscall_64+0x100/0x230 [ 994.717903][ C1] ? do_syscall_64+0xb6/0x230 [ 994.722596][ C1] do_syscall_64+0xf3/0x230 [ 994.727097][ C1] ? clear_bhb_loop+0x35/0x90 [ 994.731786][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.737667][ C1] RIP: 0033:0x7f622b375f19 [ 994.742085][ C1] RSP: 002b:00007f622adff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 994.750536][ C1] RAX: ffffffffffffffda RBX: 00007f622b505f60 RCX: 00007f622b375f19 [ 994.758521][ C1] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 994.766597][ C1] RBP: 00007f622b3e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 994.774582][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 994.782614][ C1] R13: 000000000000000b R14: 00007f622b505f60 R15: 00007ffed1b90ac8 [ 994.790609][ C1] [ 994.793634][ C1] [ 994.793634][ C1] Showing all locks held in the system: [ 994.801355][ C1] 3 locks held by kworker/0:1/9: [ 994.806275][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 994.817374][ C1] #1: ffffc900000e7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 994.828395][ C1] #2: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 994.837403][ C1] 5 locks held by kworker/u8:1/12: [ 994.842535][ C1] #0: ffff8880b943ea18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 994.852467][ C1] #1: ffff8880b9428948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3a7/0x770 [ 994.863913][ C1] #2: ffff8880b942a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 994.873383][ C1] #3: ffffffff8e337a60 (rcu_read_lock){....}-{1:2}, at: ieee80211_sta_active_ibss+0xc7/0x330 [ 994.883706][ C1] #4: ffffffff94a25550 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x234/0x580 [ 994.894371][ C1] 3 locks held by kworker/u8:4/63: [ 994.899509][ C1] #0: ffff888029b97148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 994.911131][ C1] #1: ffffc900015e7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 994.923983][ C1] #2: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 994.933445][ C1] 5 locks held by kworker/u8:9/2817: [ 994.938763][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 994.949683][ C1] #1: ffffc90008e67d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 994.960379][ C1] #2: ffffffff8f5fddd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 994.969845][ C1] #3: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 994.979940][ C1] #4: ffffffff8e33ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 994.990909][ C1] 2 locks held by getty/4853: [ 994.995591][ C1] #0: ffff88802a92c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 995.005537][ C1] #1: ffffc900034c32f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 995.015657][ C1] 4 locks held by syz-executor/16741: [ 995.021098][ C1] #0: ffff888028fc4420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 995.030058][ C1] #1: ffff88802e879888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 995.039821][ C1] #2: ffff888022c964b8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 995.049839][ C1] #3: ffffffff8ef0c528 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 995.060207][ C1] 1 lock held by syz-executor/16748: [ 995.065469][ C1] #0: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 995.074889][ C1] 7 locks held by syz-executor/16754: [ 995.080261][ C1] #0: ffff888028fc4420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 995.089185][ C1] #1: ffff888029d8a888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 995.098993][ C1] #2: ffff888022c964b8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 995.109046][ C1] #3: ffffffff8ef0c528 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 995.119508][ C1] #4: ffff88801cecf0e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 995.128868][ C1] #5: ffff88801cece250 (&devlink->lock_key#41){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 995.138938][ C1] #6: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: nsim_create+0x408/0x890 [ 995.147887][ C1] 4 locks held by syz-executor/16756: [ 995.153292][ C1] #0: ffff888028fc4420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 995.162216][ C1] #1: ffff88802ec10c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 995.172021][ C1] #2: ffff888022c964b8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 995.182085][ C1] #3: ffffffff8ef0c528 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 995.192472][ C1] 1 lock held by syz.4.3389/16829: [ 995.197566][ C1] #0: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 995.206988][ C1] 2 locks held by dhcpcd/16834: [ 995.211863][ C1] #0: ffff88807966c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 995.221623][ C1] #1: ffffffff8e33ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 995.232518][ C1] [ 995.234845][ C1] ============================================= [ 995.234845][ C1] [ 995.899609][ T2817] team0 (unregistering): Port device team_slave_1 removed [ 995.987162][ T2817] team0 (unregistering): Port device team_slave_0 removed [ 996.259036][ C1] DEBUG: waiting rtnl_mutex for 717 jiffies. [ 996.265075][ C1] task:syz.4.3389 state:D stack:25200 pid:16829 tgid:16828 ppid:16487 flags:0x00000004 [ 996.275299][ C1] Call Trace: [ 996.278673][ C1] [ 996.281627][ C1] __schedule+0x1800/0x4a60 [ 996.286197][ C1] ? __pfx___schedule+0x10/0x10 [ 996.291132][ C1] ? __pfx_lock_release+0x10/0x10 [ 996.296178][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 996.301678][ C1] ? schedule+0x90/0x320 [ 996.305915][ C1] schedule+0x14b/0x320 [ 996.310132][ C1] schedule_preempt_disabled+0x13/0x30 [ 996.315648][ C1] __mutex_lock+0x6a4/0xd70 [ 996.320246][ C1] ? __mutex_lock+0x527/0xd70 [ 996.324966][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 996.330130][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 996.335152][ C1] ? get_rtnl_holder+0x144/0x190 [ 996.340131][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 996.345097][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 996.350309][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 996.355820][ C1] ? ref_tracker_free+0x643/0x7e0 [ 996.360894][ C1] netlink_rcv_skb+0x1e3/0x430 [ 996.365649][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 996.371151][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 996.376457][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 996.381713][ C1] netlink_unicast+0x7f6/0x990 [ 996.386529][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 996.391865][ C1] ? __virt_addr_valid+0x183/0x530 [ 996.396965][ C1] ? __check_object_size+0x49c/0x900 [ 996.402292][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 996.407439][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 996.412262][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.417577][ C1] ? __import_iovec+0x536/0x820 [ 996.422476][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 996.427406][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 996.432737][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 996.438217][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.443542][ C1] __sock_sendmsg+0x221/0x270 [ 996.448253][ C1] ____sys_sendmsg+0x525/0x7d0 [ 996.453045][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 996.458344][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 996.462982][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 996.468196][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 996.474565][ C1] ? do_syscall_64+0x100/0x230 [ 996.479368][ C1] ? do_syscall_64+0xb6/0x230 [ 996.484052][ C1] do_syscall_64+0xf3/0x230 [ 996.488539][ C1] ? clear_bhb_loop+0x35/0x90 [ 996.493261][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.499207][ C1] RIP: 0033:0x7f622b375f19 [ 996.503630][ C1] RSP: 002b:00007f622adff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 996.512098][ C1] RAX: ffffffffffffffda RBX: 00007f622b505f60 RCX: 00007f622b375f19 [ 996.520143][ C1] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 996.528120][ C1] RBP: 00007f622b3e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 996.536116][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.544145][ C1] R13: 000000000000000b R14: 00007f622b505f60 R15: 00007ffed1b90ac8 [ 996.552188][ C1] [ 996.555220][ C1] [ 996.555220][ C1] Showing all locks held in the system: [ 996.562953][ C1] 3 locks held by kworker/0:1/9: [ 996.567873][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 996.578857][ C1] #1: ffffc900000e7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 996.589856][ C1] #2: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 996.598899][ C1] 2 locks held by kworker/u8:1/12: [ 996.604033][ C1] 3 locks held by kworker/u8:4/63: [ 996.609197][ C1] #0: ffff888029b97148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 996.620859][ C1] #1: ffffc900015e7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 996.633739][ C1] #2: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 996.643247][ C1] 6 locks held by kworker/u8:9/2817: [ 996.648514][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 996.659481][ C1] #1: ffffc90008e67d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 996.670174][ C1] #2: ffffffff8f5fddd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 996.679637][ C1] #3: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 996.689737][ C1] #4: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 996.699902][ C1] #5: ffffffff8e337a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 996.709789][ C1] 2 locks held by getty/4853: [ 996.714474][ C1] #0: ffff88802a92c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 996.724309][ C1] #1: ffffc900034c32f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 996.734573][ C1] 4 locks held by syz-executor/16741: [ 996.739985][ C1] #0: ffff888028fc4420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 996.748973][ C1] #1: ffff88802e879888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 996.758806][ C1] #2: ffff888022c964b8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 996.768848][ C1] #3: ffffffff8ef0c528 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 996.779287][ C1] 1 lock held by syz-executor/16748: [ 996.784583][ C1] #0: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 996.794056][ C1] 7 locks held by syz-executor/16754: [ 996.799459][ C1] #0: ffff888028fc4420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 996.808480][ C1] #1: ffff888029d8a888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 996.818336][ C1] #2: ffff888022c964b8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 996.828369][ C1] #3: ffffffff8ef0c528 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 996.838763][ C1] #4: ffff88801cecf0e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 996.848050][ C1] #5: ffff88801cece250 (&devlink->lock_key#41){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 996.858149][ C1] #6: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: nsim_create+0x408/0x890 [ 996.867040][ C1] 4 locks held by syz-executor/16756: [ 996.872442][ C1] #0: ffff888028fc4420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 996.881416][ C1] #1: ffff88802ec10c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 996.891226][ C1] #2: ffff888022c964b8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 996.901269][ C1] #3: ffffffff8ef0c528 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 996.911725][ C1] 1 lock held by syz.4.3389/16829: [ 996.916858][ C1] #0: ffffffff8f60a948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 996.926337][ C1] 2 locks held by dhcpcd/16835: [ 996.931221][ C1] #0: ffff88804fc22258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 996.940975][ C1] #1: ffffffff8e33ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 996.951926][ C1] [ 996.954237][ C1] ============================================= [ 996.954237][ C1] [ 997.484041][T16754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 997.502528][T16754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 997.531506][T16748] veth0_vlan: entered promiscuous mode [ 997.537542][T16754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 997.574819][T16748] veth1_vlan: entered promiscuous mode [ 997.586076][T16754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 997.732009][T16839] netlink: 'syz.4.3391': attribute type 4 has an invalid length. [ 997.829035][T16748] veth0_macvtap: entered promiscuous mode [ 997.899391][T16748] veth1_macvtap: entered promiscuous mode [ 997.910846][T16839] netlink: 'syz.4.3391': attribute type 17 has an invalid length. [ 997.939317][T16741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 997.967480][T16741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 997.986166][T16741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 998.002234][T16741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 998.066850][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.087547][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.115135][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.130624][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.140760][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.140783][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.140800][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.140814][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.155333][T16748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.274234][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.297628][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.307561][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.318471][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.329309][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.345081][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.355410][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.367109][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.394097][T16748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 998.452279][T16844] netlink: 644 bytes leftover after parsing attributes in process `syz.4.3393'. [ 998.495445][T16748] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.519161][T16748] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.538810][T16748] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.547544][T16748] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.731425][T16756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 998.782962][T16756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 998.811577][T16756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 998.919047][T16754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.954580][T16756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 999.008563][T16754] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.096080][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.103284][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.129093][ T2803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.155239][ T2803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.167270][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.174459][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.429130][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.436984][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.447753][T16741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.480661][T16741] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.539464][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.546618][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.558248][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.565449][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.972930][T16756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.043136][T16756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.069418][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.076615][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.131616][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.138881][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.196826][T16754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.335839][T16741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.382274][T16867] netlink: 'syz.2.3396': attribute type 1 has an invalid length. [ 1000.414342][T16867] netlink: 9320 bytes leftover after parsing attributes in process `syz.2.3396'. [ 1000.439548][T16867] netlink: 'syz.2.3396': attribute type 1 has an invalid length. [ 1000.469511][T16867] netlink: 'syz.2.3396': attribute type 2 has an invalid length. [ 1000.470269][T16870] loop4: detected capacity change from 0 to 512 [ 1000.510550][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3396'. [ 1000.533348][T16870] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1000.563161][T16754] veth0_vlan: entered promiscuous mode [ 1000.584940][T16870] EXT4-fs: old and new quota format mixing [ 1000.596946][T16741] veth0_vlan: entered promiscuous mode [ 1000.625244][T16754] veth1_vlan: entered promiscuous mode [ 1000.685189][T16870] loop4: detected capacity change from 0 to 4096 [ 1000.716651][T16741] veth1_vlan: entered promiscuous mode [ 1000.778779][T16876] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1000.792098][ T29] audit: type=1800 audit(2000000079.739:425): pid=16870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3397" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1000.882610][T16877] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3397'. [ 1000.913227][T16741] veth0_macvtap: entered promiscuous mode [ 1000.954808][T16741] veth1_macvtap: entered promiscuous mode [ 1001.020703][T16756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.106943][T16754] veth0_macvtap: entered promiscuous mode [ 1001.132683][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.159731][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.174967][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.195937][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.210106][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.244979][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.258819][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.278676][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.288544][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.318181][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.341780][T16741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.349054][T16875] loop2: detected capacity change from 0 to 32768 [ 1001.405971][T16754] veth1_macvtap: entered promiscuous mode [ 1001.436490][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.469732][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.479782][T16882] Process accounting resumed [ 1001.493679][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.504372][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.518547][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.534721][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.546729][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.559858][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.570923][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.581460][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.618416][T16741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.763541][T16741] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.776255][T16741] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.787398][T16741] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.796338][T16741] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.810997][T16756] veth0_vlan: entered promiscuous mode [ 1001.870275][T16754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.882738][T16754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.892809][T16754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.903390][T16754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.919348][T16754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.932453][T16754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.945523][T16754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.956343][T16754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.967011][T16754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.977720][T16754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.988043][T16754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.016466][T16754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.041075][T16754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.090685][T16754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.123289][T16754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.155096][T16754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.178321][T16754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.198510][T16754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.218713][T16754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.231241][T16754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.248744][T16754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.260952][T16754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.273362][T16754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.317398][T16754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.339304][T16754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.355176][T16754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.375921][T16756] veth1_vlan: entered promiscuous mode [ 1002.525599][T13887] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.637114][T16754] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.658015][T16754] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.677731][T16754] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.696721][T16754] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.794724][T13518] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1002.819019][T13518] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1002.831870][T13518] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1002.840468][T13518] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1002.848356][T13518] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1002.855135][T13887] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.866506][T16893] loop4: detected capacity change from 0 to 512 [ 1002.867324][T16893] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1002.879712][T13518] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1002.893393][T16893] EXT4-fs: old and new quota format mixing [ 1003.017933][T16893] loop4: detected capacity change from 0 to 4096 [ 1003.035501][T13887] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.080406][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.088425][T16756] veth0_macvtap: entered promiscuous mode [ 1003.095264][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.095650][T16894] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1003.119501][ T29] audit: type=1800 audit(2000000082.049:426): pid=16893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3406" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1003.166590][T16893] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3406'. [ 1003.237172][T13887] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.338077][T16756] veth1_macvtap: entered promiscuous mode [ 1003.382797][ T2894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.402019][ T2894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.440807][T16897] loop4: detected capacity change from 0 to 256 [ 1003.483253][ T2894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.491443][ T2894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.580329][T16897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3407'. [ 1003.596388][T13518] Bluetooth: hci6: unexpected event for opcode 0x2000 [ 1003.627500][T16756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.642266][T16756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.652301][T16756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.663733][T16756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.678482][T16756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.690015][T16756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.706987][T16756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.717594][T16756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.727568][T16756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.738099][T16756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.747957][T16756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.768649][T16756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.782233][T16756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.793928][T16756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.806854][T16756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1003.848913][ T2803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.856802][ T2803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.919678][T16756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.940781][T16756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.951258][T16756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.961824][T16756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.971981][T16756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.983847][T16756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.996132][T16756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.010869][T16756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.022060][T16756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.032784][T16756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.042672][T16756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.059790][T16756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.078428][T16756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.090039][T16756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.104538][T16756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.122272][T16756] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.137173][T16756] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.145972][T16756] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.154902][T16756] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.449476][T16911] loop0: detected capacity change from 0 to 256 [ 1004.495926][T16911] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1004.661318][ T29] audit: type=1800 audit(2000000083.519:427): pid=16911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3379" name="file1" dev="loop0" ino=1048956 res=0 errno=0 [ 1004.827600][T16911] syz.0.3379: attempt to access beyond end of device [ 1004.827600][T16911] loop0: rw=0, sector=256, nr_sectors = 8 limit=256 [ 1004.987616][T13518] Bluetooth: hci3: command tx timeout [ 1005.161790][T16888] chnl_net:caif_netlink_parms(): no params data found [ 1005.201184][T13887] bridge_slave_1: left allmulticast mode [ 1005.206871][T13887] bridge_slave_1: left promiscuous mode [ 1005.212733][T13887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.262144][T13887] bridge_slave_0: left allmulticast mode [ 1005.267835][T13887] bridge_slave_0: left promiscuous mode [ 1005.295557][T16902] loop4: detected capacity change from 0 to 32768 [ 1005.297515][T13887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.746819][T16920] loop1: detected capacity change from 0 to 1024 [ 1005.873262][T16920] hfsplus: extend alloc file! (8192,65536,366) [ 1006.714963][T13887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.737205][T13887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1006.757451][T13887] bond0 (unregistering): Released all slaves [ 1007.059344][T13518] Bluetooth: hci3: command tx timeout [ 1007.117649][ T2894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.140265][ T2894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.285969][T16925] overlayfs: lower data-only dirs require metacopy support. [ 1007.327544][ T2894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.335567][ T2894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.367545][T16888] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.407984][T16888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.428990][T16888] bridge_slave_0: entered allmulticast mode [ 1007.445351][T16888] bridge_slave_0: entered promiscuous mode [ 1007.526112][T16888] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.535369][T16888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.571337][T16888] bridge_slave_1: entered allmulticast mode [ 1007.591613][T16888] bridge_slave_1: entered promiscuous mode [ 1007.619508][T13518] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1007.630390][T13518] Bluetooth: hci6: Injecting HCI hardware error event [ 1007.680000][T16888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.715783][T13518] Bluetooth: hci6: hardware error 0x00 [ 1007.816395][T13518] [ 1007.816408][T13518] ============================================ [ 1007.816414][T13518] WARNING: possible recursive locking detected [ 1007.816421][T13518] 6.10.0-next-20240719-syzkaller #0 Not tainted [ 1007.816432][T13518] -------------------------------------------- [ 1007.816438][T13518] kworker/u9:1/13518 is trying to acquire lock: [ 1007.816448][T13518] ffff888011a44148 ((wq_completion)hci6){+.+.}-{0:0}, at: __flush_workqueue+0x1b0/0x1710 [ 1007.816500][T13518] [ 1007.816500][T13518] but task is already holding lock: [ 1007.816506][T13518] ffff888011a44148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1007.816548][T13518] [ 1007.816548][T13518] other info that might help us debug this: [ 1007.816554][T13518] Possible unsafe locking scenario: [ 1007.816554][T13518] [ 1007.816560][T13518] CPU0 [ 1007.816564][T13518] ---- [ 1007.816568][T13518] lock((wq_completion)hci6); [ 1007.816580][T13518] lock((wq_completion)hci6); [ 1007.816592][T13518] [ 1007.816592][T13518] *** DEADLOCK *** [ 1007.816592][T13518] [ 1007.816596][T13518] May be due to missing lock nesting notation [ 1007.816596][T13518] [ 1007.816602][T13518] 2 locks held by kworker/u9:1/13518: [ 1007.816613][T13518] #0: ffff888011a44148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1007.816658][T13518] #1: ffffc900020bfd00 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1007.816703][T13518] [ 1007.816703][T13518] stack backtrace: [ 1007.816710][T13518] CPU: 0 UID: 0 PID: 13518 Comm: kworker/u9:1 Not tainted 6.10.0-next-20240719-syzkaller #0 [ 1007.816730][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1007.816741][T13518] Workqueue: hci6 hci_error_reset [ 1007.816762][T13518] Call Trace: [ 1007.816770][T13518] [ 1007.816778][T13518] dump_stack_lvl+0x241/0x360 [ 1007.816799][T13518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1007.816816][T13518] ? __pfx__printk+0x10/0x10 [ 1007.816839][T13518] ? lockdep_unlock+0x16a/0x300 [ 1007.816865][T13518] print_deadlock_bug+0x483/0x620 [ 1007.816887][T13518] validate_chain+0x15e2/0x5920 [ 1007.816916][T13518] ? __pfx_validate_chain+0x10/0x10 [ 1007.816937][T13518] ? __pfx_validate_chain+0x10/0x10 [ 1007.816958][T13518] ? __pfx_validate_chain+0x10/0x10 [ 1007.816978][T13518] ? __pfx_validate_chain+0x10/0x10 [ 1007.816997][T13518] ? __pfx_validate_chain+0x10/0x10 [ 1007.817014][T13518] ? __pfx_validate_chain+0x10/0x10 [ 1007.817033][T13518] ? mark_lock+0x9a/0x360 [ 1007.817058][T13518] __lock_acquire+0x1384/0x2050 [ 1007.817095][T13518] lock_acquire+0x1ed/0x550 [ 1007.817116][T13518] ? __flush_workqueue+0x1b0/0x1710 [ 1007.817144][T13518] ? __pfx_lock_acquire+0x10/0x10 [ 1007.817166][T13518] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1007.817195][T13518] ? __init_swait_queue_head+0xae/0x150 [ 1007.817218][T13518] ? __flush_workqueue+0x1b0/0x1710 [ 1007.817240][T13518] __flush_workqueue+0x1c9/0x1710 [ 1007.817263][T13518] ? __flush_workqueue+0x1b0/0x1710 [ 1007.817286][T13518] ? rcu_is_watching+0x15/0xb0 [ 1007.817303][T13518] ? trace_contention_end+0x3c/0x120 [ 1007.817326][T13518] ? __pfx___flush_workqueue+0x10/0x10 [ 1007.817357][T13518] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1007.817380][T13518] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1007.817406][T13518] drain_workqueue+0xc9/0x3a0 [ 1007.817434][T13518] destroy_workqueue+0xba/0xc40 [ 1007.817452][T13518] ? destroy_workqueue+0x86f/0xc40 [ 1007.817471][T13518] hci_release_dev+0x169/0x16b0 [ 1007.817493][T13518] ? devres_release_all+0x1eb/0x250 [ 1007.817512][T13518] ? __pfx_hci_release_dev+0x10/0x10 [ 1007.817535][T13518] ? rcu_is_watching+0x15/0xb0 [ 1007.817551][T13518] ? device_release+0x66/0x1c0 [ 1007.817569][T13518] bt_host_release+0x83/0x90 [ 1007.817586][T13518] ? __pfx_bt_host_release+0x10/0x10 [ 1007.817603][T13518] device_release+0x99/0x1c0 [ 1007.817621][T13518] kobject_put+0x22f/0x480 [ 1007.817640][T13518] ? process_scheduled_works+0x945/0x1830 [ 1007.817661][T13518] process_scheduled_works+0xa2c/0x1830 [ 1007.817697][T13518] ? __pfx_process_scheduled_works+0x10/0x10 [ 1007.817723][T13518] ? assign_work+0x364/0x3d0 [ 1007.817747][T13518] worker_thread+0x86d/0xd40 [ 1007.817773][T13518] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1007.817796][T13518] ? __kthread_parkme+0x169/0x1d0 [ 1007.817820][T13518] ? __pfx_worker_thread+0x10/0x10 [ 1007.817838][T13518] kthread+0x2f0/0x390 [ 1007.817854][T13518] ? __pfx_worker_thread+0x10/0x10 [ 1007.817876][T13518] ? __pfx_kthread+0x10/0x10 [ 1007.817892][T13518] ret_from_fork+0x4b/0x80 [ 1007.817916][T13518] ? __pfx_kthread+0x10/0x10 [ 1007.817932][T13518] ret_from_fork_asm+0x1a/0x30 [ 1007.817962][T13518] [ 1008.304772][T13887] hsr_slave_0: left promiscuous mode [ 1008.317586][T13887] hsr_slave_1: left promiscuous mode [ 1008.322223][ T29] audit: type=1326 audit(2000000087.269:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.1.3420" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e3d975f19 code=0x0 [ 1008.519511][T13887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1008.552637][T13887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.566373][T13887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1008.574988][T13887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.719587][T13887] veth1_macvtap: left promiscuous mode [ 1008.725237][T13887] veth0_macvtap: left promiscuous mode [ 1008.731380][T13887] veth1_vlan: left promiscuous mode [ 1008.736660][T13887] veth0_vlan: left promiscuous mode [ 1008.947576][T13887] team0 (unregistering): Port device team_slave_1 removed [ 1008.982514][T13887] team0 (unregistering): Port device team_slave_0 removed [ 1009.138869][T15047] Bluetooth: hci3: command tx timeout [ 1009.212408][T16888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.298461][T16888] team0: Port device team_slave_0 added [ 1009.323037][T16888] team0: Port device team_slave_1 added [ 1009.364813][T16888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.372262][T16888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.405617][T16888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.417356][T16888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.425726][T16888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.454496][T16888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.527835][T16888] hsr_slave_0: entered promiscuous mode [ 1009.534790][T16888] hsr_slave_1: entered promiscuous mode [ 1009.542491][T16888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1009.550531][T16888] Cannot create hsr debugfs directory [ 1009.714705][T13887] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.795117][T13887] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.873282][T13887] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.934334][T16888] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1009.943838][T16888] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1009.971990][T13887] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.986423][T16888] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1009.997210][T16888] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1010.078895][T13887] bridge_slave_1: left allmulticast mode [ 1010.084677][T13887] bridge_slave_1: left promiscuous mode [ 1010.092541][T13887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.101945][T13887] bridge_slave_0: left allmulticast mode [ 1010.107771][T13887] bridge_slave_0: left promiscuous mode [ 1010.113806][T13887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.305121][T13887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.317411][T13887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1010.328298][T13887] bond0 (unregistering): Released all slaves [ 1010.373566][T16888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.398393][T16888] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.440250][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.447406][ T5224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.473405][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.480563][ T5224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.604687][T13887] hsr_slave_0: left promiscuous mode [ 1010.621697][T13887] hsr_slave_1: left promiscuous mode [ 1010.627642][T13887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1010.637206][T13887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1010.649554][T13887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1010.656971][T13887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1010.674296][T13887] veth1_macvtap: left promiscuous mode [ 1010.680861][T13887] veth0_macvtap: left promiscuous mode [ 1010.686451][T13887] veth1_vlan: left promiscuous mode [ 1010.694277][T13887] veth0_vlan: left promiscuous mode [ 1010.939807][T13887] team0 (unregistering): Port device team_slave_1 removed [ 1010.991890][T13887] team0 (unregistering): Port device team_slave_0 removed [ 1011.236451][T15047] Bluetooth: hci3: command tx timeout [ 1011.246308][T16888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.347594][T16888] veth0_vlan: entered promiscuous mode [ 1011.363062][T16888] veth1_vlan: entered promiscuous mode [ 1011.424359][T16888] veth0_macvtap: entered promiscuous mode [ 1011.437674][T16888] veth1_macvtap: entered promiscuous mode [ 1011.461111][T16888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.476601][T16888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.488119][T16888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.502553][T16888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.512402][T16888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.525720][T16888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.535860][T16888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.550756][T16888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.562397][T16888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.576686][T16888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.588242][T16888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.602760][T16888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.614205][T16888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.628472][T16888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.639548][T16888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.649939][T16888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.660456][T16888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.674560][T16888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.685068][T16888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.703727][T16888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.717477][T16888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.728291][T16888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.741649][T16888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.752014][T16888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.763276][T16888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.775609][T16888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.799513][T16888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.808229][T16888] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.817066][T16888] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.829716][T16888] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.884913][T16888] ieee80211 phy94: Selected rate control algorithm 'minstrel_ht' [ 1011.915196][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.926830][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.936630][T16888] ieee80211 phy95: Selected rate control algorithm 'minstrel_ht' [ 1011.969542][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.977371][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50