last executing test programs: 12m15.307899039s ago: executing program 3 (id=1002): pwrite64$auto(0xc8, &(0x7f0000000100)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\x89\v\xea\x1b\x95\xafQ\xbf\x19L\"\x01@\x00\x00\x00\x80\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\x8a\x15g\xe4\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xa0\x83/\xc0\xd8\x05f\xcf\x9e\xe5\xd7$7\t\"E\xc4\xe9W\xfa\x19\a\xfb\xba\xb2.$\'\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\t\xff\xff\x00\x00\x00K\xed%\x1f\x1f\xf4\xb8\xcd{\xd1\xf6\xe0\x8c\xdb\t\x0f3\xfa\x9e\x98\xacH|R\x16Ue\xcd\x15\xb3(\xae\xda\x19v\r\fKr\xf5\x1d\xf4\xc4\b\x99\xa6\x8a\xdb\x17\x89\x92E\x7f\xfbm\f\xc7\xa2x>\x06}:\xba\x00'/300, 0xfdf3, 0x6) 12m15.15346955s ago: executing program 3 (id=1006): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0) 12m14.932010612s ago: executing program 3 (id=1010): socket(0x2, 0x80007, 0x0) 12m14.585866408s ago: executing program 3 (id=1018): dup2$auto(0x5, 0xffffffffffffffff) 12m14.421753892s ago: executing program 3 (id=1022): rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 12m13.880023088s ago: executing program 3 (id=1033): pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88d\x11\x00\x00\x00\x00?!\xff\xff\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) 12m13.555167401s ago: executing program 32 (id=1033): pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88d\x11\x00\x00\x00\x00?!\xff\xff\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) 10m30.684674022s ago: executing program 0 (id=3071): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000040)="9105") 10m30.50486063s ago: executing program 0 (id=3074): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/stack\x00', 0x181100, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f0000000140)=""/107, 0x6b) 10m30.349835419s ago: executing program 0 (id=3078): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 10m30.225130116s ago: executing program 0 (id=3080): openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/dbroot\x00', 0x42180, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) 10m30.017403278s ago: executing program 0 (id=3084): setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) tkill$auto(0x80000000000001, 0x7) 10m29.479743882s ago: executing program 0 (id=3095): r0 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/saved_cmdlines_size\x00', 0x2, 0x0) writev$auto(r0, &(0x7f0000000140)={0x0, 0x3}, 0x4) 10m29.137915469s ago: executing program 33 (id=3095): r0 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/saved_cmdlines_size\x00', 0x2, 0x0) writev$auto(r0, &(0x7f0000000140)={0x0, 0x3}, 0x4) 9m9.902984778s ago: executing program 4 (id=4798): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x8502, 0x0) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) 9m9.704632549s ago: executing program 4 (id=4804): r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r0, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1836674fdd80500ffffffffffdfff1a0e0100"/56, 0x38) 9m9.588015824s ago: executing program 4 (id=4807): r0 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) write$auto(r0, 0x0, 0x6) 9m9.474104521s ago: executing program 4 (id=4810): r0 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r0, 0x3a, 0x1, 0x0, 0x0) 9m9.341427096s ago: executing program 4 (id=4813): ioperm$auto(0xd44, 0x6, 0x8) tkill$auto(0x80000000000001, 0x7) 9m9.093701153s ago: executing program 4 (id=4818): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory6/state\x00', 0xe8a02, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='\n', 0x1) 9m8.765415813s ago: executing program 34 (id=4818): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory6/state\x00', 0xe8a02, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='\n', 0x1) 8m21.680229442s ago: executing program 5 (id=5812): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/vlan/vlan0\x00', 0x40, 0x0) pread64$auto(r0, &(0x7f0000001800)='#\\h,\x00', 0x3, 0x8) 8m21.530955298s ago: executing program 5 (id=5815): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) 8m21.353148763s ago: executing program 5 (id=5818): openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) 8m21.175924035s ago: executing program 5 (id=5823): r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000040)={@padding, 0xfe}) 8m21.027259336s ago: executing program 5 (id=5826): tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) 8m20.645379692s ago: executing program 5 (id=5836): r0 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) 8m20.407226094s ago: executing program 35 (id=5836): r0 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) 5m44.61476591s ago: executing program 7 (id=8390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_SOCK_GET(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000300)={0x14, r1, 0xe77c815741d6438d, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x42010}, 0x8cc) 5m44.472673006s ago: executing program 7 (id=8393): socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) close_range$auto(0x2, 0x8, 0x0) 5m44.348817276s ago: executing program 7 (id=8395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000200)={0x34, r1, 0x403, 0x70bd26, 0x25dfdbf9, {}, [@HWSIM_ATTR_FRAME={0x4}, @HWSIM_ATTR_ADDR_RECEIVER={0xa, 0x1, "196f88149b0c"}, @HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x5}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 5m44.1156768s ago: executing program 7 (id=8404): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r0, 0x110, 0x4, 0x0, 0x4) 5m44.00351118s ago: executing program 7 (id=8399): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 5m43.584177012s ago: executing program 7 (id=8403): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0xaf44529eb48ad963, 0x17c) ioctl$sock_SIOCGIFINDEX(r0, 0x801c581f, 0x0) 5m43.228500903s ago: executing program 36 (id=8403): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0xaf44529eb48ad963, 0x17c) ioctl$sock_SIOCGIFINDEX(r0, 0x801c581f, 0x0) 1.900999287s ago: executing program 2 (id=13233): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x8, 0x8243, 0x0, 0x0, 0x4) getsockopt$auto(0x3, 0x200000000001, 0x3b, 0x0, 0x0) 1.900325957s ago: executing program 8 (id=13241): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) 1.680219235s ago: executing program 8 (id=13234): openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x400, 0x0) prctl$auto_PR_SET_MDWE(0x41, 0x4, 0x0, 0xf, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002580), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x5}, @NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x60}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x810) 1.549851021s ago: executing program 2 (id=13238): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r0, 0x1, 0x0, 0x0) 1.480302452s ago: executing program 2 (id=13240): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x100000001, 0x0, 0x0) 1.330023922s ago: executing program 1 (id=13244): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x7fffffffffffffff}, 0x2bc) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) 1.222279943s ago: executing program 8 (id=13245): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x5810, 0xffb, 0x412, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mincore$auto(0x1000, 0x4000000, 0x0) 1.222191708s ago: executing program 2 (id=13246): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ppoll$auto(&(0x7f0000000000)={r0, 0x8, 0x6}, 0x7, 0x0, 0x0, 0x8) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800009}, 0x1, 0x20000000) 995.363024ms ago: executing program 1 (id=13249): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c810}, 0x20000041) bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x6, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0x2, 0x2, 0x3, 0x9, 0x8}, 0xa3) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) 922.670405ms ago: executing program 8 (id=13250): ioperm$auto(0x3, 0x9, 0x149) r0 = getpid() mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r1 = pidfd_open$auto(r0, 0x0) process_madvise$auto_MADV_COLD(r1, 0x0, 0x5, 0x14, 0x0) 909.52477ms ago: executing program 6 (id=13251): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x6e, 0x0, 0x8) 873.248295ms ago: executing program 1 (id=13252): mmap$auto(0x0, 0x9, 0x3, 0x800019b72, 0x9, 0x8000000000008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto(0x3, 0x5406, 0x38) 804.949345ms ago: executing program 6 (id=13253): mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x13, &(0x7f00000001c0), 0x2) 726.268537ms ago: executing program 8 (id=13254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r1, 0x1, 0x4070bd27, 0x25dfdbf9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000) 719.002123ms ago: executing program 1 (id=13255): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = open(0x0, 0x14927f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x40086602, 0x0) lstat$auto(0x0, 0x0) 691.750523ms ago: executing program 6 (id=13256): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x50bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200000000006}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 616.062848ms ago: executing program 8 (id=13257): mmap$auto(0x0, 0x400008, 0x400000df, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002240)='/dev/cec17\x00', 0x181680, 0x0) 570.286173ms ago: executing program 1 (id=13258): unshare$auto(0x40000080) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001300)={0x14, r1, 0x9d0da3446261172d, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008080) 386.614271ms ago: executing program 6 (id=13259): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) getsockopt$auto(r0, 0x84, 0x16, 0x0, 0x0) 237.680145ms ago: executing program 2 (id=13260): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0xa, 0x0) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0xc) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b62, 0x7) 153.8219ms ago: executing program 1 (id=13261): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x1fe, 0x81) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 126.228251ms ago: executing program 6 (id=13262): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x2, 0x1) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x41, 0x0, 0x9cb) 23.633072ms ago: executing program 2 (id=13263): mmap$auto(0x0, 0x9, 0x3fe57696, 0x9b72, 0x2, 0x8000000000008000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x7, 0x0, 0x400, 0x9a, "077c1315ff06c9cc9ff4956913870ef95ebcd43e985b110210346f7f05f8bd5d8b4458e71254da2aab17208e518d2a9b3c20bd53a710ce119b1b61b0"}) read$auto(0x3, 0x0, 0x1f40) 0s ago: executing program 6 (id=13264): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0x4010ae68, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. [ 65.363365][ T5821] cgroup: Unknown subsys name 'net' [ 65.532128][ T5821] cgroup: Unknown subsys name 'cpuset' [ 65.540308][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.869176][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.811642][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.828478][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.181109][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.190466][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.198319][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.208177][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.217185][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.240234][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.252315][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.274397][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.282617][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.291597][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.306250][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.349592][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.358526][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.367249][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.388466][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.398474][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.406601][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.414013][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.459504][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.470098][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.477803][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.491124][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.504696][ T5148] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.513107][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.687696][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 72.766613][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 72.837986][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.845808][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.853661][ T5835] bridge_slave_0: entered allmulticast mode [ 72.860662][ T5835] bridge_slave_0: entered promiscuous mode [ 72.896063][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.903309][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.910660][ T5835] bridge_slave_1: entered allmulticast mode [ 72.917323][ T5835] bridge_slave_1: entered promiscuous mode [ 73.023533][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.031123][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.039041][ T5830] bridge_slave_0: entered allmulticast mode [ 73.046086][ T5830] bridge_slave_0: entered promiscuous mode [ 73.055582][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.070014][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.083217][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.091492][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.098864][ T5830] bridge_slave_1: entered allmulticast mode [ 73.105445][ T5830] bridge_slave_1: entered promiscuous mode [ 73.118246][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 73.127472][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 73.176083][ T5835] team0: Port device team_slave_0 added [ 73.188304][ T5835] team0: Port device team_slave_1 added [ 73.203086][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.246570][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.271458][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.278944][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.305907][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.340465][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.347472][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.374035][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.399131][ T5830] team0: Port device team_slave_0 added [ 73.441905][ T5830] team0: Port device team_slave_1 added [ 73.449027][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.456165][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.464406][ T5843] bridge_slave_0: entered allmulticast mode [ 73.471248][ T5843] bridge_slave_0: entered promiscuous mode [ 73.478027][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.485914][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.495900][ T5839] bridge_slave_0: entered allmulticast mode [ 73.502839][ T5839] bridge_slave_0: entered promiscuous mode [ 73.533951][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.541551][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.549021][ T5843] bridge_slave_1: entered allmulticast mode [ 73.555622][ T5843] bridge_slave_1: entered promiscuous mode [ 73.562278][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.570073][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.577498][ T5839] bridge_slave_1: entered allmulticast mode [ 73.584483][ T5839] bridge_slave_1: entered promiscuous mode [ 73.607121][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.614320][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.640380][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.653272][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.660416][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.686632][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.715524][ T5835] hsr_slave_0: entered promiscuous mode [ 73.724127][ T5835] hsr_slave_1: entered promiscuous mode [ 73.759493][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.773377][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.784934][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.804405][ T5830] hsr_slave_0: entered promiscuous mode [ 73.815065][ T5830] hsr_slave_1: entered promiscuous mode [ 73.821544][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.829411][ T5830] Cannot create hsr debugfs directory [ 73.836649][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.904354][ T5839] team0: Port device team_slave_0 added [ 73.914665][ T5843] team0: Port device team_slave_0 added [ 73.947339][ T5839] team0: Port device team_slave_1 added [ 73.956174][ T5843] team0: Port device team_slave_1 added [ 74.011815][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.019216][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.045522][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.066377][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.073512][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.099688][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.111788][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.118906][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.145363][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.157508][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.164568][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.191220][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.299139][ T5148] Bluetooth: hci0: command tx timeout [ 74.328572][ T5839] hsr_slave_0: entered promiscuous mode [ 74.334714][ T5839] hsr_slave_1: entered promiscuous mode [ 74.341539][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.349187][ T5839] Cannot create hsr debugfs directory [ 74.357793][ T5843] hsr_slave_0: entered promiscuous mode [ 74.364671][ T5843] hsr_slave_1: entered promiscuous mode [ 74.371714][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.379771][ T5843] Cannot create hsr debugfs directory [ 74.449502][ T5148] Bluetooth: hci2: command tx timeout [ 74.454459][ T5836] Bluetooth: hci1: command tx timeout [ 74.510272][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.521587][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.528609][ T5836] Bluetooth: hci3: command tx timeout [ 74.537670][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.562827][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.625982][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.650197][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.660265][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.678780][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.744341][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.756455][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.766311][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.793328][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.885337][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.904014][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.913450][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.925936][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.976984][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.002540][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.041906][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.072300][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.083378][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.090782][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.103326][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.110549][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.128009][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.157659][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.164837][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.186204][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.193369][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.227525][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.253518][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.301929][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.309120][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.322978][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.330523][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.436346][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.486389][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.512173][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.532265][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.539429][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.584257][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.591502][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.714484][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.723741][ T5830] veth0_vlan: entered promiscuous mode [ 75.755617][ T5830] veth1_vlan: entered promiscuous mode [ 75.776825][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.846942][ T5830] veth0_macvtap: entered promiscuous mode [ 75.862987][ T5835] veth0_vlan: entered promiscuous mode [ 75.884709][ T5830] veth1_macvtap: entered promiscuous mode [ 75.922296][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.933909][ T5839] veth0_vlan: entered promiscuous mode [ 75.947185][ T5835] veth1_vlan: entered promiscuous mode [ 75.957504][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.974088][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.983590][ T5839] veth1_vlan: entered promiscuous mode [ 75.995341][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.004870][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.014723][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.023886][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.112105][ T5839] veth0_macvtap: entered promiscuous mode [ 76.149881][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.151425][ T5835] veth0_macvtap: entered promiscuous mode [ 76.157881][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.169110][ T5839] veth1_macvtap: entered promiscuous mode [ 76.220117][ T5835] veth1_macvtap: entered promiscuous mode [ 76.230171][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.238042][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.267356][ T5843] veth0_vlan: entered promiscuous mode [ 76.283517][ T5843] veth1_vlan: entered promiscuous mode [ 76.292226][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.308018][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.324214][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.341911][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.353157][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.365641][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.374341][ T5836] Bluetooth: hci0: command tx timeout [ 76.383966][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.394955][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.408760][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.412906][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.419832][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.445850][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.460440][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.471702][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.481638][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.492387][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.503207][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.518591][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.527360][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.536913][ T5836] Bluetooth: hci2: command tx timeout [ 76.537004][ T5148] Bluetooth: hci1: command tx timeout [ 76.542849][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.557229][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.580352][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.591127][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.600094][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.609191][ T5148] Bluetooth: hci3: command tx timeout [ 76.616437][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.634768][ T5843] veth0_macvtap: entered promiscuous mode [ 76.664694][ T5843] veth1_macvtap: entered promiscuous mode [ 76.773604][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.787581][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.804345][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.815262][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.831844][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.844061][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.859827][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.900362][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.908254][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.919871][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.940487][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.950738][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.961299][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.971552][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.982067][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.995665][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.024805][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.037629][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.052737][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.063514][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.100383][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.108265][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.196933][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.214053][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.266765][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.308521][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.333525][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.360699][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.413851][ T4586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.462454][ T4586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.358718][ T5943] syz.2.22(5943): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 78.449365][ T5148] Bluetooth: hci0: command tx timeout [ 78.613482][ T5148] Bluetooth: hci1: command tx timeout [ 78.613489][ T5836] Bluetooth: hci2: command tx timeout [ 78.689515][ T5836] Bluetooth: hci3: command tx timeout [ 80.528477][ T5836] Bluetooth: hci0: command tx timeout [ 80.689794][ T5836] Bluetooth: hci1: command tx timeout [ 80.689804][ T5148] Bluetooth: hci2: command tx timeout [ 80.769135][ T5836] Bluetooth: hci3: command tx timeout [ 85.919840][ T6265] capability: warning: `syz.0.183' uses deprecated v2 capabilities in a way that may be insecure [ 87.178259][ T90] cfg80211: failed to load regulatory.db [ 92.369724][ T5836] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 96.871199][ T6674] Process accounting resumed [ 99.947669][ T6794] Unable to find swap-space signature [ 100.874149][ T6825] Process accounting resumed [ 103.557022][ T6941] Unable to find swap-space signature [ 109.874240][ T29] audit: type=1800 audit(1741254066.915:2): pid=7195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.636" name="trace_pipe" dev="tracefs" ino=1109 res=0 errno=0 [ 113.837929][ T7354] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[7354] [ 118.536709][ T29] audit: type=1800 audit(1741255102.627:3): pid=7560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.818" name="lu_gp_id" dev="configfs" ino=12625 res=0 errno=0 [ 118.998927][ T7580] mmap: syz.1.828 (7580) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.247828][ T7592] ======================================================= [ 119.247828][ T7592] WARNING: The mand mount option has been deprecated and [ 119.247828][ T7592] and is ignored by this kernel. Remove the mand [ 119.247828][ T7592] option from the mount to silence this warning. [ 119.247828][ T7592] ======================================================= [ 121.682117][ T7706] capability: warning: `syz.3.890' uses 32-bit capabilities (legacy support in use) [ 125.897336][ T5836] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6 [ 125.988252][ T29] audit: type=1800 audit(1741255118.112:4): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.987" name="features" dev="configfs" ino=13641 res=0 errno=0 [ 126.825067][ T7936] Process accounting paused [ 127.865088][ T7987] Unable to find swap-space signature [ 127.981452][ T7991] random: crng reseeded on system resumption [ 128.181668][ T4586] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.303805][ T4586] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.552138][ T4586] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.760320][ T4586] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.103139][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.118097][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.127783][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.143002][ T4586] bridge_slave_1: left allmulticast mode [ 129.157266][ T4586] bridge_slave_1: left promiscuous mode [ 129.163082][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.172999][ T4586] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.183936][ T5148] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 129.194803][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.261692][ T4586] bridge_slave_0: left allmulticast mode [ 129.271599][ T4586] bridge_slave_0: left promiscuous mode [ 129.277551][ T4586] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.759321][ T4586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.787982][ T4586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.820408][ T4586] bond0 (unregistering): Released all slaves [ 130.830347][ T8082] Process accounting paused [ 131.306199][ T5148] Bluetooth: hci1: command tx timeout [ 131.872044][ T4586] hsr_slave_0: left promiscuous mode [ 131.886318][ T4586] hsr_slave_1: left promiscuous mode [ 131.905617][ T4586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.932963][ T4586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.970303][ T4586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.983740][ T4586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.067555][ T4586] veth1_macvtap: left promiscuous mode [ 132.073854][ T4586] veth0_macvtap: left promiscuous mode [ 132.083959][ T4586] veth1_vlan: left promiscuous mode [ 132.089576][ T4586] veth0_vlan: left promiscuous mode [ 133.133959][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.140910][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.365513][ T5148] Bluetooth: hci1: command tx timeout [ 133.905704][ T4586] team0 (unregistering): Port device team_slave_1 removed [ 134.054635][ T4586] team0 (unregistering): Port device team_slave_0 removed [ 135.440799][ T5148] Bluetooth: hci1: command tx timeout [ 135.625391][ T8020] chnl_net:caif_netlink_parms(): no params data found [ 135.968802][ T8020] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.992814][ T8020] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.000073][ T8020] bridge_slave_0: entered allmulticast mode [ 136.054549][ T8020] bridge_slave_0: entered promiscuous mode [ 136.112441][ T8020] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.119594][ T8020] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.161345][ T8020] bridge_slave_1: entered allmulticast mode [ 136.168390][ T8020] bridge_slave_1: entered promiscuous mode [ 136.412660][ T8020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.490310][ T8020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.661868][ T8020] team0: Port device team_slave_0 added [ 136.686652][ T8020] team0: Port device team_slave_1 added [ 136.874892][ T8020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.903580][ T8020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.976758][ T8020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.008706][ T8020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.041750][ T8020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.126500][ T8020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.359099][ T8020] hsr_slave_0: entered promiscuous mode [ 137.396127][ T8020] hsr_slave_1: entered promiscuous mode [ 137.503881][ T5148] Bluetooth: hci1: command tx timeout [ 137.898669][ T8020] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 137.933017][ T8020] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 137.974208][ T8020] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 138.013286][ T8020] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 138.305848][ T8020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.365302][ T8020] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.426838][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.434789][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.466977][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.474207][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.750707][ T29] audit: type=1800 audit(1741255142.950:5): pid=8401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1210" name="features" dev="configfs" ino=15278 res=0 errno=0 [ 139.045540][ T8020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.647728][ T8020] veth0_vlan: entered promiscuous mode [ 139.681841][ T8020] veth1_vlan: entered promiscuous mode [ 139.757278][ T8020] veth0_macvtap: entered promiscuous mode [ 139.788294][ T8020] veth1_macvtap: entered promiscuous mode [ 139.848909][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.912199][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.946910][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.978899][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.030642][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.060989][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.093140][ T8020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.145405][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.184209][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.229466][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.246597][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.257399][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.280159][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.320413][ T8020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.380778][ T8020] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.438649][ T8020] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.447413][ T8020] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.483606][ T8020] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.762434][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.801333][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.900409][ T4586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.921426][ T4586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.650463][ T29] audit: type=1800 audit(1741255145.865:6): pid=8525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1249" name="version" dev="configfs" ino=16697 res=0 errno=0 [ 141.953537][ T5148] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 143.453506][ T8612] syz_tun: tun_chr_ioctl cmd 1074025678 [ 143.622515][ T5148] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 143.760359][ T8624] syz_tun: tun_chr_ioctl cmd 1074025676 [ 143.801270][ T8624] syz_tun: owner set to 5 [ 149.198322][ T29] audit: type=1800 audit(1741255153.454:7): pid=8858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1388" name="trace_pipe" dev="tracefs" ino=1067 res=0 errno=0 [ 150.393994][ T8903] ima: policy update failed [ 150.405676][ T29] audit: type=1802 audit(1741255154.661:8): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1411" res=0 errno=0 [ 151.189938][ T8936] syz_tun: tun_chr_ioctl cmd 1074025675 [ 151.212692][ T8936] syz_tun: persist disabled [ 154.190962][ T29] audit: type=1800 audit(1741255158.470:9): pid=9061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1485" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 154.618323][ T29] audit: type=1800 audit(1741255158.882:10): pid=9081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1495" name="dummy_udc" dev="gadgetfs" ino=6493 res=0 errno=0 [ 155.900036][ T9137] syz.1.1521 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 156.621600][ T29] audit: type=1326 audit(1741255160.913:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9174 comm="syz.0.1535" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa4e78d169 code=0x0 [ 156.736574][ T9178] Process accounting resumed [ 158.945369][ T5148] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 159.931578][ T5148] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 161.192438][ T9394] usb usb15: usbfs: process 9394 (syz.2.1614) did not claim interface 0 before use [ 163.067346][ T9392] kexec: Could not allocate control_code_buffer [ 165.310222][ T5148] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 165.488784][ T9577] Debayer A: ================= START STATUS ================= [ 165.497082][ T9577] Debayer A: Debayer Mean Window Size: 3 [ 165.525254][ T9577] Debayer A: ================== END STATUS ================== [ 166.158080][ T9604] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 167.244957][ T9651] [ 167.941865][ T9680] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[9680] [ 168.618252][ T9710] kernel read not supported for file /Pr ^!8;n~ZJp-v<)R_WtakG6h mD|vQ (pid: 9710 comm: syz.4.1746) [ 168.687075][ T29] audit: type=1800 audit(1741255173.036:12): pid=9710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1746" name=5002B9D50272BCD0095EC0217FC0DD38B080FA3B97056EF47E5A05F1EFD1F108D94A9B70DFE7CD1F842DBB05A5B8FCF7763C29DD5202D80D5F03E78E577461FABDAF066B47F7AA361C680B6D44FC7C76D451 dev="mqueue" ino=19295 res=0 errno=0 [ 169.214090][ T9734] block2mtd: device name too long [ 172.310052][ T9866] nvme_fcloop: unknown parameter or missing value '' [ 175.948742][ T5831] Process accounting resumed [ 175.986054][T10033] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 177.792967][T10115] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 178.131556][ T29] audit: type=1326 audit(1741255182.535:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.0.1961" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa4e78d169 code=0x0 [ 179.095919][T10169] program syz.2.1972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.013773][T10211] process 'syz.1.1993' launched '/dev/fd/3' with NULL argv: empty string added [ 181.929950][T10298] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 184.546946][T10422] block2mtd: illegal erase size [ 185.684028][T10475] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 186.636220][T10518] Process accounting paused [ 190.374651][T10686] futex_wake_op: syz.1.2225 tries to shift op by 64; fix this program [ 190.401581][T10690] misc userio: Invalid payload size [ 190.617683][T10696] block mtdblock0: the capability attribute has been deprecated. [ 191.510958][T10729] kAFS: Invalid Command on /proc/fs/afs/cells file [ 192.148772][T10749] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.455612][T10749] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.820894][T10749] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.061671][T10749] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.270350][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.276697][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.650569][T10824] syz.0.2287 (10824): attempted to duplicate a private mapping with mremap. This is not supported. [ 196.319871][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 196.327593][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 196.336530][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 196.794876][ T29] audit: type=1800 audit(1741255201.292:14): pid=10915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2332" name="members" dev="configfs" ino=23074 res=0 errno=0 [ 197.278697][T10939] cifs: Unknown parameter '#ʑC ˀH/R{<' [ 197.469517][T10947] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 197.555776][T10947] CIFS mount error: No usable UNC path provided in device string! [ 197.555776][T10947] [ 197.586712][T10947] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 199.285418][T11031] cougar: G6 mapped to space [ 638.874287][T29084] netlink: 350 bytes leftover after parsing attributes in process `syz.8.10476'. [ 639.032044][T29090] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 639.038507][T29090] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 640.210871][T29111] Process accounting resumed [ 642.482658][T29166] EXT4-fs error: 5 callbacks suppressed [ 644.579223][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 644.938597][T29209] bridge0: port 3(syz_tun) entered blocking state [ 644.953682][T29209] bridge0: port 3(syz_tun) entered disabled state [ 644.970884][T29209] syz_tun: entered allmulticast mode [ 644.982051][T29209] syz_tun: entered promiscuous mode [ 644.993622][T29209] bridge0: port 3(syz_tun) entered blocking state [ 645.000189][T29209] bridge0: port 3(syz_tun) entered forwarding state [ 646.915708][T29275] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input47 [ 647.576494][T29286] EXT4-fs error: 5 callbacks suppressed [ 648.506154][T29270] kexec: Could not allocate control_code_buffer [ 649.062769][T29321] bridge0: port 4(netdevsim2) entered blocking state [ 649.102656][T29321] bridge0: port 4(netdevsim2) entered disabled state [ 649.128579][T29321] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 649.176638][T29321] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 649.186999][T29321] bridge0: port 4(netdevsim2) entered blocking state [ 649.193870][T29321] bridge0: port 4(netdevsim2) entered forwarding state [ 651.351927][T29330] kexec: Could not allocate control_code_buffer [ 652.477947][T29370] bridge0: port 3(syz_tun) entered blocking state [ 652.484573][T29370] bridge0: port 3(syz_tun) entered disabled state [ 652.510203][T29370] syz_tun: entered allmulticast mode [ 652.526791][T29370] syz_tun: entered promiscuous mode [ 652.532703][T29370] bridge0: port 3(syz_tun) entered blocking state [ 652.540804][T29370] bridge0: port 3(syz_tun) entered forwarding state [ 652.661998][T29376] EXT4-fs error: 5 callbacks suppressed [ 654.526258][T29429] bridge0: port 3(veth0_to_bridge) entered blocking state [ 654.554774][T29429] bridge0: port 3(veth0_to_bridge) entered disabled state [ 654.597861][T29429] veth0_to_bridge: entered allmulticast mode [ 654.644275][T29429] veth0_to_bridge: entered promiscuous mode [ 654.676654][T29429] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.801549][T29429] bridge0: port 3(veth0_to_bridge) entered blocking state [ 654.808955][T29429] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 655.324976][T29445] bridge0: port 4(netdevsim2) entered blocking state [ 655.368656][T29445] bridge0: port 4(netdevsim2) entered disabled state [ 655.428452][T29445] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 655.454266][T29445] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 655.464210][T29445] bridge0: port 4(netdevsim2) entered blocking state [ 655.471041][T29445] bridge0: port 4(netdevsim2) entered forwarding state [ 656.530483][T29486] bridge0: port 4(netdevsim2) entered blocking state [ 656.539981][T29486] bridge0: port 4(netdevsim2) entered disabled state [ 656.577521][T29486] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 656.588339][T29486] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 656.615768][T29486] bridge0: port 4(netdevsim2) entered blocking state [ 656.622673][T29486] bridge0: port 4(netdevsim2) entered forwarding state [ 656.715752][T29488] Invalid ELF header magic: != ELF [ 657.024265][T29504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10640'. [ 657.039309][T29504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10640'. [ 657.308219][T29518] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 657.744651][T29519] EXT4-fs error: 6 callbacks suppressed [ 657.982004][T29527] bridge0: port 4(netdevsim2) entered blocking state [ 657.989132][T29527] bridge0: port 4(netdevsim2) entered disabled state [ 657.999463][T29527] netdevsim netdevsim8 netdevsim2: entered allmulticast mode [ 658.018953][T29527] netdevsim netdevsim8 netdevsim2: entered promiscuous mode [ 658.027081][T29527] bridge0: port 4(netdevsim2) entered blocking state [ 658.033961][T29527] bridge0: port 4(netdevsim2) entered forwarding state [ 659.000592][T29571] tipc: Started in network mode [ 659.005528][T29571] tipc: Node identity ee00, cluster identity 4711 [ 659.035687][T29571] tipc: Node number set to 60928 [ 662.623882][T29690] bridge0: port 5(hsr_slave_1) entered blocking state [ 662.693970][T29690] bridge0: port 5(hsr_slave_1) entered disabled state [ 662.715494][T29690] hsr_slave_1: entered allmulticast mode [ 662.729871][T29690] hsr_slave_1: left allmulticast mode [ 662.803020][T29696] EXT4-fs error: 5 callbacks suppressed [ 665.434723][T29764] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10743'. [ 667.888612][T29832] EXT4-fs error: 5 callbacks suppressed [ 669.545482][ T29] audit: type=1800 audit(4294967363.159:44): pid=29883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10790" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 669.579066][T29885] bridge0: port 5(ipvlan0) entered blocking state [ 669.586844][T29885] bridge0: port 5(ipvlan0) entered disabled state [ 669.611285][T29885] ipvlan0: entered allmulticast mode [ 669.620982][T29885] veth0_vlan: entered allmulticast mode [ 669.646639][T29885] ipvlan0: left allmulticast mode [ 669.651922][T29885] veth0_vlan: left allmulticast mode [ 669.672782][T29887] bridge0: port 5(team0) entered blocking state [ 669.689564][T29887] bridge0: port 5(team0) entered disabled state [ 669.697409][T29887] team0: entered allmulticast mode [ 669.702661][T29887] team_slave_0: entered allmulticast mode [ 669.709419][T29887] team_slave_1: entered allmulticast mode [ 669.726662][T29887] team0: entered promiscuous mode [ 669.734166][T29887] team_slave_0: entered promiscuous mode [ 669.747041][T29887] team_slave_1: entered promiscuous mode [ 669.753718][T29887] bridge0: port 5(team0) entered blocking state [ 669.760161][T29887] bridge0: port 5(team0) entered forwarding state [ 670.234347][T29910] Process accounting paused [ 672.234191][T29985] ptrace attach of "./syz-executor exec"[16305] was attempted by ""[29985] [ 672.998969][T30010] EXT4-fs error: 5 callbacks suppressed [ 673.415202][T30013] bridge0: port 5(team0) entered blocking state [ 673.421855][T30013] bridge0: port 5(team0) entered disabled state [ 673.429646][T30013] team0: entered allmulticast mode [ 673.439888][T30013] team_slave_0: entered allmulticast mode [ 673.449172][T30013] team_slave_1: entered allmulticast mode [ 673.462437][T30013] team0: entered promiscuous mode [ 673.469184][T30013] team_slave_0: entered promiscuous mode [ 673.475765][T30013] team_slave_1: entered promiscuous mode [ 673.483755][T30013] bridge0: port 5(team0) entered blocking state [ 673.490200][T30013] bridge0: port 5(team0) entered forwarding state [ 674.247845][T30035] netlink: 'syz.1.10851': attribute type 1 has an invalid length. [ 675.738175][T30075] vhci_hcd: invalid port number 117 [ 675.743451][T30075] vhci_hcd: default hub control req: 6367 v6f72 i0075 l0 [ 675.950771][T30093] netlink: 206 bytes leftover after parsing attributes in process `syz.6.10878'. [ 676.159244][T30102] syz.8.10881 (30102): /proc/30101/oom_adj is deprecated, please use /proc/30101/oom_score_adj instead. [ 678.128702][T30157] EXT4-fs error: 5 callbacks suppressed [ 679.444764][T30213] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 679.515618][T30213] svc: failed to register nfsdv3 RPC service (errno 111). [ 679.531597][T30213] svc: failed to register nfsaclv3 RPC service (errno 111). [ 679.890894][T30232] sctp: [Deprecated]: syz.1.10940 (pid 30232) Use of int in maxseg socket option. [ 679.890894][T30232] Use struct sctp_assoc_value instead [ 680.146925][T30245] udevd[30245]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 680.411778][T30257] netlink: 21 bytes leftover after parsing attributes in process `syz.2.10951'. [ 681.041807][T30280] sctp: [Deprecated]: syz.2.10959 (pid 30280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 681.041807][T30280] Use struct sctp_sack_info instead [ 681.255168][T30285] qrtr: Invalid version 0 [ 682.149133][T30316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10974'. [ 683.200918][T30355] EXT4-fs error: 6 callbacks suppressed [ 683.275564][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.282129][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 683.502722][T30364] netlink: 206 bytes leftover after parsing attributes in process `syz.1.10995'. [ 683.986620][T30385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11004'. [ 686.561585][T30466] tipc: Started in network mode [ 686.606964][T30466] tipc: Node identity ee00, cluster identity 4711 [ 686.623862][T30466] tipc: Node number set to 60928 [ 686.697620][T30433] kexec: Could not allocate control_code_buffer [ 688.273954][T30519] EXT4-fs error: 6 callbacks suppressed [ 688.613522][T30484] kexec: Could not allocate control_code_buffer [ 689.828094][T30574] netlink: 350 bytes leftover after parsing attributes in process `syz.8.11082'. [ 692.091132][T30637] ptrace attach of "./syz-executor exec"[24343] was attempted by "JܶiB$}3WnP,I>M-f+a%bnl~ZL`iyi|\x0b\x5c~yU ׷|ZˆլxknO!M,vx)L!\x0bCD\x07˨I9k%8)f[FL!?H@B&RuƯ\x0bGZ?k3\x5cQ u'y*6zHDk6hr. m+p/V9K\x5c/);!́c5-Yj\x1bK:&5۳=ܮ6wҌz]Mz|\x22o0\x0b-ֵ)$}S顆'#S(xn^_iňq(N_kU)sCmO*zgf$\x07ϐW*?Yz\x09h!跮=g\x1btȕJ~070_j1o&A:O|T׌2\x0b53FH#3Nv~qJǠ/RAţTBYJ׆{\x1bG\x0dt2[䵈ɪ\x1b.U\x22[ZKfeVxq㽗x [ 693.357666][T30673] EXT4-fs error: 5 callbacks suppressed [ 694.557428][ T29] audit: type=1800 audit(4294967388.297:45): pid=30698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.11134" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 698.423376][T30817] EXT4-fs error: 5 callbacks suppressed [ 699.214260][T30845] ptrace attach of "./syz-executor exec"[21101] was attempted by ""[30845] [ 699.399704][T30849] netlink: 'syz.6.11197': attribute type 1 has an invalid length. [ 700.173123][T30879] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11209'. [ 701.007997][T30877] Process accounting resumed [ 701.076964][T30903] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11221'. [ 702.870302][T30967] netlink: 21 bytes leftover after parsing attributes in process `syz.2.11246'. [ 703.468886][T30989] EXT4-fs error: 5 callbacks suppressed [ 703.859226][T30996] sctp: [Deprecated]: syz.1.11259 (pid 30996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 703.859226][T30996] Use struct sctp_sack_info instead [ 704.449782][T31018] bridge0: port 6(bond0) entered blocking state [ 704.457111][T31018] bridge0: port 6(bond0) entered disabled state [ 704.474439][T31018] bond0: entered allmulticast mode [ 704.484205][T31018] bond_slave_0: entered allmulticast mode [ 704.494475][T31018] bond_slave_1: entered allmulticast mode [ 704.507358][T31018] bond0: entered promiscuous mode [ 704.517248][T31018] bond_slave_0: entered promiscuous mode [ 704.527784][T31018] bond_slave_1: entered promiscuous mode [ 704.539899][T31018] bridge0: port 6(bond0) entered blocking state [ 704.546399][T31018] bridge0: port 6(bond0) entered forwarding state [ 706.350832][T31082] IPVS: length: 150994944 != 2818572296 [ 707.062667][T31106] udevd[31106]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 708.329168][T31150] sctp: [Deprecated]: syz.8.11323 (pid 31150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 708.329168][T31150] Use struct sctp_sack_info instead [ 708.524938][T31161] EXT4-fs error: 6 callbacks suppressed [ 710.562341][T24358] Process accounting resumed [ 710.773107][T31266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11372'. [ 710.872768][T31271] netlink: 'syz.6.11373': attribute type 2 has an invalid length. [ 710.880894][T31271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11373'. [ 713.566904][T31383] EXT4-fs error: 6 callbacks suppressed [ 714.689161][T31425] netlink: 342 bytes leftover after parsing attributes in process `syz.8.11439'. [ 714.990476][ T5148] Bluetooth: hci3: ACL packet too small [ 715.626348][ T29] audit: type=1800 audit(4294967409.466:46): pid=31454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.11451" name=03 dev="tmpfs" ino=3913 res=0 errno=0 [ 715.987588][T31464] udevd[31464]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 717.012823][T31490] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11466'. [ 717.902527][T31515] ovs_: entered promiscuous mode [ 718.627872][T31526] EXT4-fs error: 6 callbacks suppressed [ 720.762796][T31547] kexec: Could not allocate control_code_buffer [ 723.725789][T31661] EXT4-fs error: 5 callbacks suppressed [ 725.548802][T31709] netlink: 7 bytes leftover after parsing attributes in process `syz.6.11554'. [ 726.278745][T31690] kexec: Could not allocate control_code_buffer [ 727.186081][T31745] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11570'. [ 728.760186][T31785] EXT4-fs error: 5 callbacks suppressed [ 729.002476][T31797] netlink: 342 bytes leftover after parsing attributes in process `syz.1.11591'. [ 732.026130][T31859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11617'. [ 734.007994][T31919] EXT4-fs error: 5 callbacks suppressed [ 734.685068][T31934] sctp: [Deprecated]: syz.2.11646 (pid 31934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 734.685068][T31934] Use struct sctp_sack_info instead [ 735.155071][T31946] bridge0: port 5(bond0) entered blocking state [ 735.163471][T31946] bridge0: port 5(bond0) entered disabled state [ 735.178089][T31946] bond0: entered allmulticast mode [ 735.188575][T31946] bond_slave_0: entered allmulticast mode [ 735.200122][T31946] bond_slave_1: entered allmulticast mode [ 735.207946][T31946] bond0: entered promiscuous mode [ 735.213338][T31946] bond_slave_0: entered promiscuous mode [ 735.257852][T31946] bond_slave_1: entered promiscuous mode [ 735.272251][T31946] bridge0: port 5(bond0) entered blocking state [ 735.278721][T31946] bridge0: port 5(bond0) entered forwarding state [ 735.972723][T31964] sctp: [Deprecated]: syz.6.11658 (pid 31964) Use of struct sctp_assoc_value in delayed_ack socket option. [ 735.972723][T31964] Use struct sctp_sack_info instead [ 736.450208][T31976] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek 260 [ 757.438103][ T5148] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 757.454707][ T5148] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 757.454772][ T5148] Bluetooth: hci2: Malformed LE Event: 0x0d [ 757.860303][T32562] udevd[32562]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 759.149638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.162819][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.176014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.188863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.201693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.214494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.227258][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.240085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.253168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.266378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.854778][T32628] EXT4-fs error: 6 callbacks suppressed [ 761.155375][ C1] bridge0: topology change detected, propagating [ 761.163969][ C1] bridge0: port 3(veth0_to_bridge) entered blocking state [ 762.518272][T32709] ima: policy update failed [ 762.525243][ T29] audit: type=1802 audit(4294967456.586:48): pid=32709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 762.758602][T32717] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 763.202335][T32731] ovs_: entered promiscuous mode [ 763.488997][T32746] bridge0: port 3(veth0_to_bridge) entered listening state [ 763.692018][T32752] netlink: 93 bytes leftover after parsing attributes in process `syz.1.11974'. [ 764.949105][ T319] EXT4-fs error: 5 callbacks suppressed [ 764.968435][ C1] net_ratelimit: 2639 callbacks suppressed [ 764.968461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 764.986554][ C1] bridge0: port 3(veth0_to_bridge) entered blocking state [ 766.300838][ T377] netlink: 93 bytes leftover after parsing attributes in process `syz.8.12014'. [ 767.559124][ T430] udevd[430]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 770.015296][ T512] EXT4-fs error: 6 callbacks suppressed [ 770.822478][ T537] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 770.870435][ T537] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 772.509188][ T580] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 772.532563][ T580] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 774.906227][ T653] ovs9: entered promiscuous mode [ 775.096363][ T658] EXT4-fs error: 5 callbacks suppressed [ 776.280155][ T690] ovs9: entered promiscuous mode [ 777.243807][ T721] sctp: [Deprecated]: syz.6.12156 (pid 721) Use of int in maxseg socket option. [ 777.243807][ T721] Use struct sctp_assoc_value instead [ 777.378322][ T725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12158'. [ 780.159862][ T810] EXT4-fs error: 5 callbacks suppressed [ 780.620434][ T825] Invalid ELF header magic: != ELF [ 780.866595][ T832] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 781.188536][ T845] bridge0: port 7(gretap0) entered blocking state [ 781.201718][ T845] bridge0: port 7(gretap0) entered disabled state [ 781.209365][ T845] gretap0: entered allmulticast mode [ 781.220261][ T845] gretap0: entered promiscuous mode [ 781.229155][ T845] bridge0: port 7(gretap0) entered blocking state [ 781.235790][ T845] bridge0: port 7(gretap0) entered listening state [ 781.276724][ T850] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input48 [ 783.098937][ T916] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12235'. [ 785.226150][ T1020] EXT4-fs error: 5 callbacks suppressed [ 785.641022][ T1052] udevd[1052]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 788.412275][ T1163] netlink: 338 bytes leftover after parsing attributes in process `syz.8.12327'. [ 789.351939][ T1207] netlink: 186 bytes leftover after parsing attributes in process `syz.2.12343'. [ 790.301910][ T1247] EXT4-fs error: 6 callbacks suppressed [ 794.877798][ T5148] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 794.877837][ T5148] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 794.897318][ T5148] Bluetooth: hci1: adv larger than maximum supported [ 794.897346][ T5148] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 794.905814][ T5148] Bluetooth: hci1: Unknown advertising packet type: 0x32 [ 794.913432][ T5148] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 794.923496][ T5148] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 794.930757][ T5148] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 794.938063][ T5148] Bluetooth: hci1: adv larger than maximum supported [ 795.397689][ T1434] EXT4-fs error: 8 callbacks suppressed [ 795.484766][ T1436] netlink: 85 bytes leftover after parsing attributes in process `syz.1.12438'. [ 796.660247][ C0] bridge0: port 7(gretap0) entered learning state [ 796.847681][ T1471] block nbd1: Unsupported socket: shutdown callout must be supported. [ 799.711286][ T5148] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 800.473399][ T1559] EXT4-fs error: 7 callbacks suppressed [ 802.797643][ T1619] Console: switching to colour VGA+ 80x25 [ 805.557072][ T1702] EXT4-fs error: 6 callbacks suppressed [ 805.591966][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 805.607056][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 807.050342][ T1744] device-mapper: ioctl: Unable to rename non-existent device, to [ 808.524681][ T1773] bridge0: port 6(vlan1) entered blocking state [ 808.531044][ T1773] bridge0: port 6(vlan1) entered disabled state [ 808.583101][ T1773] vlan1: entered allmulticast mode [ 808.588289][ T1773] veth0_vlan: entered allmulticast mode [ 808.623815][ T1773] vlan1: entered promiscuous mode [ 808.640032][ T1773] bridge0: port 6(vlan1) entered blocking state [ 808.646483][ T1773] bridge0: port 6(vlan1) entered forwarding state [ 810.643814][ T1834] EXT4-fs error: 7 callbacks suppressed [ 811.950369][ C0] bridge0: port 7(gretap0) entered forwarding state [ 811.957115][ C0] bridge0: topology change detected, propagating [ 812.784613][ T1889] syz.8.12619 (1889) used obsolete PPPIOCDETACH ioctl [ 814.461245][ T1952] netlink: 18 bytes leftover after parsing attributes in process `syz.8.12648'. [ 815.204118][ T1978] netlink: 346 bytes leftover after parsing attributes in process `syz.8.12660'. [ 815.701532][ T1996] EXT4-fs error: 5 callbacks suppressed [ 816.633743][ T2024] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 816.891740][ T2034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12684'. [ 820.009813][ T2141] nbd: socks must be embedded in a SOCK_ITEM attr [ 820.030209][ T2141] block nbd1: shutting down sockets [ 820.792917][ T2172] EXT4-fs error: 6 callbacks suppressed [ 820.942224][ T5148] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10 [ 822.935337][ T5148] Bluetooth: hci1: command 0x0c1a tx timeout [ 823.556628][ T2267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12777'. [ 825.312356][ T2332] netlink: 346 bytes leftover after parsing attributes in process `syz.2.12802'. [ 825.836564][ T2348] EXT4-fs error: 9 callbacks suppressed [ 830.098688][ T2493] zero sized request [ 830.184323][ T2496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12863'. [ 830.327458][ T2501] lo: entered allmulticast mode [ 830.336982][ T2500] lo: left allmulticast mode [ 830.978255][ T2531] EXT4-fs error: 5 callbacks suppressed [ 832.863135][ T29] audit: type=1804 audit(4294967527.257:49): pid=2621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.12905" name="/newroot/3296/file0" dev="tmpfs" ino=16612 res=1 errno=0 [ 834.408075][ T2677] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12923'. [ 834.442320][ T2677] bridge0: port 7(gretap0) entered disabled state [ 834.448975][ T2677] bridge0: port 6(bond0) entered disabled state [ 834.455627][ T2677] bridge0: port 5(team0) entered disabled state [ 834.462300][ T2677] bridge0: port 4(netdevsim2) entered disabled state [ 834.469171][ T2677] bridge0: port 3(veth0_to_bridge) entered disabled state [ 834.478897][ T2677] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.486299][ T2677] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.517564][ T2677] bridge0: entered promiscuous mode [ 834.526458][ T2677] bridge0: entered allmulticast mode [ 834.682407][ T2686] nbd: socks must be embedded in a SOCK_ITEM attr [ 834.689466][ T2686] block nbd1: shutting down sockets [ 835.000131][ T2703] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12932'. [ 835.018974][ T2703] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12932'. [ 836.036260][ T2742] EXT4-fs error: 7 callbacks suppressed [ 837.406615][ T2781] erspan0: entered allmulticast mode [ 837.793851][ T2798] sctp: [Deprecated]: syz.1.12962 (pid 2798) Use of int in max_burst socket option deprecated. [ 837.793851][ T2798] Use struct sctp_assoc_value instead [ 838.515979][ T2829] udevd[2829]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 840.616159][ T2906] MTRR 1 not used [ 841.106365][ T2921] EXT4-fs error: 7 callbacks suppressed [ 845.222981][ T3055] netlink: 342 bytes leftover after parsing attributes in process `syz.6.13058'. [ 845.308095][ T3060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13060'. [ 845.353034][ T3060] netlink: 23 bytes leftover after parsing attributes in process `syz.1.13060'. [ 846.197641][ T3089] EXT4-fs error: 5 callbacks suppressed [ 846.539137][ T3101] Device name cannot be null; rc = [-22] [ 847.147647][ T3126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13086'. [ 847.173781][ T3126] netlink: 23 bytes leftover after parsing attributes in process `syz.2.13086'. [ 847.296407][ T3131] ptrace attach of "./syz-executor exec"[5839] was attempted by ""[3131] [ 849.932141][ T3215] udevd[3215]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 851.260611][ T3253] EXT4-fs error: 6 callbacks suppressed [ 851.330327][ T3256] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13133'. [ 851.373311][ T3258] netlink: 342 bytes leftover after parsing attributes in process `syz.1.13135'. [ 851.374056][ T3256] veth1_macvtap: left promiscuous mode [ 851.411505][ T3256] macsec0: entered allmulticast mode [ 853.262969][ T3306] nbd1: detected capacity change from 0 to 68719476736 [ 853.297328][T28889] block nbd1: Send control failed (result -22) [ 853.317276][T28889] block nbd1: Request send failed, requeueing [ 853.366739][ T5148] block nbd1: Receive control failed (result -32) [ 853.401805][ T26] block nbd1: Dead connection, failed to find a fallback [ 853.409387][ T26] block nbd1: shutting down sockets [ 853.415352][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.427016][ T26] Buffer I/O error on dev nbd1, logical block 0, async page read [ 853.453348][T28889] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.498887][T28889] Buffer I/O error on dev nbd1, logical block 0, async page read [ 853.556594][T28889] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.606413][T28889] Buffer I/O error on dev nbd1, logical block 0, async page read [ 853.622998][ T5148] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 853.623036][ T5148] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 853.631204][T28889] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.640983][ T5148] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 853.648943][ T5148] Bluetooth: hci3: adv larger than maximum supported [ 853.656841][ T5148] Bluetooth: hci3: adv larger than maximum supported [ 853.663864][ T5148] Bluetooth: hci3: adv larger than maximum supported [ 853.670665][ T5148] Bluetooth: hci3: Malformed LE Event: 0x0d [ 853.699585][T28889] Buffer I/O error on dev nbd1, logical block 0, async page read [ 853.708020][T28889] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.717703][T28889] Buffer I/O error on dev nbd1, logical block 0, async page read [ 853.726524][T28889] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.735901][T28889] Buffer I/O error on dev nbd1, logical block 0, async page read [ 853.744046][T28889] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.753585][T28889] Buffer I/O error on dev nbd1, logical block 0, async page read [ 853.761670][T28889] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.771010][T28889] Buffer I/O error on dev nbd1, logical block 0, async page read [ 853.779010][T28889] ldm_validate_partition_table(): Disk read failed. [ 853.786480][T28889] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.795755][T28889] Buffer I/O error on dev nbd1, logical block 0, async page read [ 853.804446][T28889] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.815003][T28889] Buffer I/O error on dev nbd1, logical block 0, async page read [ 853.827944][T28889] Dev nbd1: unable to read RDB block 0 [ 853.847158][T28889] nbd1: unable to read partition table [ 853.859677][T28889] ldm_validate_partition_table(): Disk read failed. [ 853.867113][T28889] Dev nbd1: unable to read RDB block 0 [ 853.873305][T28889] nbd1: unable to read partition table [ 854.303302][ T3331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13167'. [ 855.530644][ T3367] netlink: 'syz.8.13181': attribute type 1 has an invalid length. [ 855.562070][ T3367] netlink: 206 bytes leftover after parsing attributes in process `syz.8.13181'. [ 856.310953][ T3396] EXT4-fs error: 5 callbacks suppressed [ 856.388358][ T3359] NFSD: Unable to initialize client recovery tracking! (-110) [ 856.395988][ T3359] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 856.423026][ T3359] NFSD: starting 96-second grace period (net f00004dd) [ 857.408020][ T3431] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13203'. [ 857.547898][ T3433] svc: failed to register nfsdv3 RPC service (errno 111). [ 857.569177][ T3433] svc: failed to register nfsaclv3 RPC service (errno 111). [ 857.610148][ T5148] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 857.610190][ T5148] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 857.627362][ T5148] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 857.627403][ T5148] Bluetooth: hci2: adv larger than maximum supported [ 857.637262][ T5148] Bluetooth: hci2: adv larger than maximum supported [ 857.644720][ T5148] Bluetooth: hci2: adv larger than maximum supported [ 857.651749][ T5148] Bluetooth: hci2: Malformed LE Event: 0x0d [ 858.005577][ T3447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13207'. [ 858.056407][ T3447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13207'. [ 858.125868][ T3452] ima: policy update failed [ 858.140023][ T29] audit: type=1802 audit(4294967552.655:50): pid=3452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm=20 res=0 errno=0 [ 858.654251][ T3473] svc: failed to register nfsdv3 RPC service (errno 111). [ 858.682033][ T3473] svc: failed to register nfsaclv3 RPC service (errno 111). [ 860.329866][ T3518] svc: failed to register nfsdv3 RPC service (errno 111). [ 860.362893][ T3518] svc: failed to register nfsaclv3 RPC service (errno 111). [ 861.324893][ T3561] nbd2: detected capacity change from 0 to 68719476736 [ 861.339230][T28889] block nbd2: Send control failed (result -22) [ 861.370185][T28889] block nbd2: Request send failed, requeueing [ 861.382557][ T3568] EXT4-fs error: 5 callbacks suppressed [ 861.395047][ T3440] block nbd2: Receive control failed (result -32) [ 861.396023][ T42] block nbd2: Dead connection, failed to find a fallback [ 861.412699][ T42] block nbd2: shutting down sockets [ 861.417712][ T42] blk_print_req_error: 24 callbacks suppressed [ 861.417739][ T42] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 861.431668][ T42] buffer_io_error: 23 callbacks suppressed [ 861.431682][ T42] Buffer I/O error on dev nbd2, logical block 0, async page read [ 861.454527][T28889] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 861.464006][T28889] Buffer I/O error on dev nbd2, logical block 0, async page read [ 861.471793][T28889] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 861.480296][T28889] Buffer I/O error on dev nbd2, logical block 0, async page read [ 861.499610][T28889] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 861.507971][T28889] Buffer I/O error on dev nbd2, logical block 0, async page read [ 861.515285][T28889] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 861.523479][T28889] Buffer I/O error on dev nbd2, logical block 0, async page read [ 861.530904][T28889] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 861.539233][T28889] Buffer I/O error on dev nbd2, logical block 0, async page read [ 861.554487][T28889] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 861.563345][T28889] Buffer I/O error on dev nbd2, logical block 0, async page read [ 861.583855][T28889] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 861.592075][T28889] Buffer I/O error on dev nbd2, logical block 0, async page read [ 861.634371][T28889] ldm_validate_partition_table(): Disk read failed. [ 861.641045][T28889] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 861.653945][T28889] Buffer I/O error on dev nbd2, logical block 0, async page read [ 861.661236][T28889] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 861.696553][T28889] Buffer I/O error on dev nbd2, logical block 0, async page read [ 861.718218][T28889] Dev nbd2: unable to read RDB block 0 [ 861.753503][T28889] nbd2: unable to read partition table [ 861.814798][T28889] ldm_validate_partition_table(): Disk read failed. [ 861.831999][T28889] Dev nbd2: unable to read RDB block 0 [ 861.850327][T28889] nbd2: unable to read partition table [ 861.890124][T28889] [ 861.891940][ T3577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13261'. [ 861.892255][T28889] ====================================================== [ 861.892264][T28889] WARNING: possible circular locking dependency detected [ 861.892273][T28889] 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 Not tainted [ 861.892285][T28889] ------------------------------------------------------ [ 861.892292][T28889] udevd/28889 is trying to acquire lock: [ 861.892303][T28889] ffff888025669308 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: __submit_bio+0x3d1/0x690 [ 861.892363][T28889] [ 861.892363][T28889] but task is already holding lock: [ 861.892369][T28889] ffff8880238d3740 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_unbounded+0x173/0x7d0 [ 861.892425][T28889] [ 861.892425][T28889] which lock already depends on the new lock. [ 861.892425][T28889] [ 861.892432][T28889] [ 861.892432][T28889] the existing dependency chain (in reverse order) is: [ 861.892440][T28889] [ 861.892440][T28889] -> #7 (mapping.invalidate_lock#2){++++}-{4:4}: [ 861.892474][T28889] down_read+0x9a/0x330 [ 861.892512][T28889] filemap_fault+0x1845/0x2ca0 [ 861.892539][T28889] __do_fault+0x10a/0x490 [ 861.892561][T28889] do_pte_missing+0xecf/0x3e10 [ 861.892589][T28889] __handle_mm_fault+0x1166/0x2c60 [ 861.892619][T28889] handle_mm_fault+0x3fa/0xaa0 [ 861.892647][T28889] do_user_addr_fault+0x60d/0x13f0 [ 861.892676][T28889] exc_page_fault+0x5c/0xc0 [ 861.892699][T28889] asm_exc_page_fault+0x26/0x30 [ 861.892728][T28889] [ 861.892728][T28889] -> #6 (&vma->vm_lock->lock){++++}-{4:4}: [ 861.892760][T28889] down_write+0x93/0x200 [ 861.892788][T28889] vma_link+0x26d/0x4a0 [ 861.892806][T28889] insert_vm_struct+0x197/0x3f0 [ 861.892832][T28889] alloc_bprm+0x76d/0xdd0 [ 861.892858][T28889] kernel_execve+0xb0/0x3b0 [ 861.892885][T28889] kernel_init+0x14a/0x2b0 [ 861.892914][T28889] ret_from_fork+0x45/0x80 [ 861.901240][ T3577] vxcan1: entered promiscuous mode [ 861.907336][T28889] ret_from_fork_asm+0x1a/0x30 [ 861.907366][T28889] [ 861.907366][T28889] -> #5 (&mm->mmap_lock){++++}-{4:4}: [ 861.907395][T28889] __might_fault+0x11b/0x190 [ 861.907415][T28889] _copy_from_iter+0x1c4/0x1560 [ 862.088556][T28889] tcp_sendmsg_locked+0x1979/0x37c0 [ 862.093713][T28889] tcp_sendmsg+0x2e/0x50 [ 862.097999][T28889] inet_sendmsg+0xb9/0x140 [ 862.102457][T28889] sock_write_iter+0x4ac/0x5b0 [ 862.107223][T28889] vfs_write+0x5ae/0x1150 [ 862.111600][T28889] ksys_write+0x207/0x250 [ 862.115976][T28889] do_syscall_64+0xcd/0x250 [ 862.120515][T28889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.126304][T28889] [ 862.126304][T28889] -> #4 (sk_lock-AF_INET){+.+.}-{0:0}: [ 862.133199][T28889] lock_sock_nested+0x3a/0xf0 [ 862.137898][T28889] inet_shutdown+0x67/0x440 [ 862.142434][T28889] nbd_mark_nsock_dead+0xae/0x5d0 [ 862.147430][T28889] sock_shutdown+0x17c/0x280 [ 862.152045][T28889] nbd_config_put+0x1e6/0x750 [ 862.156883][T28889] nbd_genl_connect+0x12d5/0x1c00 [ 862.162041][T28889] genl_family_rcv_msg_doit+0x202/0x2f0 [ 862.167515][T28889] genl_rcv_msg+0x565/0x800 [ 862.172047][T28889] netlink_rcv_skb+0x16b/0x440 [ 862.176812][T28889] genl_rcv+0x28/0x40 [ 862.180873][T28889] netlink_unicast+0x53c/0x7f0 [ 862.185663][T28889] netlink_sendmsg+0x8b8/0xd70 [ 862.190433][T28889] ____sys_sendmsg+0xaaf/0xc90 [ 862.195208][T28889] ___sys_sendmsg+0x135/0x1e0 [ 862.199897][T28889] __sys_sendmsg+0x16e/0x220 [ 862.204506][T28889] do_syscall_64+0xcd/0x250 [ 862.209036][T28889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.214901][T28889] [ 862.214901][T28889] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 862.221793][T28889] __mutex_lock+0x19b/0xb10 [ 862.226329][T28889] nbd_queue_rq+0x424/0x1220 [ 862.230936][T28889] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 862.236526][T28889] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 862.242694][T28889] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 862.248548][T28889] blk_mq_run_hw_queue+0x239/0x670 [ 862.253876][T28889] blk_mq_flush_plug_list+0x673/0x1c60 [ 862.259266][T28889] __blk_flush_plug+0x2c5/0x4b0 [ 862.264261][T28889] __submit_bio+0x547/0x690 [ 862.268795][T28889] submit_bio_noacct_nocheck+0x698/0xd70 [ 862.274341][T28889] submit_bio_noacct+0x50d/0x1ec0 [ 862.279352][T28889] block_read_full_folio+0x812/0xa50 [ 862.284604][T28889] filemap_read_folio+0xc6/0x2a0 [ 862.289536][T28889] do_read_cache_folio+0x263/0x5c0 [ 862.294625][T28889] read_part_sector+0xd4/0x310 [ 862.299399][T28889] adfspart_check_ICS+0x94/0x940 [ 862.304402][T28889] bdev_disk_changed+0x71f/0x1520 [ 862.309494][T28889] blkdev_get_whole+0x187/0x290 [ 862.314331][T28889] bdev_open+0x2c7/0xe20 [ 862.318626][T28889] blkdev_open+0x27b/0x3f0 [ 862.323079][T28889] do_dentry_open+0x735/0x1c40 [ 862.327847][T28889] vfs_open+0x82/0x3f0 [ 862.331979][T28889] path_openat+0x1e88/0x2d80 [ 862.336588][T28889] do_filp_open+0x20c/0x470 [ 862.341132][T28889] do_sys_openat2+0x17a/0x1e0 [ 862.345845][T28889] __x64_sys_openat+0x175/0x210 [ 862.350705][T28889] do_syscall_64+0xcd/0x250 [ 862.355245][T28889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.361032][T28889] [ 862.361032][T28889] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 862.367534][T28889] __mutex_lock+0x19b/0xb10 [ 862.372065][T28889] nbd_queue_rq+0xbe/0x1220 [ 862.376592][T28889] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 862.382058][T28889] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 862.388233][T28889] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 862.394088][T28889] blk_mq_run_hw_queue+0x239/0x670 [ 862.399161][T28889] blk_mq_flush_plug_list+0x673/0x1c60 [ 862.404560][T28889] __blk_flush_plug+0x2c5/0x4b0 [ 862.409404][T28889] __submit_bio+0x547/0x690 [ 862.413932][T28889] submit_bio_noacct_nocheck+0x698/0xd70 [ 862.419475][T28889] submit_bio_noacct+0x50d/0x1ec0 [ 862.424470][T28889] block_read_full_folio+0x812/0xa50 [ 862.429712][T28889] filemap_read_folio+0xc6/0x2a0 [ 862.434638][T28889] do_read_cache_folio+0x263/0x5c0 [ 862.439717][T28889] read_part_sector+0xd4/0x310 [ 862.444563][T28889] adfspart_check_ICS+0x94/0x940 [ 862.449492][T28889] bdev_disk_changed+0x71f/0x1520 [ 862.454496][T28889] blkdev_get_whole+0x187/0x290 [ 862.459334][T28889] bdev_open+0x2c7/0xe20 [ 862.463624][T28889] blkdev_open+0x27b/0x3f0 [ 862.468074][T28889] do_dentry_open+0x735/0x1c40 [ 862.472932][T28889] vfs_open+0x82/0x3f0 [ 862.477082][T28889] path_openat+0x1e88/0x2d80 [ 862.481694][T28889] do_filp_open+0x20c/0x470 [ 862.486229][T28889] do_sys_openat2+0x17a/0x1e0 [ 862.490916][T28889] __x64_sys_openat+0x175/0x210 [ 862.495758][T28889] do_syscall_64+0xcd/0x250 [ 862.500288][T28889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.506071][T28889] [ 862.506071][T28889] -> #1 (set->srcu){.+.+}-{0:0}: [ 862.512499][T28889] __synchronize_srcu+0xa9/0x2a0 [ 862.517445][T28889] blk_mq_update_nr_requests+0x288/0x670 [ 862.523153][T28889] queue_requests_store+0x161/0x210 [ 862.528312][T28889] queue_attr_store+0x370/0x510 [ 862.533162][T28889] sysfs_kf_write+0x117/0x170 [ 862.537858][T28889] kernfs_fop_write_iter+0x33d/0x500 [ 862.543094][T28889] vfs_write+0x5ae/0x1150 [ 862.547556][T28889] ksys_write+0x12b/0x250 [ 862.551929][T28889] do_syscall_64+0xcd/0x250 [ 862.556462][T28889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.562255][T28889] [ 862.562255][T28889] -> #0 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 862.570016][T28889] __lock_acquire+0x249e/0x3c40 [ 862.574881][T28889] lock_acquire.part.0+0x11b/0x380 [ 862.579962][T28889] blk_mq_submit_bio+0x20f5/0x2610 [ 862.585038][T28889] __submit_bio+0x3d1/0x690 [ 862.589565][T28889] submit_bio_noacct_nocheck+0x698/0xd70 [ 862.595111][T28889] submit_bio_noacct+0x50d/0x1ec0 [ 862.600189][T28889] mpage_readahead+0x41d/0x590 [ 862.604953][T28889] read_pages+0x1a7/0xc60 [ 862.609325][T28889] page_cache_ra_unbounded+0x426/0x7d0 [ 862.614711][T28889] force_page_cache_ra+0x24b/0x340 [ 862.619785][T28889] page_cache_sync_ra+0x158/0xa30 [ 862.624780][T28889] filemap_get_pages+0xb62/0x1c30 [ 862.629799][T28889] filemap_read+0x3c5/0xe70 [ 862.634333][T28889] blkdev_read_iter+0x187/0x4b0 [ 862.639252][T28889] vfs_read+0x886/0xbf0 [ 862.643472][T28889] ksys_read+0x12b/0x250 [ 862.647768][T28889] do_syscall_64+0xcd/0x250 [ 862.652300][T28889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.658171][T28889] [ 862.658171][T28889] other info that might help us debug this: [ 862.658171][T28889] [ 862.667375][T28889] Chain exists of: [ 862.667375][T28889] &q->q_usage_counter(io)#51 --> &vma->vm_lock->lock --> mapping.invalidate_lock#2 [ 862.667375][T28889] [ 862.681248][T28889] Possible unsafe locking scenario: [ 862.681248][T28889] [ 862.687948][T28889] CPU0 CPU1 [ 862.692778][T28889] ---- ---- [ 862.697683][T28889] rlock(mapping.invalidate_lock#2); [ 862.702528][T28889] lock(&vma->vm_lock->lock); [ 862.709164][T28889] lock(mapping.invalidate_lock#2); [ 862.716198][T28889] rlock(&q->q_usage_counter(io)#51); [ 862.721124][T28889] [ 862.721124][T28889] *** DEADLOCK *** [ 862.721124][T28889] [ 862.728528][T28889] 1 lock held by udevd/28889: [ 862.732741][T28889] #0: ffff8880238d3740 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_unbounded+0x173/0x7d0 [ 862.742877][T28889] [ 862.742877][T28889] stack backtrace: [ 862.748194][T28889] CPU: 0 UID: 0 PID: 28889 Comm: udevd Not tainted 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 862.748216][T28889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 862.748227][T28889] Call Trace: [ 862.748233][T28889] [ 862.748241][T28889] dump_stack_lvl+0x116/0x1f0 [ 862.748269][T28889] print_circular_bug+0x490/0x760 [ 862.748296][T28889] check_noncircular+0x31a/0x400 [ 862.748321][T28889] ? __pfx_check_noncircular+0x10/0x10 [ 862.748345][T28889] ? __kernel_text_address+0xd/0x40 [ 862.748371][T28889] ? unwind_get_return_address+0x59/0xa0 [ 862.748401][T28889] ? lockdep_lock+0xc6/0x200 [ 862.748420][T28889] ? __pfx_lockdep_lock+0x10/0x10 [ 862.748442][T28889] __lock_acquire+0x249e/0x3c40 [ 862.748478][T28889] ? __pfx___lock_acquire+0x10/0x10 [ 862.748502][T28889] ? hlock_class+0x4e/0x130 [ 862.748521][T28889] ? mark_lock+0xb5/0xc60 [ 862.748544][T28889] ? mark_lock+0xb5/0xc60 [ 862.748566][T28889] ? page_cache_ra_unbounded+0x426/0x7d0 [ 862.748588][T28889] ? page_cache_sync_ra+0x158/0xa30 [ 862.748609][T28889] lock_acquire.part.0+0x11b/0x380 [ 862.748635][T28889] ? __submit_bio+0x3d1/0x690 [ 862.748656][T28889] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 862.748682][T28889] ? rcu_is_watching+0x12/0xc0 [ 862.748702][T28889] ? trace_lock_acquire+0x14e/0x1f0 [ 862.748722][T28889] ? __submit_bio+0x3d1/0x690 [ 862.748742][T28889] ? lock_acquire+0x2f/0xb0 [ 862.748765][T28889] ? __submit_bio+0x3d1/0x690 [ 862.748785][T28889] blk_mq_submit_bio+0x20f5/0x2610 [ 862.748807][T28889] ? __submit_bio+0x3d1/0x690 [ 862.748827][T28889] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 862.748849][T28889] ? mark_lock+0xb5/0xc60 [ 862.748871][T28889] ? __pfx___lock_acquire+0x10/0x10 [ 862.748895][T28889] ? __pfx___lock_acquire+0x10/0x10 [ 862.748918][T28889] ? trace_lock_acquire+0x14e/0x1f0 [ 862.748939][T28889] ? __pfx_mark_lock+0x10/0x10 [ 862.748966][T28889] __submit_bio+0x3d1/0x690 [ 862.748986][T28889] ? __pfx___submit_bio+0x10/0x10 [ 862.749006][T28889] ? trace_lock_acquire+0x14e/0x1f0 [ 862.749031][T28889] ? submit_bio_noacct_nocheck+0x698/0xd70 [ 862.749052][T28889] submit_bio_noacct_nocheck+0x698/0xd70 [ 862.749075][T28889] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 862.749098][T28889] ? __pfx___might_resched+0x10/0x10 [ 862.749128][T28889] submit_bio_noacct+0x50d/0x1ec0 [ 862.749151][T28889] mpage_readahead+0x41d/0x590 [ 862.749172][T28889] ? __pfx_mpage_readahead+0x10/0x10 [ 862.749197][T28889] ? __pfx_blkdev_get_block+0x10/0x10 [ 862.749222][T28889] ? __folio_batch_add_and_move+0x5f3/0xc60 [ 862.749246][T28889] ? __pfx_lock_release+0x10/0x10 [ 862.749270][T28889] ? trace_lock_acquire+0x14e/0x1f0 [ 862.749290][T28889] ? __pfx_blkdev_readahead+0x10/0x10 [ 862.749313][T28889] read_pages+0x1a7/0xc60 [ 862.749332][T28889] ? __folio_batch_add_and_move+0x689/0xc60 [ 862.749359][T28889] ? __pfx_read_pages+0x10/0x10 [ 862.749384][T28889] page_cache_ra_unbounded+0x426/0x7d0 [ 862.749410][T28889] force_page_cache_ra+0x24b/0x340 [ 862.749433][T28889] page_cache_sync_ra+0x158/0xa30 [ 862.749453][T28889] ? __lock_acquire+0xcc5/0x3c40 [ 862.749483][T28889] filemap_get_pages+0xb62/0x1c30 [ 862.749511][T28889] ? __pfx_filemap_get_pages+0x10/0x10 [ 862.749537][T28889] ? __pfx___might_resched+0x10/0x10 [ 862.749566][T28889] filemap_read+0x3c5/0xe70 [ 862.749588][T28889] ? trace_lock_acquire+0x14e/0x1f0 [ 862.749613][T28889] ? __pfx_filemap_read+0x10/0x10 [ 862.749646][T28889] ? apparmor_file_permission+0x251/0x400 [ 862.749668][T28889] blkdev_read_iter+0x187/0x4b0 [ 862.749693][T28889] vfs_read+0x886/0xbf0 [ 862.749719][T28889] ? __pfx_vfs_read+0x10/0x10 [ 862.749743][T28889] ? blkdev_llseek+0x9b/0xd0 [ 862.749765][T28889] ? __pfx_lock_release+0x10/0x10 [ 862.749791][T28889] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 862.749822][T28889] ksys_read+0x12b/0x250 [ 862.749845][T28889] ? __pfx_ksys_read+0x10/0x10 [ 862.749872][T28889] do_syscall_64+0xcd/0x250 [ 862.749898][T28889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.749925][T28889] RIP: 0033:0x7f7da9916b6a [ 862.749940][T28889] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 862.749957][T28889] RSP: 002b:00007ffdfcaa9dd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 862.749975][T28889] RAX: ffffffffffffffda RBX: 00001fffffff0000 RCX: 00007f7da9916b6a [ 862.749988][T28889] RDX: 0000000000000040 RSI: 00005572307cf8c8 RDI: 0000000000000009 [ 862.750000][T28889] RBP: 0000000000000040 R08: 00005572307cf8a0 R09: 00007f7da99f1b60 [ 862.750012][T28889] R10: 0000000000000007 R11: 0000000000000246 R12: 00005572307cf8a0 [ 862.750024][T28889] R13: 00005572307cf8b8 R14: 00005572307dcad8 R15: 00005572307dca80 [ 862.750041][T28889] [ 866.732173][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 866.737887][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 867.232177][ T3587] EXT4-fs error: 5 callbacks suppressed