last executing test programs: 27.066512336s ago: executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xffffffff, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) close(r1) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f0000000000)) iopl(0x0) r6 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r6, 0x80044dff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000540), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) listen(0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x0, @vbi={0x0, 0x800, 0x9e, 0x0, [0x0, 0x80], [0x2]}}) 26.107432878s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000092"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001500)={0xffffffffffffffff, &(0x7f0000000500)="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"}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r5, &(0x7f0000000380), 0x20000000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00'}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000740)='net/ipv6_route\x00') lseek(r6, 0x73, 0x0) lseek(r6, 0xf53, 0x0) fchdir(r4) close(r4) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 5.567771085s ago: executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000900)={&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000640)=[{&(0x7f00000000c0)="c2", 0x1}], 0x1, &(0x7f0000000840)=[@prinfo={0x18}], 0x18}, 0x0) 5.403144904s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000001980)={[{@orlov}, {@dioread_lock}, {@data_ordered}, {@stripe={'stripe', 0x3d, 0x7fff}}, {@errors_continue}, {@i_version}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/kvm\x00'}}, {@appraise}]}, 0x3, 0x449, &(0x7f0000001240)="$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") socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) clock_adjtime(0x0, &(0x7f00000004c0)={0x17, 0x8000000000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x1, 0x2}, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x3, 0xffffff00, 0x80, 0x2100, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3, 0x6}, 0x48) unshare(0x6000080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup2(r1, r1) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000002b86dc71bb90ed2c0400000000000000000000d4d8b9f42d673b7c0d97891429e0fe22b5ba9e6be4297ee855f37bf358ce3baef264708ae4b3ca1ed9058069e20c5544ce1c2092f8fb4ffe2add1292158db3f2b86a"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) mmap$snddsp(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x0, 0x110, r2, 0x6000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, 0x12, 0x909, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x0, 0x0, 0x1004002c]}}}, 0x4c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 5.389850745s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r7, 0x3, 0x0, @void}, 0x62) listen(r1, 0x1) 5.204539763s ago: executing program 4: ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000580)=""/198, 0xc6}], 0x1, 0x0, 0x0) 4.983407667s ago: executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x44) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x210820, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = epoll_create1(0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8a, 0x8, 0x2}, 0x48) r4 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f00000000c0), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4050000ffffff7f37fe5e59766110"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd1, &(0x7f0000000700)=""/209, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x400}, 0x10, 0xffffffffffffffff}, 0x90) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000004c0), &(0x7f0000000240)=@udp6=r5, 0x4}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000ac0)={0x2004}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000006c0)={'bridge_slave_0\x00'}) dup(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "8b7639a176f57fc4bfefef66a3d6cd7e3804e669a4bea3ee4a39a4280bd72845b01a058d3fe67c65f0afeb18ee1ef15575278152a71da7cb820aa6b45d87fa75e09919316e8ff6c1a3ab6e62a5b823297bd705a8457943af721449e8fa3e92f41a"}, 0x6c) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000400)=ANY=[@ANYRES64=r5, @ANYRESOCT=r0]) r7 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 3.785272621s ago: executing program 4: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x68, 0x200000, 0x0, 0x0, 0xffffffff}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f0000002a80)=ANY=[], 0x1, 0x14f5, &(0x7f0000001580)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3080072, &(0x7f0000001340)={[{@prjquota}, {@norecovery}]}, 0x6, 0x50d, &(0x7f0000008340)="$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") rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x80}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0xffffffff, 0x4) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = dup(r3) close(r2) r5 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)) open(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60142, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x18c}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000841000/0x3000)=nil, 0x3000, 0xc) shutdown(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000f2cff4)={0x77540947ad9a1689}) 2.97883545s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x3}, {0x0, 0xa, 0x0, "00002100000200000000"}}}]}]}]}}]}, 0x58}}, 0x0) 2.709760095s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x281200c, &(0x7f00000011c0)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYRES16=r1, @ANYRES64=0x0, @ANYRES64, @ANYRES8, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd53b9ad91191f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399c0000010000000000177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8960900a04195ad43adb611", @ANYRES16=r0, @ANYRES16=0x0], 0x4, 0x715, &(0x7f0000000500)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4080aebf, &(0x7f0000000d00)) 2.616729964s ago: executing program 1: bind$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x009'], 0x40}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdb", @ANYRES32, @ANYBLOB="001000008000000008000f00"], 0xe8}}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={0x0, 0x1c}}, 0xc4) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000440)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0xa, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) unshare(0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x1269, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) 2.322454921s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3b00330050000000080211000000080211000001090000005050000000000000000000006400000001007206030303030303710700000000000000000800270000010000080026004416"], 0x70}}, 0x0) 2.22708273s ago: executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000), 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000140)={0x2, 0x2}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) r10 = fcntl$dupfd(r8, 0x0, r8) ioctl$VIDIOC_SUBSCRIBE_EVENT(r10, 0x4020565a, &(0x7f0000000080)={0x2}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_io_uring_setup(0x8007bffc, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.122970765s ago: executing program 3: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 1.875466038s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r2, 0x26, &(0x7f00000002c0)) close_range(r0, 0xffffffffffffffff, 0x0) 1.758386055s ago: executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 1.731806341s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x3}, {0x0, 0xa, 0x0, "00002100000200000000"}}}]}]}]}}]}, 0x58}}, 0x0) 1.667536505s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r7, 0x3, 0x0, @void}, 0x62) listen(r1, 0x1) 1.610338192s ago: executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x44) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x210820, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = epoll_create1(0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8a, 0x8, 0x2}, 0x48) r4 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f00000000c0), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4050000ffffff7f37fe5e59766110"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd1, &(0x7f0000000700)=""/209, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x400}, 0x10, 0xffffffffffffffff}, 0x90) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000004c0), &(0x7f0000000240)=@udp6=r5, 0x4}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000ac0)={0x2004}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000006c0)={'bridge_slave_0\x00'}) dup(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "8b7639a176f57fc4bfefef66a3d6cd7e3804e669a4bea3ee4a39a4280bd72845b01a058d3fe67c65f0afeb18ee1ef15575278152a71da7cb820aa6b45d87fa75e09919316e8ff6c1a3ab6e62a5b823297bd705a8457943af721449e8fa3e92f41a"}, 0x6c) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000400)=ANY=[@ANYRES64=r5, @ANYRESOCT=r0]) r7 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 1.57322461s ago: executing program 2: syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000480)='./file0\x00', 0x1810002, &(0x7f0000002380)=ANY=[], 0x1, 0x1cd, &(0x7f0000002180)="$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") r0 = creat(&(0x7f0000001d80)='./bus\x00', 0x0) lseek(r0, 0x7fff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000040)='./bus\x00', 0x4837e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ftruncate(r1, 0x1f) write$FUSE_ATTR(r0, &(0x7f0000000600)={0x78}, 0x78) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x204002, &(0x7f0000006440)=ANY=[@ANYBLOB="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"], 0xfc, 0xc3d, &(0x7f0000002700)="$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") write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) 1.454206423s ago: executing program 1: syz_mount_image$bcachefs(&(0x7f000000f640), &(0x7f000000f680)='./file1\x00', 0x200012, &(0x7f00000000c0)=ANY=[], 0x1, 0xf62a, &(0x7f0000034ec0)="$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") r0 = creat(&(0x7f0000003840)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) ftruncate(r0, 0x1f) r2 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000fa) sendfile(r2, r2, 0x0, 0x100000000) 1.273684297s ago: executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000002200)="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"/3584, 0xe00) sendfile(r0, r1, 0x0, 0x11f06) newfstatat(0xffffffffffffff9c, &(0x7f0000000880)='.\x00', &(0x7f0000000500), 0x0) r2 = syz_io_uring_setup(0x6172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 1.046961526s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x802, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a600", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x13, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x8, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000001"], 0x28}}, 0x0) 868.688303ms ago: executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000900)={&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000640)=[{&(0x7f00000000c0)="c2", 0x1}], 0x1, &(0x7f0000000840)=[@prinfo={0x18}, @sndinfo={0x20}], 0x38}, 0x0) 559.358983ms ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000001c00)='ext4_es_insert_delayed_block\x00', r4}, 0x10) write$cgroup_subtree(r2, &(0x7f00000009c0)=ANY=[], 0xda00) 505.984175ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) 376.394592ms ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r2, 0x26, &(0x7f00000002c0)) close_range(r0, 0xffffffffffffffff, 0x0) 298.687251ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000700), 0x12) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 272.862733ms ago: executing program 0: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4f0c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000cab000)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012063, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100ff030000000000030000850000007b00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5}) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)={0x0}) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) 0s ago: executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) kernel console output (not intermixed with test programs): sing attributes in process `syz-executor.1'. [ 249.947986][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.459695][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 251.643962][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.663291][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.856432][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 251.965798][ T7893] team0: Port device bridge14 added [ 252.204349][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.811048][ T7912] wg2: entered promiscuous mode [ 252.835358][ T7912] wg2: entered allmulticast mode [ 252.973693][ T5207] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 253.752680][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 255.118822][ T5131] Bluetooth: hci0: command 0x0406 tx timeout [ 255.659557][ T5207] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 255.698925][ T5207] usb 3-1: string descriptor 0 read error: -71 [ 255.705325][ T5207] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.748811][ T5207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.786710][ T5207] usb 3-1: can't set config #1, error -71 [ 255.820248][ T5207] usb 3-1: USB disconnect, device number 3 [ 256.023823][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.045937][ T7929] team0: Device ip6tnl0 is of different type [ 256.075091][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.081939][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.164491][ T7931] team0: Device ip6tnl0 is of different type [ 256.198382][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.652875][ T7956] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 256.923216][ T7962] No control pipe specified [ 257.021057][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.092059][ T7969] team0: Port device bridge15 added [ 257.351726][ T7977] fuse: Bad value for 'fd' [ 258.283597][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.878913][ T8013] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 259.519581][ T5131] Bluetooth: hci4: command 0x0406 tx timeout [ 259.800025][ T8013] x_tables: duplicate underflow at hook 2 [ 259.929785][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 261.183525][ T8041] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 262.238881][ T8037] loop2: detected capacity change from 0 to 40427 [ 262.274313][ T8037] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 262.294366][ T8054] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.308584][ T8037] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 262.349163][ T8037] F2FS-fs (loop2): invalid crc value [ 262.404973][ T8037] F2FS-fs (loop2): Found nat_bits in checkpoint [ 262.492616][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.562557][ T8037] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 262.579708][ T8037] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 262.605721][ T8054] team0: Port device bridge14 added [ 262.774277][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.950590][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.529046][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.639928][ T5129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.659624][ T5129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.667258][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.679273][ T5129] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.691248][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.700767][ T5129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 264.709622][ T5129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 265.673939][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 265.923333][ T8096] loop2: detected capacity change from 0 to 8 [ 266.135037][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.862192][ T5131] Bluetooth: hci1: command tx timeout [ 268.044912][ T8112] tipc: Started in network mode [ 268.050087][ T8112] tipc: Node identity ac1414aa, cluster identity 4711 [ 268.057893][ T8112] tipc: New replicast peer: 100.1.1.1 [ 268.063864][ T8112] tipc: Enabled bearer , priority 10 [ 268.233672][ T8114] wg2: entered promiscuous mode [ 268.278761][ T8114] wg2: entered allmulticast mode [ 268.325158][ T12] bridge_slave_1: left allmulticast mode [ 268.340409][ T12] bridge_slave_1: left promiscuous mode [ 268.346393][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.449848][ T12] bridge_slave_0: left allmulticast mode [ 268.455574][ T12] bridge_slave_0: left promiscuous mode [ 268.491688][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.192293][ T47] tipc: Node number set to 2886997162 [ 269.908691][ T5131] Bluetooth: hci1: command tx timeout [ 270.062482][ T8142] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 270.585432][ T12] team0: Port device bridge1 removed [ 270.676330][ T12] team0: Port device bridge2 removed [ 270.779679][ T12] team0: Port device bridge3 removed [ 270.871970][ T12] team0: Port device bridge4 removed [ 270.953113][ T12] team0: Port device bridge5 removed [ 271.027172][ T12] team0: Port device bridge6 removed [ 271.751812][ T12] team0: Port device bridge10 removed [ 272.023908][ T5131] Bluetooth: hci1: command tx timeout [ 272.060216][ T12] team0: Port device bridge11 removed [ 272.162172][ T12] team0: Port device bridge12 removed [ 272.271212][ T12] team0: Port device bridge13 removed [ 272.359001][ T12] team0: Port device bridge14 removed [ 272.662793][ T12] team0: Port device bridge15 removed [ 273.142713][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.162268][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.180896][ T12] bond0 (unregistering): Released all slaves [ 273.188533][ C0] DEBUG: holding rtnl_mutex for 521 jiffies. [ 273.194992][ C0] task:kworker/u8:1 state:R running task stack:23000 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 273.206845][ C0] Workqueue: netns cleanup_net [ 273.212164][ C0] Call Trace: [ 273.215471][ C0] [ 273.218446][ C0] __schedule+0x17e8/0x4a20 [ 273.223090][ C0] ? __pfx___schedule+0x10/0x10 [ 273.228005][ C0] ? __pfx_lock_release+0x10/0x10 [ 273.233104][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 273.239189][ C0] ? kthread_data+0x52/0xd0 [ 273.243737][ C0] ? wq_worker_sleeping+0x66/0x240 [ 273.248927][ C0] ? schedule+0x90/0x320 [ 273.253241][ C0] schedule+0x14b/0x320 [ 273.257450][ C0] synchronize_rcu_expedited+0x684/0x830 [ 273.263210][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 273.269504][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 273.274933][ C0] ? __pfx___might_resched+0x10/0x10 [ 273.280337][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 273.286471][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 273.292525][ C0] unregister_netdevice_many_notify+0x131e/0x16b0 [ 273.299078][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 273.305878][ C0] ? irqentry_exit+0x63/0x90 [ 273.310563][ C0] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 273.316586][ C0] cleanup_net+0x75d/0xcc0 [ 273.321141][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 273.326148][ C0] ? process_scheduled_works+0x945/0x1830 [ 273.331968][ C0] process_scheduled_works+0xa2c/0x1830 [ 273.337585][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 273.343655][ C0] ? assign_work+0x364/0x3d0 [ 273.348549][ C0] worker_thread+0x86d/0xd50 [ 273.353214][ C0] ? __kthread_parkme+0x169/0x1d0 [ 273.358291][ C0] ? __pfx_worker_thread+0x10/0x10 [ 273.363485][ C0] kthread+0x2f0/0x390 [ 273.367622][ C0] ? __pfx_worker_thread+0x10/0x10 [ 273.372854][ C0] ? __pfx_kthread+0x10/0x10 [ 273.377504][ C0] ret_from_fork+0x4b/0x80 [ 273.382023][ C0] ? __pfx_kthread+0x10/0x10 [ 273.386714][ C0] ret_from_fork_asm+0x1a/0x30 [ 273.391603][ C0] [ 273.394663][ C0] DEBUG: waiting rtnl_mutex for 536 jiffies. [ 273.400833][ C0] task:syz-executor.1 state:D stack:22416 pid:8068 tgid:8068 ppid:8060 flags:0x00000002 [ 273.411098][ C0] Call Trace: [ 273.414500][ C0] [ 273.417472][ C0] __schedule+0x17e8/0x4a20 [ 273.422189][ C0] ? __pfx___schedule+0x10/0x10 [ 273.427118][ C0] ? __pfx_lock_release+0x10/0x10 [ 273.432231][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 273.437778][ C0] ? schedule+0x90/0x320 [ 273.442115][ C0] schedule+0x14b/0x320 [ 273.446324][ C0] schedule_preempt_disabled+0x13/0x30 [ 273.451878][ C0] __mutex_lock+0x6a4/0xd70 [ 273.456701][ C0] ? __mutex_lock+0x527/0xd70 [ 273.461459][ C0] ? rtnetlink_rcv_msg+0x839/0x1170 [ 273.466716][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 273.471869][ C0] ? rtnl_lock+0xe7/0x130 [ 273.476335][ C0] rtnetlink_rcv_msg+0x839/0x1170 [ 273.481444][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 273.486689][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 273.492226][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 273.497567][ C0] ? __pfx_validate_chain+0x10/0x10 [ 273.502852][ C0] ? __pfx_validate_chain+0x10/0x10 [ 273.508126][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 273.513149][ C0] ? mark_lock+0x9a/0x360 [ 273.517520][ C0] ? __pfx_validate_chain+0x10/0x10 [ 273.522830][ C0] ? __lock_acquire+0x1359/0x2000 [ 273.527914][ C0] ? mark_lock+0x9a/0x360 [ 273.532360][ C0] ? __lock_acquire+0x1359/0x2000 [ 273.537466][ C0] netlink_rcv_skb+0x1e3/0x430 [ 273.542369][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 273.547880][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.553283][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.558558][ C0] netlink_unicast+0x7f0/0x990 [ 273.563378][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 273.568835][ C0] ? __virt_addr_valid+0x183/0x520 [ 273.574026][ C0] ? __check_object_size+0x49c/0x900 [ 273.579426][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 273.584689][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 273.589577][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.594923][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.601015][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 273.606014][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 273.611379][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 273.616992][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.622647][ C0] __sock_sendmsg+0x221/0x270 [ 273.627399][ C0] __sys_sendto+0x3a4/0x4f0 [ 273.632026][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 273.637118][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.643178][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.649609][ C0] __x64_sys_sendto+0xde/0x100 [ 273.654426][ C0] do_syscall_64+0xf3/0x230 [ 273.659030][ C0] ? clear_bhb_loop+0x35/0x90 [ 273.663754][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.669759][ C0] RIP: 0033:0x7f9fb727ec1c [ 273.674222][ C0] RSP: 002b:00007ffcbcda6050 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 273.682776][ C0] RAX: ffffffffffffffda RBX: 00007f9fb7ee4620 RCX: 00007f9fb727ec1c [ 273.690831][ C0] RDX: 0000000000000040 RSI: 00007f9fb7ee4670 RDI: 0000000000000003 [ 273.698887][ C0] RBP: 0000000000000000 R08: 00007ffcbcda60a4 R09: 000000000000000c [ 273.706978][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 273.715090][ C0] R13: 0000000000000000 R14: 00007f9fb7ee4670 R15: 0000000000000000 [ 273.723189][ C0] [ 273.726220][ C0] DEBUG: waiting rtnl_mutex for 543 jiffies. [ 273.732297][ C0] task:kworker/0:6 state:D stack:23808 pid:5177 tgid:5177 ppid:2 flags:0x00004000 [ 273.742546][ C0] Workqueue: events linkwatch_event [ 273.747780][ C0] Call Trace: [ 273.751142][ C0] [ 273.754110][ C0] __schedule+0x17e8/0x4a20 [ 273.758735][ C0] ? __pfx___schedule+0x10/0x10 [ 273.763720][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.769777][ C0] ? __pfx_lock_release+0x10/0x10 [ 273.774817][ C0] ? kick_pool+0x45c/0x620 [ 273.779311][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.784549][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 273.789844][ C0] ? schedule+0x90/0x320 [ 273.794130][ C0] schedule+0x14b/0x320 [ 273.798430][ C0] schedule_preempt_disabled+0x13/0x30 [ 273.803981][ C0] __mutex_lock+0x6a4/0xd70 [ 273.808584][ C0] ? __mutex_lock+0x527/0xd70 [ 273.813314][ C0] ? linkwatch_event+0xe/0x60 [ 273.818030][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 273.823140][ C0] ? process_scheduled_works+0x945/0x1830 [ 273.829378][ C0] ? rtnl_lock+0xe7/0x130 [ 273.833754][ C0] ? process_scheduled_works+0x945/0x1830 [ 273.839568][ C0] linkwatch_event+0xe/0x60 [ 273.844114][ C0] process_scheduled_works+0xa2c/0x1830 [ 273.849777][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 273.855865][ C0] ? assign_work+0x364/0x3d0 [ 273.860521][ C0] worker_thread+0x86d/0xd50 [ 273.865167][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 273.871172][ C0] ? __kthread_parkme+0x169/0x1d0 [ 273.876236][ C0] ? __pfx_worker_thread+0x10/0x10 [ 273.881436][ C0] kthread+0x2f0/0x390 [ 273.885622][ C0] ? __pfx_worker_thread+0x10/0x10 [ 273.890823][ C0] ? __pfx_kthread+0x10/0x10 [ 273.895471][ C0] ret_from_fork+0x4b/0x80 [ 273.899994][ C0] ? __pfx_kthread+0x10/0x10 [ 273.904807][ C0] ret_from_fork_asm+0x1a/0x30 [ 273.909710][ C0] [ 273.912766][ C0] DEBUG: waiting rtnl_mutex for 556 jiffies. [ 273.918838][ C0] task:kworker/0:5 state:D stack:22928 pid:5176 tgid:5176 ppid:2 flags:0x00004000 [ 273.929128][ C0] Workqueue: events switchdev_deferred_process_work [ 273.936042][ C0] Call Trace: [ 273.939431][ C0] [ 273.942419][ C0] __schedule+0x17e8/0x4a20 [ 273.947005][ C0] ? __pfx___schedule+0x10/0x10 [ 273.951990][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.958118][ C0] ? __pfx_lock_release+0x10/0x10 [ 273.963250][ C0] ? kick_pool+0x45c/0x620 [ 273.967736][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.973065][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 273.978345][ C0] ? schedule+0x90/0x320 [ 273.982722][ C0] schedule+0x14b/0x320 [ 273.986938][ C0] schedule_preempt_disabled+0x13/0x30 [ 273.992527][ C0] __mutex_lock+0x6a4/0xd70 [ 273.997080][ C0] ? __mutex_lock+0x527/0xd70 [ 274.001895][ C0] ? switchdev_deferred_process_work+0xe/0x20 [ 274.008005][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 274.013124][ C0] ? process_scheduled_works+0x945/0x1830 [ 274.018942][ C0] ? rtnl_lock+0xe7/0x130 [ 274.023405][ C0] ? process_scheduled_works+0x945/0x1830 [ 274.029223][ C0] switchdev_deferred_process_work+0xe/0x20 [ 274.035162][ C0] process_scheduled_works+0xa2c/0x1830 [ 274.040858][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 274.046894][ C0] ? assign_work+0x364/0x3d0 [ 274.051635][ C0] worker_thread+0x86d/0xd50 [ 274.056363][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 274.062379][ C0] ? __kthread_parkme+0x169/0x1d0 [ 274.067458][ C0] ? __pfx_worker_thread+0x10/0x10 [ 274.072658][ C0] kthread+0x2f0/0x390 [ 274.076802][ C0] ? __pfx_worker_thread+0x10/0x10 [ 274.082052][ C0] ? __pfx_kthread+0x10/0x10 [ 274.086727][ C0] ret_from_fork+0x4b/0x80 [ 274.091255][ C0] ? __pfx_kthread+0x10/0x10 [ 274.095906][ C0] ret_from_fork_asm+0x1a/0x30 [ 274.100850][ C0] [ 274.103947][ C0] [ 274.103947][ C0] Showing all locks held in the system: [ 274.111785][ C0] 5 locks held by kworker/u8:1/12: [ 274.117291][ C0] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 274.129792][ C0] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 274.140489][ C0] #2: ffffffff8f5ea750 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 274.150153][ C0] #3: ffffffff8f5f7008 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 274.159149][ C0] #4: ffffffff8e33ab78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 274.170165][ C0] 2 locks held by kworker/u8:5/965: [ 274.175407][ C0] #0: ffff8880b953e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 274.185475][ C0] #1: ffff8880b9528948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 274.197058][ C0] 2 locks held by getty/4851: [ 274.201829][ C0] #0: ffff88802aedb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 274.211694][ C0] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 274.222028][ C0] 3 locks held by kworker/0:5/5176: [ 274.227314][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 274.238579][ C0] #1: ffffc9000447fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 274.249789][ C0] #2: ffffffff8f5f7008 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 274.260329][ C0] 3 locks held by kworker/0:6/5177: [ 274.265560][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 274.277004][ C0] #1: ffffc9000448fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 274.288141][ C0] #2: ffffffff8f5f7008 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 274.297277][ C0] 1 lock held by syz-executor.1/8068: [ 274.302822][ C0] #0: ffffffff8f5f7008 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 274.312565][ C0] 1 lock held by syz-executor.0/8129: [ 274.318151][ C0] #0: ffffffff8f5f7008 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 274.327930][ C0] 1 lock held by syz-executor.0/8136: [ 274.333373][ C0] #0: ffffffff8f5f7008 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 274.342980][ C0] 1 lock held by syz-executor.0/8138: [ 274.348573][ C0] #0: ffffffff8f5f7008 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 274.358258][ C0] 2 locks held by syz-executor.4/8131: [ 274.363864][ C0] #0: ffff888072a98808 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 274.374209][ C0] #1: ffffffff8f5f7008 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8a0 [ 274.383257][ C0] 1 lock held by syz-executor.2/8155: [ 274.388717][ C0] #0: ffffffff8f5f7008 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 274.398292][ C0] 1 lock held by syz-executor.2/8156: [ 274.403815][ C0] #0: ffffffff8f5f7008 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 274.413424][ C0] 1 lock held by syz-executor.2/8157: [ 274.418894][ C0] #0: ffffffff8f5f7008 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 274.428626][ C0] 1 lock held by syz-executor.2/8158: [ 274.434020][ C0] #0: ffffffff8f5f7008 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 274.443653][ C0] 1 lock held by syz-executor.2/8159: [ 274.449233][ C0] #0: ffffffff8f5f7008 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 274.458868][ C0] 4 locks held by syz-executor.3/8168: [ 274.464410][ C0] #0: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: page_ext_get+0x20/0x2a0 [ 274.473739][ C0] #1: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 274.484005][ C0] #2: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 274.493966][ C0] #3: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 274.504065][ C0] [ 274.506430][ C0] ============================================= [ 274.506430][ C0] [ 274.528280][ T5131] Bluetooth: hci1: command tx timeout [ 274.568937][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.688752][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 274.781355][ T8158] team0: Device vlan1 is up. Set it down before adding it as a team port [ 274.816637][ T8159] team0: Port device vlan1 added [ 276.242612][ T12] hsr_slave_0: left promiscuous mode [ 276.288802][ T12] hsr_slave_1: left promiscuous mode [ 276.303912][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.323660][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.328714][ T5176] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 276.345441][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.368661][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.436663][ T12] veth1_macvtap: left promiscuous mode [ 276.458619][ T12] veth0_macvtap: left promiscuous mode [ 276.474665][ T12] veth1_vlan: left promiscuous mode [ 276.484840][ T12] veth0_vlan: left promiscuous mode [ 276.544818][ T5176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.578762][ T5176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.613545][ T5176] usb 3-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 4.00 [ 276.633992][ T5176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.659872][ T5176] usb 3-1: config 0 descriptor?? [ 276.751299][ T8206] overlayfs: failed to resolve './file0': -2 [ 276.865606][ T8207] syz-executor.0[8207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.865770][ T8207] syz-executor.0[8207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.151431][ T5176] wacom 0003:056A:00F8.0002: unbalanced delimiter at end of report description [ 277.219905][ T5176] wacom 0003:056A:00F8.0002: parse failed [ 277.241715][ T5176] wacom 0003:056A:00F8.0002: probe with driver wacom failed with error -22 [ 277.337771][ T5176] usb 3-1: USB disconnect, device number 4 [ 279.138027][ T12] team0 (unregistering): Port device veth1_to_hsr removed [ 279.320861][ T12] team0 (unregistering): Port device team_slave_1 removed [ 279.392717][ T12] team0 (unregistering): Port device team_slave_0 removed [ 280.568356][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 280.598030][ T8227] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 280.703604][ T8231] team0: Port device bridge16 added [ 280.777731][ T8068] chnl_net:caif_netlink_parms(): no params data found [ 281.133780][ T8068] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.150817][ T8068] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.161830][ T8068] bridge_slave_0: entered allmulticast mode [ 281.170548][ T8068] bridge_slave_0: entered promiscuous mode [ 281.209974][ T8068] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.225641][ T8068] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.234120][ T8068] bridge_slave_1: entered allmulticast mode [ 281.249078][ T8068] bridge_slave_1: entered promiscuous mode [ 281.296282][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 281.374283][ T8068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.422305][ T8068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.164622][ T8068] team0: Port device team_slave_0 added [ 282.209648][ T8068] team0: Port device team_slave_1 added [ 282.239458][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 282.395040][ T8068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.403183][ T8068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.439887][ T8068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.457196][ T8282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 282.530052][ T8068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.538086][ T8068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.573994][ T8068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.628203][ T8282] team0: Port device bridge17 added [ 282.704335][ T8291] syz-executor.4: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 282.761246][ T8291] CPU: 1 UID: 0 PID: 8291 Comm: syz-executor.4 Not tainted 6.10.0-rc4-next-20240620-syzkaller #0 [ 282.771830][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 282.781932][ T8291] Call Trace: [ 282.785230][ T8291] [ 282.788186][ T8291] dump_stack_lvl+0x241/0x360 [ 282.792905][ T8291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.798132][ T8291] ? __pfx__printk+0x10/0x10 [ 282.802751][ T8291] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 282.809376][ T8291] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 282.816087][ T8291] warn_alloc+0x278/0x410 [ 282.820639][ T8291] ? stack_depot_save_flags+0x6e4/0x830 [ 282.826313][ T8291] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 282.832592][ T8291] ? __pfx_warn_alloc+0x10/0x10 [ 282.837481][ T8291] ? kasan_save_track+0x3f/0x80 [ 282.842357][ T8291] ? __kasan_kmalloc+0x98/0xb0 [ 282.847162][ T8291] ? xsk_setsockopt+0x598/0x950 [ 282.852038][ T8291] ? do_sock_setsockopt+0x3af/0x720 [ 282.857276][ T8291] ? __sys_setsockopt+0x1ae/0x250 [ 282.862341][ T8291] ? __x64_sys_setsockopt+0xb5/0xd0 [ 282.867576][ T8291] ? do_syscall_64+0xf3/0x230 [ 282.872274][ T8291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.878557][ T8291] __vmalloc_node_range_noprof+0x130/0x1460 [ 282.884947][ T8291] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 282.891331][ T8291] ? __kasan_kmalloc+0x98/0xb0 [ 282.896205][ T8291] ? xskq_create+0x54/0x170 [ 282.900732][ T8291] vmalloc_user_noprof+0x74/0x80 [ 282.906408][ T8291] ? xskq_create+0xb6/0x170 [ 282.911560][ T8291] xskq_create+0xb6/0x170 [ 282.915942][ T8291] xsk_init_queue+0xa1/0x100 [ 282.920652][ T8291] xsk_setsockopt+0x598/0x950 [ 282.925459][ T8291] ? __pfx_xsk_setsockopt+0x10/0x10 [ 282.930691][ T8291] ? __pfx_lock_acquire+0x10/0x10 [ 282.935774][ T8291] ? aa_sock_opt_perm+0x79/0x120 [ 282.940759][ T8291] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 282.946355][ T8291] ? security_socket_setsockopt+0x87/0xb0 [ 282.952133][ T8291] ? __pfx_xsk_setsockopt+0x10/0x10 [ 282.957363][ T8291] do_sock_setsockopt+0x3af/0x720 [ 282.962421][ T8291] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 282.968011][ T8291] ? __fget_files+0x29/0x470 [ 282.972654][ T8291] ? __fget_files+0x3f6/0x470 [ 282.977377][ T8291] __sys_setsockopt+0x1ae/0x250 [ 282.982267][ T8291] __x64_sys_setsockopt+0xb5/0xd0 [ 282.987324][ T8291] do_syscall_64+0xf3/0x230 [ 282.991852][ T8291] ? clear_bhb_loop+0x35/0x90 [ 282.996545][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.002481][ T8291] RIP: 0033:0x7f98e027cf29 [ 283.007117][ T8291] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 283.027025][ T8291] RSP: 002b:00007f98e10280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 283.035484][ T8291] RAX: ffffffffffffffda RBX: 00007f98e03b3f80 RCX: 00007f98e027cf29 [ 283.043511][ T8291] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 283.051529][ T8291] RBP: 00007f98e02ec074 R08: 0000000000000020 R09: 0000000000000000 [ 283.059538][ T8291] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 283.067552][ T8291] R13: 000000000000000b R14: 00007f98e03b3f80 R15: 00007ffc32545518 [ 283.075656][ T8291] [ 283.099797][ T8291] Mem-Info: [ 283.103001][ T8291] active_anon:23735 inactive_anon:0 isolated_anon:0 [ 283.103001][ T8291] active_file:0 inactive_file:46562 isolated_file:0 [ 283.103001][ T8291] unevictable:768 dirty:0 writeback:0 [ 283.103001][ T8291] slab_reclaimable:10149 slab_unreclaimable:93145 [ 283.103001][ T8291] mapped:20895 shmem:4790 pagetables:727 [ 283.103001][ T8291] sec_pagetables:0 bounce:0 [ 283.103001][ T8291] kernel_misc_reclaimable:0 [ 283.103001][ T8291] free:1383432 free_pcp:550 free_cma:0 [ 283.195092][ T8068] hsr_slave_0: entered promiscuous mode [ 283.211058][ T8291] Node 0 active_anon:96788kB inactive_anon:0kB active_file:0kB inactive_file:186184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:85460kB dirty:0kB writeback:0kB shmem:19512kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10408kB pagetables:2892kB sec_pagetables:0kB all_unreclaimable? no [ 283.249758][ T8068] hsr_slave_1: entered promiscuous mode [ 283.251241][ T8291] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 283.288298][ T8068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.301051][ T8291] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.338637][ T8068] Cannot create hsr debugfs directory [ 283.429137][ T8291] lowmem_reserve[]: 0 2571 2571 0 0 [ 283.434490][ T8291] Node 0 DMA32 free:1553804kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:103864kB inactive_anon:0kB active_file:0kB inactive_file:185872kB unevictable:1536kB writepending:0kB present:3129332kB managed:2659864kB mlocked:0kB bounce:0kB free_pcp:6080kB local_pcp:776kB free_cma:0kB [ 283.473861][ T8291] lowmem_reserve[]: 0 0 0 0 0 [ 283.480363][ T8291] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 283.537825][ T8291] lowmem_reserve[]: 0 0 0 0 0 [ 283.543282][ T8291] Node 1 Normal free:3951892kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109116kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.582098][ T8291] lowmem_reserve[]: 0 0 0 0 0 [ 283.596268][ T8291] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 283.616557][ T8291] Node 0 DMA32: 87*4kB (UME) 132*8kB (UE) 19*16kB (UE) 282*32kB (UME) 257*64kB (UME) 121*128kB (UME) 96*256kB (UME) 48*512kB (UME) 20*1024kB (UME) 6*2048kB (UME) 347*4096kB (M) = 1545900kB [ 283.639341][ T8291] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 283.691849][ T8291] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 8*16kB (UM) 5*32kB (UM) 8*64kB (U) 6*128kB (U) 5*256kB (UM) 5*512kB (UM) 2*1024kB (U) 2*2048kB (U) 962*4096kB (M) = 3951940kB [ 283.934089][ T8291] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.059286][ T8297] syz-executor.0[8297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.060135][ T8297] syz-executor.0[8297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.097453][ T8291] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 284.253269][ T8291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.313127][ T8291] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 284.365307][ T8291] 55544 total pagecache pages [ 284.387541][ T8291] 0 pages in swap cache [ 284.413588][ T8291] Free swap = 124484kB [ 284.467369][ T8291] Total swap = 124996kB [ 284.479499][ T8291] 2097051 pages RAM [ 284.488086][ T8291] 0 pages HighMem/MovableOnly [ 284.493261][ T8291] 400876 pages reserved [ 284.498121][ T8291] 0 pages cma reserved [ 285.697998][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 285.876586][ T8327] team0: Port device bridge15 added [ 287.036602][ T8068] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 287.080799][ T8326] loop2: detected capacity change from 0 to 32768 [ 287.093369][ T8068] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 287.146396][ T8068] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 287.227280][ T8068] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 287.312931][ T8326] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,noshard_inode_numbers,noinodes_use_key_cache,gc_reserve_bytes=512 GiB,nojournal_transaction_names [ 287.462270][ T8326] bcachefs (loop2): recovering from clean shutdown, journal seq 8 [ 287.508219][ T8326] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 287.508219][ T8326] running recovery passes: check_allocations [ 287.694041][ T8326] bcachefs (loop2): accounting_read... done [ 287.712557][ T8326] bcachefs (loop2): alloc_read... done [ 287.779374][ T8326] bcachefs (loop2): stripes_read... done [ 287.872072][ T8326] bcachefs (loop2): snapshots_read... done [ 287.987331][ T8326] bcachefs (loop2): check_allocations... [ 288.224431][ T8326] btree ptr not marked in member info btree allocated bitmap [ 288.224488][ T8326] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 56308231fb2a3a03 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down [ 288.310848][ T8326] bcachefs (loop2): inconsistency detected - emergency read only at journal seq 8 [ 288.354475][ T8326] bcachefs (loop2): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 288.384548][ T8326] bcachefs (loop2): bch2_gc_btree(): error fsck_errors_not_fixed [ 288.429129][ T8326] bcachefs (loop2): bch2_gc_btrees(): error fsck_errors_not_fixed [ 288.449037][ T8326] bcachefs (loop2): bch2_check_allocations(): error fsck_errors_not_fixed [ 288.465239][ T8326] bcachefs (loop2): bch2_fs_recovery(): error fsck_errors_not_fixed [ 288.473635][ T8326] bcachefs (loop2): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 288.488755][ T8326] bcachefs (loop2): shutting down [ 288.519188][ T8326] bcachefs (loop2): shutdown complete [ 288.741367][ T8068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.921650][ T8068] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.032700][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.040064][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.052017][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.059401][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.423857][ T8068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.502829][ T8068] veth0_vlan: entered promiscuous mode [ 291.673851][ T8068] veth1_vlan: entered promiscuous mode [ 291.953850][ T8068] veth0_macvtap: entered promiscuous mode [ 291.968615][ T5178] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 292.155665][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 292.277419][ T5178] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 292.492941][ T5178] usb 3-1: string descriptor 0 read error: -22 [ 292.561693][ T5178] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.609409][ T5178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.625419][ T8068] veth1_macvtap: entered promiscuous mode [ 292.702891][ T5178] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 292.719569][ T8435] team0: Port device bridge18 added [ 292.925118][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.949025][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.965031][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.995060][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.010254][ T8447] loop2: detected capacity change from 0 to 64 [ 293.017682][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.049129][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.079828][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.099525][ T8447] Trying to free block not in datazone [ 293.147335][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.199264][ T8068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.279028][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.291679][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.314522][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.333655][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.358387][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.374932][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.406945][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.446180][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.486908][ T8068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.762876][ T8068] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.772122][ T8068] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.782689][ T8068] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.792277][ T8068] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.539283][ T25] usb 3-1: USB disconnect, device number 5 [ 294.785481][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 295.385579][ T8475] team0: Port device bridge19 added [ 295.584579][ T8475] syz-executor.3 (8475) used greatest stack depth: 18096 bytes left [ 296.650973][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.663764][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.764708][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.803837][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 297.803887][ T29] audit: type=1326 audit(1718977227.854:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e027cf29 code=0x7ffc0000 [ 297.814926][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.022295][ T29] audit: type=1326 audit(1718977227.854:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e027cf29 code=0x7ffc0000 [ 298.142360][ T29] audit: type=1326 audit(1718977227.854:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98e027cf29 code=0x7ffc0000 [ 298.165521][ T29] audit: type=1326 audit(1718977227.854:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e027cf29 code=0x7ffc0000 [ 298.245788][ T29] audit: type=1326 audit(1718977227.854:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f98e027cf29 code=0x7ffc0000 [ 298.843160][ T29] audit: type=1326 audit(1718977227.854:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e027cf29 code=0x7ffc0000 [ 298.867053][ T29] audit: type=1326 audit(1718977227.854:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e027cf29 code=0x7ffc0000 [ 300.230249][ T8533] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 300.282398][ T8533] team0: Port device bridge16 added [ 302.958845][ T8568] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.990761][ T8568] team0: Port device bridge1 added [ 305.698136][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 305.825033][ T8606] team0: Port device bridge2 added [ 307.438398][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.623221][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 308.779114][ T8645] team0: Port device bridge20 added [ 308.960620][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 311.599431][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.174385][ T8733] Process accounting resumed [ 313.614297][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 316.392944][ T8768] overlayfs: failed to resolve '/¥û': -2 [ 317.511478][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.518039][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.317703][ T29] audit: type=1800 audit(1718977249.384:85): pid=8802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.0" name="/" dev="sockfs" ino=18020 res=0 errno=0 [ 322.338847][ T29] audit: type=1800 audit(1718977252.394:86): pid=8848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.0" name="/" dev="sockfs" ino=18060 res=0 errno=0 [ 323.889762][ T8858] tipc: Failed to obtain node identity [ 323.895313][ T8858] tipc: Enabling of bearer rejected, failed to enable media [ 326.733711][ T29] audit: type=1800 audit(1718977256.804:87): pid=8895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.0" name="/" dev="sockfs" ino=17211 res=0 errno=0 [ 327.601262][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 327.958671][ T8923] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 329.233876][ T29] audit: type=1800 audit(1718977259.204:88): pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.4" name="/" dev="sockfs" ino=18128 res=0 errno=0 [ 329.578325][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 331.629538][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 332.191979][ T29] audit: type=1800 audit(1718977262.264:89): pid=8992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.2" name="/" dev="sockfs" ino=17325 res=0 errno=0 [ 332.783904][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 334.094206][ T9011] team0: Port device bridge3 added [ 337.855534][ T9029] loop1: detected capacity change from 0 to 16 [ 337.900072][ T9029] erofs: (device loop1): mounted with root inode @ nid 36. [ 338.045448][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 338.099049][ T9039] loop1: detected capacity change from 0 to 8 [ 338.967499][ T29] audit: type=1800 audit(1718977269.034:90): pid=9049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.1" name="/" dev="sockfs" ino=18239 res=0 errno=0 [ 339.088690][ T9059] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 339.402442][ T9059] team0: Port device bridge17 added [ 340.766843][ T9088] loop1: detected capacity change from 0 to 8 [ 341.648783][ T29] audit: type=1800 audit(1718977271.694:91): pid=9098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.1" name="/" dev="sockfs" ino=18469 res=0 errno=0 [ 344.618755][ T29] audit: type=1800 audit(1718977274.624:92): pid=9140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.3" name="/" dev="sockfs" ino=18340 res=0 errno=0 [ 345.047413][ T9154] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 345.111760][ T9154] team0: Device ipvlan1 failed to register rx_handler [ 345.254556][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 345.373395][ T9160] team0: Port device bridge21 added [ 345.708058][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 346.408956][ T29] audit: type=1800 audit(1718977276.474:93): pid=9184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.4" name="/" dev="sockfs" ino=18386 res=0 errno=0 [ 346.856751][ T9196] veth0_vlan: entered allmulticast mode [ 346.996994][ T9201] veth0_vlan: left promiscuous mode [ 347.018614][ T9201] veth0_vlan: left allmulticast mode [ 347.127304][ T9201] veth0_vlan: entered promiscuous mode [ 347.633594][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 347.721620][ T9211] team0: Port device bridge18 added [ 347.765656][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 348.749632][ T29] audit: type=1800 audit(1718977278.814:94): pid=9226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.0" name="/" dev="sockfs" ino=18608 res=0 errno=0 [ 349.314616][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 349.425347][ T9247] team0: Port device bridge19 added [ 351.664354][ T29] audit: type=1800 audit(1718977281.734:95): pid=9268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.4" name="/" dev="sockfs" ino=18667 res=0 errno=0 [ 351.832806][ T9275] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.874357][ T29] audit: type=1326 audit(1718977281.944:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b487cf29 code=0x7ffc0000 [ 351.966744][ T29] audit: type=1326 audit(1718977281.944:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f75b487cf29 code=0x7ffc0000 [ 352.002613][ T29] audit: type=1326 audit(1718977281.944:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b487cf29 code=0x7ffc0000 [ 352.115128][ T29] audit: type=1326 audit(1718977281.944:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b487cf29 code=0x7ffc0000 [ 352.239339][ T5131] Bluetooth: hci4: command 0x0406 tx timeout [ 352.261794][ T29] audit: type=1326 audit(1718977282.004:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75b487bb20 code=0x7ffc0000 [ 352.521686][ T29] audit: type=1326 audit(1718977282.004:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b487cf29 code=0x7ffc0000 [ 352.600068][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 352.648744][ T29] audit: type=1326 audit(1718977282.004:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f75b487cf29 code=0x7ffc0000 [ 352.698629][ T29] audit: type=1326 audit(1718977282.004:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b487cf29 code=0x7ffc0000 [ 352.780191][ T9290] team0: Port device bridge15 added [ 352.790896][ T29] audit: type=1326 audit(1718977282.004:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f75b487cf29 code=0x7ffc0000 [ 353.672480][ T9307] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 355.371598][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 355.657141][ T9340] team0: Port device bridge20 added [ 356.139407][ T5129] Bluetooth: hci3: command 0x0406 tx timeout [ 356.145603][ T5129] Bluetooth: hci4: command 0x0406 tx timeout [ 356.745435][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 356.745455][ T29] audit: type=1800 audit(1718977286.814:121): pid=9355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.3" name="/" dev="sockfs" ino=19530 res=0 errno=0 [ 357.834354][ T5131] Bluetooth: hci0: command 0x0406 tx timeout [ 358.484177][ T29] audit: type=1800 audit(1718977288.484:122): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.3" name="/" dev="sockfs" ino=18823 res=0 errno=0 [ 361.143093][ T9437] loop1: detected capacity change from 0 to 8 [ 362.130405][ T29] audit: type=1800 audit(1718977292.084:123): pid=9447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.1" name="/" dev="sockfs" ino=19609 res=0 errno=0 [ 362.993102][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 364.021120][ T29] audit: type=1800 audit(1718977294.094:124): pid=9486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.3" name="/" dev="sockfs" ino=18944 res=0 errno=0 [ 364.732056][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 365.330235][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 365.451711][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.472868][ T9525] team0: Port device bridge16 added [ 366.159124][ T29] audit: type=1800 audit(1718977296.224:125): pid=9534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.3" name="/" dev="sockfs" ino=19707 res=0 errno=0 [ 366.575801][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 367.028887][ T5131] Bluetooth: hci3: command 0x0406 tx timeout [ 367.195224][ T29] audit: type=1326 audit(1718977297.264:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fb727cf29 code=0x0 [ 367.449444][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 367.668826][ T9568] team0: Port device bridge17 added [ 369.012882][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 369.189748][ T9602] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 369.238952][ T9602] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 369.988719][ T5131] Bluetooth: hci4: command 0x0406 tx timeout [ 370.759549][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 371.358966][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 371.531822][ T9675] loop1: detected capacity change from 0 to 8 [ 372.802182][ T29] audit: type=1800 audit(372.773:127): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 372.860145][ T29] audit: type=1804 audit(372.803:128): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3354529154/syzkaller.qPP8cn/362/bus" dev="sda1" ino=1955 res=1 errno=0 [ 372.904059][ T29] audit: type=1804 audit(372.803:129): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3354529154/syzkaller.qPP8cn/362/bus" dev="sda1" ino=1955 res=1 errno=0 [ 372.944827][ T29] audit: type=1804 audit(372.803:130): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3354529154/syzkaller.qPP8cn/362/bus" dev="sda1" ino=1955 res=1 errno=0 [ 373.011683][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 373.103677][ T9720] team0: Port device bridge18 added [ 374.295110][ T29] audit: type=1800 audit(374.263:131): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.2" name="/" dev="sockfs" ino=19914 res=0 errno=0 [ 374.714283][ T9761] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 374.824142][ T9761] team0: Port device dummy0 added [ 374.923469][ T9768] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 375.072581][ T9768] team0: Port device bridge19 added [ 376.763047][ T29] audit: type=1800 audit(376.733:132): pid=9793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.2" name="/" dev="sockfs" ino=19308 res=0 errno=0 [ 377.164990][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 377.270935][ T9809] team0: Port device bridge4 added [ 378.619211][ T29] audit: type=1800 audit(378.573:133): pid=9852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.4" name="/" dev="sockfs" ino=20014 res=0 errno=0 [ 378.730982][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 378.957262][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.968879][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.074335][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 379.548085][ T9881] process 'syz-executor.4' launched './file0' with NULL argv: empty string added [ 379.743563][ T29] audit: type=1800 audit(379.713:134): pid=9885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1953 res=0 errno=0 [ 382.046840][ T29] audit: type=1326 audit(382.013:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86a107cf29 code=0x0 [ 382.130968][ T29] audit: type=1326 audit(382.083:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9939 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98e027cf29 code=0x0 [ 382.314874][ T5131] Bluetooth: hci3: command 0x0406 tx timeout [ 382.435116][ T9956] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 382.514484][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 385.019569][ T9996] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 385.192978][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 385.768781][ T29] audit: type=1800 audit(385.733:137): pid=10022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1967 res=0 errno=0 [ 387.126892][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 387.254038][T10043] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 387.345918][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 387.428843][ T5131] Bluetooth: hci0: command 0x0406 tx timeout [ 389.032334][T10065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.738891][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 389.874284][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 391.274018][ T5131] Bluetooth: hci1: command 0x0406 tx timeout [ 392.650552][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 392.694003][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 394.735029][T10147] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 394.744573][T10147] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 394.754186][T10147] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 395.569304][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 395.661200][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 396.976916][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 399.777444][T10263] warning: `syz-executor.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 399.826753][T10266] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 399.894839][T10266] team0: Port device bridge22 added [ 400.019533][T10271] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 400.627600][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 400.668983][T10292] team0: Port device bridge21 added [ 401.538627][ T5176] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 401.725495][ T5176] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 401.736665][ T5176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.746353][ T5176] usb 2-1: Product: syz [ 401.754026][ T5176] usb 2-1: Manufacturer: syz [ 401.756646][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 401.759066][ T5176] usb 2-1: SerialNumber: syz [ 401.782325][ T5176] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 401.845668][T10316] team0: Port device bridge22 added [ 401.908322][ T8] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 402.152164][ T5120] usb 2-1: USB disconnect, device number 3 [ 402.695068][T10329] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 402.703410][T10329] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.0'. [ 402.713704][T10329] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 402.949976][ T8] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 403.058783][ T8] ath9k_htc: Failed to initialize the device [ 403.387451][ T5120] usb 2-1: ath9k_htc: USB layer deinitialized [ 403.724580][ T29] audit: type=1804 audit(403.683:138): pid=10340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2973788731/syzkaller.mUWjE3/363/bus" dev="sda1" ino=1959 res=1 errno=0 [ 403.977386][ T29] audit: type=1804 audit(403.713:139): pid=10340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2973788731/syzkaller.mUWjE3/363/bus" dev="sda1" ino=1959 res=1 errno=0 [ 404.356633][ T29] audit: type=1804 audit(403.723:140): pid=10340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2973788731/syzkaller.mUWjE3/363/bus" dev="sda1" ino=1959 res=1 errno=0 [ 404.477768][ T29] audit: type=1804 audit(403.723:141): pid=10340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2973788731/syzkaller.mUWjE3/363/bus" dev="sda1" ino=1959 res=1 errno=0 [ 404.523235][ T29] audit: type=1326 audit(403.933:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10339 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79c507cf29 code=0x0 [ 406.134394][T10377] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 406.211737][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 406.501741][ T29] audit: type=1800 audit(406.473:143): pid=10381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1959 res=0 errno=0 [ 406.578728][ T29] audit: type=1800 audit(406.533:144): pid=10383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 406.819641][ T29] audit: type=1800 audit(406.793:145): pid=10391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1963 res=0 errno=0 [ 406.868656][ T29] audit: type=1800 audit(406.793:146): pid=10391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="sda1" ino=1964 res=0 errno=0 [ 408.553504][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 408.634592][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 408.864240][ T29] audit: type=1800 audit(408.823:147): pid=10459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 410.343637][T10480] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 414.615699][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 415.368373][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 416.911521][T10580] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 416.985804][T10580] team0: Port device bridge7 added [ 417.107227][ T29] audit: type=1326 audit(417.073:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fb727cf29 code=0x0 [ 417.322178][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 418.415140][T10612] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 418.542212][T10612] team0: Port device bridge23 added [ 418.621081][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 423.227613][ T5129] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 423.239642][ T5129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 423.248762][ T5129] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 423.256987][ T5129] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 423.266191][ T5129] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 423.314653][ T5129] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 423.403033][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 423.517588][T10694] team0: Port device bridge24 added [ 423.526151][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 423.853106][T10709] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 425.140264][T10736] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 425.392550][T10736] team0: Port device bridge23 added [ 425.429695][ T5129] Bluetooth: hci5: command tx timeout [ 425.453844][T10738] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.490552][T10687] chnl_net:caif_netlink_parms(): no params data found [ 425.745488][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 425.874281][T10687] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.903283][T10687] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.918977][T10687] bridge_slave_0: entered allmulticast mode [ 425.940625][T10687] bridge_slave_0: entered promiscuous mode [ 425.946227][T10756] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 425.969316][T10687] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.995525][T10687] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.023572][T10687] bridge_slave_1: entered allmulticast mode [ 426.040908][T10687] bridge_slave_1: entered promiscuous mode [ 426.162806][T10687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.207121][T10687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.361479][T10687] team0: Port device team_slave_0 added [ 426.593490][T10687] team0: Port device team_slave_1 added [ 426.788526][ T5129] Bluetooth: hci1: command 0x0406 tx timeout [ 427.136287][T10687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.166641][T10687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.274581][T10687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.315697][T10687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.347334][T10687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.382948][T10687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.508760][ T5129] Bluetooth: hci5: command tx timeout [ 427.524226][T10687] hsr_slave_0: entered promiscuous mode [ 427.557117][T10687] hsr_slave_1: entered promiscuous mode [ 427.564601][T10687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.572963][T10687] Cannot create hsr debugfs directory [ 428.226626][T10687] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.412631][T10687] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.448635][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 428.568721][T10687] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.600787][T10778] team0: Port device bridge25 added [ 428.690061][T10687] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.768043][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 429.136094][T10687] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 429.208893][T10687] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 429.260302][ T29] audit: type=1800 audit(429.233:149): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1956 res=0 errno=0 [ 429.289620][T10687] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 429.326479][T10687] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 429.451494][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 429.542537][T10809] team0: Port device bridge26 added [ 429.598720][ T5129] Bluetooth: hci5: command tx timeout [ 429.969261][T10687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.062277][T10687] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.086420][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.093758][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.169793][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.177065][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.601810][T10687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.734186][T10687] veth0_vlan: entered promiscuous mode [ 430.769400][T10687] veth1_vlan: entered promiscuous mode [ 430.940845][T10687] veth0_macvtap: entered promiscuous mode [ 431.039172][T10687] veth1_macvtap: entered promiscuous mode [ 431.171245][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.193039][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.229680][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.278568][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.298661][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.332115][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.358037][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.380990][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.408623][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.447198][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.481030][T10687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.535773][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.558771][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.617107][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.632752][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.658646][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.675291][ T5129] Bluetooth: hci5: command tx timeout [ 431.698593][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.708604][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.719408][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.736800][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.748681][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.762151][T10687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.777831][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 431.836456][T10687] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.858668][T10687] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.867433][T10687] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.893167][T10687] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.164293][ T2812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.198503][ T2812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.278480][ T9027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.296569][ T9027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.736203][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 433.857964][T10884] team0: Device ip6_vti0 is of different type [ 434.896268][T10913] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 434.967971][T10913] team0: Device vxcan0 is of different type [ 435.588639][ T5129] Bluetooth: hci4: command 0x0406 tx timeout [ 436.767306][T10926] IPVS: Error connecting to the multicast addr [ 437.699351][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 437.778167][T10941] bond0: (slave bond_slave_1): Releasing backup interface [ 437.839595][T10941] team0: Port device bond_slave_1 added [ 438.880948][T10978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 438.930955][T10978] team0: Port device bridge27 added [ 438.948616][ T5129] Bluetooth: hci5: command tx timeout [ 439.494070][ T29] audit: type=1326 audit(439.463:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdda7cf29 code=0x7ffc0000 [ 439.598758][ T29] audit: type=1326 audit(439.463:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdda7cf29 code=0x7ffc0000 [ 439.695158][ T29] audit: type=1326 audit(439.503:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3cdda7cf29 code=0x7ffc0000 [ 439.758004][ T29] audit: type=1326 audit(439.503:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdda7cf29 code=0x7ffc0000 [ 439.840885][ T29] audit: type=1326 audit(439.503:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdda7cf29 code=0x7ffc0000 [ 439.909090][ T29] audit: type=1326 audit(439.503:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f3cdda7cf29 code=0x7ffc0000 [ 439.974256][ T29] audit: type=1326 audit(439.503:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdda7cf29 code=0x7ffc0000 [ 440.057463][ T29] audit: type=1326 audit(439.503:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdda7cf29 code=0x7ffc0000 [ 440.419365][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.425865][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.469058][ T5129] Bluetooth: hci2: command 0x0406 tx timeout [ 442.388764][ T5129] Bluetooth: hci5: command tx timeout [ 443.459255][T11089] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 443.546280][T11093] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 443.585934][T11093] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 443.848803][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 444.198957][T11120] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 444.235935][T11120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.270431][T11120] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 444.889683][ T5129] Bluetooth: hci4: command 0x0406 tx timeout [ 445.376632][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 445.651212][ T29] audit: type=1800 audit(445.613:158): pid=11139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="sda1" ino=1960 res=0 errno=0 [ 445.917470][T11155] loop2: detected capacity change from 0 to 8 [ 446.238908][ T5129] Bluetooth: hci5: command tx timeout [ 447.344194][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 447.419093][T11189] team0: Port device bridge1 added [ 448.850563][T11211] loop1: detected capacity change from 0 to 8 [ 450.447744][T11226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 450.661498][T11226] team0: Port device bridge8 added [ 453.800294][ T29] audit: type=1800 audit(709.778:159): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1968 res=0 errno=0 [ 454.003797][ T29] audit: type=1326 audit(709.978:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fb727cf29 code=0x0 [ 454.154556][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 454.204213][T11314] team0: Port device bridge28 added [ 455.036088][ T29] audit: type=1326 audit(710.988:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86a107cf29 code=0x0 [ 455.887982][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 455.986717][T11354] team0: Port device bridge9 added [ 456.005632][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 456.200497][ T5131] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 456.214452][ T5131] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 456.224318][ T5131] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 456.233236][ T5131] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 456.248605][ T5131] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 456.257309][ T5131] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 456.882788][T11359] chnl_net:caif_netlink_parms(): no params data found [ 456.978643][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 457.061015][T11359] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.068557][T11359] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.076363][T11359] bridge_slave_0: entered allmulticast mode [ 457.084461][T11359] bridge_slave_0: entered promiscuous mode [ 457.094728][T11359] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.102236][T11359] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.110307][T11359] bridge_slave_1: entered allmulticast mode [ 457.118013][T11359] bridge_slave_1: entered promiscuous mode [ 457.164890][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 457.183214][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 457.186447][T11359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.207818][T11359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.207870][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 457.227519][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 457.266980][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.310137][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 457.322349][T11359] team0: Port device team_slave_0 added [ 457.329017][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.346036][T11359] team0: Port device team_slave_1 added [ 457.415825][ T29] audit: type=1326 audit(713.382:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79c507cf29 code=0x0 [ 457.447712][T11359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.455706][T11359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.490149][T11359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.505210][T11359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.514230][T11359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.544448][T11359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.571921][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 457.583625][ T9] usbtmc 2-1:16.0: can't read capabilities [ 457.659529][T11359] hsr_slave_0: entered promiscuous mode [ 457.667375][T11359] hsr_slave_1: entered promiscuous mode [ 457.675267][T11359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.684682][T11359] Cannot create hsr debugfs directory [ 458.145377][T11359] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.312887][T11359] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.328785][ T5129] Bluetooth: hci6: command tx timeout [ 458.351971][ T9] usb 2-1: USB disconnect, device number 4 [ 458.584079][T11359] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.724900][T11359] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.754126][T11395] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 458.854708][T11394] team0: Port device bridge24 added [ 460.141528][ T5129] Bluetooth: hci5: command tx timeout [ 460.153070][T11359] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 460.289346][T11359] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 460.371568][T11359] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 460.388863][ T5129] Bluetooth: hci6: command tx timeout [ 460.448311][T11359] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 460.887796][T11431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.010087][T11359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.154123][T11359] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.184747][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 461.229953][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.237275][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.276899][T11438] team0: Port device bridge29 added [ 461.298171][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.305415][ T5120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.356925][T11438] syz-executor.0 (11438) used greatest stack depth: 17752 bytes left [ 461.376554][T11442] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 461.463979][T11442] bond1: entered promiscuous mode [ 461.484098][T11444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 461.518165][T11444] bond1 (unregistering): Released all slaves [ 461.969111][T11457] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 462.208915][ T59] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 462.468911][ T5129] Bluetooth: hci6: command tx timeout [ 462.748921][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 462.847742][T11359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.902280][T11478] team0: Port device bridge30 added [ 463.109233][ T5129] Bluetooth: hci1: command 0x0406 tx timeout [ 463.576969][T11465] loop2: detected capacity change from 0 to 40427 [ 463.639059][T11465] F2FS-fs (loop2): heap/no_heap options were deprecated [ 463.701347][T11465] F2FS-fs (loop2): Found nat_bits in checkpoint [ 463.762361][T11477] loop1: detected capacity change from 0 to 32768 [ 463.815636][T11477] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (11477) [ 463.893438][T11465] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 463.910798][T11359] veth0_vlan: entered promiscuous mode [ 463.952676][ T29] audit: type=1800 audit(719.922:163): pid=11465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 463.964118][T11465] syz-executor.2: attempt to access beyond end of device [ 463.964118][T11465] loop2: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 463.981141][T11477] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 464.061355][T11477] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 464.080989][T11477] BTRFS info (device loop1): using free-space-tree [ 464.089651][T11359] veth1_vlan: entered promiscuous mode [ 464.103397][T10687] syz-executor.2: attempt to access beyond end of device [ 464.103397][T10687] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 464.162539][T10687] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 464.306916][T11359] veth0_macvtap: entered promiscuous mode [ 464.334235][T11359] veth1_macvtap: entered promiscuous mode [ 464.515521][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.532525][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.544016][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.555286][ T5129] Bluetooth: hci6: command tx timeout [ 464.588558][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.617237][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.650530][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.667860][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.678767][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.688786][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.699540][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.712931][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.724887][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.742025][ T8068] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 464.756283][T11359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.880649][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.911298][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.958789][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.978541][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.999677][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.029274][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.048718][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.070073][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.098602][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.118554][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.147954][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.163830][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.186239][T11359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.316185][T11359] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.387597][T11359] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.423671][T11359] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.689771][T11519] evm: overlay not supported [ 465.925286][T11359] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.462006][T11521] loop1: detected capacity change from 0 to 1024 [ 466.576208][T11521] hfsplus: request for non-existent node 3 in B*Tree [ 466.595880][T11521] hfsplus: request for non-existent node 3 in B*Tree [ 466.762753][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.779736][ T29] audit: type=1800 audit(722.752:164): pid=11511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 466.804862][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.838876][ T29] audit: type=1800 audit(722.772:165): pid=11511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 466.973807][ T9027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.991562][ T9027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.005417][T11517] loop2: detected capacity change from 0 to 32768 [ 467.092540][T11517] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 467.155936][T11539] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 467.715196][T11517] XFS (loop2): Ending clean mount [ 467.864849][T11547] team0: Port device bridge10 added [ 468.073474][T11517] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 468.351473][T11556] loop1: detected capacity change from 0 to 128 [ 468.383096][T10687] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 468.434060][T11555] ext4: Unknown parameter '€' [ 469.353309][ T5129] Bluetooth: hci4: command 0x0406 tx timeout [ 469.359788][ T29] audit: type=1326 audit(724.782:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb727cf29 code=0x7ffc0000 [ 469.382778][ T29] audit: type=1326 audit(724.782:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb727cf29 code=0x7ffc0000 [ 469.556769][ T29] audit: type=1326 audit(724.792:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f9fb727cf29 code=0x7ffc0000 [ 469.675522][ T29] audit: type=1326 audit(724.792:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb727cf29 code=0x7ffc0000 [ 469.761166][ T29] audit: type=1326 audit(724.792:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb727cf29 code=0x7ffc0000 [ 469.861555][ T29] audit: type=1326 audit(724.802:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f9fb727cf29 code=0x7ffc0000 [ 469.931647][ T29] audit: type=1326 audit(724.802:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb727cf29 code=0x7ffc0000 [ 470.024599][ T29] audit: type=1326 audit(724.802:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb727cf29 code=0x7ffc0000 [ 470.077411][ T29] audit: type=1326 audit(724.802:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f9fb727cf29 code=0x7ffc0000 [ 470.166513][ T29] audit: type=1326 audit(724.802:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb727cf29 code=0x7ffc0000 [ 470.170751][T11551] loop4: detected capacity change from 0 to 32768 [ 470.270523][T11551] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (11551) [ 470.299327][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 470.341763][T11551] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 470.366804][T11551] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 470.385228][T11551] BTRFS info (device loop4): using free-space-tree [ 470.449609][T11576] team0: Port device bridge11 added [ 470.721375][T11359] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 470.883401][T11604] overlayfs: workdir and upperdir must be separate subtrees [ 471.365374][T11614] loop4: detected capacity change from 0 to 128 [ 472.390067][ T5131] Bluetooth: hci5: command tx timeout [ 472.521306][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 472.634512][T11625] team0: Port device bridge25 added [ 473.313568][T11633] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 474.102274][T11642] loop1: detected capacity change from 0 to 256 [ 474.550641][T11642] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 474.823923][T11642] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 474.937613][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 474.937634][ T29] audit: type=1800 audit(730.902:204): pid=11642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="loop1" ino=1048687 res=0 errno=0 [ 475.403190][ T5120] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 475.420843][T11653] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 475.516151][T11638] loop4: detected capacity change from 0 to 32768 [ 475.555531][T11638] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (11638) [ 475.601520][ T5120] usb 3-1: Using ep0 maxpacket: 32 [ 475.610635][ T5120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.636341][T11638] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 475.644216][ T5120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.671947][ T5120] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 475.678155][T11638] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 475.681572][ T5120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.708547][ T5120] usb 3-1: config 0 descriptor?? [ 475.713265][T11638] BTRFS info (device loop4): using free-space-tree [ 475.719379][ T5120] hub 3-1:0.0: USB hub found [ 476.552463][T11647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.602894][T11647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.631237][T11647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.651821][T11647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.674198][T11647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.706793][T11647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.717293][T11359] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 476.813952][T11686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.837862][T11686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.867069][T11647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.927326][T11647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.024511][T11688] loop1: detected capacity change from 0 to 256 [ 477.345574][T11691] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 477.465144][ T5120] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 477.784217][ T5120] usbhid 3-1:0.0: can't add hid device: -71 [ 477.814518][ T5120] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 477.952217][ T5120] usb 3-1: USB disconnect, device number 6 [ 478.383437][T11703] loop2: detected capacity change from 0 to 256 [ 478.596167][T11705] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 478.782425][T11703] FAT-fs (loop2): Unrecognized mount option "yÔRKÚRÌ †0›check=strict" or missing value [ 479.312620][T11703] loop2: detected capacity change from 0 to 128 [ 479.369373][T11703] FAT-fs (loop2): bogus number of FAT structure [ 479.392993][T11703] FAT-fs (loop2): Can't find a valid FAT filesystem [ 479.471072][ T5129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 479.487132][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 479.508700][ T5129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 479.522022][ T5129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 479.532320][ T5129] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 479.546110][ T5129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 479.806606][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.949498][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.966730][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 480.134706][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.190759][ T25] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 480.231278][ T25] usb 2-1: config 0 has no interface number 0 [ 480.251664][ T25] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.289984][ T25] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.311905][ T25] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 480.335269][ T25] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 480.365171][ T25] usb 2-1: Manufacturer: syz [ 480.397133][ T25] usb 2-1: config 0 descriptor?? [ 480.412642][ T12] team0: Port device netdevsim0 removed [ 480.517171][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.844203][T11712] chnl_net:caif_netlink_parms(): no params data found [ 480.918337][ T25] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.0003/input/input7 [ 480.991594][ T25] sony 0003:054C:03D5.0003: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18 [ 481.027306][ T12] bridge_slave_1: left allmulticast mode [ 481.057572][ T12] bridge_slave_1: left promiscuous mode [ 481.073575][T11720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.092463][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.102884][T11720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.115332][ T12] bridge_slave_0: left allmulticast mode [ 481.116944][T11720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.121405][ T12] bridge_slave_0: left promiscuous mode [ 481.136138][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.142618][T11720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.157763][ T8] usb 2-1: USB disconnect, device number 6 [ 481.597679][ T5129] Bluetooth: hci2: command tx timeout [ 482.021244][ T12] team0: Port device bridge2 removed [ 482.179982][ T12] team0: Port device bridge4 removed [ 482.280867][ T12] team0: Port device bridge5 removed [ 482.416660][ T12] team0: Port device bridge7 removed [ 482.438580][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 482.505479][ T12] team0: Port device bridge8 removed [ 482.574389][ T12] team0: Port device bridge9 removed [ 482.626139][ T12] team0: Port device bridge10 removed [ 482.633958][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 482.640296][T11783] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 482.651049][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.669303][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.690707][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 482.700021][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.715579][ T9] usb 5-1: config 0 descriptor?? [ 482.723162][ T12] team0: Port device bridge11 removed [ 482.734804][ T9] hub 5-1:0.0: USB hub found [ 482.912539][ T12] team0: Port device bridge14 removed [ 483.157676][ T12] team0: Port device bridge16 removed [ 483.230648][T11772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.240529][T11772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.263498][T11772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.272725][T11772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.288888][ T5129] Bluetooth: hci5: command tx timeout [ 483.315698][ T12] team0: Port device bridge17 removed [ 483.321792][T11772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.345248][T11772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.460026][T11772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.476697][T11772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.486491][ T12] team0: Port device bridge18 removed [ 483.499717][T11772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.519393][T11772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.536856][T11789] loop1: detected capacity change from 0 to 32768 [ 483.550352][T11789] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (11789) [ 483.571122][T11789] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 483.585534][T11789] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 483.596374][T11789] BTRFS info (device loop1): using free-space-tree [ 483.606855][ T12] team0: Port device bridge19 removed [ 483.669792][ T5131] Bluetooth: hci2: command tx timeout [ 483.696794][ T12] team0: Port device bridge20 removed [ 483.737600][ T8068] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 483.754734][ T9] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 483.779467][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 483.793853][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 483.845465][ T12] team0: Port device bridge21 removed [ 483.847431][ T9] usb 5-1: USB disconnect, device number 3 [ 484.079431][ T12] team0: Port device bridge23 removed [ 484.176848][ T12] team0: Port device bridge24 removed [ 484.277928][ T12] team0: Port device bridge25 removed [ 484.709744][T11826] loop1: detected capacity change from 0 to 128 [ 484.753272][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.788289][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.804848][ T12] bond0 (unregistering): Released all slaves [ 484.996148][ T12] tipc: Disabling bearer [ 485.014511][ T12] tipc: Left network mode [ 485.216522][ T25] kernel write not supported for file bpf-prog (pid: 25 comm: kworker/1:0) [ 485.233678][T11712] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.249463][T11712] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.266041][T11712] bridge_slave_0: entered allmulticast mode [ 485.281610][ T5131] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 485.285510][T11712] bridge_slave_0: entered promiscuous mode [ 485.292290][ T5131] Bluetooth: hci5: Injecting HCI hardware error event [ 485.348546][ T5131] Bluetooth: hci5: command 0x0406 tx timeout [ 485.359264][T11712] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.396820][T11712] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.430594][ T5129] Bluetooth: hci5: hardware error 0x00 [ 485.434626][T11712] bridge_slave_1: entered allmulticast mode [ 485.461011][T11712] bridge_slave_1: entered promiscuous mode [ 485.752079][ T5131] Bluetooth: hci2: command tx timeout [ 485.931101][T11712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.997862][T11712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.228187][T11712] team0: Port device team_slave_0 added [ 486.291962][ T12] hsr_slave_0: left promiscuous mode [ 486.325213][ T12] hsr_slave_1: left promiscuous mode [ 486.358703][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.371491][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.380184][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.388005][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.437770][ T12] veth1_macvtap: left promiscuous mode [ 486.443936][ T12] veth0_macvtap: left promiscuous mode [ 486.449913][ T12] veth1_vlan: left promiscuous mode [ 487.589086][ T5129] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 487.838973][ T5129] Bluetooth: hci2: command tx timeout [ 487.976000][ T12] team0 (unregistering): Port device team_slave_1 removed [ 488.102852][ T12] team0 (unregistering): Port device team_slave_0 removed [ 490.114686][T11712] team0: Port device team_slave_1 added [ 490.303757][T11712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.337220][T11712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.468170][T11712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.565545][T11712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.607857][T11712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.731370][T11712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.994056][T11712] hsr_slave_0: entered promiscuous mode [ 491.019038][T11712] hsr_slave_1: entered promiscuous mode [ 491.384378][ T29] audit: type=1326 audit(747.342:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a107cf29 code=0x7ffc0000 [ 491.459603][ T29] audit: type=1326 audit(747.342:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a107cf29 code=0x7ffc0000 [ 491.522881][ T29] audit: type=1326 audit(747.342:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86a107cf29 code=0x7ffc0000 [ 491.603556][ T29] audit: type=1326 audit(747.342:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a107cf29 code=0x7ffc0000 [ 491.694636][ T29] audit: type=1326 audit(747.342:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86a107cf29 code=0x7ffc0000 [ 491.766082][ T29] audit: type=1326 audit(747.342:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a107cf29 code=0x7ffc0000 [ 491.843091][ T29] audit: type=1326 audit(747.342:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86a107cf29 code=0x7ffc0000 [ 491.914492][ T29] audit: type=1326 audit(747.342:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a107cf29 code=0x7ffc0000 [ 492.638219][T11712] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 492.719302][T11712] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 492.764566][T11712] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 492.821037][T11712] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 493.222670][T11920] dccp_invalid_packet: P.Data Offset(0) too small [ 493.379387][T11924] loop4: detected capacity change from 0 to 512 [ 493.564850][T11924] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 288: padding at end of block bitmap is not set [ 493.643572][T11924] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 493.667933][T11712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.689427][T11924] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz-executor.4: attempt to clear invalid blocks 1024 len 1 [ 493.724142][T11934] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 493.753672][T11924] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 1819239214 (level 0) [ 493.802572][T11924] EXT4-fs (loop4): 1 truncate cleaned up [ 493.825884][T11924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.850794][T11712] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.889669][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 493.918450][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.925754][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.988301][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.995570][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.112371][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 494.146205][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 494.180243][ T8] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 494.257426][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 494.266826][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.275239][ T8] usb 3-1: Product: syz [ 494.297029][ T8] usb 3-1: Manufacturer: syz [ 494.308096][ T8] usb 3-1: SerialNumber: syz [ 494.404798][T11359] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.575722][ T8] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 494.630487][T11938] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 494.710009][T11941] loop4: detected capacity change from 0 to 128 [ 495.069962][T11932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.079907][T11932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.142915][T11712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.540627][ T5178] usb 3-1: USB disconnect, device number 7 [ 496.668848][T11712] veth0_vlan: entered promiscuous mode [ 496.672912][ T5178] usblp0: removed [ 496.774632][T11973] bridge0: port 3(veth3) entered blocking state [ 496.794251][T11973] bridge0: port 3(veth3) entered disabled state [ 496.817225][T11973] veth3: entered allmulticast mode [ 496.850529][T11973] veth3: entered promiscuous mode [ 496.890963][T11979] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 497.017602][T11975] team0: Port device bridge12 added [ 497.038947][T11712] veth1_vlan: entered promiscuous mode [ 497.350143][ T5129] Bluetooth: hci6: command tx timeout [ 497.409616][T11712] veth0_macvtap: entered promiscuous mode [ 497.420600][T11999] loop1: detected capacity change from 0 to 512 [ 497.459809][T11999] EXT4-fs: Ignoring removed orlov option [ 497.465782][T11999] EXT4-fs: Ignoring removed i_version option [ 497.491881][T11712] veth1_macvtap: entered promiscuous mode [ 497.498807][T11999] ext3: Unknown parameter 'rootcontext' [ 497.665207][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.715652][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.775871][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.832922][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.868987][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.902658][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.926037][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.015588][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.066200][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.108528][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.127612][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.138488][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.160296][T11712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.245848][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.279697][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.304918][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.329609][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.341162][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.354838][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.365498][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.376660][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.410514][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.455420][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.498035][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.524157][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.572826][T11712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.665716][T12021] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 498.914055][T12023] team0: Port device bridge2 added [ 499.004184][T11712] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.039467][T11712] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.059467][T11712] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.071284][T11712] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.161862][T12029] loop4: detected capacity change from 0 to 256 [ 499.278367][T12029] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 499.448894][ T9026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.449290][T12033] loop2: detected capacity change from 0 to 128 [ 499.470706][ T9026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.587566][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.619710][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.810416][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 500.137793][T12043] loop3: detected capacity change from 0 to 1024 [ 500.170476][T12050] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.1'. [ 500.198924][T12049] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 500.285519][T12049] team0: Port device bridge31 added [ 500.293883][T12050] loop1: detected capacity change from 0 to 512 [ 500.367275][T12050] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 500.400605][T12050] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 500.435688][T12050] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 500.455493][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 500.482639][T12050] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 500.495359][ T29] audit: type=1326 audit(756.398:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12059 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86a107cf29 code=0x0 [ 500.499647][T12050] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 500.545770][T12050] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 500.562465][T12050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.607511][T12050] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 500.641116][T12050] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 500.682955][T12050] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 500.742550][T12067] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 500.757300][T12067] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 500.770224][T12067] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 500.789103][T12067] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 500.808161][T12067] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 500.825295][T12067] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 500.842531][T12067] EXT4-fs error (device loop1): ext4_find_dest_de:2066: inode #2: block 3: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 500.853699][T12069] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 500.959721][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 500.978840][ T8068] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.114882][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 501.170285][T12081] loop2: detected capacity change from 0 to 64 [ 501.177880][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 501.190199][ T8] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 501.237875][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.292222][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 501.312775][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.340170][ T8] usbtmc 4-1:16.0: bulk endpoints not found [ 501.501024][ T29] audit: type=1800 audit(757.362:214): pid=12089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1972 res=0 errno=0 [ 501.573400][ T29] audit: type=1804 audit(757.362:215): pid=12089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3354529154/syzkaller.qPP8cn/608/file0" dev="sda1" ino=1972 res=1 errno=0 [ 501.815291][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 501.957750][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.964557][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.072586][T12093] team0: Port device bridge3 added [ 502.593732][T12086] loop1: detected capacity change from 0 to 32768 [ 502.615614][T12086] bcachefs (/dev/loop1): error reading default superblock: Not a bcachefs superblock (got magic c68573f6-4e1a-4502-8265-f57f48ba6d81) [ 502.820513][T12086] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 502.839162][T12086] bcachefs (loop1): recovering from clean shutdown, journal seq 13 [ 502.849872][T12086] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 502.849872][T12086] running recovery passes: check_allocations [ 502.882153][T12086] ================================================================== [ 502.890279][T12086] BUG: KASAN: slab-use-after-free in bch2_fs_recovery+0xe85/0x38e0 [ 502.898224][T12086] Read of size 8 at addr ffff88804b13cf98 by task syz-executor.1/12086 [ 502.906469][T12086] [ 502.908797][T12086] CPU: 1 UID: 0 PID: 12086 Comm: syz-executor.1 Not tainted 6.10.0-rc4-next-20240620-syzkaller #0 [ 502.919385][T12086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 502.929467][T12086] Call Trace: [ 502.932750][T12086] [ 502.935689][T12086] dump_stack_lvl+0x241/0x360 [ 502.940391][T12086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.945608][T12086] ? __pfx__printk+0x10/0x10 [ 502.950217][T12086] ? _printk+0xd5/0x120 [ 502.954386][T12086] ? __virt_addr_valid+0x183/0x520 [ 502.959514][T12086] ? __virt_addr_valid+0x183/0x520 [ 502.964646][T12086] print_report+0x169/0x550 [ 502.969161][T12086] ? __virt_addr_valid+0x183/0x520 [ 502.974289][T12086] ? __virt_addr_valid+0x183/0x520 [ 502.979426][T12086] ? __virt_addr_valid+0x44e/0x520 [ 502.984549][T12086] ? __phys_addr+0xba/0x170 [ 502.989069][T12086] ? bch2_fs_recovery+0xe85/0x38e0 [ 502.994188][T12086] kasan_report+0x143/0x180 [ 502.998719][T12086] ? bch2_fs_recovery+0xe85/0x38e0 [ 503.003840][T12086] bch2_fs_recovery+0xe85/0x38e0 [ 503.008796][T12086] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 503.014188][T12086] ? __pfx_lock_release+0x10/0x10 [ 503.019229][T12086] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 503.024874][T12086] ? __pfx_lock_release+0x10/0x10 [ 503.029914][T12086] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 503.035563][T12086] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 503.041300][T12086] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 503.046987][T12086] ? llist_reverse_order+0x72/0x90 [ 503.052117][T12086] bch2_fs_start+0x356/0x5b0 [ 503.056719][T12086] bch2_fs_get_tree+0xd42/0x16c0 [ 503.061683][T12086] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 503.067634][T12086] ? generic_parse_monolithic+0x387/0x400 [ 503.073515][T12086] ? apparmor_capable+0x138/0x1b0 [ 503.078574][T12086] ? bpf_lsm_capable+0x9/0x10 [ 503.083284][T12086] vfs_get_tree+0x90/0x2a0 [ 503.087753][T12086] do_new_mount+0x2be/0xb40 [ 503.092288][T12086] ? __pfx_do_new_mount+0x10/0x10 [ 503.097339][T12086] __se_sys_mount+0x2d6/0x3c0 [ 503.102041][T12086] ? __pfx___se_sys_mount+0x10/0x10 [ 503.107257][T12086] ? exc_page_fault+0x590/0x8c0 [ 503.112131][T12086] ? __x64_sys_mount+0x20/0xc0 [ 503.116909][T12086] do_syscall_64+0xf3/0x230 [ 503.121436][T12086] ? clear_bhb_loop+0x35/0x90 [ 503.126123][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.132039][T12086] RIP: 0033:0x7f9fb727e62a [ 503.136548][T12086] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 503.156178][T12086] RSP: 002b:00007f9fb6dfeef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 503.164613][T12086] RAX: ffffffffffffffda RBX: 00007f9fb6dfef80 RCX: 00007f9fb727e62a [ 503.172626][T12086] RDX: 000000002000f640 RSI: 000000002000f680 RDI: 00007f9fb6dfef40 [ 503.180643][T12086] RBP: 000000002000f640 R08: 00007f9fb6dfef80 R09: 0000000000200012 [ 503.188632][T12086] R10: 0000000000200012 R11: 0000000000000202 R12: 000000002000f680 [ 503.196616][T12086] R13: 00007f9fb6dfef40 R14: 000000000000f62a R15: 00000000200000c0 [ 503.204608][T12086] [ 503.207635][T12086] [ 503.209967][T12086] Allocated by task 12086: [ 503.214390][T12086] kasan_save_track+0x3f/0x80 [ 503.219181][T12086] __kasan_kmalloc+0x98/0xb0 [ 503.223777][T12086] kmalloc_node_track_caller_noprof+0x225/0x440 [ 503.230037][T12086] krealloc_noprof+0x7d/0x120 [ 503.234718][T12086] bch2_sb_realloc+0x2f5/0x660 [ 503.239488][T12086] __copy_super+0x5dc/0xe70 [ 503.243999][T12086] bch2_sb_to_fs+0xab/0x150 [ 503.248518][T12086] bch2_fs_alloc+0xd50/0x20a0 [ 503.253215][T12086] bch2_fs_open+0x8cc/0xdf0 [ 503.257735][T12086] bch2_fs_get_tree+0x750/0x16c0 [ 503.262691][T12086] vfs_get_tree+0x90/0x2a0 [ 503.267132][T12086] do_new_mount+0x2be/0xb40 [ 503.271662][T12086] __se_sys_mount+0x2d6/0x3c0 [ 503.276369][T12086] do_syscall_64+0xf3/0x230 [ 503.280984][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.286899][T12086] [ 503.289240][T12086] Freed by task 12086: [ 503.293305][T12086] kasan_save_track+0x3f/0x80 [ 503.297991][T12086] kasan_save_free_info+0x40/0x50 [ 503.303060][T12086] poison_slab_object+0xe0/0x150 [ 503.308103][T12086] __kasan_slab_free+0x37/0x60 [ 503.312871][T12086] kfree+0x149/0x360 [ 503.316774][T12086] krealloc_noprof+0xcf/0x120 [ 503.321455][T12086] bch2_sb_realloc+0x2f5/0x660 [ 503.326229][T12086] bch2_sb_field_resize_id+0x140/0x7c0 [ 503.331712][T12086] bch2_sb_counters_from_cpu+0xac/0x300 [ 503.337277][T12086] bch2_write_super+0xe80/0x3c80 [ 503.342235][T12086] bch2_fs_recovery+0xe6c/0x38e0 [ 503.347188][T12086] bch2_fs_start+0x356/0x5b0 [ 503.351783][T12086] bch2_fs_get_tree+0xd42/0x16c0 [ 503.356734][T12086] vfs_get_tree+0x90/0x2a0 [ 503.361164][T12086] do_new_mount+0x2be/0xb40 [ 503.365681][T12086] __se_sys_mount+0x2d6/0x3c0 [ 503.370365][T12086] do_syscall_64+0xf3/0x230 [ 503.374886][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.380812][T12086] [ 503.383139][T12086] The buggy address belongs to the object at ffff88804b13c000 [ 503.383139][T12086] which belongs to the cache kmalloc-4k of size 4096 [ 503.397216][T12086] The buggy address is located 3992 bytes inside of [ 503.397216][T12086] freed 4096-byte region [ffff88804b13c000, ffff88804b13d000) [ 503.411207][T12086] [ 503.413537][T12086] The buggy address belongs to the physical page: [ 503.419966][T12086] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4b138 [ 503.428743][T12086] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 503.437252][T12086] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 503.444798][T12086] page_type: 0xffffefff(slab) [ 503.449486][T12086] raw: 00fff00000000040 ffff888015042140 dead000000000122 0000000000000000 [ 503.458082][T12086] raw: 0000000000000000 0000000000040004 00000001ffffefff 0000000000000000 [ 503.466686][T12086] head: 00fff00000000040 ffff888015042140 dead000000000122 0000000000000000 [ 503.475366][T12086] head: 0000000000000000 0000000000040004 00000001ffffefff 0000000000000000 [ 503.484046][T12086] head: 00fff00000000003 ffffea00012c4e01 ffffffffffffffff 0000000000000000 [ 503.492742][T12086] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 503.501433][T12086] page dumped because: kasan: bad access detected [ 503.507871][T12086] page_owner tracks the page as allocated [ 503.513602][T12086] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5178, tgid 5178 (kworker/0:7), ts 502633730183, free_ts 496302687182 [ 503.535948][T12086] post_alloc_hook+0x1f3/0x230 [ 503.540740][T12086] get_page_from_freelist+0x2cbd/0x2d70 [ 503.546307][T12086] __alloc_pages_noprof+0x256/0x6c0 [ 503.551530][T12086] alloc_slab_page+0x5f/0x120 [ 503.556217][T12086] allocate_slab+0x5a/0x2f0 [ 503.560729][T12086] ___slab_alloc+0xcd1/0x14b0 [ 503.565413][T12086] __slab_alloc+0x58/0xa0 [ 503.569796][T12086] kmalloc_node_track_caller_noprof+0x281/0x440 [ 503.576072][T12086] kmalloc_reserve+0x111/0x2a0 [ 503.580855][T12086] __alloc_skb+0x1f3/0x440 [ 503.585284][T12086] nsim_dev_trap_report_work+0x254/0xaa0 [ 503.590937][T12086] process_scheduled_works+0xa2c/0x1830 [ 503.596494][T12086] worker_thread+0x86d/0xd50 [ 503.601096][T12086] kthread+0x2f0/0x390 [ 503.605183][T12086] ret_from_fork+0x4b/0x80 [ 503.609611][T12086] ret_from_fork_asm+0x1a/0x30 [ 503.614394][T12086] page last free pid 11968 tgid 11966 stack trace: [ 503.620899][T12086] free_unref_page+0xd22/0xea0 [ 503.625675][T12086] __put_partials+0xeb/0x130 [ 503.630267][T12086] put_cpu_partial+0x17c/0x250 [ 503.635036][T12086] __slab_free+0x2ea/0x3d0 [ 503.639457][T12086] qlist_free_all+0x9e/0x140 [ 503.644050][T12086] kasan_quarantine_reduce+0x14f/0x170 [ 503.649513][T12086] __kasan_slab_alloc+0x23/0x80 [ 503.654370][T12086] kmem_cache_alloc_noprof+0x135/0x2a0 [ 503.659838][T12086] ptlock_alloc+0x20/0x70 [ 503.664195][T12086] pte_alloc_one+0xcd/0x5d0 [ 503.668743][T12086] handle_pte_fault+0x21de/0x7040 [ 503.673865][T12086] handle_mm_fault+0x10df/0x1ba0 [ 503.678996][T12086] __get_user_pages+0x6ef/0x1590 [ 503.683976][T12086] populate_vma_page_range+0x264/0x330 [ 503.689452][T12086] __mm_populate+0x27a/0x460 [ 503.694075][T12086] vm_mmap_pgoff+0x2c3/0x3d0 [ 503.698699][T12086] [ 503.701032][T12086] Memory state around the buggy address: [ 503.706669][T12086] ffff88804b13ce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 503.714765][T12086] ffff88804b13cf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 503.722838][T12086] >ffff88804b13cf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 503.730908][T12086] ^ [ 503.735787][T12086] ffff88804b13d000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 503.743860][T12086] ffff88804b13d080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 503.751921][T12086] ================================================================== 1970/01/01 00:12:39 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 503.879176][T12086] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 503.886452][T12086] CPU: 0 UID: 0 PID: 12086 Comm: syz-executor.1 Not tainted 6.10.0-rc4-next-20240620-syzkaller #0 [ 503.897053][T12086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 503.907128][T12086] Call Trace: [ 503.910407][T12086] [ 503.913334][T12086] dump_stack_lvl+0x241/0x360 [ 503.918058][T12086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.923282][T12086] ? __pfx__printk+0x10/0x10 [ 503.927899][T12086] ? preempt_schedule+0xe1/0xf0 [ 503.932775][T12086] ? vscnprintf+0x5d/0x90 [ 503.937105][T12086] panic+0x349/0x870 [ 503.941010][T12086] ? check_panic_on_warn+0x21/0xb0 [ 503.946129][T12086] ? __pfx_panic+0x10/0x10 [ 503.950552][T12086] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 503.956532][T12086] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 503.962856][T12086] ? print_report+0x502/0x550 [ 503.967558][T12086] check_panic_on_warn+0x86/0xb0 [ 503.972504][T12086] ? bch2_fs_recovery+0xe85/0x38e0 [ 503.977616][T12086] end_report+0x77/0x160 [ 503.981873][T12086] kasan_report+0x154/0x180 [ 503.986425][T12086] ? bch2_fs_recovery+0xe85/0x38e0 [ 503.991555][T12086] bch2_fs_recovery+0xe85/0x38e0 [ 503.996506][T12086] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 504.001897][T12086] ? __pfx_lock_release+0x10/0x10 [ 504.006927][T12086] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 504.012589][T12086] ? __pfx_lock_release+0x10/0x10 [ 504.017795][T12086] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 504.023435][T12086] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 504.029226][T12086] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 504.034870][T12086] ? llist_reverse_order+0x72/0x90 [ 504.040007][T12086] bch2_fs_start+0x356/0x5b0 [ 504.044623][T12086] bch2_fs_get_tree+0xd42/0x16c0 [ 504.049579][T12086] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 504.054963][T12086] ? generic_parse_monolithic+0x387/0x400 [ 504.060693][T12086] ? apparmor_capable+0x138/0x1b0 [ 504.065722][T12086] ? bpf_lsm_capable+0x9/0x10 [ 504.070404][T12086] vfs_get_tree+0x90/0x2a0 [ 504.074839][T12086] do_new_mount+0x2be/0xb40 [ 504.079353][T12086] ? __pfx_do_new_mount+0x10/0x10 [ 504.084412][T12086] __se_sys_mount+0x2d6/0x3c0 [ 504.089120][T12086] ? __pfx___se_sys_mount+0x10/0x10 [ 504.094415][T12086] ? exc_page_fault+0x590/0x8c0 [ 504.099361][T12086] ? __x64_sys_mount+0x20/0xc0 [ 504.104232][T12086] do_syscall_64+0xf3/0x230 [ 504.108746][T12086] ? clear_bhb_loop+0x35/0x90 [ 504.113468][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.119419][T12086] RIP: 0033:0x7f9fb727e62a [ 504.123843][T12086] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 504.143575][T12086] RSP: 002b:00007f9fb6dfeef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 504.152012][T12086] RAX: ffffffffffffffda RBX: 00007f9fb6dfef80 RCX: 00007f9fb727e62a [ 504.159987][T12086] RDX: 000000002000f640 RSI: 000000002000f680 RDI: 00007f9fb6dfef40 [ 504.167981][T12086] RBP: 000000002000f640 R08: 00007f9fb6dfef80 R09: 0000000000200012 [ 504.175951][T12086] R10: 0000000000200012 R11: 0000000000000202 R12: 000000002000f680 [ 504.183935][T12086] R13: 00007f9fb6dfef40 R14: 000000000000f62a R15: 00000000200000c0 [ 504.191918][T12086] [ 504.195297][T12086] Kernel Offset: disabled [ 504.199625][T12086] Rebooting in 86400 seconds..