last executing test programs: 2m43.424121329s ago: executing program 2 (id=259): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x48}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bca) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x10000, 0xffff, 0x6, 0x1ff, 0x5]}, &(0x7f0000000240)=0x54) 1m35.496028037s ago: executing program 3 (id=321): write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'hostdata'}]}, 0x14) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x80, 0x14e, &(0x7f0000000e40)="$eJzs2r9Kw0AcB/AfWBE6OjoFKlHQ/Ne66ljcfIPQ5tLgxZREkPYFxElQOAdfQvAJfISMbroI+hKRmKMmUWxRIR2+n+W+8Gvvfr0rN50WR6HFEo1oe3R19LIaR6HSdfb6zGIuFXpEpOQhzbIbnb54mtbTjPRvPtCs9bdi7Gz64vCCBdyzm24JAAAAAAAAAAAAAAAAAAAAAADmpLZlaA9FeM4C7lmlajKeHLuce3HSUHuNUxX5houY4Lf5/jiV+tYrkbqfp0AcxHndrH7/WoaNoeDP9f01TsORkYwnWhC6vud7J7btdM0d09y1jY+5jPqM6p3sidLs3tQpk6b10nuzx3nem8nzb60F4vKsvtrn+SMg/DX0WvhH/S4s0UK0UQozbpXWzHtnUbSXi3Gw4nQe8vtP70d8IIv/u2dyJaqWmvrhAPCz9wAAAP//MKk80A==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80400) read$FUSE(r0, &(0x7f0000001240)={0x2020}, 0x2020) 1m35.122168568s ago: executing program 3 (id=323): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x5, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "2b51e5c07d317fcd"}}, 0x48}}, 0x0) 1m34.983330221s ago: executing program 3 (id=324): socket$nl_netfilter(0x10, 0x3, 0xc) quotactl$Q_GETNEXTQUOTA(0xffffffff80000303, &(0x7f00000080c0)=@sg0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x10000007) userfaultfd(0x80001) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) r1 = getuid() quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000001040)=@sg0, r1, &(0x7f00000010c0)) io_setup(0x3, &(0x7f0000000180)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mremap(&(0x7f0000ff8000/0x3000)=nil, 0x7fffdf00a000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r4, &(0x7f0000000480)=ANY=[@ANYRES64], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSETD(r6, 0x541b, &(0x7f0000000ec0)) 1m34.158255322s ago: executing program 3 (id=326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0xee) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file0'}, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x0, 0x0, 0xe4, &(0x7f00000004c0), &(0x7f0000000540)=""/228, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000800)='./file0\x00', 0x1480e, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d61636f726e006e6f726f636b2c73657373696f6e3d307830203030303030303030332c636865636b3d72656c617865642c6e6f726f636b416e0400000000000000c86b2c6d6f44653d30783030303030303090cf5cee73e4fdbccf1ad8f6238d714830303030303030756e686964652c6d61703d61636f726e2c6f76657272696465726f636b706572916964652c00add51ea29069028397e9808a385f6e0c9ab44fb55e327ad812fe293a6347f7f502634dfa74f42b394b1587068ecfa5acd459ae5a7dce3d2ca29a5d67adb9bfb87ce6ccb85cb98b2b7a0c5bae05ac8cfd1895938b2910b1498c0d61c80000"], 0x0, 0x694, &(0x7f0000001380)="$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") r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r0, 0x5, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f3031cde9730ebf71c5e823f2753c5fd76724828ef31b353e71805") mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m32.50467588s ago: executing program 3 (id=328): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, 0x0, 0x0) 1m28.366271091s ago: executing program 3 (id=334): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]}, 0x48) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r5, &(0x7f0000000340)="01f7de4c8f325c7a9f", 0x9, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010102, 0x3}, 0x10) 1m26.197747269s ago: executing program 0 (id=343): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x1, 0x4000102b, r1, 0x0) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000280)="17d409f149e4692a3bd3edeb00060de443bf73bbd795f0327adacaa05dad6e8b19799a338f5696c74824740b", 0x2c}, {&(0x7f0000000340)="eb2efc64cc98c0ccc25586b2cb88c43ce177d6690321e6315d196f46c78f077476774944b4047d16f74b595ab04b29e9302aac6db5760f39a12ef9ceab84da0000000000000085ce07731ca2e35cba", 0x4f}], 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') r9 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f00000011c0)=ANY=[@ANYBLOB="6d616e676c65020000000000000000000000000000000000000000000000000002"], 0x44) open_by_handle_at(r8, &(0x7f0000000640)=@shmem={0xc, 0x1, {0x30}}, 0x9e4b) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)="f7cdb924d2", 0x5}], 0x1, 0x8, 0x8) 1m24.952633926s ago: executing program 4 (id=347): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000180)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235a7", 0xd0}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9", 0x42}], 0x4}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001080)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3", 0x2b}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992000000", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c910000000000000000", 0x7b}, {&(0x7f0000000ac0)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a", 0x2e}, {&(0x7f0000000000)="b7cc82d93bd01bb2c1610f6ae515a6bbe0b6db937bb7c30d3c49367f3fbaff963b2548c13fdd6e21bd14662149b9a52f02389869", 0x34}, {&(0x7f0000000040)="e7ddb111c1e52c64fba0a81036917453c3", 0x11}, {&(0x7f0000000b80)="9408a5cc99b3e02d022001aa27254bf5d869e64db4dcf86437939fe9bd84c35ed376530835e7d0c5e9e0d2ed416c39e4e1ea8afbf2fbdbc5ee33c64ca7988b0fa7a1ed3681a663e56a3b37feea9fe1d9502c458598117b1fd825eb7a0f34b028bf44409bfd2bb560df635534eef8ba925b12c5fb17f05af850d8c5ba4ef1be8102a771704bc9bd1db47781fb1e9710d9d017defe7f141f199e1a93af8056ad19b8203baa", 0xa4}], 0x7}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5", 0xf}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e81", 0x43}], 0x2}}], 0x4, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1m24.933715615s ago: executing program 0 (id=349): write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'hostdata'}]}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x80, 0x14e, &(0x7f0000000e40)="$eJzs2r9Kw0AcB/AfWBE6OjoFKlHQ/Ne66ljcfIPQ5tLgxZREkPYFxElQOAdfQvAJfISMbroI+hKRmKMmUWxRIR2+n+W+8Gvvfr0rN50WR6HFEo1oe3R19LIaR6HSdfb6zGIuFXpEpOQhzbIbnb54mtbTjPRvPtCs9bdi7Gz64vCCBdyzm24JAAAAAAAAAAAAAAAAAAAAAADmpLZlaA9FeM4C7lmlajKeHLuce3HSUHuNUxX5houY4Lf5/jiV+tYrkbqfp0AcxHndrH7/WoaNoeDP9f01TsORkYwnWhC6vud7J7btdM0d09y1jY+5jPqM6p3sidLs3tQpk6b10nuzx3nem8nzb60F4vKsvtrn+SMg/DX0WvhH/S4s0UK0UQozbpXWzHtnUbSXi3Gw4nQe8vtP70d8IIv/u2dyJaqWmvrhAPCz9wAAAP//MKk80A==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m23.134266993s ago: executing program 1 (id=351): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m23.131281042s ago: executing program 4 (id=352): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="12", 0x1}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x40000002) 1m22.311715482s ago: executing program 0 (id=353): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_io_uring_setup(0x75bc, &(0x7f0000000480), &(0x7f00000001c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r5, 0x5437, 0x0) 1m21.928562315s ago: executing program 5 (id=354): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x541b, &(0x7f0000000ec0)) 1m21.833740558s ago: executing program 1 (id=355): syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/42, 0x2a}], 0x1, 0x0, 0x0) preadv(r3, &(0x7f0000000840)=[{0x0}], 0x1, 0x3ff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000), 0xfc, 0x55d, &(0x7f0000000700)="$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") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x7, 0x0) 1m20.494361532s ago: executing program 5 (id=356): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, 0x0, 0x0) 1m20.446240707s ago: executing program 0 (id=357): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a0000000000d579ba"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000880) 1m20.341156366s ago: executing program 1 (id=358): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x21c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0x1dc, 0x2, [@TCA_CGROUP_EMATCHES={0x1d8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x5}, {0x1ff, 0x81, 0x1ff, 0x5}}}, @TCF_EM_META={0x5c, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x69, 0x1}, {0x9, 0x9}}}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="166dd093aa", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_VAR="198f82e36234ba97aacf", @TCF_META_TYPE_VAR="03fec46370fa", @TCF_META_TYPE_VAR="bd2b85", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="f3ba", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xc, 0x1}, {0x3, 0x1, 0x1}}}]}}, @TCF_EM_IPT={0x54, 0x2, 0x0, 0x0, {{0xfc01, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_META={0x7c, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x10}, {0x85, 0x7, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x1, 0x1}, {0xe597, 0x6, 0x1}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="3f169cde", @TCF_META_TYPE_VAR="77a235f2"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x4}, {0x7, 0x81}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="8cdf3745ac9d0600b4", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x7, 0x2}, {0x2aa, 0x81, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x7, 0x1}, {0xc, 0xa3, 0x1}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x6]}]}}]}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x22, 0x3, 0x1}, {0x0, 0x8, 0x9, 0x1000}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x3}, {{0x2, 0x1, 0x0, 0x1}, {0x4}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x401}, {0x5, 0x581, 0xa, 0x1, 0x5, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x101, 0x8, 0x9}, {0x4, 0x3, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x393}, {0xf5f, 0xc, 0xdfbf, 0x7, 0x7, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x44}}]}]}}, @TCA_RATE={0x6}]}, 0x21c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m20.179666939s ago: executing program 5 (id=359): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x1, 0x4000102b, r1, 0x0) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000280)="17d409f149e4692a3bd3edeb00060de443bf73bbd795f0327adacaa05dad6e8b19799a338f5696c74824740b", 0x2c}, {&(0x7f0000000340)="eb2efc64cc98c0ccc25586b2cb88c43ce177d6690321e6315d196f46c78f077476774944b4047d16f74b595ab04b29e9302aac6db5760f39a12ef9ceab84da0000000000000085ce07731ca2e35cba", 0x4f}], 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') r9 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f00000011c0)=ANY=[@ANYBLOB="6d616e676c65020000000000000000000000000000000000000000000000000002"], 0x44) open_by_handle_at(r8, &(0x7f0000000640)=@shmem={0xc, 0x1, {0x30}}, 0x9e4b) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)="f7cdb924d2", 0x5}], 0x1, 0x8, 0x8) 1m20.074324465s ago: executing program 4 (id=360): write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'hostdata'}]}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x80, 0x14e, &(0x7f0000000e40)="$eJzs2r9Kw0AcB/AfWBE6OjoFKlHQ/Ne66ljcfIPQ5tLgxZREkPYFxElQOAdfQvAJfISMbroI+hKRmKMmUWxRIR2+n+W+8Gvvfr0rN50WR6HFEo1oe3R19LIaR6HSdfb6zGIuFXpEpOQhzbIbnb54mtbTjPRvPtCs9bdi7Gz64vCCBdyzm24JAAAAAAAAAAAAAAAAAAAAAADmpLZlaA9FeM4C7lmlajKeHLuce3HSUHuNUxX5houY4Lf5/jiV+tYrkbqfp0AcxHndrH7/WoaNoeDP9f01TsORkYwnWhC6vud7J7btdM0d09y1jY+5jPqM6p3sidLs3tQpk6b10nuzx3nem8nzb60F4vKsvtrn+SMg/DX0WvhH/S4s0UK0UQozbpXWzHtnUbSXi3Gw4nQe8vtP70d8IIv/u2dyJaqWmvrhAPCz9wAAAP//MKk80A==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000000c0)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x80400) read$FUSE(r4, &(0x7f0000001240)={0x2020}, 0x2020) bind$bt_hci(r3, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) 1m18.866981375s ago: executing program 4 (id=361): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$loop(0x0, 0x6, 0x80) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) r5 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000004f4095900385dfa288c50000000000030000007c53a4bb15fce7b362ab0000000000000086a15e1b3460a2f0b906045740df602acfa1639191c46a24f67f37ad9c80537121c22864360bc9e067a013a2af06fd15d6b749b5808c67931e690af7c216cd78c894a34666b05029cc51f31cc5851fc5cc6956f990f556a8425959a4a9216e462fe66940"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000080)={0x2011}) sendto(r1, &(0x7f0000000240)="d9c611ad7167222c64cda378e39d1bc3a75bdbfb7f04c2bdce457c35b61677c993c405411a8723c32cc4f44bee6b78cb8be7bebbbc7d451540603e45255a2899e52c1b922d027a17e8763e", 0x4b, 0x28008010, &(0x7f0000000300)=@qipcrtr={0x2a, 0x0, 0x521b0a381de2044e}, 0x80) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 1m18.466811195s ago: executing program 5 (id=362): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000180)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235a7", 0xd0}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9", 0x42}], 0x4}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001080)="63c3b1aaea9b9e5481dcd8c125f478bedc0474ab0607636ee67ac131020000c8001af506896b01dccc9d08e4f214056b13d2", 0x32}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3", 0x2b}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992000000", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c910000000000000000", 0x7b}, {&(0x7f0000000ac0)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a", 0x2e}, {&(0x7f0000000000)="b7cc82d93bd01bb2c1610f6ae515a6bbe0b6db937bb7c30d3c49367f3fbaff963b2548c13fdd6e21bd14662149b9a52f02389869", 0x34}, {&(0x7f0000000040)="e7ddb111c1e52c64fba0a81036917453c3", 0x11}, {&(0x7f0000000b80)="9408a5cc99b3e02d022001aa27254bf5d869e64db4dcf86437939fe9bd84c35ed376530835e7d0c5e9e0d2ed416c39e4e1ea8afbf2fbdbc5ee33c64ca7988b0fa7a1ed3681a663e56a3b37feea9fe1d9502c458598117b1fd825eb7a0f34b028bf44409bfd2bb560df635534eef8ba925b12c5fb17f05af850d8c5ba4ef1be8102a771704bc9bd1db47781fb1e9710d9d017defe7f141f199e1a93af8056ad19b8203baa", 0xa4}], 0x7}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5", 0xf}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e81", 0x43}], 0x2}}], 0x4, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1m17.211745475s ago: executing program 4 (id=363): socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) preadv(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x2f, 0x0) 1m16.985315906s ago: executing program 4 (id=364): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$loop(0x0, 0x6, 0x80) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) r5 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000004f4095900385dfa288c50000000000030000007c53a4bb15fce7b362ab0000000000000086a15e1b3460a2f0b906045740df602acfa1639191c46a24f67f37ad9c80537121c22864360bc9e067a013a2af06fd15d6b749b5808c67931e690af7c216cd78c894a34666b05029cc51f31cc5851fc5cc6956f990f556a8425959a4a9216e462fe66940"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000080)={0x2011}) sendto(r1, &(0x7f0000000240)="d9c611ad7167222c64cda378e39d1bc3a75bdbfb7f04c2bdce457c35b61677c993c405411a8723c32cc4f44bee6b78cb8be7bebbbc7d451540603e45255a2899e52c1b922d027a17e8763e", 0x4b, 0x28008010, &(0x7f0000000300)=@qipcrtr={0x2a, 0x0, 0x521b0a381de2044e}, 0x80) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 1m16.75998188s ago: executing program 5 (id=365): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) futimesat(0xffffffffffffffff, 0x0, 0x0) 1m15.551845715s ago: executing program 1 (id=366): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x541b, &(0x7f0000000ec0)) 1m15.353733594s ago: executing program 0 (id=367): io_uring_setup(0x1895, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x2000024f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac75764e3519e983795ce2e092ecf9956ad3c838ee65d33e7e4afbd3d12c92a53c090a9c3d4e6868e1b9eeb775975c831085607a964c0061dd616c1c676dd91fc71b5b9c2f6c12fe86123afeaba16226de0c46c6bbbbf7db8d9a6b7a7149544357d", 0xdf}]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) 1m14.85486538s ago: executing program 5 (id=368): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) eventfd2(0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x2011}) 1m14.621631537s ago: executing program 1 (id=369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0xee) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file0'}, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x0, 0x0, 0xe4, &(0x7f00000004c0), &(0x7f0000000540)=""/228, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) close(r3) syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000800)='./file0\x00', 0x1480e, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d61636f726e006e6f726f636b2c73657373696f6e3d307830203030303030303030332c636865636b3d72656c617865642c6e6f726f636b416e0400000000000000c86b2c6d6f44653d30783030303030303090cf5cee73e4fdbccf1ad8f6238d714830303030303030756e686964652c6d61703d61636f726e2c6f76657272696465726f636b706572916964652c00add51ea29069028397e9808a385f6e0c9ab44fb55e327ad812fe293a6347f7f502634dfa74f42b394b1587068ecfa5acd459ae5a7dce3d2ca29a5d67adb9bfb87ce6ccb85cb98b2b7a0c5bae05ac8cfd1895938b2910b1498c0d61c80000"], 0x0, 0x694, &(0x7f0000001380)="$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") 1m13.636927847s ago: executing program 0 (id=370): syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)}, 0xff03}], 0x2, 0x8000) 1m13.583767832s ago: executing program 1 (id=371): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f00000002c0)={0x1, 0x5}, 0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000e40)=@keyring) keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x24, r6, 0xf81, 0x0, 0x0, {{}, {@val={0x8, 0x6}, @val={0x8}, @void}}}, 0x24}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c0000000104050000000000000000000000000006000640000000000800054000000000050001000100"], 0x7c}}, 0x0) syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000000), 0x81, 0x1123, &(0x7f0000001240)="$eJzs2DtrFFEUB/D/naxmV4WR2A+WFrIEtvdRKGxrq1gYrOyylRIwH8bGzg8iqexDarVIL4zMzj4ILBHJA8Tfr5kz5577Ks8NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdAbJj5Lcq5KdZa5KUpKmOZqeJGmW+btftzIsefF2Onu2P3k+W5RWKS+T0oUpnx/1tZOdSbswe//hXYbJ/nzgze2SJsenyetLu8T2Kto6p6o74LALRpe2MQAAAPwT2gurU1arndNYf7lzRfsDAAAAf3IVbwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6Ot13FZBlX/0zRH05MkzYZ5N67pfAAAAMDFlVR5VW/K988AvS56mG91WeXb3uMqu/lUZzQvG+TMjIV+LL/adsMgAAAA/Ifa7fnnfsrhuk0uN8vhsu9+kME6P68cZDzu/8eLBvzn03y/lQx3z649epL2Y3Kwd3x6sFfarWu7FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2YFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXBUAAP//XNrmJQ==") 6.56584079s ago: executing program 2 (id=269): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f0000006800)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB="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", @ANYBLOB="a77a47c7093995493790249b0bed32a055f763e24190111977519571ce7e7842f63886bbf71ffeb820eddf6133ab8ae88bcc3d9004d9c6dbe44fbdcf671794f90a6dc723010be2684f321bdcb0f3a28f37715ba81e0f3b27d1206de5d93037a11c2b5ce35f7ffda7b43c3c9888163a50b7db5daea67d670e8b86c032da653d273cfb7bf3df53e836bb96370c4c637ec105fd520968a03441384810ed179646174536425dd1f0073804e63a43a92c901534484b0a352baee33ac1638bff1e67ee4959717feb229b247c25ae4018f502bdb5e7", @ANYRES16, @ANYRES16, @ANYBLOB="2da97369bd5bd2a022e4fea628166430fb7a26dae38cd827ad7f8cff5d2246bdd2cc0e8101b9631aa9db6c88c4ea13a8fbc6a23601da47409ecba43e29d90521e4a37f2f57fa7ce2366b5b89b5b9529791fb53b47e83c2014cd5779926a7dd8a0de70a50b2baf658b32d6d108efa8d3b6101762c8308a5b3351fd14516c9c33e6c6bd15e956f84604a27325b8ebb315aff3e39aa98ba22dffb1b6a7c1acafedad4ef237de4595f77f679e98e9dcbf01dc5bcbd5c199b9e95c24b", @ANYBLOB="9651c56ad88578a25546d8301a976d6fc5e51f3814a125051a070f7f54437d1ce35d85809048bfebe5ac13dce749226f4eace102819832dc4feee07cbf025529706f80354fcaaaf34bc289d3892a62957f78a9c45fe4e6e8c1332d57018a296c8eca11a25d4a581b17f43b9f4480c9a839e10a15954d4c325da6384fa44e9bb79ff45d24a2a2e805fac936dd9af003a173aec97678f46c000b0eab44f2", @ANYBLOB="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", @ANYRES32], 0x1, 0x1cd, &(0x7f0000002180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8001}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x4}}, 0xe8) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 4.475155587s ago: executing program 2 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0xee) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file0'}, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x0, 0x0, 0xe4, &(0x7f00000004c0), &(0x7f0000000540)=""/228, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000800)='./file0\x00', 0x1480e, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d61636f726e006e6f726f636b2c73657373696f6e3d307830203030303030303030332c636865636b3d72656c617865642c6e6f726f636b416e0400000000000000c86b2c6d6f44653d30783030303030303090cf5cee73e4fdbccf1ad8f6238d714830303030303030756e686964652c6d61703d61636f726e2c6f76657272696465726f636b706572916964652c00add51ea29069028397e9808a385f6e0c9ab44fb55e327ad812fe293a6347f7f502634dfa74f42b394b1587068ecfa5acd459ae5a7dce3d2ca29a5d67adb9bfb87ce6ccb85cb98b2b7a0c5bae05ac8cfd1895938b2910b1498c0d61c80000"], 0x0, 0x694, &(0x7f0000001380)="$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") 3.293563289s ago: executing program 2 (id=377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/144, 0x90}], 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100)) 1.406281822s ago: executing program 2 (id=378): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000000040), 0x2) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="12", 0x1}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x40000002) sendmsg$inet(r3, &(0x7f0000000f80)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000002ec0)="0f", 0x1}], 0x1}, 0x0) 0s ago: executing program 2 (id=379): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0xa3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x40000, @mcast2, 0x4000000}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x24, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x51}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x23000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@d, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) capset(&(0x7f0000000080), &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x200848, &(0x7f0000000240)={[{@allow_utime={'allow_utime', 0x3d, 0x1}}, {@discard}, {@namecase}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x6016}}, {@gid}]}, 0x3, 0x1534, &(0x7f0000000880)="$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") kernel console output (not intermixed with test programs): udit(1728159235.367:16): pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.182" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 162.911930][ T5287] usb 1-1: USB disconnect, device number 3 [ 162.994588][ T6294] syz.5.178 (6294) used greatest stack depth: 17496 bytes left [ 163.046628][ T6045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.122044][ T5221] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 163.164386][ T6045] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.315776][ T5224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.861745][ T5234] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 163.932195][ T6165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.060826][ T5314] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.068045][ T5314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.141380][ T5314] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.148514][ T5314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.454323][ T6339] 9pnet_fd: Insufficient options for proto=fd [ 164.633839][ T6342] loop5: detected capacity change from 0 to 512 [ 164.701567][ T6342] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 164.770401][ T5234] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 164.781823][ T5234] Bluetooth: hci5: Injecting HCI hardware error event [ 164.795822][ T5234] Bluetooth: hci5: hardware error 0x00 [ 164.860913][ T6342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.875095][ T6342] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.097031][ T6333] loop0: detected capacity change from 0 to 40427 [ 165.159124][ T6333] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 165.167592][ T6333] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 165.497369][ T6333] F2FS-fs (loop0): Found nat_bits in checkpoint [ 165.853365][ T5221] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.680744][ T6333] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 166.696554][ T6333] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 166.918744][ T5234] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 167.200143][ T6363] fuse: Unknown parameter '0x0000000000000007' [ 168.541017][ T6370] loop4: detected capacity change from 0 to 40427 [ 168.596812][ T6370] F2FS-fs (loop4): invalid crc value [ 168.615967][ T6370] F2FS-fs (loop4): Found nat_bits in checkpoint [ 168.678631][ T6370] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 169.733578][ T5691] bio_check_eod: 19 callbacks suppressed [ 169.733602][ T5691] syz-executor: attempt to access beyond end of device [ 169.733602][ T5691] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.758453][ T5691] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 169.803270][ T6379] loop0: detected capacity change from 0 to 512 [ 169.909742][ T6379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.923158][ T6379] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.975320][ T6379] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 171.261073][ T5220] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.764434][ T6391] loop4: detected capacity change from 0 to 512 [ 171.821014][ T6391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.429611][ T29] audit: type=1800 audit(1728159245.937:17): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.198" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 173.675205][ T5691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.816353][ T5227] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.837797][ T5227] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.845986][ T5227] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.903167][ T5227] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.931576][ T5227] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 173.938943][ T5227] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.204621][ T5437] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.384663][ T5437] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.474453][ T5437] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.662502][ T6165] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.714182][ T6404] loop4: detected capacity change from 0 to 32768 [ 175.739608][ T6404] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.201 (6404) [ 175.748375][ T5437] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.796117][ T6165] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.805177][ T6404] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 175.840329][ T6404] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 175.843427][ T6165] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.849209][ T6404] BTRFS info (device loop4): using free-space-tree [ 175.907723][ T6045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.929911][ T5290] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 175.966326][ T6165] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.012703][ T29] audit: type=1800 audit(1728159248.557:18): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.201" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 176.035070][ T5227] Bluetooth: hci7: command tx timeout [ 176.120581][ T5290] usb 6-1: Using ep0 maxpacket: 8 [ 176.132212][ T5290] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 176.145761][ T5290] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 176.166098][ T5290] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 176.189387][ T29] audit: type=1800 audit(1728159248.717:19): pid=6428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.201" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 176.210631][ T5290] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.226226][ T5290] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 176.237281][ T5290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.255573][ T5290] usbtmc 6-1:16.0: bulk endpoints not found [ 176.507975][ T5691] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 176.571187][ T5437] bridge_slave_1: left allmulticast mode [ 176.588344][ T5437] bridge_slave_1: left promiscuous mode [ 176.611218][ T5437] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.727504][ T5437] bridge_slave_0: left allmulticast mode [ 176.743264][ T6410] loop0: detected capacity change from 0 to 32768 [ 176.751584][ T5437] bridge_slave_0: left promiscuous mode [ 176.767961][ T6410] XFS: noikeep mount option is deprecated. [ 176.779986][ T5437] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.004129][ T6410] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 177.079482][ T6410] XFS (loop0): Ending clean mount [ 177.123310][ T6410] XFS (loop0): Quotacheck needed: Please wait. [ 177.288358][ T6410] XFS (loop0): Quotacheck: Done. [ 177.409455][ T6450] fuse: Unknown parameter '0x0000000000000007' [ 177.902060][ T5220] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 178.013828][ T5437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.096869][ T5437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.110081][ T5227] Bluetooth: hci7: command tx timeout [ 178.210572][ T5437] bond0 (unregistering): Released all slaves [ 178.381545][ T6045] veth0_vlan: entered promiscuous mode [ 178.396821][ T6045] veth1_vlan: entered promiscuous mode [ 178.462222][ T6457] loop4: detected capacity change from 0 to 40427 [ 178.482908][ T6457] F2FS-fs (loop4): invalid crc value [ 178.500994][ T6457] F2FS-fs (loop4): Found nat_bits in checkpoint [ 178.568629][ T6457] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 179.364208][ T9] usb 6-1: USB disconnect, device number 4 [ 179.487160][ T5691] syz-executor: attempt to access beyond end of device [ 179.487160][ T5691] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 179.520476][ T5691] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 179.604423][ T6471] loop5: detected capacity change from 0 to 512 [ 179.707912][ T6471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.722216][ T6471] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.769313][ T6398] chnl_net:caif_netlink_parms(): no params data found [ 179.818922][ T6471] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 179.878374][ T6165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.056734][ T6045] veth0_macvtap: entered promiscuous mode [ 180.199285][ T5227] Bluetooth: hci7: command tx timeout [ 181.187315][ T5221] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.578578][ T6165] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.603314][ T6045] veth1_macvtap: entered promiscuous mode [ 182.694085][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.210'. [ 182.703449][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.5.210'. [ 183.176207][ T5227] Bluetooth: hci7: command tx timeout [ 183.491025][ T5437] hsr_slave_0: left promiscuous mode [ 183.521375][ T5437] hsr_slave_1: left promiscuous mode [ 183.710250][ T5437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.724876][ T5437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.751259][ T5437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.771717][ T5437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.839359][ T5437] veth1_macvtap: left promiscuous mode [ 183.845280][ T5437] veth0_macvtap: left promiscuous mode [ 183.851541][ T5437] veth1_vlan: left promiscuous mode [ 183.856971][ T5437] veth0_vlan: left promiscuous mode [ 184.999119][ T6525] overlayfs: conflicting options: userxattr,redirect_dir=on [ 185.311722][ T6528] fuse: Unknown parameter 'fd0x0000000000000007' [ 186.271730][ T5437] team0 (unregistering): Port device team_slave_1 removed [ 186.966353][ T5437] team0 (unregistering): Port device team_slave_0 removed [ 187.135253][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 187.300529][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 187.324312][ T25] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 187.349346][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 187.374203][ T25] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 187.397663][ T25] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.435603][ T25] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 187.450517][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.483975][ T25] usbtmc 6-1:16.0: bulk endpoints not found [ 187.642287][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 187.652554][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 187.744945][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.780000][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.830017][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.850292][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.909916][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.100501][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.112485][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.245772][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.231683][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.242807][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.269134][ T6045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.838460][ T6398] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.879311][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.913540][ T5288] usb 6-1: USB disconnect, device number 5 [ 189.947753][ T6398] bridge_slave_0: entered allmulticast mode [ 189.971512][ T6398] bridge_slave_0: entered promiscuous mode [ 189.980045][ T6398] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.987149][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.994510][ T6398] bridge_slave_1: entered allmulticast mode [ 190.001597][ T5290] kernel write not supported for file /snd/seq (pid: 5290 comm: kworker/1:6) [ 190.001656][ T6398] bridge_slave_1: entered promiscuous mode [ 190.077345][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.084533][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.152019][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.159324][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.223737][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.253875][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.287121][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.318203][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.348310][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.374963][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.409919][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.439947][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.470594][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.502093][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.534102][ T6045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.696200][ T6398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.743371][ T6045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.800990][ T6045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.810190][ T6045] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.859554][ T6045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.929251][ T6165] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.955767][ T6165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.977976][ T6398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.005323][ T5234] Bluetooth: hci2: command 0x0406 tx timeout [ 191.092740][ T6562] loop5: detected capacity change from 0 to 256 [ 191.758693][ T6398] team0: Port device team_slave_0 added [ 192.008710][ T6398] team0: Port device team_slave_1 added [ 192.106507][ T6558] loop4: detected capacity change from 0 to 32768 [ 192.140729][ T6558] XFS: noikeep mount option is deprecated. [ 192.329796][ T6553] loop0: detected capacity change from 0 to 40427 [ 192.368665][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.377900][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.510688][ T6553] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 192.596078][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.738047][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.050262][ T6579] vivid-000: kernel_thread() failed [ 193.119975][ T6553] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 193.130508][ T6398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.144686][ T6553] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4) [ 193.165593][ T6558] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 193.219739][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.227074][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.283915][ T6558] XFS (loop4): Ending clean mount [ 193.304148][ T6558] XFS (loop4): Quotacheck needed: Please wait. [ 193.314775][ T6398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.335945][ T6165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.487148][ T6558] XFS (loop4): Quotacheck: Done. [ 193.556247][ T6496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.578720][ T6496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.756516][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.765601][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.786977][ T5691] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 194.381255][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.228'. [ 194.391324][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.228'. [ 194.576844][ T6398] hsr_slave_0: entered promiscuous mode [ 194.701878][ T6398] hsr_slave_1: entered promiscuous mode [ 194.845903][ T6398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.853659][ T6398] Cannot create hsr debugfs directory [ 194.965146][ T6165] veth0_vlan: entered promiscuous mode [ 195.222332][ T6165] veth1_vlan: entered promiscuous mode [ 195.724108][ T6596] loop0: detected capacity change from 0 to 32768 [ 196.061896][ T6596] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 196.183436][ T6165] veth0_macvtap: entered promiscuous mode [ 196.274245][ T6165] veth1_macvtap: entered promiscuous mode [ 196.287599][ T6596] XFS (loop0): Ending clean mount [ 196.594827][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.639970][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.659279][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.670387][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.680443][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.691272][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.701324][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.711911][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.722671][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.733413][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.744994][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.755638][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.767224][ T6165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.948012][ T1159] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 197.022889][ T5220] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 197.316570][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.327693][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.352150][ T1159] usb 3-1: Using ep0 maxpacket: 8 [ 197.368146][ T1159] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 197.388896][ T1159] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 197.780083][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.129232][ T1159] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 198.133032][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.149729][ T1159] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 198.160452][ T1159] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.175361][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.205259][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.213573][ T1159] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 198.230006][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.239907][ T1159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.249976][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.281016][ T1159] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 198.290490][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.314982][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.337464][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.359576][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.379330][ T6165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.939100][ T6663] overlayfs: conflicting options: userxattr,redirect_dir=on [ 199.186519][ T6656] loop0: detected capacity change from 0 to 32768 [ 199.381231][ T6656] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.235 (6656) [ 199.418191][ T6656] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 199.451347][ T6656] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 199.760433][ T6656] BTRFS info (device loop0): using free-space-tree [ 199.983989][ T1159] usb 3-1: USB disconnect, device number 2 [ 200.397347][ T6673] loop4: detected capacity change from 0 to 256 [ 200.475741][ T6673] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 200.611164][ T1159] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 200.846966][ T5989] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 200.950649][ T1159] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 200.959060][ T1159] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.304669][ T1159] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 201.314747][ T1159] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 201.322861][ T1159] usb 3-1: Manufacturer: syz [ 201.329934][ T1159] usb 3-1: config 0 descriptor?? [ 201.336122][ T29] audit: type=1800 audit(1728159273.867:20): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.235" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 201.338258][ T1159] igorplugusb 3-1:0.0: incorrect number of endpoints [ 201.356313][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.463041][ T29] audit: type=1800 audit(1728159274.007:21): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.235" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 202.140524][ T5220] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 202.510880][ T6702] loop0: detected capacity change from 0 to 512 [ 202.558610][ T6702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.572966][ T6702] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.598227][ T6702] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 203.864998][ T5220] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.940900][ T6710] loop0: detected capacity change from 0 to 512 [ 203.999726][ T6710] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.244: corrupted in-inode xattr: invalid ea_ino [ 204.017250][ T6710] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.244: couldn't read orphan inode 15 (err -117) [ 204.031911][ T6710] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.113871][ T5220] EXT4-fs (loop0): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 204.611257][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 204.620571][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.241'. [ 204.686256][ T6697] batman_adv: batadv0: Adding interface: wlan1 [ 204.697768][ T6697] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.735342][ T6697] batman_adv: batadv0: Interface activated: wlan1 [ 204.795006][ T6700] batman_adv: batadv0: Interface deactivated: wlan1 [ 204.837751][ T6700] batman_adv: batadv0: Removing interface: wlan1 [ 204.863171][ T6165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.881569][ T5288] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 204.890007][ T6165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.898729][ T6165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.915563][ T5287] usb 3-1: USB disconnect, device number 3 [ 204.924023][ T6165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.943362][ T1087] bridge_slave_1: left allmulticast mode [ 204.949123][ T1087] bridge_slave_1: left promiscuous mode [ 204.957074][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.997419][ T1087] bridge_slave_0: left allmulticast mode [ 205.027387][ T1087] bridge_slave_0: left promiscuous mode [ 205.038361][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.080774][ T5288] usb 6-1: Using ep0 maxpacket: 8 [ 205.087769][ T5288] usb 6-1: config 0 has an invalid interface number: 56 but max is 0 [ 205.102644][ T5288] usb 6-1: config 0 has no interface number 0 [ 205.153312][ T5288] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 205.179207][ T5288] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.197745][ T5288] usb 6-1: Product: syz [ 205.205534][ T5288] usb 6-1: Manufacturer: syz [ 205.211856][ T5288] usb 6-1: SerialNumber: syz [ 205.222460][ T5288] usb 6-1: config 0 descriptor?? [ 205.236784][ T5288] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 205.245829][ T5288] pctv452e: pctv452e_power_ctrl: 1 [ 205.245829][ T5288] [ 205.264546][ T5288] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 205.264546][ T5288] [ 205.284563][ T5288] dvb-usb: bulk message failed: -22 (5/0) [ 205.295036][ T5288] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 205.309059][ T5288] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 205.318756][ T5288] usb 6-1: media controller created [ 205.325678][ T5288] dvb-usb: bulk message failed: -22 (8/0) [ 205.332572][ T5288] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 205.341155][ T5288] dvb-usb: MAC address reading failed. [ 205.365547][ T5288] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.414905][ T5376] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 205.437671][ T6732] loop2: detected capacity change from 0 to 256 [ 205.450681][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.470772][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.493146][ T5288] DVB: Unable to find symbol stb0899_attach() [ 205.501123][ T5288] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 205.536904][ T6732] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 205.620009][ T5376] usb 1-1: Using ep0 maxpacket: 8 [ 205.638918][ T5376] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 205.660736][ T5376] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 205.702581][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.718641][ T5376] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 205.730359][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.754115][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.773017][ T5376] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 205.834191][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.850057][ T5288] rc_core: IR keymap rc-tt-1500 not found [ 205.855818][ T5288] Registered IR keymap rc-empty [ 205.862132][ T5288] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 205.866041][ T5376] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.875386][ T5288] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input6 [ 205.962394][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.971720][ T5288] dvb-usb: schedule remote query interval to 100 msecs. [ 205.978780][ T5288] pctv452e: pctv452e_power_ctrl: 0 [ 205.978780][ T5288] [ 205.998363][ T5376] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.007708][ T5376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.008904][ T5288] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 206.028451][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.036931][ T5376] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 206.080095][ T25] dvb-usb: bulk message failed: -22 (4/0) [ 206.085880][ T25] dvb-usb: error -22 while querying for an remote control event. [ 206.397773][ T5288] dvb-usb: bulk message failed: -22 (4/0) [ 206.413018][ T5288] dvb-usb: error -22 while querying for an remote control event. [ 206.466017][ T5376] usb 6-1: USB disconnect, device number 6 [ 206.557867][ T5376] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 206.598666][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.643689][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.658197][ T1087] bond0 (unregistering): Released all slaves [ 207.112833][ T6741] loop2: detected capacity change from 0 to 32768 [ 207.202009][ T6741] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.253 (6741) [ 208.506431][ T6741] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 208.557543][ T6741] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 208.593660][ T6741] BTRFS info (device loop2): using free-space-tree [ 208.734924][ T5437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.742909][ T5437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.763555][ T8] usb 1-1: USB disconnect, device number 4 [ 208.910080][ T5376] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 208.937977][ T1087] hsr_slave_0: left promiscuous mode [ 208.983943][ T1087] hsr_slave_1: left promiscuous mode [ 209.342394][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.500869][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.640250][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.675747][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.712012][ T5376] usb 5-1: Using ep0 maxpacket: 16 [ 209.721186][ T5376] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.733645][ T5376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.740201][ T6741] BTRFS error (device loop2): open_ctree failed [ 209.745122][ T5376] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 209.766191][ T5376] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 209.777304][ T5376] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 209.809966][ T5376] usb 5-1: Manufacturer: syz [ 209.818281][ T1087] veth1_macvtap: left promiscuous mode [ 209.831640][ T5376] usb 5-1: config 0 descriptor?? [ 209.843416][ T1087] veth0_macvtap: left promiscuous mode [ 209.849160][ T1087] veth1_vlan: left promiscuous mode [ 209.880028][ T1087] veth0_vlan: left promiscuous mode [ 210.293944][ T6753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.313418][ T6753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.338178][ T6753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.378482][ T6753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.416725][ T6753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.456152][ T6753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.471498][ T25] usb 5-1: USB disconnect, device number 2 [ 210.808996][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.819617][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.828312][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.857313][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.866515][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.874085][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.151422][ T6795] overlayfs: conflicting options: userxattr,redirect_dir=on [ 212.356577][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 212.451183][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 212.915703][ T5234] Bluetooth: hci2: command tx timeout [ 213.010912][ T6800] loop0: detected capacity change from 0 to 512 [ 213.129346][ T6800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.410003][ T29] audit: type=1800 audit(1728159286.907:22): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.264" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 214.458172][ T6806] loop4: detected capacity change from 0 to 256 [ 214.552776][ T6806] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 214.618663][ T5220] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.763870][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.257'. [ 214.773708][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.5.257'. [ 215.134946][ T6813] loop5: detected capacity change from 0 to 512 [ 215.153037][ T6398] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.165027][ T5234] Bluetooth: hci2: command tx timeout [ 215.231128][ T6813] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.266: corrupted in-inode xattr: invalid ea_ino [ 215.245065][ T6813] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.266: couldn't read orphan inode 15 (err -117) [ 215.266734][ T6398] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.456105][ T6813] EXT4-fs (loop5): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.521513][ T6398] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.540957][ T6398] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.750113][ T5376] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 216.236140][ T5376] usb 1-1: Using ep0 maxpacket: 8 [ 216.331172][ T5376] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 216.371196][ T5376] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 216.386440][ T5376] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 217.230338][ T5234] Bluetooth: hci2: command tx timeout [ 217.310121][ T5376] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 217.325398][ T5376] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.443144][ T5376] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.559263][ T5376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.675417][ T5376] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 219.381152][ T5234] Bluetooth: hci2: command tx timeout [ 220.619036][ T6784] chnl_net:caif_netlink_parms(): no params data found [ 220.766930][ T5289] usb 1-1: USB disconnect, device number 5 [ 221.737683][ T1087] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.476105][ T1087] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.045109][ T1087] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.216269][ T6849] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 225.248662][ T6849] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 227.211284][ T1087] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.649737][ T5227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.439397][ T5227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.495516][ T5227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.506535][ T5227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.515250][ T5227] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 229.523234][ T5227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.895544][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.128245][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.147795][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.190471][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.245344][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 230.265002][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.931418][ T5234] Bluetooth: hci3: command tx timeout [ 232.941208][ T5234] Bluetooth: hci4: command tx timeout [ 233.951461][ T5234] Bluetooth: hci3: command tx timeout [ 234.990006][ T5234] Bluetooth: hci4: command tx timeout [ 235.995618][ T6877] netlink: 'syz.0.275': attribute type 1 has an invalid length. [ 236.031865][ T5234] Bluetooth: hci3: command tx timeout [ 236.053301][ T6877] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 236.576940][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.609367][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.642142][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.663877][ T6784] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.674529][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.700538][ T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 236.708871][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.759054][ T6784] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.793966][ T6784] bridge_slave_0: entered allmulticast mode [ 236.811660][ T6784] bridge_slave_0: entered promiscuous mode [ 236.832485][ T6784] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.839936][ T6784] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.847523][ T6784] bridge_slave_1: entered allmulticast mode [ 236.856671][ T6784] bridge_slave_1: entered promiscuous mode [ 237.073617][ T5234] Bluetooth: hci4: command tx timeout [ 237.800895][ T6784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.110051][ T5234] Bluetooth: hci3: command tx timeout [ 238.193580][ T6906] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 238.200403][ T6906] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 238.214344][ T6906] vhci_hcd vhci_hcd.0: Device attached [ 238.224085][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.236893][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.313052][ T6784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.329186][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.347228][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.359264][ T6906] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 238.365814][ T6906] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 238.379553][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 238.402303][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.450965][ T6906] vhci_hcd vhci_hcd.0: Device attached [ 238.461649][ T6917] usbip_core: unknown command [ 238.466410][ T6917] vhci_hcd: unknown pdu 0 [ 238.477894][ T6911] vhci_hcd: connection closed [ 238.479144][ T6917] usbip_core: unknown command [ 238.486067][ T63] vhci_hcd: stop threads [ 238.520312][ T63] vhci_hcd: release socket [ 238.525697][ T63] vhci_hcd: disconnect device [ 238.532139][ T63] vhci_hcd: stop threads [ 238.537710][ T63] vhci_hcd: release socket [ 238.548867][ T63] vhci_hcd: disconnect device [ 238.562118][ T5290] usb 10-1: enqueue for inactive port 0 [ 238.759999][ T55] Bluetooth: hci6: command tx timeout [ 239.084548][ T5290] usb usb10-port1: attempt power cycle [ 239.150915][ T55] Bluetooth: hci4: command tx timeout [ 239.283223][ T6784] team0: Port device team_slave_0 added [ 239.520973][ T6784] team0: Port device team_slave_1 added [ 239.759214][ T6930] loop0: detected capacity change from 0 to 2048 [ 240.192666][ T6930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.399734][ T1087] bridge_slave_1: left allmulticast mode [ 240.405887][ T1087] bridge_slave_1: left promiscuous mode [ 240.421277][ T5290] usb usb10-port1: unable to enumerate USB device [ 240.458270][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.740066][ T55] Bluetooth: hci5: command tx timeout [ 240.774603][ T1087] bridge_slave_0: left allmulticast mode [ 240.780484][ T1087] bridge_slave_0: left promiscuous mode [ 240.797869][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.830020][ T55] Bluetooth: hci6: command tx timeout [ 240.981048][ T5220] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.555971][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.608854][ T6949] loop0: detected capacity change from 0 to 32768 [ 242.651037][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.680204][ T6949] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.281 (6949) [ 242.750088][ T55] Bluetooth: hci5: command tx timeout [ 242.763252][ T1087] bond0 (unregistering): Released all slaves [ 242.909994][ T55] Bluetooth: hci6: command tx timeout [ 242.968618][ T6784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.999420][ T6784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.079913][ T6784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.232729][ T6784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.259916][ T6784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.336274][ T6784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.414139][ T6949] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 243.469470][ T6949] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 243.601217][ T6949] BTRFS info (device loop0): using free-space-tree [ 243.950178][ T29] audit: type=1800 audit(1728159316.427:23): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.281" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 244.040105][ T29] audit: type=1800 audit(1728159316.437:24): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.281" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 244.140322][ T29] audit: type=1800 audit(1728159316.437:25): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.281" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 244.500261][ T6784] hsr_slave_0: entered promiscuous mode [ 244.524961][ T6784] hsr_slave_1: entered promiscuous mode [ 244.562245][ T6784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.581075][ T5220] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 244.610049][ T6784] Cannot create hsr debugfs directory [ 244.709723][ T1087] hsr_slave_0: left promiscuous mode [ 244.765313][ T1087] hsr_slave_1: left promiscuous mode [ 244.812752][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.830538][ T55] Bluetooth: hci5: command tx timeout [ 244.836060][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.878553][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.899973][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.938904][ T1087] veth1_macvtap: left promiscuous mode [ 244.974890][ T1087] veth0_macvtap: left promiscuous mode [ 244.990319][ T55] Bluetooth: hci6: command tx timeout [ 244.996342][ T1087] veth1_vlan: left promiscuous mode [ 245.010262][ T1087] veth0_vlan: left promiscuous mode [ 246.220943][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 246.300286][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 246.917778][ T55] Bluetooth: hci5: command tx timeout [ 247.042915][ T6860] chnl_net:caif_netlink_parms(): no params data found [ 247.075410][ T6894] chnl_net:caif_netlink_parms(): no params data found [ 247.136770][ T6863] chnl_net:caif_netlink_parms(): no params data found [ 247.620208][ T1159] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 247.761659][ T6894] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.768785][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.810152][ T6894] bridge_slave_0: entered allmulticast mode [ 247.829042][ T1159] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 247.860639][ T6894] bridge_slave_0: entered promiscuous mode [ 247.867664][ T1159] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 109, changing to 10 [ 247.920482][ T1159] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 42584, setting to 1024 [ 247.977007][ T1159] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.993886][ T6863] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.024022][ T1159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.041501][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.048786][ T6863] bridge_slave_0: entered allmulticast mode [ 248.073258][ T7008] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 248.112198][ T1159] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 248.122999][ T6863] bridge_slave_0: entered promiscuous mode [ 248.170422][ T6894] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.226231][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.285375][ T6894] bridge_slave_1: entered allmulticast mode [ 248.333531][ T6894] bridge_slave_1: entered promiscuous mode [ 248.374449][ T1159] usb 1-1: USB disconnect, device number 6 [ 248.515739][ T6912] chnl_net:caif_netlink_parms(): no params data found [ 248.595384][ T6863] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.621029][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.628324][ T6863] bridge_slave_1: entered allmulticast mode [ 248.669150][ T6863] bridge_slave_1: entered promiscuous mode [ 248.730925][ T6894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.791890][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.821206][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.828607][ T6860] bridge_slave_0: entered allmulticast mode [ 248.861522][ T6860] bridge_slave_0: entered promiscuous mode [ 249.120920][ T6894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.226539][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.239726][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.279438][ T6860] bridge_slave_1: entered allmulticast mode [ 249.301290][ T6860] bridge_slave_1: entered promiscuous mode [ 249.425987][ T6863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.479457][ T6863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.613371][ T6813] EXT4-fs (loop5): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 249.618168][ T6860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.697176][ T6894] team0: Port device team_slave_0 added [ 249.719228][ T6894] team0: Port device team_slave_1 added [ 249.785534][ T6860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.814727][ T6863] team0: Port device team_slave_0 added [ 249.820576][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 249.926054][ T6860] team0: Port device team_slave_0 added [ 249.935337][ T6863] team0: Port device team_slave_1 added [ 249.988451][ T25] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 250.010190][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.045987][ T25] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 250.056897][ T25] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 250.069234][ T6860] team0: Port device team_slave_1 added [ 250.091401][ T25] usb 1-1: Manufacturer: syz [ 250.098446][ T25] usb 1-1: config 0 descriptor?? [ 250.130917][ T25] igorplugusb 1-1:0.0: incorrect number of endpoints [ 250.250845][ T6894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.257840][ T6894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.290548][ T6894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.371176][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.378481][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.387962][ T6912] bridge_slave_0: entered allmulticast mode [ 250.396132][ T6912] bridge_slave_0: entered promiscuous mode [ 250.423321][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.439981][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.466109][ T6860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.481947][ T6863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.489301][ T6863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.516385][ T6863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.528915][ T6894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.539018][ T6894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.565205][ T6894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.598006][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.606118][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.613510][ T6912] bridge_slave_1: entered allmulticast mode [ 250.620843][ T6912] bridge_slave_1: entered promiscuous mode [ 250.627731][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.635174][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.662591][ T6860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.709053][ T6863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.716147][ T6863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.748391][ T6863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.899955][ T6894] hsr_slave_0: entered promiscuous mode [ 250.906393][ T6894] hsr_slave_1: entered promiscuous mode [ 250.925405][ T6894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.939856][ T6894] Cannot create hsr debugfs directory [ 250.978998][ T6912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.994701][ T6912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.113225][ T6912] team0: Port device team_slave_0 added [ 251.137537][ T6863] hsr_slave_0: entered promiscuous mode [ 251.144207][ T6863] hsr_slave_1: entered promiscuous mode [ 251.151438][ T6863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.159080][ T6863] Cannot create hsr debugfs directory [ 251.189764][ T6912] team0: Port device team_slave_1 added [ 251.211869][ T6860] hsr_slave_0: entered promiscuous mode [ 251.218331][ T6860] hsr_slave_1: entered promiscuous mode [ 251.226169][ T6860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.235622][ T6860] Cannot create hsr debugfs directory [ 251.282442][ T6784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 251.322289][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.339521][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.372138][ T6912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.409559][ T6784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 251.439031][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.446198][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.479002][ T6912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.517327][ T6784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 251.534315][ T6784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 251.649390][ T1087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.726731][ T6912] hsr_slave_0: entered promiscuous mode [ 251.738487][ T6912] hsr_slave_1: entered promiscuous mode [ 251.751124][ T6912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.759901][ T6912] Cannot create hsr debugfs directory [ 251.831173][ T1087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.978818][ T1087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.058564][ T1087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.416281][ T1087] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.499742][ T1087] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.566844][ T6784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.605505][ T1087] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.635700][ T25] usb 1-1: USB disconnect, device number 7 [ 252.748932][ T1087] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.821714][ T6784] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.832312][ T7078] tipc: Started in network mode [ 252.840468][ T7078] tipc: Node identity 6aef667a7fa1, cluster identity 4711 [ 252.847753][ T7078] tipc: Enabled bearer , priority 0 [ 252.861318][ T6496] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.868414][ T6496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.904178][ T7077] tipc: Disabling bearer [ 252.932609][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.939881][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.039002][ T1087] bridge_slave_1: left allmulticast mode [ 253.045243][ T1087] bridge_slave_1: left promiscuous mode [ 253.051506][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.110171][ T1087] bridge_slave_0: left allmulticast mode [ 253.115864][ T1087] bridge_slave_0: left promiscuous mode [ 253.122228][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.150697][ T1087] bridge_slave_1: left allmulticast mode [ 253.161760][ T1087] bridge_slave_1: left promiscuous mode [ 253.180150][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.191719][ T1087] bridge_slave_0: left allmulticast mode [ 253.197466][ T1087] bridge_slave_0: left promiscuous mode [ 253.210656][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.234239][ T1087] bridge_slave_1: left allmulticast mode [ 253.243566][ T1087] bridge_slave_1: left promiscuous mode [ 253.250431][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.300913][ T1087] bridge_slave_0: left allmulticast mode [ 253.306614][ T1087] bridge_slave_0: left promiscuous mode [ 253.315771][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.761287][ T7088] loop0: detected capacity change from 0 to 32768 [ 253.772069][ T7088] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.289 (7088) [ 253.842280][ T7088] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 253.853649][ T7088] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 253.866352][ T7088] BTRFS info (device loop0): using free-space-tree [ 254.023786][ T29] audit: type=1800 audit(1728159326.567:26): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.289" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 254.060793][ T29] audit: type=1800 audit(1728159326.567:27): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.289" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 254.090317][ T29] audit: type=1800 audit(1728159326.577:28): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.289" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 254.144251][ T5220] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 254.381722][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.420296][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.432288][ T1087] bond0 (unregistering): Released all slaves [ 254.544424][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.562065][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.584227][ T1087] bond0 (unregistering): Released all slaves [ 254.680215][ T5290] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 254.689315][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.703263][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.714262][ T1087] bond0 (unregistering): Released all slaves [ 254.843082][ T5290] usb 1-1: Using ep0 maxpacket: 8 [ 254.874435][ T5290] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 254.912884][ T5290] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 254.954985][ T5290] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 254.981187][ T6863] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.992711][ T5290] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.022589][ T5290] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 255.045271][ T5290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.104741][ T6894] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 255.119571][ T6894] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 255.161383][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.167736][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.187108][ T6863] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.213221][ T6894] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 255.226127][ T6894] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 255.314138][ T5290] usb 1-1: usb_control_msg returned -32 [ 255.324207][ T5290] usbtmc 1-1:16.0: can't read capabilities [ 255.352257][ T6863] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.371171][ T5290] usb 1-1: USB disconnect, device number 8 [ 255.504001][ T6863] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.744174][ T1087] hsr_slave_0: left promiscuous mode [ 255.756805][ T1087] hsr_slave_1: left promiscuous mode [ 255.783058][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.791284][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.821257][ T1087] hsr_slave_0: left promiscuous mode [ 255.829462][ T1087] hsr_slave_1: left promiscuous mode [ 255.836162][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.856526][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.876946][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.890539][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.915527][ T1087] hsr_slave_0: left promiscuous mode [ 255.925054][ T1087] hsr_slave_1: left promiscuous mode [ 255.931633][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.939069][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.947909][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.955973][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.991309][ T1087] veth1_macvtap: left promiscuous mode [ 255.996881][ T1087] veth0_macvtap: left promiscuous mode [ 256.003920][ T1087] veth1_vlan: left promiscuous mode [ 256.009232][ T1087] veth0_vlan: left promiscuous mode [ 256.016190][ T1087] veth1_macvtap: left promiscuous mode [ 256.021932][ T1087] veth0_macvtap: left promiscuous mode [ 256.027548][ T1087] veth1_vlan: left promiscuous mode [ 256.035086][ T1087] veth0_vlan: left promiscuous mode [ 256.417595][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 256.446444][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 256.953974][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 256.989297][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 257.624987][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 257.675785][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 258.076861][ T6784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.248545][ T6784] veth0_vlan: entered promiscuous mode [ 258.269915][ T7134] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 258.276476][ T7134] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 258.285081][ T7134] vhci_hcd vhci_hcd.0: Device attached [ 258.305019][ T6894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.320625][ T7139] vhci_hcd: connection closed [ 258.322240][ T6496] vhci_hcd: stop threads [ 258.333416][ T6894] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.357673][ T6496] vhci_hcd: release socket [ 258.376778][ T6496] vhci_hcd: disconnect device [ 258.416536][ T6863] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 258.443546][ T6863] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 258.522093][ T6863] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 258.539249][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.546436][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.565614][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.572770][ T6873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.585693][ T6863] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 258.614466][ T6784] veth1_vlan: entered promiscuous mode [ 258.771525][ T6784] veth0_macvtap: entered promiscuous mode [ 258.794416][ T6784] veth1_macvtap: entered promiscuous mode [ 259.190743][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.229334][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.250198][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.272320][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.282453][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.294309][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.312830][ T6784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.323104][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.337508][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.351300][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.369682][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.381919][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.465306][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.668535][ T6784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.048702][ T6863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.083766][ T6784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.098130][ T6784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.107950][ T6784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.117832][ T6784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.145359][ T6860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 260.237482][ T6860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 260.365526][ T6860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 260.392718][ T6860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 260.628990][ T6894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.695581][ T6863] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.789231][ T6860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.009858][ T5437] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.016994][ T5437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.215829][ T6496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.256608][ T7166] loop0: detected capacity change from 0 to 32768 [ 261.266041][ T6496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.283602][ T7166] XFS: noikeep mount option is deprecated. [ 261.326185][ T5437] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.333458][ T5437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.400869][ T7166] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 261.463635][ T6912] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 261.488911][ T6912] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 261.532096][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.549924][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.570757][ T7166] XFS (loop0): Ending clean mount [ 261.583805][ T6912] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 261.597012][ T7166] XFS (loop0): Quotacheck needed: Please wait. [ 261.599568][ T6912] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.629206][ T6860] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.681427][ T5316] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.688541][ T5316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.713638][ T7166] XFS (loop0): Quotacheck: Done. [ 261.794682][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.801905][ T6873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.098869][ T5220] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 262.138460][ T1087] bridge_slave_1: left allmulticast mode [ 262.144683][ T1087] bridge_slave_1: left promiscuous mode [ 262.151129][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.320460][ T1087] bridge_slave_0: left allmulticast mode [ 262.422315][ T1087] bridge_slave_0: left promiscuous mode [ 262.536095][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.119438][ T7201] Zero length message leads to an empty skb [ 264.308322][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.336119][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.348556][ T1087] bond0 (unregistering): Released all slaves [ 264.417311][ T1087] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 264.454006][ T1087] bond1 (unregistering): Released all slaves [ 264.524738][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.296'. [ 264.533738][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.296'. [ 265.065176][ T6894] veth0_vlan: entered promiscuous mode [ 265.203507][ T1087] hsr_slave_0: left promiscuous mode [ 265.299216][ T1087] hsr_slave_1: left promiscuous mode [ 265.550769][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.562529][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.627601][ T7225] xt_CONNSECMARK: invalid mode: 0 [ 266.431229][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.439117][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.480537][ T1087] veth1_macvtap: left promiscuous mode [ 266.493226][ T1087] veth0_macvtap: left promiscuous mode [ 266.508847][ T1087] veth1_vlan: left promiscuous mode [ 266.514322][ T1087] veth0_vlan: left promiscuous mode [ 267.189349][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 267.282192][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 267.831578][ T6894] veth1_vlan: entered promiscuous mode [ 267.998249][ T6912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.046391][ T6912] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.073843][ T6863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.149579][ T6894] veth0_macvtap: entered promiscuous mode [ 268.261512][ T6894] veth1_macvtap: entered promiscuous mode [ 268.309222][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.316463][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.457315][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.464476][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.657028][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.681656][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.711723][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.722913][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.733227][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.744112][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.765792][ T6894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.775998][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.793922][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.809519][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.865951][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.878228][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.913279][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.968007][ T6894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.049230][ T6860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.086928][ T6894] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.139979][ T6894] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.148818][ T6894] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.189942][ T6894] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.304745][ T7234] loop3: detected capacity change from 0 to 32768 [ 269.401333][ T6863] veth0_vlan: entered promiscuous mode [ 269.433484][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.441663][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.490313][ T7234] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 269.521232][ T6860] veth0_vlan: entered promiscuous mode [ 269.546686][ T6863] veth1_vlan: entered promiscuous mode [ 269.559759][ T1830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.576396][ T6863] veth0_macvtap: entered promiscuous mode [ 269.582441][ T1830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.593123][ T6863] veth1_macvtap: entered promiscuous mode [ 269.642433][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.668526][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.678755][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.685118][ T7234] XFS (loop3): Ending clean mount [ 269.690085][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.710324][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.726506][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.738514][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.749783][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.764727][ T6863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.791079][ T6860] veth1_vlan: entered promiscuous mode [ 269.838532][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.851409][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.862202][ T6784] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 269.866896][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.938867][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.959865][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.992614][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.021874][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.059758][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.099571][ T6863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.141524][ T6863] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.151045][ T6863] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.159763][ T6863] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.168993][ T6863] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.985478][ T6860] veth0_macvtap: entered promiscuous mode [ 271.053783][ T6912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.192808][ T6860] veth1_macvtap: entered promiscuous mode [ 271.273932][ T6912] veth0_vlan: entered promiscuous mode [ 271.286657][ T6912] veth1_vlan: entered promiscuous mode [ 271.409641][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.450789][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.462926][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.475117][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.638199][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.657591][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.838570][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.038738][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.094227][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.139881][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.181966][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.210396][ T47] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 272.218733][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'. [ 272.227682][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.307'. [ 272.374822][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.406972][ T47] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 272.428278][ T47] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 109, changing to 10 [ 272.449005][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.470110][ T47] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 42584, setting to 1024 [ 272.481416][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.510332][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.529544][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.548651][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.579004][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.619902][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.665682][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.699610][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.724292][ T47] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 272.731348][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.734278][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.757322][ T7275] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 272.771707][ T47] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 273.735053][ T6860] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.776775][ T6860] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.818763][ T6860] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.834919][ T5289] usb 5-1: USB disconnect, device number 3 [ 273.859957][ T6860] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.145638][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.157444][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.235393][ T6912] veth0_macvtap: entered promiscuous mode [ 274.313048][ T6912] veth1_macvtap: entered promiscuous mode [ 274.346195][ T6873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.360159][ T5376] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 274.372493][ T6873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.422726][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 274.432661][ T7312] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 274.643575][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.645590][ T5376] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.685810][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.713471][ T5376] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 109, changing to 10 [ 274.731900][ T5376] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 42584, setting to 1024 [ 274.743421][ T5376] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 274.760719][ T5376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.803503][ T7306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.811579][ T7325] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 274.818115][ T7325] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 274.827167][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.861863][ T5376] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 274.879966][ T7325] vhci_hcd vhci_hcd.0: Device attached [ 274.887148][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.968835][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.640119][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.650518][ T7326] vhci_hcd: connection closed [ 275.673609][ T7323] overlayfs: conflicting options: userxattr,redirect_dir=on [ 275.697955][ T8] vhci_hcd: vhci_device speed not set [ 275.708487][ T53] vhci_hcd: stop threads [ 275.716698][ T53] vhci_hcd: release socket [ 275.723286][ T53] vhci_hcd: disconnect device [ 275.729983][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.748292][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.758538][ T5376] usb 4-1: USB disconnect, device number 2 [ 275.767177][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.790122][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.800709][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.810013][ T8] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 275.811679][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.818488][ T8] usb 9-1: enqueue for inactive port 0 [ 275.876360][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.960226][ T8] vhci_hcd: vhci_device speed not set [ 276.084079][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.110388][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.143135][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.190183][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.228009][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.270682][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.314159][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.334014][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.348371][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.367401][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.378491][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.399234][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.420709][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.456677][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.468753][ T6912] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.487563][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.505450][ T6912] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.515346][ T6912] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.524424][ T6912] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.632522][ T7355] loop3: detected capacity change from 0 to 128 [ 276.653118][ T7351] tipc: Started in network mode [ 276.658018][ T7351] tipc: Node identity bef8f474a735, cluster identity 4711 [ 276.672738][ T7351] tipc: Enabled bearer , priority 0 [ 276.763780][ T7351] tipc: Resetting bearer [ 276.892431][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.943693][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.966305][ T7350] tipc: Resetting bearer [ 277.143450][ T7360] overlay: filesystem on ./bus not supported [ 277.789620][ T5295] tipc: Node number set to 432927860 [ 277.958225][ T7345] loop4: detected capacity change from 0 to 32768 [ 278.043773][ T7365] loop3: detected capacity change from 0 to 24 [ 278.173063][ T7345] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 278.354125][ T7345] XFS (loop4): Ending clean mount [ 278.574033][ T7345] syz.4.315 (7345) used greatest stack depth: 17360 bytes left [ 278.670115][ T55] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 278.678927][ T55] Bluetooth: hci4: Injecting HCI hardware error event [ 278.718339][ T6894] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 279.028620][ T5234] Bluetooth: hci4: hardware error 0x00 [ 279.254542][ T7386] overlayfs: conflicting options: userxattr,redirect_dir=on [ 279.494246][ T7393] process 'syz.3.326' launched './file1' with NULL argv: empty string added [ 279.565780][ T7393] loop3: detected capacity change from 0 to 164 [ 280.116590][ T7395] loop0: detected capacity change from 0 to 24 [ 280.737343][ T6784] rock: directory entry would overflow storage [ 280.791122][ T6784] rock: sig=0x4f50, size=4, remaining=3 [ 280.849927][ T6784] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 280.902388][ T6784] rock: directory entry would overflow storage [ 280.908600][ T6784] rock: sig=0x4f50, size=4, remaining=3 [ 280.940890][ T6784] iso9660: Corrupted directory entry in block 3 of inode 1856 [ 280.949082][ T6784] VFS: Lookup of '' in iso9660 loop3 would have caused loop [ 280.958249][ T6784] VFS: Lookup of '' in iso9660 loop3 would have caused loop [ 281.188566][ T5234] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 281.480237][ T5227] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.503871][ T5227] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.808168][ T7410] loop0: detected capacity change from 0 to 24 [ 282.537055][ T5227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.546833][ T5227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.176451][ T5247] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 283.189203][ T5247] Bluetooth: hci6: Injecting HCI hardware error event [ 283.202348][ T5227] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 283.222849][ T5227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.634759][ T47] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 283.791752][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 283.809255][ T47] usb 1-1: config 0 has an invalid interface number: 56 but max is 0 [ 283.821352][ T47] usb 1-1: config 0 has no interface number 0 [ 283.832821][ T47] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 283.851413][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.859419][ T47] usb 1-1: Product: syz [ 283.872360][ T47] usb 1-1: Manufacturer: syz [ 283.880475][ T47] usb 1-1: SerialNumber: syz [ 283.898337][ T47] usb 1-1: config 0 descriptor?? [ 283.917966][ T47] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 283.926078][ T47] pctv452e: pctv452e_power_ctrl: 1 [ 283.926078][ T47] [ 283.939548][ T47] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 283.939548][ T47] [ 283.953689][ T47] dvb-usb: bulk message failed: -22 (5/0) [ 284.000135][ T47] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.010054][ T47] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 284.018669][ T47] usb 1-1: media controller created [ 284.024970][ T47] dvb-usb: bulk message failed: -22 (8/0) [ 284.031657][ T47] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 284.040696][ T47] dvb-usb: MAC address reading failed. [ 284.063135][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.120483][ T7416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.134276][ T7416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.155170][ T47] DVB: Unable to find symbol stb0899_attach() [ 284.161502][ T47] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 284.260227][ T47] rc_core: IR keymap rc-tt-1500 not found [ 284.266230][ T47] Registered IR keymap rc-empty [ 284.280675][ T47] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 284.299915][ T47] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input7 [ 284.318764][ T47] dvb-usb: schedule remote query interval to 100 msecs. [ 284.329939][ T47] pctv452e: pctv452e_power_ctrl: 0 [ 284.329939][ T47] [ 284.337532][ T47] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 284.406394][ T7416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.424771][ T7416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.432842][ T5326] dvb-usb: bulk message failed: -22 (4/0) [ 284.439885][ T5326] dvb-usb: error -22 while querying for an remote control event. [ 284.457934][ T7416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.474036][ T7416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.488418][ T7416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.501695][ T7416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.538291][ T5295] usb 1-1: USB disconnect, device number 9 [ 284.616895][ T5295] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 284.723796][ T7350] tipc: Disabling bearer [ 284.772253][ T7414] netlink: 'syz.4.332': attribute type 1 has an invalid length. [ 285.048476][ T1830] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.309607][ T55] Bluetooth: hci6: hardware error 0x00 [ 285.315563][ T5247] Bluetooth: hci1: command tx timeout [ 285.425514][ T7430] loop0: detected capacity change from 0 to 164 [ 286.355699][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 286.444191][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 286.453183][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 286.471242][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 286.479664][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 286.487547][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.522968][ T1830] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.720080][ T5314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.739970][ T5314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.841623][ T1830] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.973802][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.022198][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.376725][ T1830] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.431562][ T5234] Bluetooth: hci1: command tx timeout [ 288.278544][ T55] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 288.479269][ T7403] chnl_net:caif_netlink_parms(): no params data found [ 289.501663][ T7479] loop0: detected capacity change from 0 to 24 [ 289.571316][ T5234] Bluetooth: hci2: command tx timeout [ 289.577630][ T5234] Bluetooth: hci1: command tx timeout [ 290.950092][ T7484] loop5: detected capacity change from 0 to 164 [ 291.649980][ T55] Bluetooth: hci1: command tx timeout [ 291.655444][ T55] Bluetooth: hci2: command tx timeout [ 291.926725][ T7501] loop1: detected capacity change from 0 to 512 [ 292.040401][ T7501] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 292.632728][ T7501] EXT4-fs (loop1): orphan cleanup on readonly fs [ 292.639970][ T7501] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.355: bad orphan inode 15 [ 292.663150][ T7501] ext4_test_bit(bit=14, block=18) = 1 [ 292.668562][ T7501] is_bad_inode(inode)=0 [ 292.673676][ T7501] NEXT_ORPHAN(inode)=1023 [ 292.678019][ T7501] max_ino=32 [ 292.681315][ T7501] i_nlink=0 [ 292.688064][ T7501] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2976: inode #15: comm syz.1.355: corrupted xattr block 19: e_value size too large [ 292.715441][ T7501] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 292.725296][ T7501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 292.800546][ T1830] bridge_slave_1: left allmulticast mode [ 292.806461][ T1830] bridge_slave_1: left promiscuous mode [ 292.835189][ T1830] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.853530][ T1830] bridge_slave_0: left allmulticast mode [ 292.859318][ T1830] bridge_slave_0: left promiscuous mode [ 292.957932][ T6912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.990962][ T1830] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.665821][ T7528] loop4: detected capacity change from 0 to 24 [ 293.781900][ T55] Bluetooth: hci2: command tx timeout [ 295.791647][ T55] Bluetooth: hci2: command tx timeout [ 296.002312][ T1830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.034504][ T1830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.121712][ T1830] bond0 (unregistering): Released all slaves [ 297.140046][ T7513] netlink: 32 bytes leftover after parsing attributes in process `syz.0.357'. [ 298.112903][ T7403] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.179992][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.232937][ T7403] bridge_slave_0: entered allmulticast mode [ 298.285857][ T7403] bridge_slave_0: entered promiscuous mode [ 299.466167][ T7568] loop1: detected capacity change from 0 to 164 [ 309.579828][ C1] sched: DL replenish lagged too much [ 313.875471][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.890165][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.898218][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.906453][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.918824][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 313.926396][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.098378][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.108344][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.121269][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.130786][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.138593][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 314.147628][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.201065][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 314.209605][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 314.218177][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 314.231367][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 314.243739][ T5234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 314.256550][ T5247] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.270985][ T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 314.302166][ T5247] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 314.309770][ T5247] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 314.318115][ T5247] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 314.326674][ T5247] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 314.336839][ T5247] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 315.950828][ T5247] Bluetooth: hci0: command tx timeout [ 316.190127][ T5247] Bluetooth: hci3: command tx timeout [ 316.350208][ T5247] Bluetooth: hci5: command tx timeout [ 316.430313][ T5247] Bluetooth: hci7: command tx timeout [ 316.596394][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.606286][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.030037][ T5247] Bluetooth: hci0: command tx timeout [ 318.270101][ T5247] Bluetooth: hci3: command tx timeout [ 318.431923][ T5247] Bluetooth: hci5: command tx timeout [ 318.510653][ T5247] Bluetooth: hci7: command tx timeout [ 320.115044][ T5247] Bluetooth: hci0: command tx timeout [ 320.352391][ T5247] Bluetooth: hci3: command tx timeout [ 320.510081][ T5247] Bluetooth: hci5: command tx timeout [ 320.590252][ T5247] Bluetooth: hci7: command tx timeout [ 322.209895][ T5247] Bluetooth: hci0: command tx timeout [ 322.430184][ T5247] Bluetooth: hci3: command tx timeout [ 322.564601][ T7433] chnl_net:caif_netlink_parms(): no params data found [ 322.594583][ T5247] Bluetooth: hci5: command tx timeout [ 322.622657][ T7403] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.637461][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.666935][ T7403] bridge_slave_1: entered allmulticast mode [ 322.673360][ T5247] Bluetooth: hci7: command tx timeout [ 322.702072][ T7403] bridge_slave_1: entered promiscuous mode [ 342.828011][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.842477][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.853375][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.862097][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.872067][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.879520][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.910114][ T5234] Bluetooth: hci4: command tx timeout [ 346.278181][ T5247] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 346.291071][ T5247] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 346.312190][ T5247] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 346.321733][ T5247] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 346.332915][ T5247] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 346.341133][ T5247] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 346.990092][ T5234] Bluetooth: hci4: command tx timeout [ 348.430159][ T5234] Bluetooth: hci6: command tx timeout [ 349.080580][ T5234] Bluetooth: hci4: command tx timeout [ 350.520366][ T5234] Bluetooth: hci6: command tx timeout [ 351.150525][ T5234] Bluetooth: hci4: command tx timeout [ 352.590060][ T5234] Bluetooth: hci6: command tx timeout [ 354.670124][ T5234] Bluetooth: hci6: command tx timeout [ 362.904889][ T7603] chnl_net:caif_netlink_parms(): no params data found [ 363.052205][ T7603] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.059371][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.090299][ T7603] bridge_slave_0: entered allmulticast mode [ 363.098651][ T7603] bridge_slave_0: entered promiscuous mode [ 363.128838][ T7603] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.146012][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.160873][ T7603] bridge_slave_1: entered allmulticast mode [ 363.172283][ T7603] bridge_slave_1: entered promiscuous mode [ 363.261434][ T7603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.287178][ T7603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.364081][ T7603] team0: Port device team_slave_0 added [ 363.387267][ T7603] team0: Port device team_slave_1 added [ 363.458033][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.472917][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.524383][ T7603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.548113][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.564205][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.604836][ T7603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.718005][ T7603] hsr_slave_0: entered promiscuous mode [ 363.757609][ T7603] hsr_slave_1: entered promiscuous mode [ 364.042881][ T7603] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.178166][ T7603] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.323093][ T7603] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.443070][ T7603] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.663552][ T7603] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 364.694430][ T7603] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 364.719188][ T7603] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 364.745801][ T7603] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 364.803105][ T7603] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.810555][ T7603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.818951][ T7603] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.826300][ T7603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.982306][ T7603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.022015][ T7603] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.439512][ T7603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.539161][ T7603] veth0_vlan: entered promiscuous mode [ 365.558126][ T7603] veth1_vlan: entered promiscuous mode [ 365.626252][ T7603] veth0_macvtap: entered promiscuous mode [ 365.645141][ T7603] veth1_macvtap: entered promiscuous mode [ 365.691060][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.711990][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.736188][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.759956][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.779911][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.798148][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.820233][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.844465][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.860470][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.886063][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.903994][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.924080][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.940425][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.964360][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.987042][ T7603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.015037][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.035176][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.061311][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.081406][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.102811][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.125740][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.145694][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.165398][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.183096][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.206327][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.224252][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.243226][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.259873][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.290340][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.318895][ T7603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.344143][ T7603] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.365856][ T7603] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.380651][ T7603] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.389368][ T7603] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.552677][ T5316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.567929][ T5316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.631916][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.641603][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.812553][ T7628] loop2: detected capacity change from 0 to 64 [ 369.711192][ T7635] loop2: detected capacity change from 0 to 164 [ 374.276543][ T5247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.288215][ T5247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.303108][ T5247] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.315279][ T5247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.324247][ T5247] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 374.331704][ T5247] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.439171][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.453572][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.462189][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.470378][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.478732][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 374.487815][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.639778][ T5247] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 374.650582][ T5247] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 374.680027][ T5247] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 374.687993][ T5247] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 374.699581][ T5247] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 374.707995][ T5247] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 374.781316][ T5234] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 374.793319][ T5234] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 374.803205][ T5234] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 374.812265][ T5234] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 374.819962][ T5234] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 374.829865][ T5234] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 375.043810][ T7654] chnl_net:caif_netlink_parms(): no params data found [ 376.432025][ T5234] Bluetooth: hci1: command tx timeout [ 376.590403][ T5234] Bluetooth: hci2: command tx timeout [ 376.750154][ T5234] Bluetooth: hci8: command tx timeout [ 376.910069][ T5247] Bluetooth: hci9: command tx timeout [ 378.033740][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.049872][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.510064][ T5247] Bluetooth: hci1: command tx timeout [ 378.670506][ T5247] Bluetooth: hci2: command tx timeout [ 378.834836][ T5247] Bluetooth: hci8: command tx timeout [ 378.990023][ T5247] Bluetooth: hci9: command tx timeout [ 380.590297][ T5247] Bluetooth: hci1: command tx timeout [ 380.750365][ T5247] Bluetooth: hci2: command tx timeout [ 380.910070][ T5247] Bluetooth: hci8: command tx timeout [ 381.070143][ T5247] Bluetooth: hci9: command tx timeout [ 382.670082][ T5247] Bluetooth: hci1: command tx timeout [ 382.830415][ T5247] Bluetooth: hci2: command tx timeout [ 383.001474][ T5247] Bluetooth: hci8: command tx timeout [ 383.153780][ T5247] Bluetooth: hci9: command tx timeout [ 384.930424][ T5234] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 384.940596][ T5234] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 384.948292][ T5234] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 384.956294][ T5234] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 384.966191][ T5234] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 384.975297][ T5234] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 386.947687][ T7654] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.955052][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.971993][ T7654] bridge_slave_0: entered allmulticast mode [ 386.993289][ T7654] bridge_slave_0: entered promiscuous mode [ 387.009088][ T7654] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.029926][ T7654] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.037197][ T7654] bridge_slave_1: entered allmulticast mode [ 387.059050][ T7654] bridge_slave_1: entered promiscuous mode [ 387.070112][ T5234] Bluetooth: hci10: command tx timeout [ 387.155644][ T7654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.181848][ T7654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.329394][ T7654] team0: Port device team_slave_0 added [ 387.352819][ T7654] team0: Port device team_slave_1 added [ 387.434413][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.449861][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.514554][ T7654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.541069][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.548461][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.599160][ T7654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.150119][ T5234] Bluetooth: hci10: command tx timeout [ 391.230284][ T5234] Bluetooth: hci10: command tx timeout [ 393.310297][ T5234] Bluetooth: hci10: command tx timeout [ 408.683128][ T5247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 408.698828][ T5247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 408.706834][ T5247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 408.715959][ T5247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 408.724046][ T5247] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 408.732842][ T5247] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 410.830073][ T5247] Bluetooth: hci3: command tx timeout [ 412.920012][ T5247] Bluetooth: hci3: command tx timeout [ 414.990023][ T5247] Bluetooth: hci3: command tx timeout [ 417.070176][ T5247] Bluetooth: hci3: command tx timeout [ 436.297962][ T5227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 436.307205][ T5227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 436.316718][ T5227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 436.324751][ T5227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 436.334101][ T5227] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 436.350250][ T5227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 436.437514][ T7681] Bluetooth: hci0: command 0x0406 tx timeout [ 436.445717][ T5227] Bluetooth: hci5: command 0x0406 tx timeout [ 436.542070][ T5227] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 436.557513][ T5227] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 436.566306][ T5227] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 436.574611][ T5227] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 436.584331][ T5227] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 436.592109][ T5227] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 436.680419][ T7692] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 436.691394][ T7692] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 436.706855][ T55] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 436.715838][ T55] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 436.723916][ T55] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 436.732174][ T55] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 436.739557][ T55] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 436.753877][ T55] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 436.768007][ T55] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 436.778870][ T55] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 436.788939][ T7696] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 436.796540][ T7696] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 438.430101][ T7696] Bluetooth: hci4: command tx timeout [ 439.490255][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.496595][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.510001][ T7695] Bluetooth: hci4: command tx timeout [ 441.554310][ T7695] Bluetooth: hci7: command 0x0406 tx timeout [ 442.590134][ T7695] Bluetooth: hci4: command tx timeout [ 444.674282][ T7695] Bluetooth: hci4: command tx timeout [ 446.338127][ T7700] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 446.346923][ T7700] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 446.355763][ T7700] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 446.368475][ T7700] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 446.380508][ T7700] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 446.388269][ T7700] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 469.752203][ T55] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 469.762496][ T55] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 469.770799][ T55] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 469.778893][ T55] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 469.788798][ T55] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 469.796385][ T55] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 472.270323][ T7709] Bluetooth: hci6: command 0x0406 tx timeout [ 497.510320][ T7715] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 497.521170][ T7715] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 497.535351][ T7715] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 497.544259][ T7715] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 497.552505][ T7715] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 497.560185][ T7715] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 497.816352][ T7725] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 497.832416][ T7725] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 497.842148][ T7725] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 497.850729][ T7725] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 497.860844][ T7725] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 497.868243][ T7725] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 498.091938][ T7727] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 498.101772][ T7727] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 498.114528][ T7727] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 498.131082][ T7727] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 498.138815][ T7727] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 498.146345][ T7727] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 498.253882][ T7730] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 498.263924][ T7730] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 498.273405][ T7730] Bluetooth: hci1: command 0x0406 tx timeout [ 498.279443][ T7730] Bluetooth: hci2: command 0x0406 tx timeout [ 498.287309][ T7730] Bluetooth: hci8: command 0x0406 tx timeout [ 498.295535][ T7720] Bluetooth: hci9: command 0x0406 tx timeout [ 498.310582][ T7733] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 498.320846][ T7733] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 498.328984][ T7733] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 498.339708][ T7733] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 500.912701][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.919046][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.527892][ T7720] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 507.538870][ T7720] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 507.547455][ T7720] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 507.557793][ T7720] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 507.565652][ T7720] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 507.573561][ T7720] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 508.115367][ T7732] Bluetooth: hci10: command 0x0406 tx timeout [ 513.710351][ T30] INFO: task kworker/u8:6:1830 blocked for more than 143 seconds. [ 513.718495][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 513.780007][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.788730][ T30] task:kworker/u8:6 state:D stack:20040 pid:1830 tgid:1830 ppid:2 flags:0x00004000 [ 513.929854][ T30] Workqueue: netns cleanup_net [ 513.934723][ T30] Call Trace: [ 513.938017][ T30] [ 514.023307][ T30] __schedule+0x1895/0x4b30 [ 514.027928][ T30] ? __pfx___schedule+0x10/0x10 [ 514.073122][ T30] ? __pfx_lock_release+0x10/0x10 [ 514.089847][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 514.095364][ T30] ? kthread_data+0x52/0xd0 [ 514.149973][ T30] ? schedule+0x90/0x320 [ 514.154303][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.209856][ T30] ? wq_worker_sleeping+0x66/0x240 [ 514.224739][ T30] ? schedule+0x90/0x320 [ 514.229066][ T30] schedule+0x14b/0x320 [ 514.266838][ T30] schedule_preempt_disabled+0x13/0x30 [ 514.287224][ T30] __mutex_lock+0x6a7/0xd70 [ 514.300209][ T30] ? __mutex_lock+0x52a/0xd70 [ 514.304933][ T30] ? ieee80211_unregister_hw+0x55/0x2c0 [ 514.319922][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 514.324979][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 514.345795][ T30] ? rcu_is_watching+0x15/0xb0 [ 514.360234][ T30] ieee80211_unregister_hw+0x55/0x2c0 [ 514.365672][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 514.389242][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.400001][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 514.406106][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.426075][ T30] hwsim_exit_net+0x5c1/0x670 [ 514.439990][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 514.445240][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.462014][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.467696][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 514.488142][ T30] cleanup_net+0x804/0xcc0 [ 514.495421][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 514.510005][ T30] ? process_scheduled_works+0x976/0x1850 [ 514.515852][ T30] process_scheduled_works+0xa65/0x1850 [ 514.529876][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 514.535921][ T30] ? assign_work+0x364/0x3d0 [ 514.550673][ T30] worker_thread+0x870/0xd30 [ 514.555325][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.573853][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.579527][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 514.609312][ T30] ? __kthread_parkme+0x169/0x1d0 [ 514.629996][ T30] ? __pfx_worker_thread+0x10/0x10 [ 514.635192][ T30] kthread+0x2f2/0x390 [ 514.639298][ T30] ? __pfx_worker_thread+0x10/0x10 [ 514.657841][ T30] ? __pfx_kthread+0x10/0x10 [ 514.662693][ T30] ret_from_fork+0x4d/0x80 [ 514.667154][ T30] ? __pfx_kthread+0x10/0x10 [ 514.689435][ T30] ret_from_fork_asm+0x1a/0x30 [ 514.694724][ T30] [ 514.704684][ T30] INFO: task jbd2/sda1-8:4639 blocked for more than 144 seconds. [ 514.720377][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 514.728026][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.758197][ T30] task:jbd2/sda1-8 state:D stack:23712 pid:4639 tgid:4639 ppid:2 flags:0x00004000 [ 514.778606][ T30] Call Trace: [ 514.783899][ T30] [ 514.786858][ T30] __schedule+0x1895/0x4b30 [ 514.799916][ T30] ? __pfx___schedule+0x10/0x10 [ 514.804818][ T30] ? __pfx_lock_release+0x10/0x10 [ 514.821277][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 514.827327][ T30] ? schedule+0x90/0x320 [ 514.845684][ T30] schedule+0x14b/0x320 [ 514.858678][ T30] io_schedule+0x8d/0x110 [ 514.866058][ T30] bit_wait_io+0x12/0xd0 [ 514.874922][ T30] __wait_on_bit+0xb2/0x2f0 [ 514.891504][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 514.896970][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 514.911820][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 514.916882][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 514.930252][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 514.935870][ T30] jbd2_journal_commit_transaction+0x3df6/0x67e0 [ 514.958411][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 514.969845][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 514.975099][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.998409][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 515.009988][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.015674][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 515.034621][ T30] ? __timer_delete_sync+0x15c/0x310 [ 515.049848][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.055526][ T30] ? __timer_delete_sync+0x25d/0x310 [ 515.070196][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 515.076060][ T30] ? __pfx_do_raw_write_lock+0x10/0x10 [ 515.098752][ T30] ? prepare_to_wait+0x186/0x210 [ 515.109928][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.115691][ T30] kjournald2+0x41c/0x7b0 [ 515.129853][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 515.136341][ T30] ? __pfx_kjournald2+0x10/0x10 [ 515.153611][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 515.159733][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.180145][ T30] ? __kthread_parkme+0x169/0x1d0 [ 515.185315][ T30] ? __pfx_kjournald2+0x10/0x10 [ 515.208192][ T30] kthread+0x2f2/0x390 [ 515.219846][ T30] ? __pfx_kjournald2+0x10/0x10 [ 515.224757][ T30] ? __pfx_kthread+0x10/0x10 [ 515.229561][ T30] ret_from_fork+0x4d/0x80 [ 515.249974][ T30] ? __pfx_kthread+0x10/0x10 [ 515.254628][ T30] ret_from_fork_asm+0x1a/0x30 [ 515.259460][ T30] [ 515.277187][ T30] INFO: task dhcpcd:4890 blocked for more than 144 seconds. [ 515.299851][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 515.307974][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.329956][ T30] task:dhcpcd state:D stack:23664 pid:4890 tgid:4890 ppid:1 flags:0x00000002 [ 515.351387][ T30] Call Trace: [ 515.354697][ T30] [ 515.357736][ T30] __schedule+0x1895/0x4b30 [ 515.371645][ T30] ? __pfx___schedule+0x10/0x10 [ 515.376556][ T30] ? __pfx_lock_release+0x10/0x10 [ 515.400039][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 515.405564][ T30] ? schedule+0x90/0x320 [ 515.422328][ T30] schedule+0x14b/0x320 [ 515.426544][ T30] schedule_preempt_disabled+0x13/0x30 [ 515.439847][ T30] __mutex_lock+0x6a7/0xd70 [ 515.444402][ T30] ? __mutex_lock+0x52a/0xd70 [ 515.449110][ T30] ? vlan_ioctl_handler+0x112/0x9d0 [ 515.469072][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 515.479875][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.485554][ T30] ? __might_fault+0xc6/0x120 [ 515.504099][ T30] vlan_ioctl_handler+0x112/0x9d0 [ 515.509206][ T30] ? sock_ioctl+0x661/0x8e0 [ 515.525097][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 515.534999][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 515.551314][ T30] sock_ioctl+0x682/0x8e0 [ 515.555701][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 515.569860][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.575536][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 515.591472][ T30] __se_sys_ioctl+0xfb/0x170 [ 515.602114][ T30] do_syscall_64+0xf3/0x230 [ 515.606664][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.619843][ T30] RIP: 0033:0x7f2b269a3d49 [ 515.624294][ T30] RSP: 002b:00007ffec6411098 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 515.659961][ T30] RAX: ffffffffffffffda RBX: 000055db81f08e60 RCX: 00007f2b269a3d49 [ 515.667982][ T30] RDX: 00007ffec64110a0 RSI: 0000000000008982 RDI: 0000000000000011 [ 515.691485][ T30] RBP: 0000000000000002 R08: 0000000000000008 R09: 0000000000000000 [ 515.714962][ T30] R10: 00007ffec6421720 R11: 0000000000000246 R12: 00007ffec64110a0 [ 515.730160][ T30] R13: 00007ffec6411160 R14: 000055db81f08e60 R15: 000055db82062eb0 [ 515.738188][ T30] [ 515.756851][ T30] INFO: task kworker/0:7:5376 blocked for more than 145 seconds. [ 515.769972][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 515.777635][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.806025][ T30] task:kworker/0:7 state:D stack:20568 pid:5376 tgid:5376 ppid:2 flags:0x00004000 [ 515.820095][ T30] Workqueue: events switchdev_deferred_process_work [ 515.826732][ T30] Call Trace: [ 515.841490][ T30] [ 515.844463][ T30] __schedule+0x1895/0x4b30 [ 515.849018][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.869596][ T30] ? schedule+0x90/0x320 [ 515.880036][ T30] ? __pfx___schedule+0x10/0x10 [ 515.884937][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 515.905015][ T30] ? __pfx_lock_release+0x10/0x10 [ 515.919737][ T30] ? kick_pool+0x1bd/0x620 [ 515.924519][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.929759][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.945879][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 515.961339][ T30] ? schedule+0x90/0x320 [ 515.965628][ T30] schedule+0x14b/0x320 [ 515.980547][ T30] schedule_preempt_disabled+0x13/0x30 [ 515.986057][ T30] __mutex_lock+0x6a7/0xd70 [ 516.000951][ T30] ? __mutex_lock+0x52a/0xd70 [ 516.024016][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 516.030711][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 516.035783][ T30] ? process_scheduled_works+0x976/0x1850 [ 516.056151][ T30] switchdev_deferred_process_work+0xe/0x20 [ 516.069916][ T30] process_scheduled_works+0xa65/0x1850 [ 516.075538][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 516.092084][ T30] ? assign_work+0x364/0x3d0 [ 516.096729][ T30] worker_thread+0x870/0xd30 [ 516.119002][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 516.140029][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 516.145697][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 516.159979][ T30] ? __kthread_parkme+0x169/0x1d0 [ 516.169949][ T30] ? __pfx_worker_thread+0x10/0x10 [ 516.175112][ T30] kthread+0x2f2/0x390 [ 516.179208][ T30] ? __pfx_worker_thread+0x10/0x10 [ 516.200552][ T30] ? __pfx_kthread+0x10/0x10 [ 516.205181][ T30] ret_from_fork+0x4d/0x80 [ 516.209640][ T30] ? __pfx_kthread+0x10/0x10 [ 516.235169][ T30] ret_from_fork_asm+0x1a/0x30 [ 516.249029][ T30] [ 516.252521][ T30] INFO: task kworker/u8:9:5437 blocked for more than 145 seconds. [ 516.272254][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 516.287637][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.310612][ T30] task:kworker/u8:9 state:D stack:20944 pid:5437 tgid:5437 ppid:2 flags:0x00004000 [ 516.329787][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 516.335865][ T30] Call Trace: [ 516.339158][ T30] [ 516.358247][ T30] __schedule+0x1895/0x4b30 [ 516.369872][ T30] ? __pfx___schedule+0x10/0x10 [ 516.374783][ T30] ? __pfx_lock_release+0x10/0x10 [ 516.391489][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 516.397000][ T30] ? kthread_data+0x52/0xd0 [ 516.417009][ T30] ? schedule+0x90/0x320 [ 516.430078][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 516.436190][ T30] ? wq_worker_sleeping+0x66/0x240 [ 516.449849][ T30] ? schedule+0x90/0x320 [ 516.454229][ T30] schedule+0x14b/0x320 [ 516.458431][ T30] schedule_preempt_disabled+0x13/0x30 [ 516.479972][ T30] __mutex_lock+0x6a7/0xd70 [ 516.484525][ T30] ? mark_lock+0x9a/0x360 [ 516.488887][ T30] ? __mutex_lock+0x52a/0xd70 [ 516.508096][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 516.519459][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 516.532071][ T30] addrconf_dad_work+0xd0/0x16f0 [ 516.537398][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 516.559965][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 516.565493][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 516.581483][ T30] ? process_scheduled_works+0x976/0x1850 [ 516.587268][ T30] process_scheduled_works+0xa65/0x1850 [ 516.606172][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 516.619164][ T30] ? assign_work+0x364/0x3d0 [ 516.625275][ T30] worker_thread+0x870/0xd30 [ 516.642118][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 516.647798][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 516.668244][ T30] ? __kthread_parkme+0x169/0x1d0 [ 516.680237][ T30] ? __pfx_worker_thread+0x10/0x10 [ 516.685482][ T30] kthread+0x2f2/0x390 [ 516.689578][ T30] ? __pfx_worker_thread+0x10/0x10 [ 516.714660][ T30] ? __pfx_kthread+0x10/0x10 [ 516.719308][ T30] ret_from_fork+0x4d/0x80 [ 516.739842][ T30] ? __pfx_kthread+0x10/0x10 [ 516.744570][ T30] ret_from_fork_asm+0x1a/0x30 [ 516.749455][ T30] [ 516.769981][ T30] INFO: task kworker/u8:11:6496 blocked for more than 146 seconds. [ 516.777921][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 516.799959][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.808681][ T30] task:kworker/u8:11 state:D stack:22160 pid:6496 tgid:6496 ppid:2 flags:0x00004000 [ 516.838788][ T30] Workqueue: events_unbound linkwatch_event [ 516.859152][ T30] Call Trace: [ 516.871074][ T30] [ 516.874043][ T30] __schedule+0x1895/0x4b30 [ 516.878614][ T30] ? __pfx___schedule+0x10/0x10 [ 516.890401][ T30] ? __pfx_lock_release+0x10/0x10 [ 516.895483][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 516.910143][ T30] ? kthread_data+0x52/0xd0 [ 516.914781][ T30] ? schedule+0x90/0x320 [ 516.919068][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 516.944708][ T30] ? wq_worker_sleeping+0x66/0x240 [ 516.959946][ T30] ? schedule+0x90/0x320 [ 516.964248][ T30] schedule+0x14b/0x320 [ 516.968446][ T30] schedule_preempt_disabled+0x13/0x30 [ 516.990128][ T30] __mutex_lock+0x6a7/0xd70 [ 516.994773][ T30] ? __mutex_lock+0x52a/0xd70 [ 516.999479][ T30] ? linkwatch_event+0xe/0x60 [ 517.018751][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 517.031543][ T30] ? process_scheduled_works+0x976/0x1850 [ 517.037323][ T30] linkwatch_event+0xe/0x60 [ 517.051473][ T30] process_scheduled_works+0xa65/0x1850 [ 517.057113][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 517.076772][ T30] ? assign_work+0x364/0x3d0 [ 517.089945][ T30] worker_thread+0x870/0xd30 [ 517.094612][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 517.109844][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 517.116059][ T30] ? __kthread_parkme+0x169/0x1d0 [ 517.137706][ T30] ? __pfx_worker_thread+0x10/0x10 [ 517.150161][ T30] kthread+0x2f2/0x390 [ 517.154269][ T30] ? __pfx_worker_thread+0x10/0x10 [ 517.159421][ T30] ? __pfx_kthread+0x10/0x10 [ 517.178516][ T30] ret_from_fork+0x4d/0x80 [ 517.189129][ T30] ? __pfx_kthread+0x10/0x10 [ 517.200005][ T30] ret_from_fork_asm+0x1a/0x30 [ 517.204841][ T30] [ 517.221584][ T30] INFO: task syz-executor:7403 blocked for more than 146 seconds. [ 517.229425][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 517.255211][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 517.269926][ T30] task:syz-executor state:D stack:21728 pid:7403 tgid:7403 ppid:1 flags:0x00004006 [ 517.289871][ T30] Call Trace: [ 517.293184][ T30] [ 517.296138][ T30] __schedule+0x1895/0x4b30 [ 517.320971][ T30] ? __pfx___schedule+0x10/0x10 [ 517.325907][ T30] ? __pfx_lock_release+0x10/0x10 [ 517.340390][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 517.345915][ T30] ? schedule+0x90/0x320 [ 517.363563][ T30] schedule+0x14b/0x320 [ 517.367780][ T30] schedule_preempt_disabled+0x13/0x30 [ 517.379868][ T30] __mutex_lock+0x6a7/0xd70 [ 517.384527][ T30] ? __mutex_lock+0x52a/0xd70 [ 517.389242][ T30] ? tun_chr_close+0x3b/0x1b0 [ 517.410561][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 517.415659][ T30] ? __pfx_call_rcu+0x10/0x10 [ 517.429868][ T30] tun_chr_close+0x3b/0x1b0 [ 517.434502][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 517.450261][ T30] __fput+0x241/0x880 [ 517.459392][ T30] task_work_run+0x251/0x310 [ 517.469936][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 517.475282][ T30] ? __pfx_task_work_run+0x10/0x10 [ 517.490288][ T30] ? do_exit+0xa2a/0x28e0 [ 517.494680][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 517.514571][ T30] ? kmem_cache_free+0x1a2/0x420 [ 517.519578][ T30] ? do_exit+0xa2a/0x28e0 [ 517.529848][ T30] do_exit+0xa2f/0x28e0 [ 517.534062][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 517.539727][ T30] ? __pfx_do_exit+0x10/0x10 [ 517.569851][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 517.575311][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 517.591239][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 517.597376][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 517.617221][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 517.628355][ T30] do_group_exit+0x207/0x2c0 [ 517.641411][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 517.659863][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 517.665548][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 517.679868][ T30] get_signal+0x16a3/0x1740 [ 517.684434][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 517.689578][ T30] ? __pfx_get_signal+0x10/0x10 [ 517.707993][ T30] arch_do_signal_or_restart+0x96/0x860 [ 517.732293][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 517.738498][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 517.762267][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 517.768081][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 517.789033][ T30] do_syscall_64+0x100/0x230 [ 517.795590][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 517.810134][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.816169][ T30] RIP: 0033:0x7f1141f7fe8c [ 517.830299][ T30] RSP: 002b:00007ffd149ee140 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 517.838776][ T30] RAX: 0000000000000068 RBX: 00007f1142c64620 RCX: 00007f1141f7fe8c [ 517.865055][ T30] RDX: 0000000000000068 RSI: 00007f1142c64670 RDI: 0000000000000003 [ 517.886258][ T30] RBP: 0000000000000000 R08: 00007ffd149ee194 R09: 000000000000000c [ 517.899844][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 517.907946][ T30] R13: 0000000000000000 R14: 00007f1142c64670 R15: 0000000000000000 [ 517.934318][ T30] [ 517.937439][ T30] INFO: task syz-executor:7433 blocked for more than 147 seconds. [ 517.949843][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 517.968584][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 517.983785][ T30] task:syz-executor state:D stack:21728 pid:7433 tgid:7433 ppid:1 flags:0x00004006 [ 518.009487][ T30] Call Trace: [ 518.014487][ T30] [ 518.017488][ T30] __schedule+0x1895/0x4b30 [ 518.030320][ T30] ? __pfx___schedule+0x10/0x10 [ 518.035318][ T30] ? __pfx_lock_release+0x10/0x10 [ 518.051561][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 518.068035][ T30] ? schedule+0x90/0x320 [ 518.072643][ T30] schedule+0x14b/0x320 [ 518.076849][ T30] schedule_preempt_disabled+0x13/0x30 [ 518.096903][ T30] __mutex_lock+0x6a7/0xd70 [ 518.106316][ T30] ? __mutex_lock+0x52a/0xd70 [ 518.120096][ T30] ? tun_chr_close+0x3b/0x1b0 [ 518.124819][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 518.141048][ T30] ? __pfx_call_rcu+0x10/0x10 [ 518.145804][ T30] tun_chr_close+0x3b/0x1b0 [ 518.158200][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 518.169937][ T30] __fput+0x241/0x880 [ 518.181385][ T30] task_work_run+0x251/0x310 [ 518.186020][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 518.200165][ T30] ? __pfx_task_work_run+0x10/0x10 [ 518.205321][ T30] ? do_exit+0xa2a/0x28e0 [ 518.209682][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 518.235435][ T30] ? kmem_cache_free+0x1a2/0x420 [ 518.249921][ T30] ? do_exit+0xa2a/0x28e0 [ 518.254329][ T30] do_exit+0xa2f/0x28e0 [ 518.267180][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 518.283044][ T30] ? __pfx_do_exit+0x10/0x10 [ 518.287687][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 518.300427][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 518.306110][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 518.327661][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 518.339847][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 518.345119][ T30] do_group_exit+0x207/0x2c0 [ 518.349747][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 518.370787][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 518.376500][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 518.398758][ T30] get_signal+0x16a3/0x1740 [ 518.403735][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 518.408794][ T30] ? __pfx_get_signal+0x10/0x10 [ 518.429336][ T30] arch_do_signal_or_restart+0x96/0x860 [ 518.439908][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 518.446113][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 518.469986][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 518.475792][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 518.491928][ T30] do_syscall_64+0x100/0x230 [ 518.497011][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.520478][ T30] RIP: 0033:0x7f878c97fe8c [ 518.524954][ T30] RSP: 002b:00007ffce1c44db0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 518.548694][ T30] RAX: 000000000000003c RBX: 00007f878d664620 RCX: 00007f878c97fe8c [ 518.562852][ T30] RDX: 000000000000003c RSI: 00007f878d664670 RDI: 0000000000000003 [ 518.586893][ T30] RBP: 0000000000000000 R08: 00007ffce1c44e04 R09: 000000000000000c [ 518.599841][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 518.607849][ T30] R13: 0000000000000000 R14: 00007f878d664670 R15: 0000000000000000 [ 518.629140][ T30] [ 518.637604][ T30] INFO: task syz.4.364:7546 blocked for more than 148 seconds. [ 518.658881][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 518.670216][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.678911][ T30] task:syz.4.364 state:D stack:24216 pid:7546 tgid:7540 ppid:6894 flags:0x00004002 [ 518.708251][ T30] Call Trace: [ 518.717549][ T30] [ 518.729663][ T30] __schedule+0x1895/0x4b30 [ 518.734644][ T30] ? __pfx___schedule+0x10/0x10 [ 518.739544][ T30] ? __pfx_lock_release+0x10/0x10 [ 518.769924][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 518.780296][ T30] ? schedule+0x90/0x320 [ 518.790199][ T30] schedule+0x14b/0x320 [ 518.794421][ T30] schedule_preempt_disabled+0x13/0x30 [ 518.813147][ T30] __mutex_lock+0x6a7/0xd70 [ 518.817728][ T30] ? __mutex_lock+0x52a/0xd70 [ 518.838169][ T30] ? netdev_run_todo+0x7b2/0x1000 [ 518.845017][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 518.859866][ T30] ? __init_swait_queue_head+0xae/0x150 [ 518.865479][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 518.886247][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 518.893732][ T30] ? msleep+0xc6/0xe0 [ 518.897764][ T30] netdev_run_todo+0x7b2/0x1000 [ 518.917154][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 518.930047][ T30] ? netdev_state_change+0xa8/0x1a0 [ 518.935307][ T30] ? __pfx_netdev_state_change+0x10/0x10 [ 518.950254][ T30] ? tun_chr_close+0x105/0x1b0 [ 518.955069][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 518.977025][ T30] ? tun_chr_close+0x105/0x1b0 [ 518.989395][ T30] tun_chr_close+0x137/0x1b0 [ 518.994724][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 519.009906][ T30] __fput+0x241/0x880 [ 519.013958][ T30] task_work_run+0x251/0x310 [ 519.018582][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 519.039963][ T30] ? __pfx_task_work_run+0x10/0x10 [ 519.045144][ T30] ? do_exit+0xa2a/0x28e0 [ 519.049503][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.070849][ T30] ? kmem_cache_free+0x1a2/0x420 [ 519.075851][ T30] ? do_exit+0xa2a/0x28e0 [ 519.095435][ T30] do_exit+0xa2f/0x28e0 [ 519.099655][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.118301][ T30] ? __pfx_do_exit+0x10/0x10 [ 519.127706][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 519.141712][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.147405][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 519.169766][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 519.176329][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 519.190377][ T30] do_group_exit+0x207/0x2c0 [ 519.200240][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.205590][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.225342][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 519.240182][ T30] get_signal+0x16a3/0x1740 [ 519.244768][ T30] ? cap_safe_nice+0x1f/0x3a0 [ 519.249477][ T30] ? sched_setaffinity+0x280/0x4b0 [ 519.271386][ T30] ? __pfx_get_signal+0x10/0x10 [ 519.276317][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.290361][ T30] ? sched_setaffinity+0x3c2/0x4b0 [ 519.295562][ T30] arch_do_signal_or_restart+0x96/0x860 [ 519.317589][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 519.329845][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 519.336083][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 519.357671][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 519.369900][ T30] do_syscall_64+0x100/0x230 [ 519.374723][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.397673][ T30] RIP: 0033:0x7fb662b7dff9 [ 519.402865][ T30] RSP: 002b:00007fb66398a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000cb [ 519.429880][ T30] RAX: 0000000000000000 RBX: 00007fb662d36058 RCX: 00007fb662b7dff9 [ 519.437898][ T30] RDX: 00000000200002c0 RSI: 0000000000000008 RDI: 0000000000000000 [ 519.459967][ T30] RBP: 00007fb662bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 519.468078][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.499914][ T30] R13: 0000000000000000 R14: 00007fb662d36058 R15: 00007fffdc1e61c8 [ 519.508440][ T30] [ 519.519911][ T30] INFO: task syz.5.368:7562 blocked for more than 149 seconds. [ 519.527612][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 519.551832][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 519.570117][ T30] task:syz.5.368 state:D stack:24672 pid:7562 tgid:7561 ppid:6863 flags:0x00004006 [ 519.599941][ T30] Call Trace: [ 519.603251][ T30] [ 519.610354][ T30] __schedule+0x1895/0x4b30 [ 519.614933][ T30] ? __pfx___schedule+0x10/0x10 [ 519.630342][ T30] ? __pfx_lock_release+0x10/0x10 [ 519.635426][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 519.659918][ T30] ? schedule+0x90/0x320 [ 519.664311][ T30] schedule+0x14b/0x320 [ 519.668514][ T30] schedule_preempt_disabled+0x13/0x30 [ 519.688707][ T30] __mutex_lock+0x6a7/0xd70 [ 519.699848][ T30] ? __mutex_lock+0x52a/0xd70 [ 519.704747][ T30] ? netdev_run_todo+0x7b2/0x1000 [ 519.727207][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 519.739909][ T30] ? __init_swait_queue_head+0xae/0x150 [ 519.745518][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.761511][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.767188][ T30] ? msleep+0xc6/0xe0 [ 519.779883][ T30] netdev_run_todo+0x7b2/0x1000 [ 519.784790][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 519.817253][ T30] ? netdev_state_change+0xa8/0x1a0 [ 519.829914][ T30] ? __pfx_netdev_state_change+0x10/0x10 [ 519.835595][ T30] ? tun_chr_close+0x105/0x1b0 [ 519.851365][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.857048][ T30] ? tun_chr_close+0x105/0x1b0 [ 519.877194][ T30] tun_chr_close+0x137/0x1b0 [ 519.883428][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 519.888597][ T30] __fput+0x241/0x880 [ 519.908667][ T30] task_work_run+0x251/0x310 [ 519.913913][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 519.919247][ T30] ? __pfx_task_work_run+0x10/0x10 [ 519.939905][ T30] ? do_exit+0xa2a/0x28e0 [ 519.944314][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.960232][ T30] ? kmem_cache_free+0x1a2/0x420 [ 519.965243][ T30] ? do_exit+0xa2a/0x28e0 [ 519.969616][ T30] do_exit+0xa2f/0x28e0 [ 519.988675][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 520.001081][ T30] ? __pfx_do_exit+0x10/0x10 [ 520.005721][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 520.021479][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 520.027163][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 520.048867][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 520.059931][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 520.065101][ T30] do_group_exit+0x207/0x2c0 [ 520.069726][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 520.095166][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 520.111492][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 520.116773][ T30] get_signal+0x16a3/0x1740 [ 520.129895][ T30] ? cap_safe_nice+0x1f/0x3a0 [ 520.134705][ T30] ? sched_setaffinity+0x280/0x4b0 [ 520.151564][ T30] ? __pfx_get_signal+0x10/0x10 [ 520.156482][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 520.173639][ T30] ? sched_setaffinity+0x3c2/0x4b0 [ 520.178834][ T30] arch_do_signal_or_restart+0x96/0x860 [ 520.199858][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 520.208369][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 520.228925][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 520.235143][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 520.250237][ T30] do_syscall_64+0x100/0x230 [ 520.255010][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.273288][ T30] RIP: 0033:0x7f8e1a17dff9 [ 520.277746][ T30] RSP: 002b:00007f8e1afd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000cb [ 520.301990][ T30] RAX: 0000000000000000 RBX: 00007f8e1a335f80 RCX: 00007f8e1a17dff9 [ 520.323439][ T30] RDX: 00000000200002c0 RSI: 0000000000000008 RDI: 0000000000000000 [ 520.340889][ T30] RBP: 00007f8e1a1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 520.348892][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.374599][ T30] R13: 0000000000000000 R14: 00007f8e1a335f80 R15: 00007ffced7d4db8 [ 520.389920][ T30] [ 520.393055][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 520.418276][ T30] INFO: task syz-executor:7590 blocked for more than 150 seconds. [ 520.434569][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 520.450133][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 520.458826][ T30] task:syz-executor state:D stack:24128 pid:7590 tgid:7590 ppid:1 flags:0x00004006 [ 520.486583][ T30] Call Trace: [ 520.499925][ T30] [ 520.502987][ T30] __schedule+0x1895/0x4b30 [ 520.507625][ T30] ? __pfx___schedule+0x10/0x10 [ 520.527095][ T30] ? __pfx_lock_release+0x10/0x10 [ 520.539848][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 520.545459][ T30] ? schedule+0x90/0x320 [ 520.549745][ T30] schedule+0x14b/0x320 [ 520.569533][ T30] schedule_preempt_disabled+0x13/0x30 [ 520.575488][ T30] __mutex_lock+0x6a7/0xd70 [ 520.591895][ T30] ? __mutex_lock+0x52a/0xd70 [ 520.596620][ T30] ? register_nexthop_notifier+0x84/0x290 [ 520.609906][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 520.626749][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 520.639913][ T30] ? __asan_memset+0x23/0x50 [ 520.644560][ T30] register_nexthop_notifier+0x84/0x290 [ 520.660647][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 520.666854][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 520.688110][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 520.701608][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 520.707278][ T30] ? __asan_memset+0x23/0x50 [ 520.728489][ T30] ops_init+0x320/0x590 [ 520.733126][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 520.738552][ T30] setup_net+0x287/0x9e0 [ 520.759949][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 520.765735][ T30] ? __pfx_setup_net+0x10/0x10 [ 520.779879][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 520.785580][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 520.801486][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 520.807170][ T30] copy_net_ns+0x33f/0x570 [ 520.829731][ T30] create_new_namespaces+0x425/0x7b0 [ 520.835170][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 520.859961][ T30] ksys_unshare+0x57d/0xa70 [ 520.864554][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 520.869700][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 520.889741][ T30] ? do_syscall_64+0x100/0x230 [ 520.899839][ T30] __x64_sys_unshare+0x38/0x40 [ 520.904642][ T30] do_syscall_64+0xf3/0x230 [ 520.909470][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.936234][ T30] RIP: 0033:0x7f754157f7f7 [ 520.949956][ T30] RSP: 002b:00007ffdd5c0b8d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 520.958425][ T30] RAX: ffffffffffffffda RBX: 00007f7541735f40 RCX: 00007f754157f7f7 [ 520.981556][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 520.989666][ T30] RBP: 00007f7541736a38 R08: 0000000000000000 R09: 0000000000000000 [ 521.012584][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 521.031716][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 521.039763][ T30] [ 521.057260][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 521.073501][ T30] INFO: task syz-executor:7594 blocked for more than 150 seconds. [ 521.089916][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 521.097568][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 521.119902][ T30] task:syz-executor state:D stack:24128 pid:7594 tgid:7594 ppid:1 flags:0x00004006 [ 521.148793][ T30] Call Trace: [ 521.159445][ T30] [ 521.162774][ T30] __schedule+0x1895/0x4b30 [ 521.167354][ T30] ? __pfx___schedule+0x10/0x10 [ 521.181389][ T30] ? __pfx_lock_release+0x10/0x10 [ 521.186471][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 521.204983][ T30] ? schedule+0x90/0x320 [ 521.209287][ T30] schedule+0x14b/0x320 [ 521.220457][ T30] schedule_preempt_disabled+0x13/0x30 [ 521.225978][ T30] __mutex_lock+0x6a7/0xd70 [ 521.241336][ T30] ? __mutex_lock+0x52a/0xd70 [ 521.246069][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 521.269404][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 521.279875][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.285593][ T30] ? read_word_at_a_time+0xe/0x20 [ 521.300216][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.305895][ T30] ? sized_strscpy+0x8d/0x220 [ 521.325492][ T30] ip_tunnel_init_net+0x20e/0x720 [ 521.339858][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 521.345485][ T30] ? ops_init+0x75/0x590 [ 521.361688][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.367656][ T30] ops_init+0x320/0x590 [ 521.380358][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 521.385844][ T30] setup_net+0x287/0x9e0 [ 521.408708][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 521.420036][ T30] ? __pfx_setup_net+0x10/0x10 [ 521.425134][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.446481][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.460609][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.466310][ T30] copy_net_ns+0x33f/0x570 [ 521.490039][ T30] create_new_namespaces+0x425/0x7b0 [ 521.495432][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 521.509860][ T30] ksys_unshare+0x57d/0xa70 [ 521.514434][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 521.519503][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 521.546336][ T30] ? do_syscall_64+0x100/0x230 [ 521.553577][ T30] __x64_sys_unshare+0x38/0x40 [ 521.558402][ T30] do_syscall_64+0xf3/0x230 [ 521.579890][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.585959][ T30] RIP: 0033:0x7f38e197f7f7 [ 521.599868][ T30] RSP: 002b:00007ffcd422dc48 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 521.608363][ T30] RAX: ffffffffffffffda RBX: 00007f38e1b35f40 RCX: 00007f38e197f7f7 [ 521.639508][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 521.652847][ T30] RBP: 00007f38e1b36a38 R08: 0000000000000000 R09: 0000000000000000 [ 521.670762][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 521.678800][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 521.705965][ T30] [ 521.709043][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 521.729055][ T30] INFO: task syz-executor:7608 blocked for more than 151 seconds. [ 521.744264][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 521.758687][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 521.787753][ T30] task:syz-executor state:D stack:24128 pid:7608 tgid:7608 ppid:1 flags:0x00004006 [ 521.811693][ T30] Call Trace: [ 521.815007][ T30] [ 521.817977][ T30] __schedule+0x1895/0x4b30 [ 521.829923][ T30] ? __pfx___schedule+0x10/0x10 [ 521.834833][ T30] ? __pfx_lock_release+0x10/0x10 [ 521.849924][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 521.855439][ T30] ? schedule+0x90/0x320 [ 521.880821][ T30] schedule+0x14b/0x320 [ 521.885039][ T30] schedule_preempt_disabled+0x13/0x30 [ 521.909960][ T30] __mutex_lock+0x6a7/0xd70 [ 521.914545][ T30] ? __mutex_lock+0x52a/0xd70 [ 521.919280][ T30] ? register_nexthop_notifier+0x84/0x290 [ 521.939964][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 521.947175][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.960175][ T30] ? __asan_memset+0x23/0x50 [ 521.970850][ T30] register_nexthop_notifier+0x84/0x290 [ 521.976442][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 521.997131][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 522.009936][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 522.016149][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.030973][ T30] ? __asan_memset+0x23/0x50 [ 522.035624][ T30] ops_init+0x320/0x590 [ 522.057474][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 522.064276][ T30] setup_net+0x287/0x9e0 [ 522.068568][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 522.088676][ T30] ? __pfx_setup_net+0x10/0x10 [ 522.099273][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.110408][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.120174][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.125851][ T30] copy_net_ns+0x33f/0x570 [ 522.141415][ T30] create_new_namespaces+0x425/0x7b0 [ 522.146767][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 522.169922][ T30] ksys_unshare+0x57d/0xa70 [ 522.174565][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 522.179621][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 522.205271][ T30] ? do_syscall_64+0x100/0x230 [ 522.219304][ T30] __x64_sys_unshare+0x38/0x40 [ 522.225744][ T30] do_syscall_64+0xf3/0x230 [ 522.239919][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.245886][ T30] RIP: 0033:0x7fb4d2b7f7f7 [ 522.259850][ T30] RSP: 002b:00007ffc0189f0d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 522.268336][ T30] RAX: ffffffffffffffda RBX: 00007fb4d2d35f40 RCX: 00007fb4d2b7f7f7 [ 522.294405][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 522.309848][ T30] RBP: 00007fb4d2d36a38 R08: 0000000000000000 R09: 0000000000000000 [ 522.317870][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 522.339393][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 522.356226][ T30] [ 522.359292][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 522.377883][ T30] [ 522.377883][ T30] Showing all locks held in the system: [ 522.394931][ T30] 3 locks held by kworker/1:0/25: [ 522.410138][ T30] 1 lock held by khungtaskd/30: [ 522.415552][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 522.444816][ T30] 3 locks held by kworker/1:1/47: [ 522.459981][ T30] 5 locks held by kworker/u9:0/55: [ 522.465140][ T30] #0: ffff888035c4e948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 522.489920][ T30] #1: ffffc9000120fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 522.519992][ T30] #2: ffff888030b64d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 522.547527][ T30] #3: ffff888030b64078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 522.569890][ T30] #4: ffffffff8fe3e2e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 522.580574][ T30] 4 locks held by kworker/u8:6/1830: [ 522.585886][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 522.619975][ T30] #1: ffffc90004acfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 522.639855][ T30] #2: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 522.649475][ T30] #3: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 522.682627][ T30] 2 locks held by dhcpcd/4890: [ 522.687457][ T30] #0: ffffffff8fcb6548 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x661/0x8e0 [ 522.709922][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 522.719550][ T30] 2 locks held by getty/4974: [ 522.740121][ T30] #0: ffff88803248a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 522.761579][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 522.788068][ T30] 4 locks held by kworker/u9:2/5227: [ 522.798739][ T30] #0: ffff88808e12d948 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 522.819841][ T30] #1: ffffc90003bf7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 522.849138][ T30] #2: ffff88808e370078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 522.867433][ T30] #3: ffffffff8fe3e2e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 522.888307][ T30] 6 locks held by kworker/u9:3/5234: [ 522.899758][ T30] #0: ffff888047b38148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 522.929951][ T30] #1: ffffc90004067d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 522.958565][ T30] #2: ffff88805cc90d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 522.979311][ T30] #3: ffff88805cc90078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 522.998199][ T30] #4: ffffffff8fe3e2e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 523.015815][ T30] #5: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 523.040099][ T30] 5 locks held by kworker/u9:11/5247: [ 523.045503][ T30] #0: ffff888047d4d948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 523.074015][ T30] #1: ffffc9000481fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 523.099971][ T30] #2: ffff888059f2cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 523.119909][ T30] #3: ffff888059f2c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 523.141918][ T30] #4: ffffffff8fe3e2e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 523.165260][ T30] 3 locks held by kworker/1:6/5290: [ 523.175421][ T30] 6 locks held by kworker/1:7/5326: [ 523.189881][ T30] 3 locks held by kworker/1:9/5354: [ 523.200293][ T30] 3 locks held by kworker/0:7/5376: [ 523.205513][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 523.231472][ T30] #1: ffffc900034afd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 523.256927][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 523.277827][ T30] 3 locks held by kworker/u8:9/5437: [ 523.291639][ T30] #0: ffff88802dcd9148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 523.318118][ T30] #1: ffffc90003e77d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 523.339860][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 523.349376][ T30] 3 locks held by kworker/u8:11/6496: [ 523.369584][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 523.398977][ T30] #1: ffffc90004cb7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 523.419901][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 523.429049][ T30] 1 lock held by syz-executor/7403: [ 523.448958][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 523.464168][ T30] 1 lock held by syz-executor/7433: [ 523.469389][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 523.490022][ T30] 1 lock held by syz.4.364/7546: [ 523.500729][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x7b2/0x1000 [ 523.521752][ T30] 1 lock held by syz.5.368/7562: [ 523.526741][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x7b2/0x1000 [ 523.551643][ T30] 2 locks held by syz-executor/7590: [ 523.556965][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 523.579870][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 523.600120][ T30] 2 locks held by syz-executor/7594: [ 523.605783][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 523.631957][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 523.651405][ T30] 2 locks held by syz-executor/7596: [ 523.656738][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 523.680260][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 523.706173][ T30] 2 locks held by syz-executor/7608: [ 523.720421][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 523.741576][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290