last executing test programs: 25m0.139812221s ago: executing program 32 (id=64): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000003008", @ANYRES64=0x0, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) close(r0) 24m20.732793953s ago: executing program 33 (id=202): setgroups(0x0, 0x0) setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0xffffff32) 23m43.855324028s ago: executing program 34 (id=340): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8004}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x500) syz_genetlink_get_family_id$fou(&(0x7f0000000680), r1) 21m28.775639119s ago: executing program 35 (id=642): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000000900), 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x200440c5}, 0x8010) 19m4.44145037s ago: executing program 36 (id=1085): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000880)={{0x80e3000, 0xc000, 0x8, 0xd, 0x3, 0x0, 0x6, 0x81, 0x0, 0x2e, 0x8}, {0x9000, 0x2, 0xb, 0x2, 0x3e, 0x3, 0x7f, 0x7, 0x1, 0x5, 0x3}, {0xd000, 0x4000, 0xe, 0x3, 0x1, 0x0, 0x7, 0x60, 0x0, 0xa7, 0x3}, {0x8000000, 0xdddd0000, 0xe, 0x6, 0x4, 0x2, 0xfd, 0x1, 0x9, 0x9, 0xf}, {0x60000, 0x70000, 0x4, 0x2, 0x15, 0x6, 0xa8, 0x7c, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0xdddd1000, 0x8, 0x49, 0xb1, 0x8, 0x7, 0x9, 0x9, 0x13, 0xab, 0x10}, {0xeeee8000, 0x1, 0x4, 0x5, 0x0, 0x5, 0x4, 0x3, 0x3, 0x84, 0x3, 0x79}, {0x41000, 0xeeef0000, 0xc, 0x5, 0xf, 0x7, 0x4, 0xe2, 0x2, 0x8, 0xf0, 0x7}, {0x0, 0x802f}, {0x3000, 0xfffd}, 0xc0000025, 0x0, 0x0, 0x2024, 0x4, 0x0, 0x50000, [0x7, 0x9, 0x60, 0x4132]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000019a000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x61, 0x0, 0x0) 18m23.763071731s ago: executing program 37 (id=1295): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 15m40.254146054s ago: executing program 38 (id=2366): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840c, &(0x7f0000000440)=ANY=[], 0x1, 0x2f5, &(0x7f0000000040)="$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") openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x101880, 0x0) eventfd2(0x7, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f5, 0x0) 11m59.29203144s ago: executing program 6 (id=2795): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', &(0x7f00000007c0)='//+9\xfdAQBv=K9e\xc7;M\x13\x9a-\r\xffS)@\xd1\xde[8?\xc7\xc8\x12\xd0;\xeaA\xee0l\xf9`c\xb9E\xcfv\x9a\x9e\x88\xa9F\xaf\xab\x98\xdcK\x1e\xb1\xdb\xd0\xf2):\xf1\xbdW\xad<\x17\xb7\xf1f]\xd4l?\xa5\xc2 nU\xab\xdc\xd0\xd6\xf6\xb9\x00\x00\x00\x00\x982\x17I\x04*n\xe6xM\xe36\xc4\b\x97\xb2$\xa9\x9a\x19\x05\xf6\x84Mz\xa6\x12n\xb3\xd1%\xa1%D\r^tT\x93\x8b\xc7*\xbe\x1b\x1b\x91\x82\x00\x00\x00\x00\x00\x00\xebo\xf5h\xef\xa1\xdd\xf3\x995\xa2Jl\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcdY\x96\xae\xc3Y\xea2\x92s\xe3Bb\x94\x15V\xb8F\x19=\xaf+\xa9<\xfeA\x91t\xd8\xa2\x8f4\xc7\xb9\x9d\xd6\xc6\x05\x00\x99\xb2\x8e;\x02\xed\xfcuW\xe1\x06\xf3 \x8d\xecy\t\x7f@\x1c!\xb1\x01\x00@Q:G<\xd3\xd7\xa8\xf4\x03m\xb6\xac\xe2\xa6c\x05\xfa\xdb`\x91L$\x8b2\x16\xf0\x8a=\x83\x85\xa0\xed\xcaX\xb4\xb0\xe8\xbf\x95n\xf8\xed>\x82Y\xab\x9b-|\xc7\x00\x00\x00\x00\x00\x00\x00\x00P\xf3\xaa\xa72\xf6\xf0\xe7M)\t\xc8\x82g\xaaR\x0e\x94\xb8b\x19 \f\xf81\xd5\x84\xd4\x17\x1c\x9e\x1a\x99\xf3M\xc0\xc6 \xad&\x03\xa1\xed\xa9\xd7\xe9o;\x1b\xaf\b\xdeU\xed\x04!\x813\xdeR\x92u\xcfi\x907$\xb6P\xf9\x90\xebK0\xce\xb2\xda:\xe3u=\xe8gw\xc6\xf9Y$\x90/3#\xe2\x99\x9d\f\xb0\x1b\x9c\xb8\x89H YE\xb5\xb7\xb4[3J\xf1g#\xab\xfe\'Q\xf6\x83\xa6\xab\xf9\xfb\xd8\x04us\xc7\xf8_\x8f\xd9,\x00\x8d\xcce>^\x98\x8f\xb4\xe6I\x1f\xc1\xfd-\xa6\x93j>\x1f\x0f\x01\x19\xcb\xdc?\xa3r\xa0\xcdv\x12\xb8\x8bB<\x9c\x86\xbe\xdcFN\x19\xa5\f!w\x18x\xad\xdfRQ\x1d\xc1\'\xd4\x16{\xd2\xadDR\xa6Y\xc8\xfe8\xdf\x88\x9c\x8f\x90\xff6{\xc2E;isd\xc9\xfb\xe6\v\xd7\xd6\xff\x115\xbb\x9c\x14\x83V\xe4\x9fd\xd7\x1b\x1a\n\xd8\xc1\xe5\x86\xc6\xfc\xba\xb3\xac\xfb\xb6\xcd\x1a\xbd\xcf\xbaA\xf1\xfe\x82\x88v\xd0\xb1#\x1d\xfed\xb3\xac\xd9\x85\xf6a\xffU&\x15\xb7\xc5\xc4\xe6\xc0\x85\xca,F\xa2\xb3\xa4\xfc\x85\xf0\xca\x8f\xb5\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x2004a002) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r3, &(0x7f00000017c0)=""/4086, 0xff6) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 11m58.524170356s ago: executing program 6 (id=2797): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000bdc000/0x2000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) close(r0) 11m55.971316806s ago: executing program 6 (id=2801): r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r6}) 11m54.859928208s ago: executing program 6 (id=2802): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setresgid(0xee00, 0xee01, 0x0) setuid(0xee00) r3 = msgget$private(0x0, 0x5fa) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03"], 0x401, 0x0) msgrcv(r3, 0x0, 0x0, 0x1, 0x1800) 11m53.735639271s ago: executing program 6 (id=2806): io_uring_enter(0xffffffffffffffff, 0x1ae4, 0x1c7b, 0x2, &(0x7f0000000240)={[0x4]}, 0x8) read$midi(0xffffffffffffffff, 0x0, 0x3b) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 11m43.007559286s ago: executing program 4 (id=2818): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x2, 0x0) write(r4, 0x0, 0x0) 11m41.766133134s ago: executing program 4 (id=2820): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket(0x11, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000fc0)='net/packet\x00') preadv(r0, &(0x7f00000000c0), 0x0, 0x42, 0x3) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) remap_file_pages(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x3000009, 0x0, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x80000001, @private1, 0x3}], 0x1c) shutdown(r2, 0x2) 11m40.331764772s ago: executing program 6 (id=2822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11m26.412001966s ago: executing program 39 (id=2820): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket(0x11, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000fc0)='net/packet\x00') preadv(r0, &(0x7f00000000c0), 0x0, 0x42, 0x3) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) remap_file_pages(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x3000009, 0x0, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x80000001, @private1, 0x3}], 0x1c) shutdown(r2, 0x2) 11m25.085880128s ago: executing program 40 (id=2822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9m12.479635046s ago: executing program 0 (id=2935): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000500)) 9m3.990311695s ago: executing program 0 (id=2941): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 9m1.33544873s ago: executing program 0 (id=2942): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="1c21b470f8e05767e587c79384ea8440fa488379f71e37fc32ec473406699bab265df888d6b4e5", 0x27}], 0x1}}], 0x1, 0x20040050) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m57.172808476s ago: executing program 0 (id=2952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x14}, {0x0, 0x9, 0x7, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xea9}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d80)=@newsa={0x138, 0x10, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x1, 0x714, 0x4e23, 0x405, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xfffffffffffffffb, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 8m55.269801665s ago: executing program 0 (id=2955): r0 = semget$private(0x0, 0x6, 0x420) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) semctl$SEM_STAT(r0, 0x3, 0x12, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(0x0, 0x80140, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x5) socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r5, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0) 8m52.059562646s ago: executing program 0 (id=2956): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="588d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 8m35.911890905s ago: executing program 41 (id=2956): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="588d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 6m59.06574572s ago: executing program 9 (id=3058): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, 0x0}, 0x20000040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x6, 0x7, 0x3f8, 0x1, 0x32}, 0x9c) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285628, &(0x7f0000000300)={0x3, @win={{0x6, 0x4, 0x9, 0x8e8}, 0x2, 0x401a, 0x0, 0x3317, 0x0, 0x14}}) sendmmsg$inet(r0, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c9547a", 0x3}], 0x1}}], 0x1, 0x40480c0) close_range(r0, 0xffffffffffffffff, 0x0) 6m57.379514359s ago: executing program 9 (id=3061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) read$FUSE(r4, &(0x7f0000000380)={0x2020}, 0xfffffdf1) open_tree(0xffffffffffffff9c, 0x0, 0x0) 6m52.838402563s ago: executing program 9 (id=3065): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@sb={'sb', 0x3d, 0x7c7f}}, {@dax_always}, {@errors_continue}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000940)="$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") futex(0x0, 0xd, 0xfffffffe, 0x0, 0x0, 0x6fd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) syz_ublk_setup_io_uring(0xd7, &(0x7f0000000280)={0x0, 0x4778, 0x4000, 0x1, 0x49}, 0x0, &(0x7f0000000340), &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x200, 0x1) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x123) 6m45.044562519s ago: executing program 9 (id=3072): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, 0x0, 0x0, 0x1000000300) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) 6m42.464825681s ago: executing program 9 (id=3074): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x20400, &(0x7f0000000100)=ANY=[@ANYRES16], 0x0, 0x618, &(0x7f0000001600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) unshare(0x26020480) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) 6m38.44706658s ago: executing program 9 (id=3077): ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x5411, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000180), &(0x7f00000000c0), 0x75, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r1}, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x410}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) 6m23.166068659s ago: executing program 42 (id=3077): ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x5411, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000180), &(0x7f00000000c0), 0x75, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r1}, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x410}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) 6m11.680684069s ago: executing program 1 (id=3095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6m7.543578334s ago: executing program 1 (id=3097): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000280)={[{@threads_num={'threads', 0x3d, 0x5}}]}, 0x1, 0x19c, &(0x7f0000000000)="$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") r0 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) r2 = landlock_create_ruleset(&(0x7f0000019300)={0x202, 0x5, 0x1, 0x2280, 0x3}, 0x30, 0x3) landlock_restrict_self(r2, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xc024, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 6m3.125985681s ago: executing program 1 (id=3100): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) memfd_create(0x0, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1ff}, 0x1c) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000001040)) socket$inet_udp(0x2, 0x2, 0x0) 5m59.912344552s ago: executing program 1 (id=3101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, &(0x7f0000000240)) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x3, 0x13, 0xffff9509, 0x5, 0x0, 0x9, 0x0, 0x7fffffff, 0x2}, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(0x0, 0x0, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dca30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec907000000ba5ae65e31f00e641832d29ed658b91f349b", 0xe5, 0xfffffffffffffffe) 5m58.436863102s ago: executing program 1 (id=3102): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x6, 0x8, 0x8b8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r1, 0xe5}, 0x0, &(0x7f0000000780)="b0f5ec01e02085647da6d8b2b2a69c0000000000000001aa0eedaa25e8466819395b8df98f3c90a03be929d2802703139af648e4340010000000000000e5eae2a670b2e4093801013de93f4ded4ee5fba0a399dc0261419261e3ed3873f96a1f226ee2f5565445addb60b9ebe4fbae3ba1766c6e60a1ab912f33b89ca00e15a3dfd74a943f90d73cb6177178aabb3caa0e361fc5c00207000000324f18ef93334460d62746776ad1663023ebca4b1406d7c5075f3f8c22e15bdf58d71739d0edae95b429343d972ed515dc4e78ecabdce2a9d0ab4af97b3f86b2166b6b2ae9df90c6d0ead9", 0x0) 5m51.692347299s ago: executing program 1 (id=3105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x110) syz_open_dev$vim2m(&(0x7f0000001880), 0x2, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[], 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00001b0000)={0x0, 0x0, &(0x7f00001b0040)={&(0x7f00001b0080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) 5m35.184178375s ago: executing program 43 (id=3105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x110) syz_open_dev$vim2m(&(0x7f0000001880), 0x2, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[], 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00001b0000)={0x0, 0x0, &(0x7f00001b0040)={&(0x7f00001b0080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) 3m34.980117498s ago: executing program 2 (id=3188): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r1, 0x400c0930, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2800005, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02"], 0x15) pwrite64(r1, &(0x7f0000001000), 0x1000, 0x0) 3m30.799285115s ago: executing program 2 (id=3199): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$inet_tcp(0x2, 0x1, 0x0) add_key(&(0x7f0000002100)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") r1 = open(0x0, 0x0, 0xe898d2275f586838) preadv2(r1, 0x0, 0x0, 0x8000, 0x9, 0x1b) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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") fstat(0xffffffffffffffff, &(0x7f0000000700)) pipe(&(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) 3m25.163016431s ago: executing program 2 (id=3196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r3, 0x1912, 0x71, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000100)={0x2, r3, 0x4, {0x8, 0x5}, 0x6}, 0x1) 3m23.803637654s ago: executing program 2 (id=3197): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000500)) 3m19.319038165s ago: executing program 2 (id=3207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r5, r4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 3m14.900601283s ago: executing program 2 (id=3203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x801}}]}, 0x40}}, 0x4894) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x8001, 0x5, 0xfffffdff, 0x4006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m59.207135581s ago: executing program 44 (id=3203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x801}}]}, 0x40}}, 0x4894) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x8001, 0x5, 0xfffffdff, 0x4006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m49.283312858s ago: executing program 3 (id=3220): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400223a6f0004", 0x24) 2m48.298154445s ago: executing program 3 (id=3222): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, 0x0, 0x0, 0x1000000300) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) 2m45.125121014s ago: executing program 3 (id=3225): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000700), 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='0\n', 0x2) close(r1) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) 2m44.613857978s ago: executing program 3 (id=3227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r1, 0x4b4d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$loop(0x0, 0x4, 0x40000) ioctl$BLKBSZSET(r3, 0x40081271, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/161}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x5}, 0x7) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) accept4$alg(r6, 0x0, 0x0, 0x80800) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@block_validity}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@discard}, {@prjquota}]}, 0x1, 0x4a0, &(0x7f0000000b80)="$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") 2m43.537974218s ago: executing program 3 (id=3234): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00'}, 0x94) socket(0xa, 0x3, 0x3a) readv(0xffffffffffffffff, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x1800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x10, 0x803, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mkdir(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 2m39.285827669s ago: executing program 3 (id=3230): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_init() syz_emit_vhci(0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) recvmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2m23.839808075s ago: executing program 45 (id=3230): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$eJzs2s9rHGUYB/Bn0tbGlHQj/qIF8UUP6mVocvbQIC2IAUW7QhWkUzPRZcfdsLMsrIjJqV79EzyLR2+C9OglF/8CD14klxx7EEe6u5pG4iGI3ZJ+Ppd94N0vzzPMy8t7mP3Xv/6su1XnW8UwFrIsFq7GbtzLYiUW4i+78dorN3964b2bH7y1vrFx7d2Urq/fWF1LKV188ccPv/jupbvDC+9/f/GH87G38tH+wdqve8/tXdr/48annTp16tTrD1ORbvf7w+J2VabNTt3NU3qnKou6TJ1eXQ6OrG9V/e3tcSp6m8tL24OyrlPRG6duOU7DfhoOxqn4pOj0Up7naXkp+C/a395rmjhozt2Kpmme/CYu3I3lX6IV2VMpe/pq9uyt7Pnd7NJB07TmPSr/C+//8fbAob4YUX01ao/a09/p+vpWdKKKMq5EK36P+9tkZlpff3Pj2pU0sRJ3qp1ZfmfUPnM0vxqtWDk+vzrNp7hT/fbEtO3OqH0+liLORczya9GKZ47Prx3mJ/3PTPovxqsvP9A/j1b8/HH0o4rNuJ89zH+5mtIbb2+ko/NfnvwPAOC0ydPfjr2/5fm/rU/zJ7gf/uN+dTYun53vsxNRjz/vFlVVDhRVOVh8NMY4DUVENtlg2WyjzXsexQmLuR5LPCSHL33ekwAAAAAAAAAAAHASD+Nzwnk/IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj7MwAA//+3Ycw+") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_init() syz_emit_vhci(0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) recvmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 51.761643735s ago: executing program 5 (id=3288): socketpair(0x1e, 0x3, 0x7fffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000180)=0x1400000, &(0x7f0000000280)=0x4) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x34}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) munmap(&(0x7f00003fe000/0x1000)=nil, 0x1000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 50.542082302s ago: executing program 4 (id=3239): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000280)={[{@threads_num={'threads', 0x3d, 0x5}}]}, 0x1, 0x19c, &(0x7f0000000000)="$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") r0 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) r2 = landlock_create_ruleset(&(0x7f0000019300)={0x202, 0x5, 0x1, 0x2280, 0x3}, 0x30, 0x3) landlock_restrict_self(r2, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xc024, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 50.009833977s ago: executing program 4 (id=3283): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x8000000003c) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) 48.595774464s ago: executing program 4 (id=3284): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001320038") 44.169114842s ago: executing program 5 (id=3286): mkdirat(0xffffffffffffff9c, 0x0, 0xcf) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) utime(&(0x7f0000000000)='./file0\x00', 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000006c0)="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", 0x135) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x10001) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) 40.256084096s ago: executing program 5 (id=3289): getpid() socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x24, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x1, 0x5}, {0xe, 0xd}}}, 0x24}}, 0x8000) mount(0x0, &(0x7f0000000100)='./tracing\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x18, 0x2000278, 0x0}) 38.708029569s ago: executing program 5 (id=3290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket(0xa, 0x3, 0x87) sendto(r3, 0x0, 0x0, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x2) truncate(&(0x7f0000000200)='./file0\x00', 0x3) socket$nl_route(0x10, 0x3, 0x0) rt_tgsigqueueinfo(r0, r0, 0x41, &(0x7f0000000680)={0xf, 0x5, 0x2024}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xcc}]}, 0x0, 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d4}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000200)="76657468303a3000000000000000000002") syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00898fa629d0d7c08e8145e19228a550d44aa0ca182c2b72c1e6e7c70ccc7fed45a250472b4fcee025f1ecbbbd15e993af320fb24412139623cd6e828317413152fa483de4d2e1e44495db085e255243cc4448fdbad1947145b8b5303070fc1a56253bf5d5a068f699307a0b40c44652f65acf747b925dc88e54db7f9f77b3cda87a6a6219f7adb2b24b5a65daccb6c976bf3a578f48ec695fc57ff7b3b9c62ff20aada72b3d63c8af096209c6b4ab70016cb5911b06c1ce058f4725b4254eb5bcbe2313d6c03db545917e381fcd204ba7f05100a00248fc54e2a4891df0eaff80fc73a971dce8525cdf15"], 0x1, 0x17e, &(0x7f0000000240)="$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") 34.770213054s ago: executing program 4 (id=3292): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0xf44, 0x2) socket(0xa, 0x3, 0x697) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r3}) 28.037039841s ago: executing program 5 (id=3295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r3, &(0x7f0000000200)={0x11, 0x1, 0x1, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20084841}, 0x810) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) 27.864875149s ago: executing program 7 (id=3296): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') socket$l2tp6(0xa, 0x2, 0x73) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x100000000000002a) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7fff}, [@generic={0x4, 0x1, 0xf, 0xf7, 0x9}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xe}, @jmp={0x5, 0x1, 0x3, 0xa, 0x8, 0xfffffffffffffff0}, @exit, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @func, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='syzkaller\x00', 0xff, 0xb7, &(0x7f0000000440)=""/183, 0x41100, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x0, 0x4, 0xf6}, 0x10, 0x2492a, r0, 0x8, &(0x7f0000000580)=[r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f00000005c0)=[{0x1, 0x3, 0x5, 0x6}, {0x4, 0x1, 0x9, 0x6}, {0x4, 0x5, 0x10, 0x4}, {0x3, 0x5, 0xd, 0x6}, {0x1, 0x2, 0xb, 0x4}, {0x4, 0x2, 0xb, 0x8}, {0x1, 0x4, 0x4, 0x4}, {0x0, 0x1, 0xa, 0x16}], 0x10, 0xfffffffb}, 0x94) ioctl$FS_IOC_GETFSLABEL(r3, 0x8946, &(0x7f0000000200)) 26.556588211s ago: executing program 5 (id=3297): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$dsp(r5, &(0x7f0000000200)="dce4", 0x2) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x4000000) 21.302212367s ago: executing program 7 (id=3299): socket(0x10, 0x3, 0x0) socket(0x10, 0x802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x110000) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0x8, 0x0, 0x3d}, 0x10) close(r3) 20.17741001s ago: executing program 7 (id=3300): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001320038") 18.471459581s ago: executing program 46 (id=3292): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0xf44, 0x2) socket(0xa, 0x3, 0x697) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r3}) 15.202647034s ago: executing program 7 (id=3302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffc) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000100001"], 0x1c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) 15.202497634s ago: executing program 8 (id=3303): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='0fc5:1227:', 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x2c, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) 14.504327437s ago: executing program 8 (id=3304): memfd_create(&(0x7f00000003c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xa5!\xd3\xcf\xfc\xce8\xea\x8dIB\xae\xae\xe4\xe1\xca}\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd2hV\xf7\a2\x8b\xbcXp\x94\x88\xc6\xed\xbbL\x0e\xa2\xff\x9fc&S\xe4Y\xb5\x83)C\xe5=\xed\x9e\xa3\xa3: \x94fln\x95\xach\x8c\x13\xff0\x06\x9b\x01)j\xd8J0\xd5s\xa3\x90\x90\xc5e\xfb\xa6\x17\xa2T\x82\x8b\xa7b\x1d&\x1b\xf1\x9b\x01b\xce\xebL`N`P\x13:\x8fy\xc3KL\x16Ht\x95\xa4\xb2l\"\xd6\xe8\xe7\x9f/\xa6\x98\x91\xfe\xe4\x12\xbf\xa5\xdb\xcf\xbc\x1cst\x88\v)\xa4V\x18]\xf4G:\n-\x86\x12z\x93u\x1b\xfe\x14\x84\x82#\xe4\xc7*\x83\x02\xad\v\xe6v\xbd\xa9\xc6\x928\xa6\x8b\x89\x91\xfc\xbc\xaa\xc4)\x96\xee\xa69)\xe8R/\xb14}\xb3J\xb4\x86\x90~\x91\xf4g\x8a8\xa4\xb1d\x8d\x97\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x6) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400223a6f0004", 0x24) 12.97103447s ago: executing program 8 (id=3305): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x12) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000140)='./file0/file0\x00', 0x66) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r6, 0x1, 0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x78}}}, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.176026134s ago: executing program 47 (id=3297): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$dsp(r5, &(0x7f0000000200)="dce4", 0x2) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x4000000) 11.157746744s ago: executing program 8 (id=3307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}}, 0x0) 7.867213869s ago: executing program 7 (id=3308): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x141, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 5.471368502s ago: executing program 8 (id=3309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) 1.733309ms ago: executing program 7 (id=3310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40014}, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r3, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x4000) 0s ago: executing program 8 (id=3311): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(&(0x7f0000000900), 0x1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): to HW filter on device batadv0 [ 1028.610300][T17579] veth0_vlan: entered promiscuous mode [ 1028.688025][T17579] veth1_vlan: entered promiscuous mode [ 1028.885616][T17579] veth0_macvtap: entered promiscuous mode [ 1028.930368][T17579] veth1_macvtap: entered promiscuous mode [ 1030.172389][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.246133][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.274767][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.295983][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.341419][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.361428][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.393567][T17579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1030.435213][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.466053][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.488945][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.515670][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.526458][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.537796][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.564346][T17579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.614583][T17579] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.646067][T17579] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.654857][T17579] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.686089][T17579] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.142118][T10094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.216219][ C1] net_ratelimit: 53 callbacks suppressed [ 1031.223981][T10094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.280999][T17733] loop1: detected capacity change from 0 to 32768 [ 1031.344984][T17733] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1031.363918][T17741] loop0: detected capacity change from 0 to 512 [ 1031.372644][T17741] ext4: Unknown parameter 'smackfshat' [ 1031.406660][T10097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.414571][T10097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.444648][T17729] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1031.477721][T17733] XFS (loop1): Ending clean mount [ 1031.561996][T17733] XFS (loop1): Quotacheck needed: Please wait. [ 1031.775367][T17733] XFS (loop1): Quotacheck: Done. [ 1033.882168][T17479] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1035.447365][ C0] vkms_vblank_simulate: vblank timer overrun [ 1035.812809][T17797] loop3: detected capacity change from 0 to 128 [ 1035.857138][T17797] FAT-fs (loop3): bogus number of reserved sectors [ 1035.884617][T17797] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1035.924912][T17797] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1036.030566][ T28] audit: type=1800 audit(1790130038.026:299): pid=17803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2908" name="id" dev="configfs" ino=48604 res=0 errno=0 [ 1036.247944][ C0] vkms_vblank_simulate: vblank timer overrun [ 1036.255549][ C1] net_ratelimit: 32 callbacks suppressed [ 1036.302986][ T28] audit: type=1326 audit(1790130038.296:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.3.2912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2122b9e159 code=0x0 [ 1041.375256][ C0] net_ratelimit: 22 callbacks suppressed [ 1046.547402][ C1] net_ratelimit: 33 callbacks suppressed [ 1051.511434][T17896] Cannot find del_set index 0 as target [ 1051.593339][ C1] net_ratelimit: 24 callbacks suppressed [ 1054.823213][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.850226][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.807129][T17919] null_blk: disk rnullb0 created [ 1057.054419][ C1] net_ratelimit: 39 callbacks suppressed [ 1059.868323][T17983] loop3: detected capacity change from 0 to 32768 [ 1059.915757][T17983] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1060.071243][T17983] XFS (loop3): Ending clean mount [ 1060.096643][T17983] XFS (loop3): Quotacheck needed: Please wait. [ 1060.238279][T17983] XFS (loop3): Quotacheck: Done. [ 1062.104118][ C0] net_ratelimit: 29 callbacks suppressed [ 1062.321392][T17579] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1064.983434][T18046] netlink: 'syz.0.2941': attribute type 1 has an invalid length. [ 1067.136804][ C0] net_ratelimit: 33 callbacks suppressed [ 1069.483403][T18079] loop1: detected capacity change from 0 to 256 [ 1070.471255][T18081] xt_policy: output policy not valid in PREROUTING and INPUT [ 1071.454343][T18079] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 1072.333524][ C1] net_ratelimit: 32 callbacks suppressed [ 1076.332887][T18157] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2957'. [ 1076.682833][T18165] loop1: detected capacity change from 0 to 512 [ 1076.725303][T18165] ext4: Unknown parameter 'fowner' [ 1076.759943][T18170] loop3: detected capacity change from 0 to 512 [ 1076.963053][T18170] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 1077.033421][T18170] System zones: 1-12 [ 1077.091643][T18170] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2960: missing EA_INODE flag [ 1077.259418][T18170] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2960: error while reading EA inode 12 err=-117 [ 1077.358884][T18170] EXT4-fs (loop3): 1 orphan inode deleted [ 1077.367501][T18170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1077.453258][ C0] net_ratelimit: 26 callbacks suppressed [ 1079.587524][T17579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.902359][T18213] loop3: detected capacity change from 0 to 512 [ 1080.032642][T18162] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1082.493293][ C1] net_ratelimit: 30 callbacks suppressed [ 1087.510703][ C1] net_ratelimit: 7 callbacks suppressed [ 1088.410642][T18275] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[11518] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18275] [ 1091.911416][T18327] overlayfs: failed to clone upperpath [ 1092.574545][T17679] net_ratelimit: 33 callbacks suppressed [ 1094.316212][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1094.331094][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1094.351376][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1094.383578][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1094.398114][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1094.407727][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1097.104800][T17480] Bluetooth: hci4: command tx timeout [ 1097.444558][T18337] chnl_net:caif_netlink_parms(): no params data found [ 1097.711158][T17357] net_ratelimit: 31 callbacks suppressed [ 1098.759796][T18337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.795749][T18337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.815826][T18337] bridge_slave_0: entered allmulticast mode [ 1098.834202][T18337] bridge_slave_0: entered promiscuous mode [ 1099.090778][T17357] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.133451][ T5782] Bluetooth: hci4: command tx timeout [ 1099.247622][T18337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.280625][T18337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.307811][T18337] bridge_slave_1: entered allmulticast mode [ 1099.321334][T18337] bridge_slave_1: entered promiscuous mode [ 1101.212373][ T5782] Bluetooth: hci4: command tx timeout [ 1101.290662][T17357] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.885324][T10104] net_ratelimit: 22 callbacks suppressed [ 1103.154997][T17357] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.292319][ T5782] Bluetooth: hci4: command tx timeout [ 1104.511463][T18337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.553354][T18337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.847284][T18337] team0: Port device team_slave_0 added [ 1104.904828][T18337] team0: Port device team_slave_1 added [ 1104.938293][T18414] loop3: detected capacity change from 0 to 512 [ 1104.946156][T18414] EXT4-fs: Ignoring removed nobh option [ 1105.253825][T18337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.260832][T18337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.395963][T18414] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1105.408930][T18414] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.2984: attempt to clear invalid blocks 1 len 1 [ 1105.429000][T18414] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1105.446586][T18414] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2984: invalid indirect mapped block 1819239214 (level 0) [ 1105.470164][T18414] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2984: invalid indirect mapped block 1819239214 (level 1) [ 1105.491344][T18414] EXT4-fs (loop3): 1 truncate cleaned up [ 1105.498739][T18337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.498747][T18414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1105.737596][T17357] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.993396][T17579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.142473][T18337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.149593][T18337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.042229][T18337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.456107][T18438] loop3: detected capacity change from 0 to 32768 [ 1107.521862][T18438] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1107.699292][T18337] hsr_slave_0: entered promiscuous mode [ 1107.748696][T18438] XFS (loop3): Ending clean mount [ 1107.808711][T18438] XFS (loop3): Quotacheck needed: Please wait. [ 1107.815431][T18337] hsr_slave_1: entered promiscuous mode [ 1107.893612][T18337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1107.901232][T18337] Cannot create hsr debugfs directory [ 1108.009686][T18438] XFS (loop3): Quotacheck: Done. [ 1108.012359][ C1] net_ratelimit: 31 callbacks suppressed [ 1108.136995][T17480] Bluetooth: hci2: command 0x0406 tx timeout [ 1109.052008][T17579] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1112.479114][T18474] loop1: detected capacity change from 0 to 2048 [ 1112.556280][T18474] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1112.642644][T18474] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 1113.291221][ C1] net_ratelimit: 19 callbacks suppressed [ 1116.269935][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.368826][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.210919][ C1] net_ratelimit: 29 callbacks suppressed [ 1124.494316][T10104] net_ratelimit: 22 callbacks suppressed [ 1125.878963][T18337] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1126.035344][T18337] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1126.917445][T17357] hsr_slave_0: left promiscuous mode [ 1126.972873][T17357] hsr_slave_1: left promiscuous mode [ 1126.993303][T17357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.005965][T17357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.031792][T17357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.047697][T17357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.056444][T17357] bridge_slave_1: left allmulticast mode [ 1127.070944][T17357] bridge_slave_1: left promiscuous mode [ 1127.076759][T17357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.151869][T17357] bridge_slave_0: left allmulticast mode [ 1127.158816][T17357] bridge_slave_0: left promiscuous mode [ 1127.172083][T17357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.380941][T17357] veth1_macvtap: left promiscuous mode [ 1127.386658][T17357] veth0_macvtap: left promiscuous mode [ 1127.393297][T17357] veth1_vlan: left promiscuous mode [ 1127.405058][T17357] veth0_vlan: left promiscuous mode [ 1128.580862][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 1129.530284][ C1] net_ratelimit: 37 callbacks suppressed [ 1133.282247][T17357] team0 (unregistering): Port device team_slave_1 removed [ 1133.552456][T17357] team0 (unregistering): Port device team_slave_0 removed [ 1133.797862][T17357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1135.210120][ C0] net_ratelimit: 22 callbacks suppressed [ 1135.335783][T17357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.124149][T17357] bond0 (unregistering): Released all slaves [ 1137.631650][T18337] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1137.656189][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3005'. [ 1137.766983][T18543] bond8: entered promiscuous mode [ 1137.790819][T18543] bond8: entered allmulticast mode [ 1137.797239][T18543] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1137.874825][T18544] erspan1: entered allmulticast mode [ 1137.911046][T18544] erspan1: entered promiscuous mode [ 1137.917116][T18544] bond8: (slave erspan1): Enslaving as an active interface with an up link [ 1138.102061][T18561] netlink: 'syz.1.3004': attribute type 4 has an invalid length. [ 1138.309912][T18337] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1140.358055][ C0] net_ratelimit: 18 callbacks suppressed [ 1140.955461][T18337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.515587][T18337] 8021q: adding VLAN 0 to HW filter on device team0 [ 1142.668336][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.675579][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1142.783206][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.790453][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1143.039125][T18337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1144.057802][T18337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.382933][T18337] veth0_vlan: entered promiscuous mode [ 1144.437445][T18337] veth1_vlan: entered promiscuous mode [ 1145.379432][ C0] net_ratelimit: 16 callbacks suppressed [ 1145.854387][T18337] veth0_macvtap: entered promiscuous mode [ 1145.894224][T18337] veth1_macvtap: entered promiscuous mode [ 1145.967970][T18337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.005287][T18337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.035649][T18337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.064414][T18337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.089371][T18337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.119434][T18337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.152451][T18337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1146.207975][T18337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.251593][T18337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.289985][T18337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.317995][T18337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.346988][T18337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.369340][T18337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.398466][T18337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1146.438237][T18337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.458115][T18337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.616630][T18337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.824954][T18337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.304070][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.319379][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.061869][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.085713][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.049304][ C1] net_ratelimit: 59 callbacks suppressed [ 1156.168818][ C1] net_ratelimit: 51 callbacks suppressed [ 1157.421980][T18696] loop1: detected capacity change from 0 to 1024 [ 1157.484373][T18696] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1157.640136][T18696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1160.456525][T17479] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.368771][ C1] net_ratelimit: 30 callbacks suppressed [ 1163.152624][T18726] netlink: 165 bytes leftover after parsing attributes in process `syz.9.3042'. [ 1165.303733][T18755] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 1166.408229][ C1] net_ratelimit: 38 callbacks suppressed [ 1167.474311][T18766] ALSA: seq fatal error: cannot create timer (-22) [ 1168.154242][T18773] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[18337] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18773] [ 1171.767898][ C1] net_ratelimit: 33 callbacks suppressed [ 1177.047637][ C0] net_ratelimit: 30 callbacks suppressed [ 1177.694834][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.701307][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.487951][T18851] overlayfs: workdir and upperdir must be separate subtrees [ 1182.647340][ C1] net_ratelimit: 29 callbacks suppressed [ 1183.770590][T18875] loop1: detected capacity change from 0 to 128 [ 1184.595723][T18879] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[17479] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18879] [ 1187.669743][ T28] audit: type=1800 audit(1790130189.675:301): pid=18900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3056" name="power" dev="configfs" ino=51618 res=0 errno=0 [ 1187.690054][ C0] net_ratelimit: 25 callbacks suppressed [ 1187.741784][T18901] syzkaller0: entered promiscuous mode [ 1187.768450][T18901] syzkaller0: entered allmulticast mode [ 1188.775523][T18900] Dev nullb1: unable to read RDB block 8 [ 1188.809149][T18900] nullb1: unable to read partition table [ 1188.871486][T18900] null_blk: disk nullb1 created [ 1193.126737][ C1] net_ratelimit: 30 callbacks suppressed [ 1194.863699][T18943] atomic_op ffff88801b748198 conn xmit_atomic 0000000000000000 [ 1198.169689][ T2971] net_ratelimit: 24 callbacks suppressed [ 1199.997247][ T5813] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1200.264230][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1200.301089][ T5813] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 1200.330376][ T5813] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.394241][ T5813] usb 2-1: config 63 has no interface number 0 [ 1200.416652][ T5813] usb 2-1: config 63 interface 66 has no altsetting 0 [ 1200.568593][ T5813] usb 2-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 1200.593814][T18978] loop2: detected capacity change from 0 to 256 [ 1200.606373][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.486628][ T5813] usb 2-1: Product: syz [ 1201.490876][ T5813] usb 2-1: Manufacturer: syz [ 1201.495520][ T5813] usb 2-1: SerialNumber: syz [ 1201.557370][T18978] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1201.724164][T18978] overlay: ./file0 is not a directory [ 1201.756618][T18969] tipc: Started in network mode [ 1201.761580][T18969] tipc: Node identity 4, cluster identity 4711 [ 1201.828487][T18969] tipc: Node number set to 4 [ 1201.874606][T18969] tipc: Enabled bearer , priority 0 [ 1201.981614][T18969] tipc: Resetting bearer [ 1203.197243][ C1] net_ratelimit: 26 callbacks suppressed [ 1206.668317][T18969] tipc: Disabling bearer [ 1208.391544][T13124] usb 2-1: USB disconnect, device number 5 [ 1208.412198][ C0] net_ratelimit: 26 callbacks suppressed [ 1212.088870][T19024] loop1: detected capacity change from 0 to 256 [ 1214.085581][ C1] net_ratelimit: 22 callbacks suppressed [ 1219.605267][ C0] net_ratelimit: 28 callbacks suppressed [ 1221.442732][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 1224.068082][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1224.080670][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1224.093129][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1224.103476][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1224.112503][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1224.120369][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1224.964918][ C0] net_ratelimit: 28 callbacks suppressed [ 1226.245564][T17480] Bluetooth: hci1: command tx timeout [ 1228.325800][T17480] Bluetooth: hci1: command tx timeout [ 1228.396257][ T11] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.004682][ C1] net_ratelimit: 25 callbacks suppressed [ 1230.404672][T17480] Bluetooth: hci1: command tx timeout [ 1230.583527][ T11] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.395626][T19097] loop2: detected capacity change from 0 to 1024 [ 1231.479961][T19066] chnl_net:caif_netlink_parms(): no params data found [ 1231.497962][T19097] xt_TCPMSS: Only works on TCP SYN packets [ 1231.791321][ T11] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.989363][T19120] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1232.022584][ T11] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.156844][T17480] Bluetooth: hci1: command tx timeout [ 1235.284321][ C0] net_ratelimit: 30 callbacks suppressed [ 1235.458798][T19066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.656789][T19066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.683873][T19066] bridge_slave_0: entered allmulticast mode [ 1236.708693][T19066] bridge_slave_0: entered promiscuous mode [ 1236.848102][T19066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.864001][T19066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.893703][T19066] bridge_slave_1: entered allmulticast mode [ 1236.923897][T19066] bridge_slave_1: entered promiscuous mode [ 1237.397294][T19066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.486889][T19066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.403039][T19066] team0: Port device team_slave_0 added [ 1238.438832][T19066] team0: Port device team_slave_1 added [ 1239.140339][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.146857][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.176694][T19066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.277411][T19066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.331821][ T8902] net_ratelimit: 23 callbacks suppressed [ 1240.570765][T19066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.735180][T19066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.742214][T19066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1241.875802][T19167] loop1: detected capacity change from 0 to 8 [ 1241.897523][T19066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.192189][T19169] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3098'. [ 1243.316544][T19167] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1243.337377][T19167] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1245.363743][ C1] net_ratelimit: 36 callbacks suppressed [ 1247.951184][ T11] bond8: (slave erspan1): Releasing backup interface [ 1248.131571][ T11] erspan1 (unregistering): left promiscuous mode [ 1248.289126][T19066] hsr_slave_0: entered promiscuous mode [ 1248.344225][T19066] hsr_slave_1: entered promiscuous mode [ 1248.351044][T19066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1248.364143][T19066] Cannot create hsr debugfs directory [ 1250.664390][ T8902] net_ratelimit: 23 callbacks suppressed [ 1255.683424][T17237] net_ratelimit: 28 callbacks suppressed [ 1255.781510][ T28] audit: type=1400 audit(1790130257.779:302): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=223A6F pid=19251 comm="syz.2.3106" name=223A6F offset=35 [ 1258.560831][ T11] bond8 (unregistering): Released all slaves [ 1259.609456][ T11] bond7 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1259.651559][ T11] bond7 (unregistering): Released all slaves [ 1259.873950][ T11] bond6 (unregistering): (slave geneve4): Releasing active interface [ 1260.437051][ T11] bond6 (unregistering): Released all slaves [ 1260.641860][ T11] bond0 (unregistering): (slave veth3): Releasing backup interface [ 1260.722070][ T11] bond0 (unregistering): Released all slaves [ 1261.603001][ C0] net_ratelimit: 23 callbacks suppressed [ 1262.153814][ T11] bond5 (unregistering): (slave bridge1): Releasing active interface [ 1264.528988][ T11] bond5 (unregistering): Released all slaves [ 1265.388682][ T11] bond4 (unregistering): Released all slaves [ 1265.924272][ T11] bond3 (unregistering): Released all slaves [ 1266.915714][ T11] bond2 (unregistering): Released all slaves [ 1267.122740][ T60] net_ratelimit: 32 callbacks suppressed [ 1268.930156][ T11] bond1 (unregistering): Released all slaves [ 1271.439273][T19292] loop3: detected capacity change from 0 to 512 [ 1271.503681][T19292] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.3116: corrupted in-inode xattr: invalid ea_ino [ 1271.537782][T19292] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.3116: couldn't read orphan inode 15 (err -117) [ 1271.613916][T19292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1272.213904][T17480] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1272.229755][T17480] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1272.241617][T17480] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1272.242646][ C0] net_ratelimit: 35 callbacks suppressed [ 1272.258419][T17480] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1272.272630][T17480] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1272.280443][T17480] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1272.656154][T17579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.577465][T17480] Bluetooth: hci3: command tx timeout [ 1274.893333][T13124] IPVS: starting estimator thread 0... [ 1274.999154][T19307] IPVS: using max 19 ests per chain, 45600 per kthread [ 1276.642248][T17480] Bluetooth: hci3: command tx timeout [ 1277.522930][T17237] net_ratelimit: 47 callbacks suppressed [ 1278.721938][T17480] Bluetooth: hci3: command tx timeout [ 1280.802535][T17480] Bluetooth: hci3: command tx timeout [ 1282.062946][T19332] loop3: detected capacity change from 0 to 1024 [ 1282.070446][T19332] EXT4-fs: Ignoring removed bh option [ 1282.173705][T19332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1282.190022][T19332] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1282.643440][T10094] net_ratelimit: 38 callbacks suppressed [ 1287.722602][T19358] loop2: detected capacity change from 0 to 512 [ 1287.772798][T17237] net_ratelimit: 32 callbacks suppressed [ 1287.795925][T19358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 1287.804143][T19358] System zones: 1-12 [ 1287.822380][T19358] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #15: comm syz.2.3121: corrupted inode contents [ 1287.853935][T19358] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1287.863003][T19358] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #15: comm syz.2.3121: corrupted inode contents [ 1287.895940][T19358] EXT4-fs error (device loop2): ext4_evict_inode:302: inode #15: comm syz.2.3121: mark_inode_dirty error [ 1287.908458][T19358] EXT4-fs (loop2): 1 orphan inode deleted [ 1287.956908][T19358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1288.026768][T18337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1288.074956][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1288.090995][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1288.112481][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1288.182086][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1288.201898][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1288.209772][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1290.335517][T17480] Bluetooth: hci2: command tx timeout [ 1290.551672][ T11] IPVS: stop unused estimator thread 0... [ 1292.562070][T17480] Bluetooth: hci2: command tx timeout [ 1292.882536][T17237] net_ratelimit: 28 callbacks suppressed [ 1292.999262][T19296] chnl_net:caif_netlink_parms(): no params data found [ 1294.235562][T19296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.252080][T19296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.259433][T19296] bridge_slave_0: entered allmulticast mode [ 1294.287007][T19296] bridge_slave_0: entered promiscuous mode [ 1294.371295][T19296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.378545][T19296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.412750][T19296] bridge_slave_1: entered allmulticast mode [ 1294.420408][T19296] bridge_slave_1: entered promiscuous mode [ 1294.641491][T17480] Bluetooth: hci2: command tx timeout [ 1294.742558][T19296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.757351][T19362] chnl_net:caif_netlink_parms(): no params data found [ 1294.817429][T19388] loop2: detected capacity change from 0 to 164 [ 1294.873510][T19296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1296.805737][T17480] Bluetooth: hci2: command tx timeout [ 1298.012366][ T2971] net_ratelimit: 24 callbacks suppressed [ 1298.032253][T19296] team0: Port device team_slave_0 added [ 1298.787030][T19296] team0: Port device team_slave_1 added [ 1300.566597][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.584063][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.844393][T19362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.871746][T19362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.879092][T19362] bridge_slave_0: entered allmulticast mode [ 1300.924023][T19362] bridge_slave_0: entered promiscuous mode [ 1301.483059][T19296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1301.556668][T19296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1301.766359][T19296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1301.840408][T19362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.946675][T19362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.992454][T19362] bridge_slave_1: entered allmulticast mode [ 1302.058777][T19362] bridge_slave_1: entered promiscuous mode [ 1302.122540][T19296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1302.175144][T19296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1302.281285][T19296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1303.132508][ T2971] net_ratelimit: 26 callbacks suppressed [ 1304.523813][T17357] hsr_slave_0: left promiscuous mode [ 1304.627480][T17357] hsr_slave_1: left promiscuous mode [ 1304.641948][T17357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1304.658709][T17357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1304.683733][T17357] bridge_slave_1: left allmulticast mode [ 1304.689448][T17357] bridge_slave_1: left promiscuous mode [ 1304.712102][T17357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.748884][T17357] bridge_slave_0: left allmulticast mode [ 1304.774921][T17357] bridge_slave_0: left promiscuous mode [ 1304.810559][T17357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.176376][T19414] loop3: detected capacity change from 0 to 32768 [ 1305.271097][T19414] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1305.436316][T19414] XFS (loop3): Ending clean mount [ 1305.446427][T19414] XFS (loop3): Quotacheck needed: Please wait. [ 1305.616489][T19414] XFS (loop3): Quotacheck: Done. [ 1306.359122][T17357] team0 (unregistering): Port device team_slave_1 removed [ 1306.486119][T17357] team0 (unregistering): Port device team_slave_0 removed [ 1306.603504][T17579] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1306.698118][T17357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1306.842450][T17357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.319214][ T28] audit: type=1326 audit(1790130309.322:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19425 comm="syz.2.3133" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02959e159 code=0x7ffc0000 [ 1307.355995][ T28] audit: type=1326 audit(1790130309.322:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19425 comm="syz.2.3133" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe02959e159 code=0x7ffc0000 [ 1307.382173][ T28] audit: type=1326 audit(1790130309.322:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19425 comm="syz.2.3133" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02959e159 code=0x7ffc0000 [ 1307.407398][ T28] audit: type=1326 audit(1790130309.322:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19425 comm="syz.2.3133" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe02955e98e code=0x7ffc0000 [ 1307.456964][ T28] audit: type=1326 audit(1790130309.332:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19425 comm="syz.2.3133" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe02959f457 code=0x7ffc0000 [ 1307.491567][ T28] audit: type=1326 audit(1790130309.332:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19425 comm="syz.2.3133" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe02959e159 code=0x7ffc0000 [ 1307.550093][ T28] audit: type=1326 audit(1790130309.332:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19425 comm="syz.2.3133" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe02959f457 code=0x7ffc0000 [ 1307.595328][ T28] audit: type=1326 audit(1790130309.332:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19425 comm="syz.2.3133" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe02955e98e code=0x7ffc0000 [ 1307.717603][T17357] bond0 (unregistering): Released all slaves [ 1307.724225][ T28] audit: type=1326 audit(1790130309.332:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19425 comm="syz.2.3133" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02959e159 code=0x7ffc0000 [ 1307.769331][ T28] audit: type=1326 audit(1790130309.342:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19425 comm="syz.2.3133" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe02959e159 code=0x7ffc0000 [ 1308.048416][T19362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1308.133567][T19362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1308.400216][ C1] net_ratelimit: 31 callbacks suppressed [ 1311.057857][T19362] team0: Port device team_slave_0 added [ 1311.078929][T19362] team0: Port device team_slave_1 added [ 1311.140860][T19296] hsr_slave_0: entered promiscuous mode [ 1311.164888][T19296] hsr_slave_1: entered promiscuous mode [ 1311.535339][T19362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.561746][T19362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.629276][T19362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.653442][T19362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.679855][T19362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.740594][T19362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.332359][T19362] hsr_slave_0: entered promiscuous mode [ 1312.359319][T19362] hsr_slave_1: entered promiscuous mode [ 1312.375747][T19362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1312.405791][T19362] Cannot create hsr debugfs directory [ 1313.679947][ C1] net_ratelimit: 36 callbacks suppressed [ 1314.203153][T19440] ip_tables: iptables: counters copy to user failed while replacing table [ 1314.531350][T19443] loop3: detected capacity change from 0 to 128 [ 1319.129581][ C0] net_ratelimit: 27 callbacks suppressed [ 1319.451498][T19447] warning: `syz.3.3142' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1319.572792][T19296] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1319.681193][T19296] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1319.738323][T19296] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1319.810971][T19296] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1322.444538][T19455] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1322.547068][T19362] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1322.619448][T19362] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1322.685319][T19362] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1322.736440][T19362] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1323.043444][T19296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.157089][T19296] 8021q: adding VLAN 0 to HW filter on device team0 [ 1323.248064][T10104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.255288][T10104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.332853][T10104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.340074][T10104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1323.536760][T19362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.664718][T19362] 8021q: adding VLAN 0 to HW filter on device team0 [ 1323.706344][T10093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.713573][T10093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.786124][T10093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.793353][T10093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.569566][ C1] net_ratelimit: 38 callbacks suppressed [ 1325.915885][T19296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1328.624549][T19362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.241678][T19296] veth0_vlan: entered promiscuous mode [ 1329.307388][T19296] veth1_vlan: entered promiscuous mode [ 1329.488516][T19296] veth0_macvtap: entered promiscuous mode [ 1329.541402][T19296] veth1_macvtap: entered promiscuous mode [ 1329.665295][T19296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.676232][ C1] net_ratelimit: 44 callbacks suppressed [ 1329.719344][T19296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.740123][T19296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.762418][T19296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.916321][T19296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.983974][T19296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.014987][T19296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.038342][T19296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.062090][T19296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.333683][T19296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.418278][T19296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.498248][T19296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.576558][T19296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.666683][T19296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.731916][T19296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.807313][T19296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.895659][T19296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.004966][T19296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.411327][T19296] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.531077][T19296] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.653998][T19296] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.770036][T19296] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.333643][T19362] veth0_vlan: entered promiscuous mode [ 1333.418362][T19362] veth1_vlan: entered promiscuous mode [ 1333.588201][T19362] veth0_macvtap: entered promiscuous mode [ 1333.631791][T19362] veth1_macvtap: entered promiscuous mode [ 1333.695538][T19362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.748724][T19362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.758613][T19362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.807248][T19362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.834583][T19362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.855840][T19362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.866462][T19362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.898733][T19362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.908606][T19362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.969743][T19362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.992639][T19362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1334.059798][T19362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1334.096758][T19362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.138766][T19362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1334.227325][T19362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.285768][T19362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1334.316674][T19362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.481242][T19362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1334.518717][T19362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.528624][T19362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1334.578749][T19362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.630625][T19362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1334.705990][T19362] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.749677][T19362] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.758472][T19362] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.840972][T19362] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.872333][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1334.887394][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1334.898956][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1334.917072][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1334.934767][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1334.944505][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1335.107996][T19362] net_ratelimit: 32 callbacks suppressed [ 1337.359022][T17480] Bluetooth: hci1: command tx timeout [ 1339.317203][T10097] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.380801][T18134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.406867][T18134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.472796][ T5782] Bluetooth: hci1: command tx timeout [ 1339.501245][T10097] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.857137][T10097] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.115331][T10097] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.178630][T17357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.186506][T17357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.878782][ C1] net_ratelimit: 72 callbacks suppressed [ 1341.394615][T19575] loop5: detected capacity change from 0 to 256 [ 1341.520809][ T5782] Bluetooth: hci1: command tx timeout [ 1343.605498][ T5782] Bluetooth: hci1: command tx timeout [ 1343.655375][T19529] chnl_net:caif_netlink_parms(): no params data found [ 1345.333229][T19587] syz.2.3153: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1346.558117][ C1] net_ratelimit: 54 callbacks suppressed [ 1346.624261][T19587] CPU: 0 PID: 19587 Comm: syz.2.3153 Not tainted syzkaller #0 [ 1346.631795][T19587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1346.641893][T19587] Call Trace: [ 1346.645220][T19587] [ 1346.648189][T19587] dump_stack_lvl+0x18c/0x250 [ 1346.652932][T19587] ? show_regs_print_info+0x20/0x20 [ 1346.658190][T19587] ? load_image+0x420/0x420 [ 1346.662746][T19587] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1346.669228][T19587] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1346.675783][T19587] warn_alloc+0x246/0x340 [ 1346.680192][T19587] ? zone_watermark_ok_safe+0x230/0x230 [ 1346.685801][T19587] __vmalloc_node_range+0x129/0x1320 [ 1346.691150][T19587] ? __mutex_trylock_common+0x160/0x270 [ 1346.696760][T19587] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1346.702952][T19587] ? rcu_is_watching+0x15/0xb0 [ 1346.708308][T19587] ? trace_contention_end+0x39/0xe0 [ 1346.713574][T19587] ? __mutex_lock+0x30d/0xc80 [ 1346.718323][T19587] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 1346.724004][T19587] ? free_vm_area+0x50/0x50 [ 1346.728542][T19587] ? dvb_demux_do_ioctl+0x317/0x530 [ 1346.733856][T19587] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1346.739352][T19587] ? mutex_lock_nested+0x20/0x20 [ 1346.744433][T19587] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1346.750283][T19587] vmalloc+0x79/0x90 [ 1346.754220][T19587] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1346.760066][T19587] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1346.765742][T19587] dvb_demux_do_ioctl+0x454/0x530 [ 1346.770803][T19587] dvb_usercopy+0x195/0x2b0 [ 1346.775351][T19587] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1346.780928][T19587] ? dvb_generic_ioctl+0xb0/0xb0 [ 1346.785918][T19587] ? dvb_demux_poll+0x210/0x210 [ 1346.790805][T19587] dvb_demux_ioctl+0x29/0x30 [ 1346.795450][T19587] __se_sys_ioctl+0xfd/0x170 [ 1346.800079][T19587] do_syscall_64+0x55/0xb0 [ 1346.804548][T19587] ? clear_bhb_loop+0x40/0x90 [ 1346.809266][T19587] ? clear_bhb_loop+0x40/0x90 [ 1346.813974][T19587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1346.819909][T19587] RIP: 0033:0x7fe02959e159 [ 1346.824360][T19587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.844009][T19587] RSP: 002b:00007fe02a471028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1346.852461][T19587] RAX: ffffffffffffffda RBX: 00007fe029826090 RCX: 00007fe02959e159 [ 1346.860471][T19587] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 1346.868468][T19587] RBP: 00007fe02963506b R08: 0000000000000000 R09: 0000000000000000 [ 1346.876464][T19587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1346.884452][T19587] R13: 00007fe029826128 R14: 00007fe029826090 R15: 00007fffb147c628 [ 1346.892472][T19587] [ 1348.176844][T19587] Mem-Info: [ 1348.209216][T19587] active_anon:50339 inactive_anon:0 isolated_anon:0 [ 1348.209216][T19587] active_file:7790 inactive_file:51295 isolated_file:0 [ 1348.209216][T19587] unevictable:768 dirty:133 writeback:0 [ 1348.209216][T19587] slab_reclaimable:11939 slab_unreclaimable:103202 [ 1348.209216][T19587] mapped:28397 shmem:43435 pagetables:897 [ 1348.209216][T19587] sec_pagetables:0 bounce:0 [ 1348.209216][T19587] kernel_misc_reclaimable:0 [ 1348.209216][T19587] free:1287204 free_pcp:5673 free_cma:0 [ 1348.417136][T19587] Node 0 active_anon:187156kB inactive_anon:0kB active_file:31160kB inactive_file:204976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102188kB dirty:528kB writeback:0kB shmem:158004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12204kB pagetables:3488kB sec_pagetables:0kB all_unreclaimable? no [ 1348.577941][T19587] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1348.694989][T19587] Node 0 DMA free:15324kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 1348.757482][T19587] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1348.817967][T19587] Node 0 DMA32 free:1242508kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:172216kB inactive_anon:0kB active_file:31160kB inactive_file:204152kB unevictable:1536kB writepending:524kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:26644kB local_pcp:8400kB free_cma:0kB [ 1349.009084][T19587] lowmem_reserve[]: 0 0 0 0 0 [ 1349.013962][T19587] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1350.397828][T19587] lowmem_reserve[]: 0 0 0 0 0 [ 1350.402736][T19587] Node 1 Normal free:3914296kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:2688kB local_pcp:2688kB free_cma:0kB [ 1350.543021][T19587] lowmem_reserve[]: 0 0 0 0 0 [ 1350.568222][T19587] Node 0 DMA: [ 1350.573179][T19587] 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15324kB [ 1350.637919][T19587] Node 0 DMA32: 50*4kB (ME) 2475*8kB (UME) 743*16kB (UME) 336*32kB (UME) 188*64kB (UME) 50*128kB (UME) 5*256kB (UME) 1*512kB (E) 19*1024kB (UME) 14*2048kB (M) 261*4096kB (M) = 1180048kB [ 1350.697956][T19587] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1350.732620][T19587] Node 1 Normal: 230*4kB (UME) 56*8kB (UME) 34*16kB (UME) 236*32kB (UME) 101*64kB (UME) 30*128kB (UME) 7*256kB (UME) 3*512kB (UE) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3914296kB [ 1350.799479][T19587] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1350.828499][T19587] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1350.855336][T19587] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1350.907817][T19587] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1350.917355][T19587] 101759 total pagecache pages [ 1350.977798][T19587] 0 pages in swap cache [ 1350.982031][T19587] Free swap = 124484kB [ 1350.986246][T19587] Total swap = 124996kB [ 1351.038509][T19587] 2097051 pages RAM [ 1351.042429][T19587] 0 pages HighMem/MovableOnly [ 1351.047161][T19587] 416965 pages reserved [ 1351.097292][T19587] 0 pages cma reserved [ 1351.256975][T19529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.292160][T19529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.308166][T19529] bridge_slave_0: entered allmulticast mode [ 1351.321699][T19529] bridge_slave_0: entered promiscuous mode [ 1351.345538][T19529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.359862][T19529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.367245][T19529] bridge_slave_1: entered allmulticast mode [ 1351.385370][T19529] bridge_slave_1: entered promiscuous mode [ 1351.597789][ C0] net_ratelimit: 40 callbacks suppressed [ 1354.272473][T19529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1354.313952][T19529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1354.482508][T10097] hsr_slave_0: left promiscuous mode [ 1354.554070][T10097] hsr_slave_1: left promiscuous mode [ 1354.595516][T10097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1354.621670][T10097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1354.647128][T10097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1354.662959][T10097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1354.688731][T10097] bridge_slave_1: left allmulticast mode [ 1354.694464][T10097] bridge_slave_1: left promiscuous mode [ 1354.717031][T10097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.819725][T10097] bridge_slave_0: left allmulticast mode [ 1354.825433][T10097] bridge_slave_0: left promiscuous mode [ 1354.856768][T10097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.401437][T10097] veth1_macvtap: left promiscuous mode [ 1355.407042][T10097] veth0_macvtap: left promiscuous mode [ 1355.438252][T10097] veth1_vlan: left promiscuous mode [ 1355.443678][T10097] veth0_vlan: left promiscuous mode [ 1356.625892][ C1] net_ratelimit: 32 callbacks suppressed [ 1357.763910][T19644] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3162'. [ 1360.740907][T19682] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3161'. [ 1362.002555][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.015531][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.237176][ C1] net_ratelimit: 42 callbacks suppressed [ 1367.356903][ C1] net_ratelimit: 34 callbacks suppressed [ 1369.580896][T10097] team0 (unregistering): Port device team_slave_1 removed [ 1369.843734][T10097] team0 (unregistering): Port device team_slave_0 removed [ 1370.050751][T10097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1370.420204][T10097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1370.608733][T19707] kvm_msr_ignored_check: 1507 callbacks suppressed [ 1370.625531][T19707] kvm: kvm [19706]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffffffff00000000 [ 1371.046846][T19707] kvm: kvm [19706]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffff000000000080 [ 1372.636585][ C1] net_ratelimit: 42 callbacks suppressed [ 1374.781222][T10097] bond0 (unregistering): Released all slaves [ 1375.510728][T19529] team0: Port device team_slave_0 added [ 1375.552766][T19529] team0: Port device team_slave_1 added [ 1375.866787][T19529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.873788][T19529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1375.976621][T19529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.024317][T19529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.057412][T19529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.157497][T19529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1376.618537][T19529] hsr_slave_0: entered promiscuous mode [ 1376.694318][T19529] hsr_slave_1: entered promiscuous mode [ 1376.891944][T19739] loop5: detected capacity change from 0 to 32768 [ 1376.998695][T19739] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1377.107140][T19739] XFS (loop5): Ending clean mount [ 1377.118275][T19739] XFS (loop5): Quotacheck needed: Please wait. [ 1377.916357][ C1] net_ratelimit: 41 callbacks suppressed [ 1378.514542][T19739] XFS (loop5): Quotacheck: Done. [ 1379.269928][T19755] netlink: 'syz.3.3177': attribute type 4 has an invalid length. [ 1379.592737][T19362] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1380.657993][T19779] loop3: detected capacity change from 0 to 1024 [ 1380.665794][T19779] EXT4-fs: Ignoring removed mblk_io_submit option [ 1380.766261][T19779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1381.086594][T17579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1382.627505][T19798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3181'. [ 1383.195990][ C0] net_ratelimit: 39 callbacks suppressed [ 1383.455464][T19798] bond1: entered promiscuous mode [ 1383.473216][T19798] bond1: entered allmulticast mode [ 1383.490261][T19798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1383.705373][T19800] macvlan1: entered promiscuous mode [ 1383.875234][T19801] erspan1: entered allmulticast mode [ 1383.921169][T19801] erspan1: entered promiscuous mode [ 1383.936558][T19801] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 1388.604764][ T55] net_ratelimit: 40 callbacks suppressed [ 1390.739019][T19529] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1390.836067][T19529] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1390.908009][T19529] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1390.980727][T19529] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1391.569432][T19529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1392.516396][T19847] md: couldn't update array info. -22 [ 1392.530422][T19529] 8021q: adding VLAN 0 to HW filter on device team0 [ 1392.538112][T19847] md: could not open device unknown-block(1,1). [ 1392.565055][T19847] md: md_import_device returned -16 [ 1392.613446][T10097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.620680][T10097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1392.713809][T10097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.721100][T10097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1392.837523][ T5782] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 1393.616499][T19529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1393.934914][T19867] loop5: detected capacity change from 0 to 32768 [ 1393.945838][T19867] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.3186 (19867) [ 1393.991488][T19867] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1394.001844][T19867] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1394.010621][T19867] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1394.020090][T19867] BTRFS info (device loop5): use zstd compression, level 3 [ 1394.027378][T19867] BTRFS info (device loop5): force clearing of disk cache [ 1394.034998][T19867] BTRFS info (device loop5): enabling disk space caching [ 1394.042080][T10104] net_ratelimit: 45 callbacks suppressed [ 1394.047850][T19867] BTRFS info (device loop5): disk space caching is enabled [ 1394.267611][T19867] BTRFS info (device loop5): enabling ssd optimizations [ 1394.274664][T19867] BTRFS info (device loop5): auto enabling async discard [ 1394.289064][T19867] BTRFS info (device loop5): rebuilding free space tree [ 1394.309112][T19867] BTRFS info (device loop5): disabling free space tree [ 1394.316274][T19867] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1394.325998][T19867] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1398.626856][T19902] netlink: 'syz.3.3192': attribute type 1 has an invalid length. [ 1399.115939][ C1] net_ratelimit: 33 callbacks suppressed [ 1399.250017][T17480] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1399.267798][T17480] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1399.279891][T17480] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1399.322883][T17480] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1399.337577][T17480] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1399.349844][T17480] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1399.646848][T19902] netlink: 'syz.3.3192': attribute type 2 has an invalid length. [ 1399.713214][T19909] loop2: detected capacity change from 0 to 8192 [ 1399.795774][T19362] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1401.515091][T17480] Bluetooth: hci1: command tx timeout [ 1403.784902][T17480] Bluetooth: hci1: command tx timeout [ 1404.804776][ C1] net_ratelimit: 46 callbacks suppressed [ 1405.295237][T19907] chnl_net:caif_netlink_parms(): no params data found [ 1405.854686][ T5782] Bluetooth: hci1: command tx timeout [ 1406.561302][T19907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.603365][T19907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.632660][T19907] bridge_slave_0: entered allmulticast mode [ 1406.660389][T19907] bridge_slave_0: entered promiscuous mode [ 1406.729441][T19907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.754886][T19907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.762208][T19907] bridge_slave_1: entered allmulticast mode [ 1406.786936][T19907] bridge_slave_1: entered promiscuous mode [ 1406.817457][T19945] loop3: detected capacity change from 0 to 8192 [ 1406.886893][T19945] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1407.914661][ T5782] Bluetooth: hci1: command tx timeout [ 1409.157410][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1409.157427][ T28] audit: type=1400 audit(1790130411.177:325): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=223A6F pid=19953 comm="syz.3.3200" name=223A6F offset=35 [ 1409.292695][T19907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1409.329681][T19907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1409.994482][ C1] net_ratelimit: 53 callbacks suppressed [ 1411.161602][T19907] team0: Port device team_slave_0 added [ 1411.194157][T19907] team0: Port device team_slave_1 added [ 1411.451590][T19907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.501526][T19907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1411.605398][T19907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.939404][T19907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1413.128672][T19907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1413.218917][T19907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1413.945883][T19907] hsr_slave_0: entered promiscuous mode [ 1413.982138][T19907] hsr_slave_1: entered promiscuous mode [ 1414.004763][T19907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1414.012392][T19907] Cannot create hsr debugfs directory [ 1414.613027][T10104] hsr_slave_0: left promiscuous mode [ 1414.638216][T10104] hsr_slave_1: left promiscuous mode [ 1414.695280][T10104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1414.720994][T10104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1414.775594][T10104] bridge_slave_1: left allmulticast mode [ 1414.781345][T10104] bridge_slave_1: left promiscuous mode [ 1414.821342][T10104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.124957][T17237] net_ratelimit: 50 callbacks suppressed [ 1415.275041][T20019] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 1415.286881][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 1415.296825][T10104] bridge_slave_0: left allmulticast mode [ 1415.302517][T10104] bridge_slave_0: left promiscuous mode [ 1415.352446][T10104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.704582][T10104] team0 (unregistering): Port device team_slave_1 removed [ 1420.163875][ C1] net_ratelimit: 41 callbacks suppressed [ 1420.523286][T10104] team0 (unregistering): Port device team_slave_0 removed [ 1421.342249][T10104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1422.319865][T10104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1423.453462][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.461783][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.049793][T10104] bond0 (unregistering): Released all slaves [ 1425.358980][T18134] net_ratelimit: 40 callbacks suppressed [ 1425.740213][T20042] syzkaller0: entered promiscuous mode [ 1425.745900][T20042] syzkaller0: entered allmulticast mode [ 1427.882284][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1427.911047][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1427.935691][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1427.949374][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1427.961735][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1427.974064][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1429.520199][T20090] loop3: detected capacity change from 0 to 512 [ 1429.573252][T20090] EXT4-fs (loop3): unable to read superblock [ 1430.073926][ T5782] Bluetooth: hci3: command tx timeout [ 1430.474936][T17357] net_ratelimit: 56 callbacks suppressed [ 1432.154402][ T5782] Bluetooth: hci3: command tx timeout [ 1432.595545][T10104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.931903][T10104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.244253][ T5782] Bluetooth: hci3: command tx timeout [ 1434.330220][T10104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.050424][T10104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.584216][T20145] loop3: detected capacity change from 0 to 256 [ 1435.735457][ T42] net_ratelimit: 47 callbacks suppressed [ 1436.313093][ T5782] Bluetooth: hci3: command tx timeout [ 1436.960406][T19907] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1437.061318][T20081] chnl_net:caif_netlink_parms(): no params data found [ 1437.128738][T19907] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1437.276162][T19907] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1437.711158][T19907] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1438.919817][T20081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.961561][T20081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.995556][T20081] bridge_slave_0: entered allmulticast mode [ 1439.023939][T20081] bridge_slave_0: entered promiscuous mode [ 1439.036026][T20186] atomic_op ffff88804ee89198 conn xmit_atomic 0000000000000000 [ 1439.081302][T20081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.129790][T20081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.165111][T20081] bridge_slave_1: entered allmulticast mode [ 1439.192285][T20081] bridge_slave_1: entered promiscuous mode [ 1440.872798][ C1] net_ratelimit: 39 callbacks suppressed [ 1441.935131][T20081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1442.581074][T20081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1442.677165][T20208] loop3: detected capacity change from 0 to 512 [ 1442.745508][T20208] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 1442.753682][T20208] System zones: 1-12 [ 1442.759858][T20208] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.3227: corrupted inode contents [ 1442.788931][T20208] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1442.797928][T20208] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.3227: corrupted inode contents [ 1442.822722][T20208] EXT4-fs error (device loop3): ext4_evict_inode:302: inode #15: comm syz.3.3227: mark_inode_dirty error [ 1442.836160][T20208] EXT4-fs (loop3): 1 orphan inode deleted [ 1442.843551][T20208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1442.998764][T17579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.773802][T20081] team0: Port device team_slave_0 added [ 1443.879356][T20081] team0: Port device team_slave_1 added [ 1445.874562][T10104] hsr_slave_0: left promiscuous mode [ 1445.945388][T10104] hsr_slave_1: left promiscuous mode [ 1446.021419][T10104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1446.072435][ C1] net_ratelimit: 43 callbacks suppressed [ 1446.095799][T10104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1446.257711][T10104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1446.287985][T10104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.075704][T10104] bridge_slave_1: left allmulticast mode [ 1447.081501][T10104] bridge_slave_1: left promiscuous mode [ 1447.172641][T10104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.066728][T10104] bridge_slave_0: left allmulticast mode [ 1450.101134][T10104] bridge_slave_0: left promiscuous mode [ 1450.127648][T10104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.606281][T20270] loop3: detected capacity change from 0 to 128 [ 1450.962342][T10104] veth1_macvtap: left promiscuous mode [ 1450.968930][T10104] veth0_macvtap: left promiscuous mode [ 1450.988114][T10104] veth1_vlan: left promiscuous mode [ 1451.007327][T10104] veth0_vlan: left promiscuous mode [ 1451.309518][T20272] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[17579] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[20272] [ 1451.327745][T10104] net_ratelimit: 48 callbacks suppressed [ 1455.168809][T20282] netlink: 165 bytes leftover after parsing attributes in process `syz.5.3233'. [ 1456.030923][T17480] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1456.045750][T17480] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1456.057984][T17480] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1456.118133][T17480] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1456.135652][T17480] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1456.144063][T17480] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1456.349906][ C0] net_ratelimit: 34 callbacks suppressed [ 1456.535052][T10104] team0 (unregistering): Port device team_slave_1 removed [ 1456.690784][T10104] team0 (unregistering): Port device team_slave_0 removed [ 1457.552799][T10104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1458.242043][ T5782] Bluetooth: hci4: command tx timeout [ 1458.390594][T10104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1460.326535][ T5782] Bluetooth: hci4: command tx timeout [ 1460.694451][T20297] loop5: detected capacity change from 0 to 1024 [ 1460.806853][T20292] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1461.511614][ C1] net_ratelimit: 21 callbacks suppressed [ 1462.050941][T10104] bond0 (unregistering): Released all slaves [ 1462.391750][ T5782] Bluetooth: hci4: command tx timeout [ 1462.584007][T20081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1462.591010][T20081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.722405][T20081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1462.770398][T20081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1462.810649][T20081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.943566][T20081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1463.957182][T20081] hsr_slave_0: entered promiscuous mode [ 1463.978414][T17480] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1464.007418][T17480] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1464.023441][T17480] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1464.033178][T17480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1464.050638][T17480] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1464.061933][T17480] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1464.089366][T20081] hsr_slave_1: entered promiscuous mode [ 1464.213288][T20314] loop5: detected capacity change from 0 to 8192 [ 1464.487632][ T5782] Bluetooth: hci4: command tx timeout [ 1464.539825][T19362] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 1464.548651][T19362] FAT-fs (loop5): Filesystem has been set read-only [ 1466.168322][ T5782] Bluetooth: hci0: command tx timeout [ 1466.711853][ C1] net_ratelimit: 37 callbacks suppressed [ 1468.374136][ T5782] Bluetooth: hci0: command tx timeout [ 1468.731470][T20284] chnl_net:caif_netlink_parms(): no params data found [ 1470.351415][T20310] chnl_net:caif_netlink_parms(): no params data found [ 1470.391249][ T5782] Bluetooth: hci0: command tx timeout [ 1470.600464][T20284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.607850][T20284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.615983][T20284] bridge_slave_0: entered allmulticast mode [ 1470.625757][T20284] bridge_slave_0: entered promiscuous mode [ 1470.795581][T20081] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1471.065819][T20284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1471.073239][T20284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.080570][T20284] bridge_slave_1: entered allmulticast mode [ 1471.088506][T20284] bridge_slave_1: entered promiscuous mode [ 1471.433621][T20081] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1471.498738][T20081] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1471.585408][T20081] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1471.750981][ C0] net_ratelimit: 20 callbacks suppressed [ 1473.152043][ T5782] Bluetooth: hci0: command tx timeout [ 1473.396978][T20284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.425394][T20284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.556827][T10104] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.934008][T10104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.970584][T20310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.998586][T20310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.025772][T20310] bridge_slave_0: entered allmulticast mode [ 1474.034159][T20310] bridge_slave_0: entered promiscuous mode [ 1474.056095][T20310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.074410][T20310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.088921][T20310] bridge_slave_1: entered allmulticast mode [ 1474.103171][T20310] bridge_slave_1: entered promiscuous mode [ 1474.298031][T10104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.478164][T20284] team0: Port device team_slave_0 added [ 1474.599359][T20284] team0: Port device team_slave_1 added [ 1474.962042][T10104] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.615285][T20310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1476.687527][T20310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.195203][T18134] net_ratelimit: 33 callbacks suppressed [ 1477.703580][T20402] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1477.713100][T20402] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1477.722910][T20402] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1478.812058][T20284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.820106][T20284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1478.866164][T20284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.887018][T20284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.894180][T20284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1478.930374][T20284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.030952][T20310] team0: Port device team_slave_0 added [ 1479.126405][T20310] team0: Port device team_slave_1 added [ 1479.206545][T20081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1479.452725][T20310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1479.459724][T20310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.550713][T20310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1479.573518][T20310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1479.593154][T20310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.678871][T20310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.719715][T20284] hsr_slave_0: entered promiscuous mode [ 1479.770986][T20284] hsr_slave_1: entered promiscuous mode [ 1479.789725][T20284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1479.798613][T20284] Cannot create hsr debugfs directory [ 1480.532107][T20081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1480.640513][T20425] loop5: detected capacity change from 0 to 8 [ 1480.930284][T20310] hsr_slave_0: entered promiscuous mode [ 1480.982458][T20310] hsr_slave_1: entered promiscuous mode [ 1481.013554][T20430] loop5: detected capacity change from 0 to 256 [ 1481.023331][T20310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1481.044260][T20310] Cannot create hsr debugfs directory [ 1481.053380][T20430] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1481.196020][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.203296][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1481.219869][T20430] overlay: ./file0 is not a directory [ 1481.829294][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.836537][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1482.241995][ C0] net_ratelimit: 23 callbacks suppressed [ 1483.716738][T10104] bond1: (slave erspan1): Releasing backup interface [ 1483.738980][T10104] erspan1 (unregistering): left promiscuous mode [ 1484.881428][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.887735][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.535466][T10104] hsr_slave_0: left promiscuous mode [ 1486.589930][T10104] hsr_slave_1: left promiscuous mode [ 1486.611552][T10104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1486.629690][T10104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1486.649532][T10104] bridge_slave_1: left allmulticast mode [ 1486.662968][T10104] bridge_slave_1: left promiscuous mode [ 1486.670836][T10104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.681551][T10104] bridge_slave_0: left allmulticast mode [ 1486.687322][T10104] bridge_slave_0: left promiscuous mode [ 1486.693377][T10104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.715913][T10104] hsr_slave_0: left promiscuous mode [ 1486.724284][T10104] hsr_slave_1: left promiscuous mode [ 1486.730836][T10104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1486.738424][T10104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1486.747590][T10104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1486.780391][T10104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1486.790656][T10104] bridge_slave_1: left allmulticast mode [ 1486.796350][T10104] bridge_slave_1: left promiscuous mode [ 1486.802817][T10104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.822800][T10104] bridge_slave_0: left allmulticast mode [ 1486.828482][T10104] bridge_slave_0: left promiscuous mode [ 1486.844944][T10104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.983110][T10104] veth1_macvtap: left promiscuous mode [ 1486.988710][T10104] veth0_macvtap: left promiscuous mode [ 1486.997096][T10104] veth1_vlan: left promiscuous mode [ 1487.003880][T10104] veth0_vlan: left promiscuous mode [ 1487.430113][ C1] net_ratelimit: 34 callbacks suppressed [ 1487.736900][T10104] team0 (unregistering): Port device team_slave_1 removed [ 1487.814560][T10104] team0 (unregistering): Port device team_slave_0 removed [ 1487.870224][T10104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1487.933847][T10104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1488.308786][T10104] bond0 (unregistering): Released all slaves [ 1488.728177][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1488.737427][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1488.748107][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1488.762299][T19364] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1488.773125][T19364] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1488.781052][T19364] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1488.938707][T10104] bond1 (unregistering): Released all slaves [ 1489.985734][T10104] team0 (unregistering): Port device team_slave_1 removed [ 1490.109581][T10104] team0 (unregistering): Port device team_slave_0 removed [ 1490.196973][T10104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1490.287963][T10104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1490.877001][T17480] Bluetooth: hci1: command tx timeout [ 1490.989936][T10104] bond0 (unregistering): Released all slaves [ 1492.550191][T17679] net_ratelimit: 19 callbacks suppressed [ 1492.610864][T13124] IPVS: starting estimator thread 0... [ 1492.699934][T20505] IPVS: using max 26 ests per chain, 62400 per kthread [ 1492.839360][T20284] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1494.064264][T17480] Bluetooth: hci1: command tx timeout [ 1494.169029][T20284] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1494.786384][T20284] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1494.835910][T20284] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1496.625431][T17480] Bluetooth: hci1: command tx timeout [ 1497.207403][T10104] IPVS: stop unused estimator thread 0... [ 1497.609628][T17357] net_ratelimit: 14 callbacks suppressed [ 1498.167263][T20488] chnl_net:caif_netlink_parms(): no params data found [ 1498.233324][T20310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1498.263394][T20310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1498.430923][T20310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1498.458498][T20310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1498.712790][T17480] Bluetooth: hci1: command tx timeout [ 1498.915425][T20284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.271755][T20488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.278947][T20488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.316868][T20488] bridge_slave_0: entered allmulticast mode [ 1499.373255][T20488] bridge_slave_0: entered promiscuous mode [ 1500.636455][T20284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.682770][T20488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.709568][T20488] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.716925][T20488] bridge_slave_1: entered allmulticast mode [ 1500.751229][T20488] bridge_slave_1: entered promiscuous mode [ 1501.032247][T20488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.153658][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.160897][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1501.286540][T20488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.372888][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.380142][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1502.166427][T20488] team0: Port device team_slave_0 added [ 1502.319342][T20488] team0: Port device team_slave_1 added [ 1502.446787][T20310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1502.709560][ C1] net_ratelimit: 22 callbacks suppressed [ 1502.988185][T20488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1503.024649][T20488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1503.128461][T20488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1503.170455][T20488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1503.177444][T20488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1503.340219][T20488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1504.506469][T20310] 8021q: adding VLAN 0 to HW filter on device team0 [ 1507.387274][T17679] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.394516][T17679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1507.468436][T20488] hsr_slave_0: entered promiscuous mode [ 1507.517856][T20488] hsr_slave_1: entered promiscuous mode [ 1507.526445][T20488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1507.544823][T20488] Cannot create hsr debugfs directory [ 1507.671633][T10109] hsr_slave_0: left promiscuous mode [ 1507.694749][T10109] hsr_slave_1: left promiscuous mode [ 1507.735677][T10109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1507.751713][T10109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1507.766328][T10109] bridge_slave_1: left allmulticast mode [ 1507.777403][T10109] bridge_slave_1: left promiscuous mode [ 1507.786864][T10109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.796096][T20609] loop5: detected capacity change from 0 to 1024 [ 1507.804113][T20609] EXT4-fs: Ignoring removed mblk_io_submit option [ 1507.833218][T20609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1507.856407][T20609] net_ratelimit: 13 callbacks suppressed [ 1507.856419][T20609] ip_tables: iptables: counters copy to user failed while replacing table [ 1507.891467][T10109] bridge_slave_0: left allmulticast mode [ 1507.904628][T10109] bridge_slave_0: left promiscuous mode [ 1507.911680][T10109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.122508][T19362] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1510.132651][T10109] team0 (unregistering): Port device team_slave_1 removed [ 1510.302144][T10109] team0 (unregistering): Port device team_slave_0 removed [ 1510.465355][T10109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1510.626494][T10109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1511.604192][T10109] bond0 (unregistering): Released all slaves [ 1511.839741][T17679] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.846943][T17679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1512.145651][ T28] audit: type=1326 audit(1790130514.153:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20620 comm="syz.5.3266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bef9e159 code=0x7ffc0000 [ 1512.217232][T20284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1512.243304][ T28] audit: type=1326 audit(1790130514.153:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20620 comm="syz.5.3266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f77bef9e159 code=0x7ffc0000 [ 1512.419595][ T28] audit: type=1326 audit(1790130514.153:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20620 comm="syz.5.3266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bef9e159 code=0x7ffc0000 [ 1512.466502][ T28] audit: type=1326 audit(1790130514.153:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20620 comm="syz.5.3266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77bef5e98e code=0x7ffc0000 [ 1512.502971][ T28] audit: type=1326 audit(1790130514.153:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20620 comm="syz.5.3266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f77bef9f457 code=0x7ffc0000 [ 1512.541610][ T28] audit: type=1326 audit(1790130514.153:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20620 comm="syz.5.3266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77bef9e159 code=0x7ffc0000 [ 1512.604331][ T28] audit: type=1326 audit(1790130514.153:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20620 comm="syz.5.3266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f77bef9f457 code=0x7ffc0000 [ 1512.714080][ T28] audit: type=1326 audit(1790130514.153:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20620 comm="syz.5.3266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f77bef5e98e code=0x7ffc0000 [ 1512.789424][ T28] audit: type=1326 audit(1790130514.153:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20620 comm="syz.5.3266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bef9e159 code=0x7ffc0000 [ 1512.868646][ C0] net_ratelimit: 15 callbacks suppressed [ 1513.013335][ T28] audit: type=1326 audit(1790130514.163:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20620 comm="syz.5.3266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77bef9e159 code=0x7ffc0000 [ 1514.751936][T20310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1515.633918][T20488] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1515.699496][T20488] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1516.099325][T20488] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1516.147995][T20488] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1516.218340][T19364] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1516.236523][T19364] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1516.253229][T19364] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1516.275537][T19364] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1516.290021][T19364] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1516.299758][T19364] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1518.069471][T10094] net_ratelimit: 20 callbacks suppressed [ 1518.396070][T19364] Bluetooth: hci3: command tx timeout [ 1518.417148][T20310] veth0_vlan: entered promiscuous mode [ 1518.434298][T20310] veth1_vlan: entered promiscuous mode [ 1518.627309][T20310] veth0_macvtap: entered promiscuous mode [ 1518.804509][T20310] veth1_macvtap: entered promiscuous mode [ 1519.120961][T20488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.137365][T20310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.174048][T20310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.206697][T20310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.218052][T20310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.236261][T20310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.247112][T20310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.270496][T20310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1519.423616][T20310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1519.449228][T20310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.460197][T20310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1519.478148][T20310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.498157][T20310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1519.515761][T20310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.528002][T20310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1519.994486][T20488] 8021q: adding VLAN 0 to HW filter on device team0 [ 1520.178846][T20310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.188160][T20310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.197106][T20310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.206035][T20310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.229639][T20671] chnl_net:caif_netlink_parms(): no params data found [ 1520.469131][T19364] Bluetooth: hci3: command tx timeout [ 1520.537129][T18134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.544359][T18134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.554779][T18134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.562009][T18134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1521.148010][T20671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.170878][T20671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.188402][T20671] bridge_slave_0: entered allmulticast mode [ 1521.200521][T20671] bridge_slave_0: entered promiscuous mode [ 1521.236339][T20671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.269059][T20671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.276434][T20671] bridge_slave_1: entered allmulticast mode [ 1521.285381][T20671] bridge_slave_1: entered promiscuous mode [ 1521.637027][T20671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1521.686185][T18134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1521.710140][T18134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1521.775775][T20671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.056500][T17357] hsr_slave_0: left promiscuous mode [ 1522.063920][T17357] hsr_slave_1: left promiscuous mode [ 1522.076173][T17357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.100266][T17357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.124353][T17357] bridge_slave_1: left allmulticast mode [ 1522.143923][T17357] bridge_slave_1: left promiscuous mode [ 1522.159131][T17357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.176279][T17357] bridge_slave_0: left allmulticast mode [ 1522.182912][T17357] bridge_slave_0: left promiscuous mode [ 1522.188788][T17357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.549850][T19364] Bluetooth: hci3: command tx timeout [ 1523.187606][T17357] team0 (unregistering): Port device team_slave_1 removed [ 1523.195440][T18132] net_ratelimit: 50 callbacks suppressed [ 1523.330791][T17357] team0 (unregistering): Port device team_slave_0 removed [ 1523.394817][T17480] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1523.410922][T17480] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1523.420559][T17480] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1523.433216][T17480] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1523.441886][T17480] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1523.449709][T17480] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1523.549891][T17357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1523.631277][T17357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1524.237109][T17357] bond0 (unregistering): Released all slaves [ 1524.462637][T20671] team0: Port device team_slave_0 added [ 1524.514796][T20671] team0: Port device team_slave_1 added [ 1524.629125][T17480] Bluetooth: hci3: command tx timeout [ 1524.757144][T20671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1524.816356][T20671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1524.905522][T20671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.053236][T20671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.070321][T20671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.147956][T20671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.510437][T17480] Bluetooth: hci4: command tx timeout [ 1525.672394][T20671] hsr_slave_0: entered promiscuous mode [ 1525.686193][T20671] hsr_slave_1: entered promiscuous mode [ 1526.092406][T20488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1526.425139][T17357] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.651258][T17357] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.731805][T20748] chnl_net:caif_netlink_parms(): no params data found [ 1526.864580][T17357] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.071117][T17357] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.452518][T20488] veth0_vlan: entered promiscuous mode [ 1527.588408][T17480] Bluetooth: hci4: command tx timeout [ 1527.823726][T20748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.831885][T20748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.848269][T20748] bridge_slave_0: entered allmulticast mode [ 1527.855937][T20748] bridge_slave_0: entered promiscuous mode [ 1527.869117][T20748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.876271][T20748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.883774][T20748] bridge_slave_1: entered allmulticast mode [ 1527.891511][T20748] bridge_slave_1: entered promiscuous mode [ 1527.991649][T20488] veth1_vlan: entered promiscuous mode [ 1528.052447][T20748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1528.181738][T20748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1528.265669][T20488] veth0_macvtap: entered promiscuous mode [ 1528.287679][T20488] veth1_macvtap: entered promiscuous mode [ 1528.388679][T18134] net_ratelimit: 36 callbacks suppressed [ 1528.414293][T20748] team0: Port device team_slave_0 added [ 1528.582492][T20748] team0: Port device team_slave_1 added [ 1528.862314][T20488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1528.890807][T20488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.927762][T20488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1528.944444][T20488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.968544][T20488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1528.992237][T20488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.002294][T20488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1529.013028][T20488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.029708][T20488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1529.045420][T20748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1529.056468][T20748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.087809][T20748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.210023][T20748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.217004][T20748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.246418][T20748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.433666][T20671] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1529.516671][T20488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1529.539830][T20488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.556542][T20488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1529.573668][T20488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.589636][T20488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1529.600387][T20488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.611637][T20488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1529.623429][T20488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.635546][T20488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1529.644590][T20671] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1529.668818][T17480] Bluetooth: hci4: command tx timeout [ 1529.705060][T20488] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.726741][T20488] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.736813][T20488] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.754789][T20488] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.903986][T20671] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1529.936586][T20671] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1530.046934][T20748] hsr_slave_0: entered promiscuous mode [ 1530.071767][T20748] hsr_slave_1: entered promiscuous mode [ 1530.088039][T20748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1530.095674][T20748] Cannot create hsr debugfs directory [ 1530.835967][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.870211][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.930402][T17357] hsr_slave_0: left promiscuous mode [ 1530.958955][T17357] hsr_slave_1: left promiscuous mode [ 1530.985393][T17357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1530.997668][T17357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1531.014522][T17357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1531.026138][T17357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1531.045784][T17357] bridge_slave_1: left allmulticast mode [ 1531.055350][T17357] bridge_slave_1: left promiscuous mode [ 1531.065783][T17357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.090872][T17357] bridge_slave_0: left allmulticast mode [ 1531.096558][T17357] bridge_slave_0: left promiscuous mode [ 1531.102697][T17357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.173238][T17357] veth1_macvtap: left promiscuous mode [ 1531.179105][T17357] veth0_macvtap: left promiscuous mode [ 1531.184789][T17357] veth1_vlan: left promiscuous mode [ 1531.200500][T17357] veth0_vlan: left promiscuous mode [ 1531.747792][T17480] Bluetooth: hci4: command tx timeout [ 1532.381466][T17357] team0 (unregistering): Port device team_slave_1 removed [ 1532.464328][T17357] team0 (unregistering): Port device team_slave_0 removed [ 1532.548844][T17357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1532.634869][T17357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1533.312999][T17357] bond0 (unregistering): Released all slaves [ 1533.427526][ C1] net_ratelimit: 67 callbacks suppressed [ 1533.675801][T18132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.703294][T18132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1536.435463][T20671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1538.386408][T20857] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1538.408279][T20671] 8021q: adding VLAN 0 to HW filter on device team0 [ 1538.628923][ C1] net_ratelimit: 31 callbacks suppressed [ 1538.750427][T17237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.757575][T17237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1538.936777][T10093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.943970][T10093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1539.674872][T20748] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1539.879113][T20748] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1539.956064][T20748] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1540.158682][T20748] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1540.610850][T20671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1541.092889][T20748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.230743][T20748] 8021q: adding VLAN 0 to HW filter on device team0 [ 1541.279843][T10093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.287084][T10093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1541.379935][T10093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.387182][T10093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1541.644444][T20748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1542.192870][T20671] veth0_vlan: entered promiscuous mode [ 1542.272056][T20671] veth1_vlan: entered promiscuous mode [ 1542.634433][T20671] veth0_macvtap: entered promiscuous mode [ 1542.680510][T20671] veth1_macvtap: entered promiscuous mode [ 1542.798201][T20748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1542.939068][T20671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1542.997427][T20671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1543.055642][T20671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1543.161993][T20671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1543.252936][T20671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1543.394403][T20671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1543.509058][T20671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1543.618519][T20671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1543.771781][T20671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1543.826999][ C1] net_ratelimit: 35 callbacks suppressed [ 1544.374192][T20671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1544.491694][T20671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.593397][T20671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1544.702170][T20671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.808889][T20671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1544.928487][T20671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.040933][T20671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.143321][T20671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.304528][T20671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1545.653298][T20671] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.750696][T20671] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.844684][T20671] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.943625][T20671] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.095848][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.103088][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.575422][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.614457][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.740351][T18134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.779524][T18134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.870389][T20748] veth0_vlan: entered promiscuous mode [ 1547.988646][T20748] veth1_vlan: entered promiscuous mode [ 1548.199867][T20748] veth0_macvtap: entered promiscuous mode [ 1548.264330][T20748] veth1_macvtap: entered promiscuous mode [ 1549.186640][ C1] net_ratelimit: 63 callbacks suppressed [ 1550.044646][T20748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1550.129610][T20748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.219875][T20748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.517121][T20748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.556462][T20748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.606502][T20748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.616395][T20748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.696512][T20748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.736483][T20748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.776458][T20748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.808788][T20748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1551.863935][T20748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1551.894435][T20748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.921040][T20748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1551.957012][T20748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.976552][T20748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.016687][T20748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.056530][T20748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.086407][T20748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.096289][T20748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.146665][T20748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.178738][T20748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1552.256114][T20748] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.288102][T20748] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.322302][T20748] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.354804][T20748] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.754355][T10093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.776124][T10093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.009716][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.036566][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.708163][ C1] net_ratelimit: 75 callbacks suppressed [ 1555.915126][T20962] usb usb8: usbfs: process 20962 (syz.7.3278) did not claim interface 0 before use [ 1556.187837][T20968] loop4: detected capacity change from 0 to 8 [ 1557.791835][T20972] gadgetfs: bound to dummy_udc driver [ 1559.986005][ C1] net_ratelimit: 72 callbacks suppressed [ 1565.105696][ C1] net_ratelimit: 38 callbacks suppressed [ 1570.626811][ C1] net_ratelimit: 43 callbacks suppressed [ 1575.665117][ C1] net_ratelimit: 50 callbacks suppressed [ 1577.496295][T21082] loop5: detected capacity change from 0 to 16 [ 1577.507569][T21082] erofs: (device loop5): mounted with root inode @ nid 36. [ 1577.631341][T21083] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1578.325057][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1578.325074][ T28] audit: type=1400 audit(1790130580.337:348): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=223A6F pid=21107 comm="syz.7.3291" name=223A6F offset=35 [ 1580.784842][ C1] net_ratelimit: 55 callbacks suppressed [ 1585.986960][T10093] net_ratelimit: 42 callbacks suppressed [ 1589.669698][T21157] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1591.024702][T17357] net_ratelimit: 53 callbacks suppressed [ 1592.802695][ T28] audit: type=1400 audit(1790130594.828:349): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=223A6F pid=21176 comm="syz.8.3304" name=223A6F offset=35 [ 1592.888172][T19364] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1592.903457][T19364] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1592.913738][T19364] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1592.928455][T19364] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1592.948065][T19364] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1592.961546][T19364] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1593.222132][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.204129][T19364] Bluetooth: hci0: command tx timeout [ 1595.289384][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.064011][ C0] net_ratelimit: 51 callbacks suppressed [ 1596.983598][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.264252][T17480] Bluetooth: hci0: command tx timeout [ 1598.708634][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.166625][T19364] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1599.180217][T19364] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1599.190211][T19364] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1599.199649][T19364] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1599.207760][T19364] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1599.215275][T19364] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1599.345983][T19364] Bluetooth: hci0: command tx timeout [ 1599.482568][T21181] chnl_net:caif_netlink_parms(): no params data found [ 1601.274573][T19364] Bluetooth: hci2: command tx timeout [ 1601.343972][ C1] net_ratelimit: 44 callbacks suppressed [ 1601.424867][T19364] Bluetooth: hci0: command tx timeout [ 1601.565812][T21181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.573084][T21181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.644471][T21181] bridge_slave_0: entered allmulticast mode [ 1601.652361][T21181] bridge_slave_0: entered promiscuous mode [ 1602.073870][T21181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.081063][T21181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.132531][T21181] bridge_slave_1: entered allmulticast mode [ 1602.166419][T21181] bridge_slave_1: entered promiscuous mode [ 1602.982766][T21181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1603.045426][T21181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1603.343805][T19364] Bluetooth: hci2: command tx timeout [ 1603.841253][T21181] team0: Port device team_slave_0 added [ 1603.907931][T21181] team0: Port device team_slave_1 added [ 1604.566759][T21181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1604.615005][T21181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1604.722632][T21181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1606.365650][ C1] net_ratelimit: 30 callbacks suppressed [ 1606.373500][ T28] audit: type=1326 audit(1790130607.478:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.8.3309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed1359e159 code=0x0 [ 1606.398712][T19364] Bluetooth: hci2: command tx timeout [ 1606.569629][T21181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1606.606434][T21181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1606.991794][T21181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1607.585505][T21209] chnl_net:caif_netlink_parms(): no params data found [ 1607.748956][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.755558][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.463395][T19364] Bluetooth: hci2: command tx timeout [ 1609.103196][T21264] [ 1609.105567][T21264] ====================================================== [ 1609.112586][T21264] WARNING: possible circular locking dependency detected [ 1609.119642][T21264] syzkaller #0 Not tainted [ 1609.124052][T21264] ------------------------------------------------------ [ 1609.131082][T21264] syz.7.3310/21264 is trying to acquire lock: [ 1609.137141][T21264] ffff8880685040b8 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfc/0xe30 [ 1609.146291][T21264] [ 1609.146291][T21264] but task is already holding lock: [ 1609.153703][T21264] ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 1609.162660][T21264] [ 1609.162660][T21264] which lock already depends on the new lock. [ 1609.162660][T21264] [ 1609.173077][T21264] [ 1609.173077][T21264] the existing dependency chain (in reverse order) is: [ 1609.182103][T21264] [ 1609.182103][T21264] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 1609.189515][T21264] __mutex_lock+0x135/0xc80 [ 1609.194499][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88807b918fd8 is addr:fe80::e for cmd:2 at entry:ffff88805de1b100 [ 1609.194574][T21264] rfcomm_security_cfm+0x41/0x550 [ 1609.213258][T21264] hci_encrypt_cfm+0x363/0x4d0 [ 1609.218631][T21264] hci_encrypt_change_evt+0x5c3/0xe30 [ 1609.224554][T21264] hci_event_packet+0x807/0x1280 [ 1609.230031][T21264] hci_rx_work+0x43a/0xd60 [ 1609.235029][T21264] process_scheduled_works+0xa60/0x1600 [ 1609.241124][T21264] worker_thread+0xa5e/0xfe0 [ 1609.246269][T21264] kthread+0x2fa/0x390 [ 1609.250907][T21264] ret_from_fork+0x48/0x80 [ 1609.255871][T21264] ret_from_fork_asm+0x11/0x20 [ 1609.261202][T21264] [ 1609.261202][T21264] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 1609.269118][T21264] __mutex_lock+0x135/0xc80 [ 1609.274174][T21264] hci_remote_features_evt+0x535/0x900 [ 1609.280195][T21264] hci_event_packet+0x807/0x1280 [ 1609.285672][T21264] hci_rx_work+0x43a/0xd60 [ 1609.290627][T21264] process_scheduled_works+0xa60/0x1600 [ 1609.296746][T21264] worker_thread+0xa5e/0xfe0 [ 1609.301880][T21264] kthread+0x2fa/0x390 [ 1609.306496][T21264] ret_from_fork+0x48/0x80 [ 1609.311463][T21264] ret_from_fork_asm+0x11/0x20 [ 1609.316780][T21264] [ 1609.316780][T21264] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 1609.324116][T21264] __lock_acquire+0x37ef/0x7d80 [ 1609.329509][T21264] lock_acquire+0x19e/0x420 [ 1609.334570][T21264] __mutex_lock+0x135/0xc80 [ 1609.339606][T21264] l2cap_chan_connect+0xfc/0xe30 [ 1609.345118][T21264] l2cap_sock_connect+0x586/0x760 [ 1609.350690][T21264] kernel_connect+0x142/0x1c0 [ 1609.355911][T21264] rfcomm_dlc_open+0xa1f/0xec0 [ 1609.361209][T21264] rfcomm_sock_connect+0x2ed/0x600 [ 1609.366928][T21264] __sys_connect+0x3da/0x470 [ 1609.372062][T21264] __x64_sys_connect+0x7a/0x90 [ 1609.377367][T21264] do_syscall_64+0x55/0xb0 [ 1609.382333][T21264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1609.388799][T21264] [ 1609.388799][T21264] other info that might help us debug this: [ 1609.388799][T21264] [ 1609.399039][T21264] Chain exists of: [ 1609.399039][T21264] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 1609.399039][T21264] [ 1609.411578][T21264] Possible unsafe locking scenario: [ 1609.411578][T21264] [ 1609.419037][T21264] CPU0 CPU1 [ 1609.424409][T21264] ---- ---- [ 1609.429785][T21264] lock(rfcomm_mutex); [ 1609.433958][T21264] lock(hci_cb_list_lock); [ 1609.441000][T21264] lock(rfcomm_mutex); [ 1609.447715][T21264] lock(&hdev->lock); [ 1609.451827][T21264] [ 1609.451827][T21264] *** DEADLOCK *** [ 1609.451827][T21264] [ 1609.460004][T21264] 1 lock held by syz.7.3310/21264: [ 1609.465149][T21264] #0: ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 1609.474508][T21264] [ 1609.474508][T21264] stack backtrace: [ 1609.480434][T21264] CPU: 0 PID: 21264 Comm: syz.7.3310 Not tainted syzkaller #0 [ 1609.487944][T21264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1609.498025][T21264] Call Trace: [ 1609.501357][T21264] [ 1609.504389][T21264] dump_stack_lvl+0x18c/0x250 [ 1609.509104][T21264] ? load_image+0x420/0x420 [ 1609.513634][T21264] ? show_regs_print_info+0x20/0x20 [ 1609.518868][T21264] ? print_circular_bug+0x12b/0x1a0 [ 1609.524091][T21264] check_noncircular+0x2fc/0x400 [ 1609.529052][T21264] ? print_deadlock_bug+0x5d0/0x5d0 [ 1609.534268][T21264] ? lockdep_lock+0xf5/0x230 [ 1609.538891][T21264] ? _find_first_zero_bit+0xd6/0x100 [ 1609.544193][T21264] __lock_acquire+0x37ef/0x7d80 [ 1609.549074][T21264] ? verify_lock_unused+0x140/0x140 [ 1609.554296][T21264] ? asan.module_dtor+0x20/0x20 [ 1609.559191][T21264] lock_acquire+0x19e/0x420 [ 1609.563716][T21264] ? l2cap_chan_connect+0xfc/0xe30 [ 1609.568862][T21264] ? __might_sleep+0xe0/0xe0 [ 1609.573473][T21264] ? preempt_schedule_common+0x82/0xc0 [ 1609.578972][T21264] ? read_lock_is_recursive+0x20/0x20 [ 1609.584375][T21264] ? preempt_schedule+0xc0/0xd0 [ 1609.589253][T21264] ? schedule_preempt_disabled+0x20/0x20 [ 1609.594909][T21264] ? __lock_acquire+0x7d80/0x7d80 [ 1609.599963][T21264] __mutex_lock+0x135/0xc80 [ 1609.604485][T21264] ? l2cap_chan_connect+0xfc/0xe30 [ 1609.609660][T21264] ? _raw_read_unlock+0x3a/0x40 [ 1609.614548][T21264] ? hci_get_route+0x3a5/0x4d0 [ 1609.619353][T21264] ? l2cap_chan_connect+0xfc/0xe30 [ 1609.624494][T21264] ? mutex_lock_nested+0x20/0x20 [ 1609.629457][T21264] ? mark_lock+0x94/0x320 [ 1609.633818][T21264] l2cap_chan_connect+0xfc/0xe30 [ 1609.638783][T21264] ? lock_chain_count+0x20/0x20 [ 1609.643668][T21264] ? l2cap_chan_le_send_credits+0x4e0/0x4e0 [ 1609.649585][T21264] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1609.654973][T21264] ? _local_bh_enable+0xa0/0xa0 [ 1609.659842][T21264] ? bacmp+0xe/0x30 [ 1609.663672][T21264] l2cap_sock_connect+0x586/0x760 [ 1609.668723][T21264] ? l2cap_sock_bind+0x940/0x940 [ 1609.673680][T21264] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1609.679679][T21264] ? __lock_acquire+0x7d80/0x7d80 [ 1609.684731][T21264] ? kernel_connect+0xf2/0x1c0 [ 1609.689523][T21264] kernel_connect+0x142/0x1c0 [ 1609.693252][ C1] wireguard: wg0: Handshake for peer 62 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 1609.694212][T21264] ? kernel_accept+0x350/0x350 [ 1609.707046][ C1] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 1609.710524][T21264] ? rfcomm_dlc_open+0x9e3/0xec0 [ 1609.723072][T21264] rfcomm_dlc_open+0xa1f/0xec0 [ 1609.727889][T21264] ? rfcomm_sock_connect+0x2c6/0x600 [ 1609.733203][T21264] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1609.738599][T21264] ? rfcomm_dlc_free+0x50/0x50 [ 1609.743383][T21264] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1609.748789][T21264] ? _local_bh_enable+0xa0/0xa0 [ 1609.753651][T21264] ? do_raw_spin_unlock+0x121/0x230 [ 1609.758873][T21264] rfcomm_sock_connect+0x2ed/0x600 [ 1609.764007][T21264] __sys_connect+0x3da/0x470 [ 1609.768621][T21264] ? __sys_connect_file+0x170/0x170 [ 1609.773851][T21264] __x64_sys_connect+0x7a/0x90 [ 1609.778640][T21264] do_syscall_64+0x55/0xb0 [ 1609.783089][T21264] ? clear_bhb_loop+0x40/0x90 [ 1609.787803][T21264] ? clear_bhb_loop+0x40/0x90 [ 1609.792512][T21264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1609.798432][T21264] RIP: 0033:0x7f480139e159 [ 1609.802864][T21264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1609.822581][T21264] RSP: 002b:00007f47ff5d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1609.831020][T21264] RAX: ffffffffffffffda RBX: 00007f4801626090 RCX: 00007f480139e159 [ 1609.839017][T21264] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000009 [ 1609.847007][T21264] RBP: 00007f480143506b R08: 0000000000000000 R09: 0000000000000000 [ 1609.855011][T21264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1609.863003][T21264] R13: 00007f4801626128 R14: 00007f4801626090 R15: 00007ffd717c4e38 [ 1609.871004][T21264] [ 1609.874147][ C0] virtqueue callback for ffff8880219a4e00 (ffffffff85c745d0) [ 1609.881581][ C0] virtqueue callback for ffff88801e666200 (ffffffff84a02460) [ 1609.889052][ C0] virtqueue interrupt with no work for ffff88801e666000 [ 1609.896025][ C0] virtqueue interrupt with no work for ffff88801e65de00 [ 1609.913130][ C0] No more buffers in queue [ 1609.917641][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1609.923482][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1609.929311][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1609.935153][ C0] No more buffers in queue [ 1609.939807][ C0] No more buffers in queue [ 1609.944261][ C0] eth0: xmit ffff88805c460500 42:01:0a:80:00:01 [ 1609.950511][ C0] Added buffer head 1 to ffff8880219a5600 [ 1609.956263][ C0] virtqueue callback for ffff8880219a5600 (ffffffff85c746c0) [ 1609.963833][ C0] Sent skb ffff88805c460500 [ 1609.968383][ C0] No more buffers in queue [ 1609.972793][ C0] eth0: xmit ffff88805c460780 42:01:0a:80:00:01 [ 1609.979052][ C0] Added buffer head 1 to ffff8880219a5600 [ 1609.984796][ C0] virtqueue callback for ffff8880219a5600 (ffffffff85c746c0) [ 1609.993200][ C0] Sent skb ffff88805c460780 [ 1609.997745][ C0] No more buffers in queue [ 1610.002155][ C0] No more buffers in queue [ 1610.019012][T10093] nf_nat: Already setup manip DST for ct ffff88802f4c8a80 (status bits 0x188) [ 1610.027902][T10093] nf_nat: Already setup manip SRC for ct ffff88802f4c8a80 (status bits 0x188) [ 1610.038916][T21263] kcov: kcov_task_exit: t = ffff88802be05a00, kcov->t = ffff88802be05a00 [ 1610.048140][T13124] Added buffer head 0 to ffff88801e666200 [ 1610.063253][T21264] hci2: dst 00:00:00:00:f8:00 [ 1610.068111][T21264] hci2: dst 00:00:00:00:f8:00 handle 0x0f00 [ 1610.074143][T21264] hci2 orig refcnt 13 [ 1610.078199][T21264] hci2: conn ffff88805e932000 [ 1610.082962][T21264] hcon ffff88805e932000 orig refcnt 0 [ 1610.089021][T19364] hci2: [ 1610.091962][T19364] hci2: entry ffff88807acbde00 [ 1610.096849][T19364] cache ffff888068504f10, 00:00:00:00:f8:00 [ 1610.102827][T19364] hci2: Opcode 0x0405 [ 1610.106916][T19364] hci2: opcode 0x0405 plen 13 [ 1610.111722][T19364] hci2: skb len 16 [ 1610.115534][T19364] hci2: length 1 [ 1610.119188][T19364] hci2: end: err -110 [ 1610.123301][T19364] hci2 cmd_cnt 1 cmd queued 1 [ 1610.128064][T19364] hci2: skb ffff8880665fedc0 [ 1610.132995][T19364] hci2 type 1 len 16 [ 1610.137038][T21264] hci2 hcon ffff88805e932000 [ 1610.141759][T21264] hcon ffff88805e932000 conn ffff888025025000 hchan ffff88801bbbcb00 [ 1610.150322][T21264] conn ffff888025025000, psm 0x03, dcid 0x0000 [ 1610.156626][T21264] chan ffff888065f28000 orig refcnt 1 [ 1610.162081][T21264] hcon ffff88805e932000 orig refcnt 1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1610.171322][T21264] hcon ffff88805e932000 orig refcnt 2 [ 1610.177068][ T5761] No more buffers in queue [ 1610.181536][ T5761] eth0: xmit ffff888065831270 42:01:0a:80:00:01 [ 1610.187867][ T5761] Added buffer head 1 to ffff8880219a5600 [ 1610.188084][ C1] virtqueue callback for ffff8880219a5800 (ffffffff85c745d0) [ 1610.193650][ C0] virtqueue callback for ffff8880219a5600 (ffffffff85c746c0) [ 1610.203822][ C1] No more buffers in queue [ 1610.208474][ C0] Sent skb ffff888065831270 [ 1610.212756][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 1610.217262][ C0] No more buffers in queue [ 1610.223101][ C1] No more buffers in queue [ 1610.232081][T21264] chan ffff888065f28000 BT_BOUND -> BT_CONNECT [ 1610.240575][T21264] chan ffff888065f28000 state BT_CONNECT timeout 4000 [ 1610.250079][T21264] chan ffff888065f28000 orig refcnt 2 [ 1610.255575][T21264] hci2 orig refcnt 14 [ 1610.259675][T21264] sk ffff88805e05a000 [ 1610.263794][T21264] ffff888063f5a400 [ 1610.267614][T21264] dlc ffff888063f5a400 session ffff888026792c00 [ 1610.274408][T21264] session ffff888026792c00 state 3 [ 1610.279614][T21264] dlc ffff888063f5a400 state 7 timeout 3000 [ 1610.303102][ C1] wireguard: wg2: Handshake for peer 66 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 3) [ 1610.311515][ T5762] No more buffers in queue [ 1610.319174][ T5762] eth0: xmit ffff8880658314f0 42:01:0a:80:00:01 [ 1610.325479][ T5762] Added buffer head 1 to ffff8880219a5600 [ 1610.331232][ C0] virtqueue callback for ffff8880219a4e00 (ffffffff85c745d0) [ 1610.331260][ C0] virtqueue callback for ffff8880219a5600 (ffffffff85c746c0) [ 1610.346488][ C0] Sent skb ffff8880658314f0 [ 1610.351040][ C0] No more buffers in queue [ 1610.352130][ T11] Deleting ac141400/24 dsfield=0x00 t=ffff888025b6acb0 [ 1610.355490][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1610.355510][ C0] No more buffers in queue [ 1610.355622][ C0] No more buffers in queue [ 1610.406536][ T11] Deleting ac1414ff/32 dsfield=0x00 t=ffff888025b6acb0 [ 1610.423665][T21264] sk ffff888065f2b000 [ 1610.427724][ C0] virtqueue callback for ffff88801e666200 (ffffffff84a02460) [ 1610.427777][ C0] virtqueue interrupt with no work for ffff88801e666000 [ 1610.427790][ C0] virtqueue interrupt with no work for ffff88801e65de00 [ 1610.433205][ T11] Deleting ac14140e/32 dsfield=0x00 t=ffff888025b6acb0 [ 1610.435443][T17444] Added buffer head 0 to ffff88801e666200 [ 1610.442478][ T11] In tnode_resize ffff888025dad020 inflate_threshold=50 threshold=25 [ 1610.466430][T21158] kcov: kcov_task_exit: t = ffff88807b9a9e00, kcov->t = ffff88807b9a9e00 [ 1610.470367][T21195] kcov: kcov_task_exit: t = ffff888024dc9e00, kcov->t = ffff888024dc9e00 [ 1610.478896][T20655] kcov: kcov_task_exit: t = ffff888022ab1e00, kcov->t = ffff888022ab1e00 [ 1610.487697][T20487] kcov: kcov_task_exit: t = ffff888029099e00, kcov->t = ffff888029099e00 [ 1610.506033][ T5761] No more buffers in queue [ 1610.510488][ T5761] eth0: xmit ffff88805d98a0f0 42:01:0a:80:00:01 [ 1610.516812][ T5761] Added buffer head 18 to ffff8880219a5a00 [ 1610.519566][T21266] dlc ffff888063f5a400 state 7 dlci 2 err 0 session ffff888026792c00 [ 1610.522662][ C1] virtqueue callback for ffff8880219a5a00 (ffffffff85c746c0) [ 1610.522697][ C1] virtqueue callback for ffff8880219a5800 (ffffffff85c745d0) [ 1610.545577][ C1] Sent skb ffff88805d98a0f0 [ 1610.550140][ C1] No more buffers in queue [ 1610.553929][T21264] kcov: kcov_task_exit: t = ffff888023acda00, kcov->t = ffff888023acda00 [ 1610.554624][ C1] No more buffers in queue [ 1610.562973][ C1] virtqueue callback for ffff8880219a5800 (ffffffff85c745d0) [ 1610.565678][T21266] dlc ffff888063f5a400 state 7 [ 1610.567443][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 1610.585474][ C1] Receiving skb proto 0x0800 len 88 type 0 [ 1610.591349][ C1] Receiving skb proto 0x0800 len 112 type 0 [ 1610.597623][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 1610.603515][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 1610.609377][ C1] No more buffers in queue [ 1610.614383][ C1] No more buffers in queue [ 1610.618835][ C1] No more buffers in queue [ 1610.630708][T21266] dlc ffff888063f5a400 state 9 err 0 [ 1610.636120][ T11] In tnode_resize ffff88805e6ca420 inflate_threshold=50 threshold=25 [ 1610.644314][ T11] In tnode_resize ffff88806484bba0 inflate_threshold=50 threshold=25 [ 1610.652487][ T11] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:172.20.20.14 in wq:ffff88807b918fd8 [ 1610.662956][ T11] tunl0 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 1610.671167][ T11] net tunl0: siw: event 6 [ 1610.677244][ T11] tunl0 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 1610.693094][ T11] net tunl0: siw: event 18 [ 1610.697638][ T11] kobject: 'rx-0' (ffff88805bb79150): kobject_cleanup, parent ffff88805dd4f750 [ 1610.707974][T21266] dlc ffff888063f5a400 refcnt 2 session ffff888026792c00 [ 1610.715341][ T5761] No more buffers in queue [ 1610.719797][ T5761] eth0: xmit ffff88802f538500 42:01:0a:80:00:01 [ 1610.726101][ T5761] Added buffer head 18 to ffff8880219a5a00 [ 1610.731928][ C1] virtqueue callback for ffff8880219a5a00 (ffffffff85c746c0) [ 1610.739597][ C1] Sent skb ffff88802f538500 [ 1610.744216][ C1] No more buffers in queue [ 1610.753150][T21266] session ffff888026792c00 state 3 timeout 200 [ 1610.759355][T21266] kcov: kcov_task_exit: t = ffff888023ac9e00, kcov->t = ffff888023ac9e00 [ 1610.796291][ T11] kobject: 'rx-0' (ffff88805bb79150): auto cleanup kobject_del [ 1610.821429][ T11] kernfs rps_cpus: removing [ 1610.844069][ T11] kernfs rps_flow_cnt: removing [ 1610.848984][ T11] kobject: 'rx-0' (ffff88805bb79150): auto cleanup 'remove' event [ 1610.914566][ T11] kobject: 'rx-0' (ffff88805bb79150): kobject_uevent_env [ 1610.921647][ T11] kobject: 'rx-0' (ffff88805bb79150): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1610.959627][ T5759] No more buffers in queue [ 1610.964118][ T5759] eth0: xmit ffff888065831770 42:01:0a:80:00:01 [ 1610.970427][ T5759] Added buffer head 1 to ffff8880219a5600 [ 1610.970643][ C1] virtqueue callback for ffff8880219a5800 (ffffffff85c745d0) [ 1610.976260][ C0] virtqueue callback for ffff8880219a5600 (ffffffff85c746c0) [ 1610.983599][ C1] No more buffers in queue [ 1610.991433][ C0] Sent skb ffff888065831770 [ 1610.995357][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 1610.999866][ C0] No more buffers in queue [ 1611.005688][ C1] No more buffers in queue [ 1611.015725][ T11] kernfs rx-0: removing [ 1611.019945][ T11] kobject: 'rx-0' (ffff88805bb79150): calling ktype release [ 1611.043187][ T11] kobject: 'rx-0': free name [ 1611.047840][ T11] kernfs limit: removing [ 1611.083843][ T11] kernfs limit_max: removing [ 1611.131826][ T11] kernfs limit_min: removing [ 1611.154907][ T11] kernfs hold_time: removing [ 1611.159546][ T11] kernfs inflight: removing [ 1611.164081][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88807b918fd8 is addr:172.20.20.14 for cmd:2 at entry:ffff888069890c00 [ 1611.226813][ T11] kernfs byte_queue_limits: removing [ 1611.232271][ T11] kobject: 'tx-0' (ffff88807dd77c20): kobject_cleanup, parent ffff88805dd4f750 [ 1611.283171][ T11] kobject: 'tx-0' (ffff88807dd77c20): auto cleanup kobject_del [ 1611.315225][ T11] kernfs tx_timeout: removing [ 1611.320008][ T11] kernfs traffic_class: removing [ 1611.331580][T21266] ffff88806326c000 name hci1 bus 0 [ 1611.343171][ T11] kernfs xps_cpus: removing [ 1611.347789][ T11] kernfs xps_rxqs: removing [ 1611.352343][ T11] kernfs tx_maxrate: removing [ 1611.354786][T21266] hci1 ffff88806326c000 [ 1611.361317][T21266] hci1: [ 1611.373119][T21266] hci1: err 0x13 [ 1611.376715][T21266] hci1: cancelling interleave scan [ 1611.381825][T21266] hci1 state 0 -> 0 [ 1611.393344][T21266] All LE pending actions cleared [ 1611.398319][T21266] hdev hci1 [ 1611.401432][T21266] hcon ffff888025964000 reason 22 [ 1611.415853][T21266] hcon ffff888025964000 conn ffff888031d02000, err 103 [ 1611.421558][ T11] kobject: 'tx-0' (ffff88807dd77c20): auto cleanup 'remove' event [ 1611.424246][ C0] virtqueue callback for ffff88801e666200 (ffffffff84a02460) [ 1611.438043][ C0] virtqueue interrupt with no work for ffff88801e666000 [ 1611.445011][ C0] virtqueue interrupt with no work for ffff88801e65de00 [ 1611.448421][ T11] kobject: 'tx-0' (ffff88807dd77c20): kobject_uevent_env [ 1611.452739][ C0] net_ratelimit: 50 callbacks suppressed [ 1611.452766][ C0] wireguard: wg0: Sending keepalive packet to peer 152 ([::1]:20003/0%0) [ 1611.474655][ T11] kobject: 'tx-0' (ffff88807dd77c20): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1611.479820][T17444] Added buffer head 0 to ffff88801e666200 [ 1611.503268][ T11] kernfs tx-0: removing [ 1611.507512][ T11] kobject: 'tx-0' (ffff88807dd77c20): calling ktype release [ 1611.516881][ C1] wireguard: wg2: Receiving keepalive packet from peer 155 ([::1]:20001/0%0) [ 1611.527283][T21266] hci1 hcon ffff888025964000 chan ffff88807bbe8600 [ 1611.534398][T21266] hci1 hcon ffff888025964000 handle 200 [ 1611.539959][T21266] hci1: hcon ffff888025964000 [ 1611.547170][T21266] hcon ffff888025964000 [ 1611.551428][T21266] hci1: conn ffff888025964000 [ 1611.556522][T21266] device: 'hci1:200': device_unregister [ 1611.562092][T21266] kernfs runtime_status: removing [ 1611.569367][T21266] kernfs control: removing [ 1611.583053][ T11] kobject: 'tx-0': free name [ 1611.583075][ C0] wireguard: wg1: Sending keepalive packet to peer 160 (127.0.0.1:20003) [ 1611.593270][ C1] wireguard: wg2: Sending keepalive packet to peer 162 (127.0.0.1:20002) [ 1611.607823][T21266] kernfs runtime_suspended_time: removing [ 1611.614896][ T11] kernfs queues: removing [ 1611.619349][T21266] kernfs runtime_active_time: removing [ 1611.631710][T21266] kernfs autosuspend_delay_ms: removing [ 1611.635854][ T11] kobject: 'queues' (ffff88805dd4f750): kobject_cleanup, parent 0000000000000000 [ 1611.643308][T21266] kernfs power: removing [ 1611.665010][ T11] kobject: 'queues' (ffff88805dd4f750): calling ktype release [ 1611.672579][ T11] kobject: 'queues' (ffff88805dd4f750): kset_release [ 1611.673388][T21266] kernfs device: removing [ 1611.690776][ T11] kobject: 'queues': free name [ 1611.693315][T21266] kernfs subsystem: removing [ 1611.705735][T21266] kernfs hci1:200: removing [ 1611.710333][T21266] kernfs uevent: removing [ 1611.725729][ T11] kernfs runtime_status: removing [ 1611.730839][ T11] kernfs control: removing [ 1611.743070][ T11] kernfs runtime_suspended_time: removing [ 1611.748868][ T11] kernfs runtime_active_time: removing [ 1611.773060][ T11] kernfs autosuspend_delay_ms: removing [ 1611.786328][ T11] kernfs power: removing [ 1611.790645][ T11] kernfs subsystem: removing [ 1611.803315][ T11] kernfs tunl0: removing [ 1611.807622][ T11] kernfs uevent: removing [ 1611.824305][T21266] PM: Removing info for No Bus:hci1:200 [ 1611.830593][T21266] kobject: 'hci1:200' (ffff8880259645f0): kobject_uevent_env [ 1611.838071][ T11] kernfs rx_packets: removing [ 1611.842802][ T11] kernfs tx_packets: removing [ 1611.853498][T21266] kobject: 'hci1:200' (ffff8880259645f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/hci1:200' [ 1611.873215][ T11] kernfs rx_bytes: removing [ 1611.877776][ T11] kernfs tx_bytes: removing [ 1611.882348][ T11] kernfs rx_errors: removing [ 1611.898056][T21266] kernfs hci1:200: removing [ 1611.903071][ T11] kernfs tx_errors: removing [ 1611.907719][ T11] kernfs rx_dropped: removing [ 1611.912438][ T11] kernfs tx_dropped: removing [ 1611.923065][T21266] kobject: 'hci1:200' (ffff8880259645f0): kobject_cleanup, parent 0000000000000000 [ 1611.932919][T21266] kobject: 'hci1:200' (ffff8880259645f0): calling ktype release [ 1611.950449][ C1] virtqueue callback for ffff8880219a5800 (ffffffff85c745d0) [ 1611.957919][ C1] No more buffers in queue [ 1611.962393][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 1611.968269][ C1] No more buffers in queue [ 1611.972884][ C1] No more buffers in queue [ 1611.973290][T21266] kobject: 'hci1:200': free name [ 1611.977395][ C1] eth0: xmit ffff888063ea5a00 42:01:0a:80:00:01 [ 1611.988560][ C1] Added buffer head 18 to ffff8880219a5a00 [ 1611.994327][T21266] hci1 orig refcnt 10 [ 1611.994455][ C1] virtqueue callback for ffff8880219a5a00 (ffffffff85c746c0) [ 1611.998411][T21266] hcon ffff888073d7a000 reason 22 [ 1612.006136][ C1] wireguard: wg0: Sending keepalive packet to peer 157 (127.0.0.1:20002) [ 1612.019558][ C1] wireguard: wg0: Sending keepalive packet to peer 109 ([::1]:20002/0%0) [ 1612.028089][ C1] wireguard: wg0: Sending keepalive packet to peer 145 ([::1]:20002/0%0) [ 1612.036678][ C1] Sent skb ffff888063ea5a00 [ 1612.041193][ C1] No more buffers in queue [ 1612.047251][ C0] wireguard: wg1: Receiving keepalive packet from peer 111 ([::1]:20001/0%0) [ 1612.053207][ T11] kernfs multicast: removing [ 1612.056506][ C0] wireguard: wg1: Receiving keepalive packet from peer 147 ([::1]:20001/0%0) [ 1612.060686][ T11] kernfs collisions: removing [ 1612.073143][T21266] hcon ffff888073d7a000 conn ffff888031d01000, err 103 [ 1612.081035][T21266] hci1 hcon ffff888073d7a000 chan ffff88805eb8d300 [ 1612.094947][T21266] hci1 hcon ffff888073d7a000 handle 201 [ 1612.100509][T21266] hci1: hcon ffff888073d7a000 [ 1612.106639][T21266] hcon ffff888073d7a000 [ 1612.110973][T21266] hci1: conn ffff888073d7a000 [ 1612.117759][ T11] kernfs rx_length_errors: removing [ 1612.124447][T21266] device: 'hci1:201': device_unregister [ 1612.130114][ T11] kernfs rx_over_errors: removing [ 1612.138254][T21266] kernfs runtime_status: removing [ 1612.145119][T17480] Bluetooth: hci2: command tx timeout [ 1612.150547][T17480] hci2 cmd_cnt 1 cmd queued 0 [ 1612.157120][ T11] kernfs rx_crc_errors: removing [ 1612.162108][ T11] kernfs rx_frame_errors: removing [ 1612.167805][T21266] kernfs control: removing [ 1612.172258][T21266] kernfs runtime_suspended_time: removing [ 1612.181635][ T11] kernfs rx_fifo_errors: removing [ 1612.187018][T21266] kernfs runtime_active_time: removing [ 1612.192517][T21266] kernfs autosuspend_delay_ms: removing [ 1612.205781][ T11] kernfs rx_missed_errors: removing [ 1612.211035][ T11] kernfs tx_aborted_errors: removing [ 1612.217068][T21266] kernfs power: removing [ 1612.221354][T21266] kernfs device: removing [ 1612.226132][ C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 1612.233044][ C1] wireguard: wg0: Handshake for peer 80 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 1612.244177][ T11] kernfs tx_carrier_errors: removing [ 1612.255291][ T11] kernfs tx_fifo_errors: removing [ 1612.260382][ T11] kernfs tx_heartbeat_errors: removing [ 1612.266356][T10104] wireguard: wg0: Sending handshake initiation to peer 80 ([::1]:20003/0%0) [ 1612.277599][T21266] kernfs subsystem: removing [ 1612.282238][T21266] kernfs hci1:201: removing [ 1612.288190][T10104] nf_nat: Already setup manip DST for ct ffff888078535e00 (status bits 0x188) [ 1612.297127][T10104] nf_nat: Already setup manip SRC for ct ffff888078535e00 (status bits 0x188) [ 1612.309922][T21266] kernfs uevent: removing [ 1612.323163][ T11] kernfs tx_window_errors: removing [ 1612.328433][ T11] kernfs rx_compressed: removing [ 1612.330279][T20671] ffff88805ea24000 name hci3 bus 0 [ 1612.353322][T21266] PM: Removing info for No Bus:hci1:201 [ 1612.358901][T21266] kobject: 'hci1:201' (ffff888073d7a5f0): kobject_uevent_env [ 1612.366405][ T11] kernfs tx_compressed: removing [ 1612.371400][ T11] kernfs rx_nohandler: removing [ 1612.376433][T20671] hci3 ffff88805ea24000 [ 1612.380613][T20671] hci3: [ 1612.384352][T21266] kobject: 'hci1:201' (ffff888073d7a5f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/hci1:201' [ 1612.395989][ T11] kernfs statistics: removing [ 1612.397703][T20671] hci3: err 0x13 [ 1612.400751][ T11] kernfs netdev_group: removing [ 1612.410412][T20671] hci3: cancelling interleave scan [ 1612.417557][T21266] kernfs hci1:201: removing [ 1612.422094][T21266] kobject: 'hci1:201' (ffff888073d7a5f0): kobject_cleanup, parent 0000000000000000 [ 1612.431415][ C0] virtqueue callback for ffff88801e666200 (ffffffff84a02460) [ 1612.431460][ C0] virtqueue interrupt with no work for ffff88801e666000 [ 1612.431469][ C0] virtqueue interrupt with no work for ffff88801e65de00 [ 1612.439007][T20671] hci3 state 0 -> 0 [ 1612.439024][T20671] All LE pending actions cleared [ 1612.439123][T13124] Added buffer head 0 to ffff88801e666200 [ 1612.468729][ T11] kernfs type: removing [ 1612.469540][T20671] hdev hci3 [ 1612.473184][ T11] kernfs dev_id: removing [ 1612.480432][ T11] kernfs dev_port: removing [ 1612.485078][ T11] kernfs iflink: removing [ 1612.486234][T20671] hcon ffff88801bbec000 reason 22 [ 1612.489985][ T11] kernfs ifindex: removing [ 1612.499468][T21266] kobject: 'hci1:201' (ffff888073d7a5f0): calling ktype release [ 1612.507396][T20671] hcon ffff88801bbec000 conn ffff88807e822800, err 103 [ 1612.514904][T21266] kobject: 'hci1:201': free name [ 1612.519865][T21266] hci1 orig refcnt 7 [ 1612.523941][ T11] kernfs name_assign_type: removing [ 1612.529187][ T11] kernfs addr_assign_type: removing [ 1612.535413][T21266] hdev hci1 event 4 [ 1612.539263][T21266] hdev 0000000000000000 len 8 [ 1612.544931][ T11] kernfs addr_len: removing [ 1612.549518][ T11] kernfs link_mode: removing [ 1612.550089][T20671] hci3 hcon ffff88801bbec000 chan ffff88805e2fc800 [ 1612.554210][T21266] hci1: Cleanup of MSFT extension [ 1612.554867][T21266] hdev hci1 event 8 [ 1612.568587][ T11] kernfs address: removing [ 1612.574368][T20671] hci3 hcon ffff88801bbec000 handle 200 [ 1612.579922][T20671] hci3: hcon ffff88801bbec000 [ 1612.586827][T21266] hci1 orig refcnt 6 [ 1612.590765][T21266] channel 3 len 6 [ 1612.593235][T20671] hcon ffff88801bbec000 [ 1612.598614][T20671] hci3: conn ffff88801bbec000 [ 1612.605404][ T11] kernfs broadcast: removing [ 1612.610015][ T11] kernfs speed: removing [ 1612.614311][T20671] device: 'hci3:200': device_unregister [ 1612.620224][T21266] channel 3 len 8 [ 1612.628260][T21266] hdev hci1 event 2 [ 1612.632104][T21266] hdev 0000000000000000 len 8 [ 1612.638552][ T11] kernfs duplex: removing [ 1612.642924][ T11] kernfs dormant: removing [ 1612.648842][T20671] kernfs runtime_status: removing [ 1612.656472][T20671] kernfs control: removing [ 1612.660953][T20671] kernfs runtime_suspended_time: removing [ 1612.666792][T20671] kernfs runtime_active_time: removing [ 1612.682986][ T11] kernfs testing: removing [ 1612.687493][T21266] kernfs runtime_status: removing [ 1612.692549][T21266] kernfs control: removing [ 1612.697164][T21266] kernfs runtime_suspended_time: removing [ 1612.704975][T20671] kernfs autosuspend_delay_ms: removing [ 1612.710638][ T11] kernfs operstate: removing [ 1612.715387][ T11] kernfs carrier_changes: removing [ 1612.720541][ T11] kernfs ifalias: removing [ 1612.725124][T21266] kernfs runtime_active_time: removing [ 1612.730648][T21266] kernfs autosuspend_delay_ms: removing [ 1612.736400][T21266] kernfs power: removing [ 1612.740679][T21266] kernfs device: removing [ 1612.750946][T20671] kernfs power: removing [ 1612.755305][ T11] kernfs carrier: removing [ 1612.759774][T20671] kernfs device: removing [ 1612.764509][T20671] kernfs subsystem: removing [ 1612.769201][T21266] kernfs subsystem: removing [ 1612.775684][T21266] kernfs rfkill189: removing [ 1612.780306][T21266] kernfs uevent: removing [ 1612.784658][ C0] session ffff888026792c00 state 3 [ 1612.789953][ T3368] ffff888026792c00 dlci 0 [ 1612.793653][ T11] kernfs mtu: removing [ 1612.794778][ T3368] ffff888026792c00 cmd 83 [ 1612.798590][ T11] kernfs flags: removing [ 1612.803292][ T3368] session ffff888026792c00 len 4 [ 1612.811997][ T3368] sock ffff888077220000, sk ffff88805e05a000 [ 1612.818170][T20671] kernfs hci3:200: removing [ 1612.822759][T21266] kernfs name: removing [ 1612.827590][T21266] kernfs type: removing [ 1612.831768][T21266] kernfs index: removing [ 1612.837618][ T11] kernfs tx_queue_len: removing [ 1612.842547][ T11] kernfs gro_flush_timeout: removing [ 1612.848238][ T11] kernfs napi_defer_hard_irqs: removing [ 1612.860966][T20671] kernfs uevent: removing [ 1612.866322][T13124] cfg80211: Verifying active interfaces after reg change [ 1612.873592][T20671] PM: Removing info for No Bus:hci3:200 [ 1612.877464][ C1] wireguard: wg2: Handshake for peer 65 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 12) [ 1612.879165][T20671] kobject: 'hci3:200' (ffff88801bbec5f0): kobject_uevent_env [ 1612.898285][T21266] kernfs persistent: removing [ 1612.903474][T21266] kernfs state: removing [ 1612.910538][ T11] kernfs phys_port_id: removing [ 1612.911258][T20671] kobject: 'hci3:200' (ffff88801bbec5f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/hci3:200' [ 1612.915563][ T11] kernfs phys_port_name: removing [ 1612.932156][ T11] kernfs phys_switch_id: removing [ 1612.937299][T21266] kernfs soft: removing [ 1612.941520][T21266] kernfs hard: removing [ 1612.946324][T21266] kernfs hard_block_reasons: removing [ 1612.951732][T21266] PM: Removing info for No Bus:rfkill189 [ 1612.958912][ T11] kernfs proto_down: removing [ 1612.963937][T20671] kernfs hci3:200: removing [ 1612.968490][T20671] kobject: 'hci3:200' (ffff88801bbec5f0): kobject_cleanup, parent 0000000000000000 [ 1612.977829][T21266] kobject: 'rfkill189' (ffff888021300110): kobject_uevent_env [ 1612.979428][T21266] kobject: 'rfkill189' (ffff888021300110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/rfkill189' [ 1612.985509][ T11] kernfs carrier_up_count: removing [ 1612.985567][ T11] kernfs carrier_down_count: removing [ 1613.007942][T20671] kobject: 'hci3:200' (ffff88801bbec5f0): calling ktype release [ 1613.009183][ T11] kernfs threaded: removing [ 1613.016804][T20671] kobject: 'hci3:200': free name [ 1613.022155][T21266] kernfs rfkill189: removing [ 1613.025338][T20671] hci3 orig refcnt 10 [ 1613.025354][T20671] hcon ffff88805e3c2000 reason 22 [ 1613.040412][T21266] kobject: 'rfkill189' (ffff888021300110): kobject_cleanup, parent 0000000000000000 [ 1613.049976][T20671] hcon ffff88805e3c2000 conn ffff88807e827800, err 103 [ 1613.053211][ T11] PM: Removing info for No Bus:tunl0 [ 1613.063900][T20671] hci3 hcon ffff88805e3c2000 chan ffff88801a68e400 [ 1613.068075][ T11] kobject: 'tunl0' (ffff8880209a06a8): kobject_uevent_env [ 1613.078707][T20671] hci3 hcon ffff88805e3c2000 handle 201 [ 1613.086939][T20671] hci3: hcon ffff88805e3c2000 [ 1613.091637][T20671] hcon ffff88805e3c2000 [ 1613.096373][T21266] kobject: 'rfkill189' (ffff888021300110): calling ktype release [ 1613.105504][T21266] kobject: 'rfkill189': free name [ 1613.110577][T21266] kernfs runtime_status: removing [ 1613.116474][ T11] kobject: 'tunl0' (ffff8880209a06a8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1613.127514][T21266] kernfs control: removing [ 1613.131985][T21266] kernfs runtime_suspended_time: removing [ 1613.134014][T20671] hci3: conn ffff88805e3c2000 [ 1613.142598][ T11] kernfs tunl0: removing [ 1613.142900][T20671] device: 'hci3:201': device_unregister [ 1613.152512][T21266] kernfs runtime_active_time: removing [ 1613.158955][T21266] kernfs autosuspend_delay_ms: removing [ 1613.165460][T21209] batadv0 (uninitialized): bond_netdev_event received NETDEV_POST_INIT [ 1613.173918][T21266] kernfs power: removing [ 1613.178180][T21266] kernfs subsystem: removing [ 1613.182778][T21266] kernfs hci1: removing [ 1613.190646][T21209] (null): siw: event 17 [ 1613.191024][T20671] kernfs runtime_status: removing [ 1613.201112][T21266] kernfs uevent: removing [ 1613.205746][T21209] device: 'batadv0': device_add [ 1613.206067][ T11] kobject: 'tunl0' (ffff8880209a06a8): kobject_cleanup, parent 0000000000000000 [ 1613.210642][T21209] kobject: 'batadv0' (ffff88807a5606a8): kobject_add_internal: parent: 'net', set: 'devices' [ 1613.233683][T21266] PM: Removing info for No Bus:hci1 [ 1613.238946][T21266] kobject: 'hci1' (ffff88806326d490): kobject_uevent_env [ 1613.245274][T21209] net batadv0: No ACPI support [ 1613.246549][T20671] kernfs control: removing [ 1613.255779][ T11] kobject: 'tunl0' (ffff8880209a06a8): calling ktype release [ 1613.266113][ T11] kobject: 'tunl0': free name [ 1613.266167][T21266] kobject: 'hci1' (ffff88806326d490): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1' [ 1613.281361][T20671] kernfs runtime_suspended_time: removing [ 1613.287576][T20671] kernfs runtime_active_time: removing [ 1613.293149][T20671] kernfs autosuspend_delay_ms: removing [ 1613.298787][T20671] kernfs power: removing [ 1613.304981][T21266] kernfs hci1: removing [ 1613.309159][T21266] hci1 orig refcnt 2 [ 1613.313122][T20671] kernfs device: removing [ 1613.320528][T21266] kobject: 'hci1' (ffff88806326d490): kobject_cleanup, parent 0000000000000000 [ 1613.323049][T20671] kernfs subsystem: removing [ 1613.337336][T21266] kobject: 'hci1' (ffff88806326d490): calling ktype release [ 1613.344793][T20671] kernfs hci3:201: removing [ 1613.366074][T21266] All LE connection parameters were removed [ 1613.372002][T21266] hci1: Unregister MSFT extension [ 1613.377157][T20671] kernfs uevent: removing [ 1613.378786][T21266] kobject: 'hci1': free name [ 1613.387963][T21209] PM: Adding info for No Bus:batadv0 [ 1613.393420][T20671] PM: Removing info for No Bus:hci3:201 [ 1613.399003][T20671] kobject: 'hci3:201' (ffff88805e3c25f0): kobject_uevent_env [ 1613.406478][T21209] kobject: 'batadv0' (ffff88807a5606a8): kobject_uevent_env [ 1613.413865][T21209] kobject: 'batadv0' (ffff88807a5606a8): fill_kobj_path: path = '/devices/virtual/net/batadv0' [ 1613.424333][T20671] kobject: 'hci3:201' (ffff88805e3c25f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/hci3:201' [ 1613.432665][ C0] virtqueue callback for ffff88801e666200 (ffffffff84a02460) [ 1613.443208][ C0] virtqueue interrupt with no work for ffff88801e666000 [ 1613.450174][ C0] virtqueue interrupt with no work for ffff88801e65de00 [ 1613.457482][T17444] Added buffer head 0 to ffff88801e666200 [ 1613.461628][T21209] kobject: 'queues' (ffff88804d893350): kobject_add_internal: parent: 'batadv0', set: '' [ 1613.481911][T21209] kobject: 'queues' (ffff88804d893350): kobject_uevent_env [ 1613.485759][T20671] kernfs hci3:201: removing [ 1613.489369][T21209] kobject: 'queues' (ffff88804d893350): kobject_uevent_env: filter function caused the event to drop! [ 1613.494522][T20671] kobject: 'hci3:201' (ffff88805e3c25f0): kobject_cleanup, parent 0000000000000000 [ 1613.504902][ C1] wireguard: wg0: Handshake for peer 61 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1613.504972][ C1] wireguard: wg0: Handshake for peer 79 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1613.505027][ C1] wireguard: wg1: Handshake for peer 63 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 15) [ 1613.505090][ C1] wireguard: wg1: Handshake for peer 82 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 7) [ 1613.505933][T10104] nf_nat: Already setup manip DST for ct ffff88802f4c8d80 (status bits 0x188) [ 1613.505960][T10104] nf_nat: Already setup manip SRC for ct ffff88802f4c8d80 (status bits 0x188) [ 1613.515811][ C1] nf_nat: Already setup manip DST for ct ffff88802f4c9800 (status bits 0x188) [ 1613.515842][ C1] nf_nat: Already setup manip SRC for ct ffff88802f4c9800 (status bits 0x188) [ 1613.530166][T21209] kobject: 'rx-0' (ffff8880626cd450): kobject_add_internal: parent: 'queues', set: 'queues' [ 1613.542083][ T5104] sd 0:0:1:0: cmd ffff888024aacb90 CDB: 0x2a [ 1613.559163][T21209] kobject: 'rx-0' (ffff8880626cd450): kobject_uevent_env [ 1613.563403][ T5104] Added buffer head 20 to ffff888147a66200 [ 1613.574430][T21209] kobject: 'rx-0' (ffff8880626cd450): fill_kobj_path: path = '/devices/virtual/net/batadv0/queues/rx-0' [ 1613.608074][T20671] kobject: 'hci3:201' (ffff88805e3c25f0): calling ktype release [ 1613.613995][ C0] virtqueue callback for ffff888147a66200 (ffffffff857f2980) [ 1613.614020][ C0] sd 0:0:1:0: cmd ffff888024aacb90 response 0 status 0x0 sense_len 0 [ 1613.614045][ C0] No more buffers in queue [ 1613.622770][T21209] kobject: 'rx-1' (ffff8880626cd510): kobject_add_internal: parent: 'queues', set: 'queues' [ 1613.627898][ T24] sd 0:0:1:0: cmd ffff888022b59910 CDB: 0x35 [ 1613.646226][T21209] kobject: 'rx-1' (ffff8880626cd510): kobject_uevent_env [ 1613.653443][ T24] Added buffer head 20 to ffff888147a66200 [ 1613.661537][ C0] virtqueue callback for ffff888147a66200 (ffffffff857f2980) [ 1613.661561][ C0] sd 0:0:1:0: cmd ffff888022b59910 response 0 status 0x0 sense_len 0 [ 1613.661579][ C0] No more buffers in queue [ 1613.665094][T20671] kobject: 'hci3:201': free name [ 1613.674169][ T1061] sd 0:0:1:0: cmd ffff888024aacf50 CDB: 0x2a [ 1613.680069][T20671] hci3 orig refcnt 7 [ 1613.683172][ T1061] Added buffer head 20 to ffff888147a66200 [ 1613.689299][T20671] hdev hci3 event 4 [ 1613.697129][ C0] virtqueue callback for ffff888147a66200 (ffffffff857f2980) [ 1613.703923][T20671] hdev 0000000000000000 len 8 [ 1613.710454][ C0] sd 0:0:1:0: cmd ffff888024aacf50 response 0 status 0x0 sense_len 0 [ 1613.715052][T20671] hci3: Cleanup of MSFT extension [ 1613.719816][ C0] No more buffers in queue [ 1613.726430][T20671] hdev hci3 event 8 [ 1613.776019][T21209] kobject: 'rx-1' (ffff8880626cd510): fill_kobj_path: path = '/devices/virtual/net/batadv0/queues/rx-1' [ 1613.776909][T20671] hci3 orig refcnt 6 [ 1613.788141][T21209] kobject: 'tx-0' (ffff88804f245020): kobject_add_internal: parent: 'queues', set: 'queues' [ 1613.791297][T20671] channel 3 len 6 [ 1613.802584][T21209] kobject: 'tx-0' (ffff88804f245020): kobject_uevent_env [ 1613.811963][T20671] channel 3 len 8 [ 1613.813432][T21209] kobject: 'tx-0' (ffff88804f245020): fill_kobj_path: path = '/devices/virtual/net/batadv0/queues/tx-0' [ 1613.816169][T20671] hdev hci3 event 2 [ 1613.827959][T21209] kobject: 'tx-1' (ffff88804f2451e0): kobject_add_internal: parent: 'queues', set: 'queues' [ 1613.840091][T20671] hdev 0000000000000000 len 8 [ 1613.842658][T21209] kobject: 'tx-1' (ffff88804f2451e0): kobject_uevent_env [ 1613.846621][T20671] kernfs runtime_status: removing [ 1613.860162][T21209] kobject: 'tx-1' (ffff88804f2451e0): fill_kobj_path: path = '/devices/virtual/net/batadv0/queues/tx-1' [ 1613.863708][T20671] kernfs control: removing [ 1613.872324][T21209] batadv0: Dropping NETIF_F_GSO since no SG feature. [ 1613.883507][T20671] kernfs runtime_suspended_time: removing [ 1613.883540][T20671] kernfs runtime_active_time: removing [ 1613.893201][T21209] batadv0: Features changed: 0x0000000000007a00 -> 0x0000000000007200 [ 1613.902984][T20671] kernfs autosuspend_delay_ms: removing [ 1613.908606][T20671] kernfs power: removing [ 1613.909074][T21209] Registering net sysctl (net ffff88807b91bb80): net/ipv4/neigh/batadv0 [ 1613.921806][T21209] procname=mcast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88804d893060 [ 1613.922719][T20671] kernfs device: removing [ 1613.933854][T21209] procname=ucast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88804d893064 [ 1613.937548][T20671] kernfs subsystem: removing [ 1613.949235][T21209] procname=app_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88804d893068 [ 1613.961969][T20671] kernfs rfkill190: removing [ 1613.969677][T21209] procname=mcast_resolicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88804d89306c [ 1613.971216][T20671] kernfs uevent: removing [ 1613.983347][T21209] procname=retrans_time mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88804d893070 [ 1613.986647][T20671] kernfs name: removing [ 1613.998582][T21209] procname=base_reachable_time mode=644 proc_handler=neigh_proc_base_reachable_time data=ffff88804d893074 [ 1614.012307][T20671] kernfs type: removing [ 1614.014745][T21209] procname=delay_first_probe_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff88804d893078 [ 1614.017701][T20671] kernfs index: removing [ 1614.030101][T21209] procname=interval_probe_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies_positive data=ffff88804d89307c [ 1614.046266][T20671] kernfs persistent: removing [ 1614.046318][T20671] kernfs state: removing [ 1614.055401][T20671] kernfs soft: removing [ 1614.058769][T21209] procname=gc_stale_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff88804d893080 [ 1614.070266][ C1] wireguard: wg1: Handshake for peer 81 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6) [ 1614.070331][T20671] kernfs hard: removing [ 1614.070365][T20671] kernfs hard_block_reasons: removing [ 1614.070398][T20671] PM: Removing info for No Bus:rfkill190 [ 1614.070422][T20671] kobject: 'rfkill190' (ffff888064975110): kobject_uevent_env [ 1614.070489][T20671] kobject: 'rfkill190' (ffff888064975110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/rfkill190' [ 1614.087875][ T42] nf_nat: Already setup manip DST for ct ffff88802f4c8300 (status bits 0x188) [ 1614.123330][T20671] kernfs rfkill190: removing [ 1614.126251][ T42] nf_nat: Already setup manip SRC for ct ffff88802f4c8300 (status bits 0x188) [ 1614.132685][T20671] kobject: 'rfkill190' (ffff888064975110): kobject_cleanup, parent 0000000000000000 [ 1614.147044][T21209] procname=unres_qlen_bytes mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88804d893084 [ 1614.156462][T20671] kobject: 'rfkill190' (ffff888064975110): calling ktype release [ 1614.160540][ C1] wireguard: wg1: Handshake for peer 64 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 14) [ 1614.171124][T20671] kobject: 'rfkill190': free name [ 1614.185198][T21209] procname=proxy_qlen mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88804d893088 [ 1614.185234][T21209] procname=anycast_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88804d89308c [ 1614.185263][T21209] procname=proxy_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88804d893090 [ 1614.185291][T21209] procname=locktime mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88804d893094 [ 1614.185319][T21209] procname=unres_qlen mode=644 proc_handler=neigh_proc_dointvec_unres_qlen data=ffff88804d893084 [ 1614.185346][T21209] procname=retrans_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies data=ffff88804d893070 [ 1614.185374][T21209] procname=base_reachable_time_ms mode=644 proc_handler=neigh_proc_base_reachable_time data=ffff88804d893074 [ 1614.185478][T21209] Registering net sysctl (net ffff88807b91bb80): net/ipv4/conf/batadv0 [ 1614.185493][T21209] procname=forwarding mode=644 proc_handler=devinet_sysctl_forward data=ffff88805cd35560 [ 1614.185526][T21209] procname=mc_forwarding mode=444 proc_handler=devinet_conf_proc data=ffff88805cd35564 [ 1614.185559][T21209] Not writable by anyone [ 1614.185567][T21209] procname=bc_forwarding mode=644 proc_handler=devinet_conf_proc data=ffff88805cd355dc [ 1614.185599][T21209] procname=accept_redirects mode=644 proc_handler=devinet_conf_proc data=ffff88805cd3556c [ 1614.185631][T21209] procname=secure_redirects mode=644 proc_handler=devinet_conf_proc data=ffff88805cd35570 [ 1614.185662][T21209] procname=shared_media mode=644 proc_handler=devinet_conf_proc data=ffff88805cd35578 [ 1614.185705][T21209] procname=rp_filter mode=644 proc_handler=devinet_conf_proc data=ffff88805cd3557c [ 1614.185737][T21209] procname=send_redirects mode=644 proc_handler=devinet_conf_proc data=ffff88805cd35574 [ 1614.185769][T21209] procname=accept_source_route mode=644 proc_handler=devinet_conf_proc data=ffff88805cd35580 [ 1614.185800][T21209] procname=accept_local mode=644 proc_handler=devinet_conf_proc data=ffff88805cd355b8 [ 1614.222762][T20671] kernfs runtime_status: removing [ 1614.241073][T21209] procname=src_valid_mark mode=644 proc_handler=devinet_conf_proc data=ffff88805cd355bc [ 1614.269110][T20671] kernfs control: removing [ 1614.298858][T21209] procname=proxy_arp mode=644 proc_handler=devinet_conf_proc data=ffff88805cd35568 [ 1614.312330][T20671] kernfs runtime_suspended_time: removing [ 1614.319504][T21209] procname=medium_id mode=644 proc_handler=devinet_conf_proc data=ffff88805cd35594 [ 1614.343067][T20671] kernfs runtime_active_time: removing [ 1614.347788][T21209] procname=bootp_relay mode=644 proc_handler=devinet_conf_proc data=ffff88805cd35584 [ 1614.367748][T20671] kernfs autosuspend_delay_ms: removing [ 1614.382418][T21209] procname=log_martians mode=644 proc_handler=devinet_conf_proc data=ffff88805cd35588 [ 1614.384938][T20671] kernfs power: removing [ 1614.397762][T21209] procname=tag mode=644 proc_handler=devinet_conf_proc data=ffff88805cd3558c [ 1614.397801][T21209] procname=arp_filter mode=644 proc_handler=devinet_conf_proc data=ffff88805cd35590 [ 1614.418028][T20671] kernfs subsystem: removing [ 1614.428124][ C0] virtqueue callback for ffff88801e666200 (ffffffff84a02460) [ 1614.428182][ C0] virtqueue interrupt with no work for ffff88801e666000 [ 1614.428193][ C0] virtqueue interrupt with no work for ffff88801e65de00 [ 1614.429148][T21209] procname=arp_announce mode=644 proc_handler=devinet_conf_proc data=ffff88805cd355a4 [ 1614.443997][T17444] Added buffer head 0 to ffff88801e666200 [ 1614.462342][T21209] procname=arp_ignore mode=644 proc_handler=devinet_conf_proc data=ffff88805cd355a8 [ 1614.472614][T20671] kernfs hci3: removing [ 1614.478155][T21209] procname=arp_accept mode=644 proc_handler=devinet_conf_proc data=ffff88805cd355b0 [ 1614.492315][T20671] kernfs uevent: removing [ 1614.499055][T21209] procname=arp_notify mode=644 proc_handler=devinet_conf_proc data=ffff88805cd355b4 [ 1614.511273][T20671] PM: Removing info for No Bus:hci3 [ 1614.516025][T21209] procname=arp_evict_nocarrier mode=644 proc_handler=devinet_conf_proc data=ffff88805cd355e0 [ 1614.519692][T20671] kobject: 'hci3' (ffff88805ea25490): kobject_uevent_env [ 1614.529257][T21209] procname=proxy_arp_pvlan mode=644 proc_handler=devinet_conf_proc data=ffff88805cd355c0 [ 1614.558015][T20671] kobject: 'hci3' (ffff88805ea25490): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3' [ 1614.601996][T21209] procname=force_igmp_version mode=644 proc_handler=devinet_conf_proc data=ffff88805cd355a0 [ 1614.608189][T20671] kernfs hci3: removing [ 1614.613321][T21209] procname=igmpv2_unsolicited_report_interval mode=644 proc_handler=devinet_conf_proc data=ffff88805cd355c8 [ 1614.620238][T20671] hci3 orig refcnt 2 [ 1614.629495][T21209] procname=igmpv3_unsolicited_report_interval mode=644 proc_handler=devinet_conf_proc data=ffff88805cd355cc [ 1614.640799][T20671] kobject: 'hci3' (ffff88805ea25490): kobject_cleanup, parent 0000000000000000 [ 1614.644452][T21209] procname=ignore_routes_with_linkdown mode=644 proc_handler=devinet_conf_proc data=ffff88805cd355d0 [ 1614.652715][T20671] kobject: 'hci3' (ffff88805ea25490): calling ktype release [ 1614.664050][T21209] procname=drop_gratuitous_arp mode=644 proc_handler=devinet_conf_proc data=ffff88805cd355d8 [ 1614.664089][T21209] procname=disable_xfrm mode=644 proc_handler=ipv4_doint_and_flush data=ffff88805cd35598 [ 1614.664124][T21209] procname=disable_policy mode=644 proc_handler=ipv4_doint_and_flush data=ffff88805cd3559c [ 1614.664160][T21209] procname=promote_secondaries mode=644 proc_handler=ipv4_doint_and_flush data=ffff88805cd355ac [ 1614.680209][T20671] All LE connection parameters were removed [ 1614.683751][T21209] procname=route_localnet mode=644 proc_handler=ipv4_doint_and_flush data=ffff88805cd355c4 [ 1614.730182][T21209] procname=drop_unicast_in_l2_multicast mode=644 proc_handler=ipv4_doint_and_flush data=ffff88805cd355d4 [ 1614.742709][T21209] batadv0: bond_netdev_event received NETDEV_REGISTER [ 1614.750595][T20671] hci3: Unregister MSFT extension [ 1614.755654][T21209] net batadv0: siw: event 5 [ 1614.757041][T21209] Registering net sysctl (net ffff88807b91bb80): net/ipv6/neigh/batadv0 [ 1614.768706][T20671] kobject: 'hci3': free name [ 1614.773814][T21209] procname=mcast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88804d893f60 [ 1614.785225][T21209] procname=ucast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88804d893f64 [ 1614.797852][T21209] procname=app_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88804d893f68 [ 1614.808985][T21209] procname=mcast_resolicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88804d893f6c [ 1614.820430][T21209] procname=retrans_time mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=ffff88804d893f70 [ 1614.831176][T21209] procname=base_reachable_time mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=ffff88804d893f74 [ 1614.842454][T21209] procname=delay_first_probe_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff88804d893f78 [ 1614.857844][T21209] procname=interval_probe_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies_positive data=ffff88804d893f7c [ 1614.870427][T21209] procname=gc_stale_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff88804d893f80 [ 1614.881650][T21209] procname=unres_qlen_bytes mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88804d893f84 [ 1614.893077][T21209] procname=proxy_qlen mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88804d893f88 [ 1614.904810][T21209] procname=anycast_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88804d893f8c [ 1614.916239][T21209] procname=proxy_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88804d893f90 [ 1614.927491][T21209] procname=locktime mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88804d893f94 [ 1614.938646][T21209] procname=unres_qlen mode=644 proc_handler=neigh_proc_dointvec_unres_qlen data=ffff88804d893f84 [ 1614.949414][T21209] procname=retrans_time_ms mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=ffff88804d893f70 [ 1614.960403][T21209] procname=base_reachable_time_ms mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=ffff88804d893f74 [ 1614.972411][T21209] Registering net sysctl (net ffff88807b91bb80): net/ipv6/conf/batadv0 [ 1614.980728][T21209] procname=forwarding mode=644 proc_handler=addrconf_sysctl_forward data=ffff88801f7325e0 [ 1614.990864][T21209] procname=hop_limit mode=644 proc_handler=proc_dointvec_minmax data=ffff88801f7325e4 [ 1615.001460][T21209] procname=mtu mode=644 proc_handler=addrconf_sysctl_mtu data=ffff88801f7325e8 [ 1615.010652][T21209] procname=accept_ra mode=644 proc_handler=proc_dointvec data=ffff88801f7325ec [ 1615.019822][T21209] procname=accept_redirects mode=644 proc_handler=proc_dointvec data=ffff88801f7325f0 [ 1615.029597][T21209] procname=autoconf mode=644 proc_handler=proc_dointvec data=ffff88801f7325f4 [ 1615.038706][T21209] procname=dad_transmits mode=644 proc_handler=proc_dointvec data=ffff88801f7325f8 [ 1615.048261][T21209] procname=router_solicitations mode=644 proc_handler=proc_dointvec_minmax data=ffff88801f7325fc [ 1615.059053][T21209] procname=router_solicitation_interval mode=644 proc_handler=proc_dointvec_jiffies data=ffff88801f732600 [ 1615.070612][T21209] procname=router_solicitation_max_interval mode=644 proc_handler=proc_dointvec_jiffies data=ffff88801f732604 [ 1615.082623][T21209] procname=router_solicitation_delay mode=644 proc_handler=proc_dointvec_jiffies data=ffff88801f732608 [ 1615.093884][T21209] procname=force_mld_version mode=644 proc_handler=proc_dointvec data=ffff88801f73260c [ 1615.104506][T21209] procname=mldv1_unsolicited_report_interval mode=644 proc_handler=proc_dointvec_ms_jiffies data=ffff88801f732610 [ 1615.112870][ C1] wireguard: wg0: Handshake for peer 62 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 1615.116794][T21209] procname=mldv2_unsolicited_report_interval mode=644 proc_handler=proc_dointvec_ms_jiffies data=ffff88801f732614 [ 1615.140454][T21209] procname=use_tempaddr mode=644 proc_handler=proc_dointvec data=ffff88801f732618 [ 1615.149917][T21209] procname=temp_valid_lft mode=644 proc_handler=proc_dointvec data=ffff88801f73261c [ 1615.159554][T21209] procname=temp_prefered_lft mode=644 proc_handler=proc_dointvec data=ffff88801f732620 [ 1615.169447][T21209] procname=regen_max_retry mode=644 proc_handler=proc_dointvec data=ffff88801f732624 [ 1615.179180][T21209] procname=max_desync_factor mode=644 proc_handler=proc_dointvec data=ffff88801f732628 [ 1615.189388][T21209] procname=max_addresses mode=644 proc_handler=proc_dointvec data=ffff88801f73262c [ 1615.199063][T21209] procname=accept_ra_defrtr mode=644 proc_handler=proc_dointvec data=ffff88801f732630 [ 1615.209893][T21209] procname=ra_defrtr_metric mode=644 proc_handler=proc_douintvec_minmax data=ffff88801f732634 [ 1615.220398][T21209] procname=accept_ra_min_hop_limit mode=644 proc_handler=proc_dointvec data=ffff88801f732638 [ 1615.230799][T21209] procname=accept_ra_min_lft mode=644 proc_handler=proc_dointvec data=ffff88801f73263c [ 1615.240674][T21209] procname=accept_ra_pinfo mode=644 proc_handler=proc_dointvec data=ffff88801f732640 [ 1615.250373][T21209] procname=accept_ra_rtr_pref mode=644 proc_handler=proc_dointvec data=ffff88801f732648 [ 1615.260339][T21209] procname=router_probe_interval mode=644 proc_handler=proc_dointvec_jiffies data=ffff88801f73264c [ 1615.273442][T21209] procname=accept_ra_rt_info_min_plen mode=644 proc_handler=proc_dointvec data=ffff88801f732650 [ 1615.284210][T21209] procname=accept_ra_rt_info_max_plen mode=644 proc_handler=proc_dointvec data=ffff88801f732654 [ 1615.294897][T21209] procname=proxy_ndp mode=644 proc_handler=addrconf_sysctl_proxy_ndp data=ffff88801f732658 [ 1615.305105][T21209] procname=accept_source_route mode=644 proc_handler=proc_dointvec data=ffff88801f73265c [ 1615.315946][T21209] procname=optimistic_dad mode=644 proc_handler=proc_dointvec data=ffff88801f732664 [ 1615.325580][T21209] procname=use_optimistic mode=644 proc_handler=proc_dointvec data=ffff88801f732668 [ 1615.335198][T21209] procname=mc_forwarding mode=444 proc_handler=proc_dointvec data=ffff88801f73266c [ 1615.344865][T21209] Not writable by anyone [ 1615.349478][T21209] procname=disable_ipv6 mode=644 proc_handler=addrconf_sysctl_disable data=ffff88801f732670 [ 1615.359799][T21209] procname=accept_dad mode=644 proc_handler=proc_dointvec data=ffff88801f732678 [ 1615.369055][T21209] procname=force_tllao mode=644 proc_handler=proc_dointvec data=ffff88801f73267c [ 1615.378400][T21209] procname=ndisc_notify mode=644 proc_handler=proc_dointvec data=ffff88801f732680 [ 1615.387839][T21209] procname=suppress_frag_ndisc mode=644 proc_handler=proc_dointvec data=ffff88801f732684 [ 1615.397902][T21209] procname=accept_ra_from_local mode=644 proc_handler=proc_dointvec data=ffff88801f732660 [ 1615.408093][T21209] procname=accept_ra_mtu mode=644 proc_handler=proc_dointvec data=ffff88801f732688 [ 1615.418292][T21209] procname=stable_secret mode=600 proc_handler=addrconf_sysctl_stable_secret data=ffff88801f732694 [ 1615.429232][ C0] virtqueue callback for ffff88801e666200 (ffffffff84a02460) [ 1615.429295][ C0] virtqueue interrupt with no work for ffff88801e666000 [ 1615.429310][ C0] virtqueue interrupt with no work for ffff88801e65de00 [ 1615.429348][ C0] wireguard: wg2: Handshake for peer 83 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 2) [ 1615.429869][T10093] nf_nat: Already setup manip DST for ct ffff88802f4c8a80 (status bits 0x188) [ 1615.437740][T13125] Added buffer head 0 to ffff88801e666200 [ 1615.444051][T10093] nf_nat: Already setup manip SRC for ct ffff88802f4c8a80 (status bits 0x188) [ 1615.452921][T21209] procname=use_oif_addrs_only mode=644 proc_handler=proc_dointvec data=ffff88801f7326a8 [ 1615.496266][T21209] procname=ignore_routes_with_linkdown mode=644 proc_handler=addrconf_sysctl_ignore_routes_with_linkdown data=ffff88801f732644 [ 1615.509668][T21209] procname=drop_unicast_in_l2_multicast mode=644 proc_handler=proc_dointvec data=ffff88801f732674 [ 1615.521380][T21209] procname=drop_unsolicited_na mode=644 proc_handler=proc_dointvec data=ffff88801f73268c [ 1615.531481][T21209] procname=keep_addr_on_down mode=644 proc_handler=proc_dointvec data=ffff88801f7326ac [ 1615.541350][T21209] procname=seg6_enabled mode=644 proc_handler=proc_dointvec data=ffff88801f7326b0 [ 1615.550778][T21209] procname=seg6_require_hmac mode=644 proc_handler=proc_dointvec data=ffff88801f7326b4 [ 1615.560661][T21209] procname=enhanced_dad mode=644 proc_handler=proc_dointvec data=ffff88801f7326b8 [ 1615.570109][T21209] procname=addr_gen_mode mode=644 proc_handler=addrconf_sysctl_addr_gen_mode data=ffff88801f7326bc [ 1615.581081][T21209] procname=disable_policy mode=644 proc_handler=addrconf_sysctl_disable_policy data=ffff88801f7326c0 [ 1615.592280][T21209] procname=ndisc_tclass mode=644 proc_handler=proc_dointvec_minmax data=ffff88801f7326c4 [ 1615.602339][T21209] procname=rpl_seg_enabled mode=644 proc_handler=proc_dointvec_minmax data=ffff88801f7326c8 [ 1615.612677][T21209] procname=ioam6_enabled mode=644 proc_handler=proc_dou8vec_minmax data=ffff88801f7326d4 [ 1615.623974][T21209] procname=ioam6_id mode=644 proc_handler=proc_douintvec_minmax data=ffff88801f7326cc [ 1615.633793][T21209] procname=ioam6_id_wide mode=644 proc_handler=proc_douintvec data=ffff88801f7326d0 [ 1615.643422][T21209] procname=ndisc_evict_nocarrier mode=644 proc_handler=proc_dou8vec_minmax data=ffff88801f7326d5 [ 1615.654203][T21209] procname=accept_untracked_na mode=644 proc_handler=proc_dointvec_minmax data=ffff88801f732690 [ 1615.665282][T21209] Registering net sysctl (net ffff88807b91bb80): net/mpls/conf/batadv0 [ 1615.673608][T21209] procname=input mode=644 proc_handler=mpls_conf_proc data=ffff8880218bf100 [ 1615.688585][T21181] bridge_slave_0: bond_netdev_event received NETDEV_PRE_UP [ 1615.696329][T21181] net bridge_slave_0: siw: event 14 [ 1615.702014][T21181] bridge_slave_0: bond_netdev_event received NETDEV_UP [ 1615.711844][T21181] net bridge_slave_0: siw: event 1 [ 1615.719863][T21181] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1615.730172][T21181] bridge0: port 1(bridge_slave_0) event 16 [ 1615.737095][T21181] bridge0: br_fill_info event 16 port bridge_slave_0 master bridge0 [ 1615.748067][ T5437] lapb11: bond_netdev_event received NETDEV_PRE_UP [ 1615.755895][ T5437] net lapb11: siw: event 14 [ 1615.760706][ T5437] lapb11: bond_netdev_event received NETDEV_UP [ 1615.783326][ T5437] net lapb11: siw: event 1 [ 1615.801002][ T11] ieee80211 phy44: mac80211_hwsim_vif_info_changed(changed=0x800 vif->addr=08:02:11:00:00:01) [ 1615.822895][ T11] ieee80211 phy44: mac80211_hwsim_link_info_changed(changed=0x200 vif->addr=08:02:11:00:00:01, link id 0) [ 1615.852863][ T11] ieee80211 phy44: BCN EN: 0 (BI=100) [ 1615.858469][ T11] ieee80211 phy44: beaconing vifs remaining: 0 [ 1615.882826][ T11] ieee80211 phy44: mac80211_hwsim_vif_info_changed(changed=0x4000 vif->addr=08:02:11:00:00:01) [ 1615.903712][ T11] ieee80211 phy44: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static) [ 1615.932843][ T11] ieee80211 phy44: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=1 ps=0 smps=static) [ 1615.966857][ T11] mac80211_hwsim hwsim43 wlan1: bond_netdev_event received NETDEV_GOING_DOWN [ 1615.985653][ T11] net wlan1: siw: event 10 [ 1615.995557][ T11] ieee80211 phy44: mac80211_hwsim_remove_interface (type=1 mac_addr=08:02:11:00:00:01) [ 1616.013898][ T11] ieee80211 phy44: mac80211_hwsim_stop [ 1616.019623][ T11] mac80211_hwsim hwsim43 wlan1: bond_netdev_event received NETDEV_DOWN [ 1616.049617][ T11] net wlan1: siw: event 2 [ 1616.062786][ C1] wireguard: wg2: Handshake for peer 66 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 4) [ 1616.075056][ T11] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::a02:11ff:fe00:1 in wq:ffff88807b918fd8 [ 1616.109145][ T11] kernfs phy80211: removing [ 1616.158462][ T11] mac80211_hwsim hwsim43 wlan1 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 1616.176655][T21209] ffff888068504000 name hci2 bus 0 [ 1616.202855][ T11] net wlan1: siw: event 6 [ 1616.208391][ T11] mac80211_hwsim hwsim43 wlan1 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 1616.221099][T21209] hci2 ffff888068504000 [ 1616.226266][T21209] hci2: [ 1616.229157][T21209] hci2: err 0x13 [ 1616.233583][ T11] net wlan1: siw: event 18 [ 1616.239404][ T11] kobject: 'rx-0' (ffff88802f3bc550): kobject_cleanup, parent ffff88814c314550 [ 1616.249587][T21209] hci2: cancelling interleave scan [ 1616.262794][ T11] kobject: 'rx-0' (ffff88802f3bc550): auto cleanup kobject_del [ 1616.270474][ T11] kernfs rps_cpus: removing [ 1616.272915][T21209] hci2 state 0 -> 0 [ 1616.279372][T21209] All LE pending actions cleared [ 1616.286400][ T11] kernfs rps_flow_cnt: removing [ 1616.291315][ T11] kobject: 'rx-0' (ffff88802f3bc550): auto cleanup 'remove' event [ 1616.294905][T21209] hdev hci2 [ 1616.304877][T21181] ffff88804d8a0000 name hci0 bus 0 [ 1616.310159][ T11] kobject: 'rx-0' (ffff88802f3bc550): kobject_uevent_env [ 1616.310174][T21209] hcon ffff88804f026000 reason 22 [ 1616.317480][T21181] hci0 ffff88804d8a0000 [ 1616.326861][ T11] kobject: 'rx-0' (ffff88802f3bc550): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1616.339248][T21181] hci0: [ 1616.342142][T21181] hci0: err 0x13 [ 1616.345972][T21181] hci0: cancelling interleave scan [ 1616.351149][T21181] hci0 state 0 -> 0 [ 1616.351160][T21209] hcon ffff88804f026000 conn ffff888063a5b800, err 103 [ 1616.355858][ T11] kernfs rx-0: removing [ 1616.366534][T21181] All LE pending actions cleared [ 1616.372833][ T11] kobject: 'rx-0' (ffff88802f3bc550): calling ktype release [ 1616.372946][T21209] hci2 hcon ffff88804f026000 chan ffff88805e47b000 [ 1616.380165][ T11] kobject: 'rx-0': free name [ 1616.392057][T21181] hdev hci0 [ 1616.397262][T21209] hci2 hcon ffff88804f026000 handle 200 [ 1616.399805][T21181] hcon ffff888031e38000 reason 22 [ 1616.408265][T21181] hcon ffff888031e38000 conn ffff88805be1b000, err 103 [ 1616.415897][ T11] kernfs limit: removing [ 1616.420197][ T11] kernfs limit_max: removing [ 1616.420806][T21209] hci2: hcon ffff88804f026000 [ 1616.424852][ C0] virtqueue callback for ffff88801e666200 (ffffffff84a02460) [ 1616.424897][T21181] hci0 hcon ffff888031e38000 chan ffff888141664700 [ 1616.424906][ C0] virtqueue interrupt with no work for ffff88801e666000 [ 1616.424921][ C0] virtqueue interrupt with no work for ffff88801e65de00 [ 1616.426935][ T11] kernfs limit_min: removing [ 1616.429783][T13124] Added buffer head 0 to ffff88801e666200 [ 1616.438915][T21181] hci0 hcon ffff888031e38000 handle 200 [ 1616.454592][T21209] hcon ffff88804f026000 [ 1616.459487][ T11] kernfs hold_time: removing [ 1616.480398][T21181] hci0: hcon ffff888031e38000 [ 1616.487917][T21209] hci2: conn ffff88804f026000 [ 1616.492640][T21209] device: 'hci2:200': device_unregister [ 1616.502788][T21181] hcon ffff888031e38000 [ 1616.508180][T21181] hci0: conn ffff888031e38000 [ 1616.512914][ T11] kernfs inflight: removing [ 1616.512947][ T11] kernfs byte_queue_limits: removing [ 1616.512977][ T11] kobject: 'tx-0' (ffff88802d687820): kobject_cleanup, parent ffff88814c314550 [ 1616.512999][ T11] kobject: 'tx-0' (ffff88802d687820): auto cleanup kobject_del [ 1616.513016][ T11] kernfs tx_timeout: removing [ 1616.513050][ T11] kernfs traffic_class: removing [ 1616.513082][ T11] kernfs xps_cpus: removing [ 1616.513113][ T11] kernfs xps_rxqs: removing [ 1616.520824][T21181] device: 'hci0:200': device_unregister [ 1616.552981][ C1] net_ratelimit: 67 callbacks suppressed [ 1616.553021][ C1] wireguard: wg0: Sending keepalive packet to peer 151 ([::1]:20002/0%0) [ 1616.562194][T21209] kernfs runtime_status: removing [ 1616.590136][ C1] wireguard: wg1: Receiving keepalive packet from peer 153 ([::1]:20001/0%0) [ 1616.593345][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88807b918fd8 is addr:fe80::a02:11ff:fe00:1 for cmd:2 at entry:ffff88802f76f480 [ 1616.599898][ T11] kernfs tx_maxrate: removing [ 1616.618104][ T11] kobject: 'tx-0' (ffff88802d687820): auto cleanup 'remove' event [ 1616.631969][T21181] kernfs runtime_status: removing [ 1616.637147][ T11] kobject: 'tx-0' (ffff88802d687820): kobject_uevent_env [ 1616.637167][ T11] kobject: 'tx-0' (ffff88802d687820): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1616.652641][T21209] kernfs control: removing [ 1616.660895][T21209] kernfs runtime_suspended_time: removing [ 1616.667037][T21181] kernfs control: removing [ 1616.671508][T21181] kernfs runtime_suspended_time: removing [ 1616.677365][T21209] kernfs runtime_active_time: removing [ 1616.682990][T21209] kernfs autosuspend_delay_ms: removing [ 1616.688633][T21209] kernfs power: removing [ 1616.693229][T21209] kernfs device: removing [ 1616.699865][T21209] kernfs subsystem: removing [ 1616.705249][T21209] kernfs hci2:200: removing [ 1616.709797][ T11] kernfs tx-0: removing [ 1616.714601][T21181] kernfs runtime_active_time: removing [ 1616.720137][T21181] kernfs autosuspend_delay_ms: removing [ 1616.723804][ T11] kobject: 'tx-0' (ffff88802d687820): calling ktype release [ 1616.733942][T21209] kernfs uevent: removing [ 1616.738331][T21209] PM: Removing info for No Bus:hci2:200 [ 1616.743849][ T11] kobject: 'tx-0': free name [ 1616.743905][ T11] kernfs queues: removing [ 1616.744376][ T11] kobject: 'queues' (ffff88814c314550): kobject_cleanup, parent 0000000000000000 [ 1616.744407][ T11] kobject: 'queues' (ffff88814c314550): calling ktype release [ 1616.744422][ T11] kobject: 'queues' (ffff88814c314550): kset_release [ 1616.744453][ T11] kobject: 'queues': free name [ 1616.744483][ T11] kernfs runtime_status: removing [ 1616.744515][ T11] kernfs control: removing [ 1616.744545][ T11] kernfs runtime_suspended_time: removing [ 1616.744575][ T11] kernfs runtime_active_time: removing [ 1616.744609][ T11] kernfs autosuspend_delay_ms: removing [ 1616.744681][ T11] kernfs power: removing [ 1616.744719][ T11] kernfs device: removing [ 1616.744750][ T11] kernfs subsystem: removing [ 1616.744782][ T11] kernfs wlan1: removing [ 1616.744815][ T11] kernfs uevent: removing [ 1616.744850][ T11] kernfs rx_packets: removing [ 1616.744883][ T11] kernfs tx_packets: removing [ 1616.744919][ T11] kernfs rx_bytes: removing [ 1616.762898][T21209] kobject: 'hci2:200' (ffff88804f0265f0): kobject_uevent_env [ 1616.793037][T21181] kernfs power: removing [ 1616.810816][T21209] kobject: 'hci2:200' (ffff88804f0265f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/hci2:200' [ 1616.814448][ T11] kernfs tx_bytes: removing [ 1616.875914][ T11] kernfs rx_errors: removing [ 1616.880577][ T11] kernfs tx_errors: removing [ 1616.886241][T21209] kernfs hci2:200: removing [ 1616.890804][T21209] kobject: 'hci2:200' (ffff88804f0265f0): kobject_cleanup, parent 0000000000000000 [ 1616.900937][ T11] kernfs rx_dropped: removing [ 1616.908654][ T11] kernfs tx_dropped: removing [ 1616.915990][T21209] kobject: 'hci2:200' (ffff88804f0265f0): calling ktype release [ 1616.926780][ T11] kernfs multicast: removing [ 1616.931430][ T11] kernfs collisions: removing [ 1616.936400][T21209] kobject: 'hci2:200': free name [ 1616.941388][T21209] hci2 orig refcnt 11 [ 1616.950848][T21181] kernfs device: removing [ 1616.950981][T21209] hcon ffff888030ca0000 reason 22 [ 1616.960376][T21209] hcon ffff888030ca0000 conn ffff888063a5e800, err 103 [ 1616.968615][T21209] hci2 hcon ffff888030ca0000 chan ffff88805e47b600 [ 1616.975288][T21209] hci2 hcon ffff888030ca0000 handle 201 [ 1616.980886][T21209] hci2: hcon ffff888030ca0000 [ 1616.991128][T21209] hcon ffff888030ca0000 [ 1616.995430][T21209] hci2: conn ffff888030ca0000 [ 1617.000147][T21209] device: 'hci2:201': device_unregister [ 1617.005764][ T11] kernfs rx_length_errors: removing [ 1617.011030][ T11] kernfs rx_over_errors: removing [ 1617.016166][T21181] kernfs subsystem: removing [ 1617.020836][T21209] kernfs runtime_status: removing [ 1617.026656][T21209] kernfs control: removing [ 1617.031132][T21209] kernfs runtime_suspended_time: removing [ 1617.037016][ T11] kernfs rx_crc_errors: removing [ 1617.042111][T21181] kernfs hci0:200: removing [ 1617.046708][T21181] kernfs uevent: removing [ 1617.052125][T21181] PM: Removing info for No Bus:hci0:200 [ 1617.057864][ T11] kernfs rx_frame_errors: removing [ 1617.063068][ T11] kernfs rx_fifo_errors: removing [ 1617.068147][ T11] kernfs rx_missed_errors: removing [ 1617.073577][T21181] kobject: 'hci0:200' (ffff888031e385f0): kobject_uevent_env [ 1617.081141][T21181] kobject: 'hci0:200' (ffff888031e385f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/hci0:200' [ 1617.092966][ T11] kernfs tx_aborted_errors: removing [ 1617.098311][ T11] kernfs tx_carrier_errors: removing [ 1617.103848][T21209] kernfs runtime_active_time: removing [ 1617.109363][T21209] kernfs autosuspend_delay_ms: removing [ 1617.115042][T21209] kernfs power: removing [ 1617.119354][T21209] kernfs device: removing [ 1617.124040][ T11] kernfs tx_fifo_errors: removing [ 1617.129138][T21181] kernfs hci0:200: removing [ 1617.133762][T21209] kernfs subsystem: removing [ 1617.138422][T21181] kobject: 'hci0:200' (ffff888031e385f0): kobject_cleanup, parent 0000000000000000 [ 1617.147903][ T11] kernfs tx_heartbeat_errors: removing [ 1617.154636][T21181] kobject: 'hci0:200' (ffff888031e385f0): calling ktype release [ 1617.162343][T21181] kobject: 'hci0:200': free name [ 1617.167473][T21209] kernfs hci2:201: removing [ 1617.172048][T21209] kernfs uevent: removing [ 1617.178751][ T11] kernfs tx_window_errors: removing [ 1617.185085][T21181] hci0 orig refcnt 10 [ 1617.189106][T21181] hcon ffff88807f4ea000 reason 22 [ 1617.194463][ T11] kernfs rx_compressed: removing [ 1617.199544][ T11] kernfs tx_compressed: removing [ 1617.207462][T21181] hcon ffff88807f4ea000 conn ffff88805be1b800, err 103 [ 1617.222960][T21209] PM: Removing info for No Bus:hci2:201 [ 1617.228559][T21209] kobject: 'hci2:201' (ffff888030ca05f0): kobject_uevent_env [ 1617.233088][T21181] hci0 hcon ffff88807f4ea000 chan ffff888025d0f200 [ 1617.242539][ T11] kernfs rx_nohandler: removing [ 1617.247675][T21209] kobject: 'hci2:201' (ffff888030ca05f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/hci2:201' [ 1617.252804][T21181] hci0 hcon ffff88807f4ea000 handle 201 [ 1617.260973][ T11] kernfs statistics: removing [ 1617.265527][ C1] wireguard: wg0: Sending keepalive packet to peer 145 ([::1]:20002/0%0) [ 1617.265620][ C1] wireguard: wg0: Sending keepalive packet to peer 157 (127.0.0.1:20002) [ 1617.265699][ C1] wireguard: wg0: Sending keepalive packet to peer 109 ([::1]:20002/0%0) [ 1617.272880][T21181] hci0: hcon ffff88807f4ea000 [ 1617.279961][ C1] wireguard: wg1: Receiving keepalive packet from peer 111 ([::1]:20001/0%0) [ 1617.293017][T21181] hcon ffff88807f4ea000 [ 1617.296258][ C1] wireguard: wg1: Receiving keepalive packet from peer 147 ([::1]:20001/0%0) [ 1617.324463][T21181] hci0: conn ffff88807f4ea000 [ 1617.329186][T21181] device: 'hci0:201': device_unregister [ 1617.333016][ T11] kernfs wireless: removing [ 1617.339613][T21181] kernfs runtime_status: removing [ 1617.343169][ C0] wireguard: wg0: Sending keepalive packet to peer 110 ([::1]:20003/0%0) [ 1617.353720][ C1] wireguard: wg2: Receiving keepalive packet from peer 113 ([::1]:20001/0%0) [ 1617.368324][T21209] kernfs hci2:201: removing [ 1617.373025][T21209] kobject: 'hci2:201' (ffff888030ca05f0): kobject_cleanup, parent 0000000000000000 [ 1617.382345][T21209] kobject: 'hci2:201' (ffff888030ca05f0): calling ktype release [ 1617.392747][ T11] kernfs netdev_group: removing [ 1617.397770][T21181] kernfs control: removing [ 1617.402231][ T11] kernfs type: removing [ 1617.410127][ T11] kernfs dev_id: removing [ 1617.415355][T21209] kobject: 'hci2:201': free name [ 1617.420326][T21209] hci2 orig refcnt 8 [ 1617.423764][ C0] virtqueue callback for ffff88801e666200 (ffffffff84a02460) [ 1617.424998][ T11] kernfs dev_port: removing [ 1617.431658][ C0] virtqueue interrupt with no work for ffff88801e666000 [ 1617.436162][T21209] hcon ffff88805e932000 reason 22 [ 1617.443020][ C0] virtqueue interrupt with no work for ffff88801e65de00 [ 1617.443600][T13124] Added buffer head 0 to ffff88801e666200 [ 1617.448257][ T11] kernfs iflink: removing [ 1617.463034][T21209] hcon ffff88805e932000 conn ffff888025025000, err 103 [ 1617.473960][T21209] chan ffff888065f28000 orig refcnt 3 [ 1617.479369][T21209] chan ffff888065f28000 orig refcnt 4 [ 1617.485066][T21209] chan ffff888065f28000, err 103, state BT_CONNECT [ 1617.491600][T21209] chan ffff888065f28000 state BT_CONNECT [ 1617.497345][T21181] kernfs runtime_suspended_time: removing [ 1617.503544][T21181] kernfs runtime_active_time: removing [ 1617.509065][ T11] kernfs ifindex: removing [ 1617.512901][T21209] ffff88805e05a000 state 9 [ 1617.517970][T21209] chan ffff888065f28000 orig refcnt 3 [ 1617.518440][ T3368] session ffff888026792c00 state 8 qlen 0 [ 1617.524401][T21209] hcon ffff88805e932000 orig refcnt 1 [ 1617.529280][ T3368] session ffff888026792c00 state 9 err 103 [ 1617.535279][T21209] chan ffff888065f28000 orig refcnt 2 [ 1617.540567][T17480] hcon ffff88805e932000 state BT_CLOSED [ 1617.546641][T21209] hci2 hcon ffff88805e932000 chan ffff88801bbbcb00 [ 1617.551514][T17480] hcon ffff88805e932000 [ 1617.559237][ T11] kernfs name_assign_type: removing [ 1617.563396][T17480] hci2: handle 0xf00 reason 0x13 [ 1617.568628][ T11] kernfs addr_assign_type: removing [ 1617.578523][ T3368] session ffff888026792c00 state 9 [ 1617.578597][T21209] hci2 hcon ffff88805e932000 handle 3840 [ 1617.583707][ C0] wireguard: wg0: Sending keepalive packet to peer 152 ([::1]:20003/0%0) [ 1617.584872][ T3368] session ffff888026792c00 state 9 [ 1617.590055][T21209] hci2: hcon ffff88805e932000 [ 1617.598872][ T11] kernfs addr_len: removing [ 1617.603553][T21209] hcon ffff88805e932000 [ 1617.616896][ T3368] session ffff888026792c00 state 9 [ 1617.617103][T21209] hci2: conn ffff88805e932000 [ 1617.622033][ T3368] sock ffff888077220000, sk ffff88805e05a000 [ 1617.626728][T21209] hci2 orig refcnt 7 [ 1617.626744][T21209] hdev hci2 event 4 [ 1617.635202][ T3368] parent ffff88805e05a000 state BT_CLOSED [ 1617.637013][T21209] hdev 0000000000000000 len 8 [ 1617.640716][ T3368] parent ffff88805e05a000 [ 1617.656201][ T11] kernfs link_mode: removing [ 1617.660852][ T11] kernfs address: removing [ 1617.666209][T21209] hci2: Cleanup of MSFT extension [ 1617.666510][T21209] hdev hci2 event 8 [ 1617.666526][T21209] hci2 orig refcnt 6 [ 1617.666625][T21209] channel 3 len 6 [ 1617.672351][ T3368] sock ffff888077220000, sk ffff88805e05a000, how 2 [ 1617.682974][T21209] channel 3 len 8 [ 1617.683043][T21209] hdev hci2 event 2 [ 1617.683085][T21209] hdev 0000000000000000 len 8 [ 1617.689823][ T3368] Handling sock shutdown [ 1617.706224][T21181] kernfs autosuspend_delay_ms: removing [ 1617.706274][ T3368] chan ffff888065f28000 orig refcnt 1 [ 1617.712046][T21209] kernfs runtime_status: removing [ 1617.717258][ T3368] chan ffff888065f28000 state BT_CLOSED [ 1617.717277][ T3368] conn ffff888025025000 orig refcnt 1 [ 1617.717293][ T3368] chan ffff888065f28000 state BT_CLOSED [ 1617.717308][ T3368] chan ffff888065f28000 state BT_CLOSED [ 1617.717325][ T3368] chan ffff888065f28000 orig refcnt 2 [ 1617.717339][ T3368] Sock shutdown complete err: -103 [ 1617.717351][ T3368] chan ffff888065f28000 orig refcnt 1 [ 1617.717367][ T3368] sk ffff88805e05a000 state BT_CLOSED [ 1617.717380][ T3368] chan ffff888065f28000 orig refcnt 2 [ 1617.717396][ T3368] sk ffff88805e05a000 [ 1617.717447][ T3368] chan ffff888065f28000 orig refcnt 1 [ 1617.717461][ T3368] chan ffff888065f28000 [ 1617.717474][ T3368] kobject: '(null)' (ffff88805e9325f0): kobject_cleanup, parent 0000000000000000 [ 1617.732923][T21209] kernfs control: removing [ 1617.734763][ T3368] kobject: '(null)' (ffff88805e9325f0): calling ktype release [ 1617.740846][T21181] kernfs power: removing [ 1617.815748][ T11] kernfs broadcast: removing [ 1617.820409][T21181] kernfs device: removing [ 1617.825027][T21181] kernfs subsystem: removing [ 1617.829676][T21181] kernfs hci0:201: removing [ 1617.837062][T21209] kernfs runtime_suspended_time: removing [ 1617.842979][T21209] kernfs runtime_active_time: removing [ 1617.848474][ T11] kernfs speed: removing [ 1617.854957][T21209] kernfs autosuspend_delay_ms: removing [ 1617.860590][T21181] kernfs uevent: removing [ 1617.865019][T21181] PM: Removing info for No Bus:hci0:201 [ 1617.865028][ T11] kernfs duplex: removing [ 1617.865272][T21209] kernfs power: removing [ 1617.872606][T21181] kobject: 'hci0:201' (ffff88807f4ea5f0): kobject_uevent_env [ 1617.887568][T21181] kobject: 'hci0:201' (ffff88807f4ea5f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/hci0:201' [ 1617.894401][ T11] kernfs dormant: removing [ 1617.905268][ T11] kernfs testing: removing [ 1617.909772][ T11] kernfs operstate: removing [ 1617.914540][ T11] kernfs carrier_changes: removing [ 1617.919815][ T11] kernfs ifalias: removing [ 1617.925108][ T11] kernfs carrier: removing [ 1617.929576][T21181] kernfs hci0:201: removing [ 1617.934862][T21181] kobject: 'hci0:201' (ffff88807f4ea5f0): kobject_cleanup, parent 0000000000000000 [ 1617.934876][T21209] kernfs device: removing [ 1617.934986][T21209] kernfs subsystem: removing [ 1617.946115][T21181] kobject: 'hci0:201' (ffff88807f4ea5f0): calling ktype release [ 1617.953454][ C1] virtqueue callback for ffff8880219a5800 (ffffffff85c745d0) [ 1617.956011][ T11] kernfs mtu: removing [ 1617.961162][ C1] No more buffers in queue [ 1617.977121][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 1617.978136][T21209] kernfs rfkill201: removing [ 1617.982955][ C1] No more buffers in queue [ 1617.982970][ C1] Added buffer head 296 to ffff8880219a5800 [ 1617.982987][ C1] Added buffer head 295 to ffff8880219a5800 [ 1617.983002][ C1] Added buffer head 294 to ffff8880219a5800 [ 1617.983016][ C1] Added buffer head 293 to ffff8880219a5800 [ 1617.983030][ C1] Added buffer head 292 to ffff8880219a5800 [ 1617.983045][ C1] Added buffer head 291 to ffff8880219a5800 [ 1617.983059][ C1] Added buffer head 290 to ffff8880219a5800 [ 1617.983073][ C1] Added buffer head 289 to ffff8880219a5800 [ 1617.983185][ C1] Added buffer head 288 to ffff8880219a5800 [ 1617.991310][T21209] kernfs uevent: removing [ 1617.992094][ C1] Added buffer head 287 to ffff8880219a5800 [ 1618.003304][T21209] kernfs name: removing [ 1618.003960][ C1] Added buffer head 286 to ffff8880219a5800 [ 1618.009872][T21209] kernfs type: removing [ 1618.015713][ C1] Added buffer head 285 to ffff8880219a5800 [ 1618.015731][ C1] Added buffer head 284 to ffff8880219a5800 [ 1618.015746][ C1] Added buffer head 283 to ffff8880219a5800 [ 1618.015761][ C1] Added buffer head 282 to ffff8880219a5800 [ 1618.015786][ C1] Added buffer head 281 to ffff8880219a5800 [ 1618.031345][ T11] kernfs flags: removing [ 1618.033518][ C1] Added buffer head 280 to ffff8880219a5800 [ 1618.033536][ C1] Added buffer head 279 to ffff8880219a5800 [ 1618.033551][ C1] Added buffer head 278 to ffff8880219a5800 [ 1618.033564][ C1] Added buffer head 277 to ffff8880219a5800 [ 1618.033580][ C1] Added buffer head 276 to ffff8880219a5800 [ 1618.033595][ C1] Added buffer head 275 to ffff8880219a5800 [ 1618.039611][ T11] kernfs tx_queue_len: removing [ 1618.045388][ C1] Added buffer head 274 to ffff8880219a5800 [ 1618.045405][ C1] Added buffer head 273 to ffff8880219a5800 [ 1618.045419][ C1] Added buffer head 272 to ffff8880219a5800 [ 1618.045433][ C1] Added buffer head 271 to ffff8880219a5800 [ 1618.045447][ C1] Added buffer head 270 to ffff8880219a5800 [ 1618.045461][ C1] Added buffer head 269 to ffff8880219a5800 [ 1618.045475][ C1] Added buffer head 268 to ffff8880219a5800 [ 1618.045522][ C1] Added buffer head 267 to ffff8880219a5800 [ 1618.045537][ C1] Added buffer head 266 to ffff8880219a5800 [ 1618.045551][ C1] Added buffer head 265 to ffff8880219a5800 [ 1618.045564][ C1] Added buffer head 264 to ffff8880219a5800 [ 1618.046008][ C1] No more buffers in queue [ 1618.060974][ T11] kernfs gro_flush_timeout: removing [ 1618.065988][ C1] eth0: xmit ffff8880304d5000 42:01:0a:80:00:01 [ 1618.066015][ C1] Added buffer head 18 to ffff8880219a5a00 [ 1618.066071][ C1] virtqueue callback for ffff8880219a5a00 (ffffffff85c746c0) [ 1618.070357][ T11] kernfs napi_defer_hard_irqs: removing [ 1618.076774][ C1] wireguard: wg2: Handshake for peer 65 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 13) [ 1618.076835][ C1] wireguard: wg0: Handshake for peer 80 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 1618.077250][ C1] Sent skb ffff8880304d5000 [ 1618.084236][T10104] nf_nat: Already setup manip DST for ct ffff888078535e00 (status bits 0x188) [ 1618.088903][ C1] No more buffers in queue [ 1618.094771][T10104] nf_nat: Already setup manip SRC for ct ffff888078535e00 (status bits 0x188) [ 1618.108270][T21181] kobject: 'hci0:201': free name [ 1618.138454][ T11] kernfs phys_port_id: removing [ 1618.142266][T21181] hci0 orig refcnt 7 [ 1618.153610][T21209] kernfs index: removing [ 1618.159021][T21181] hdev hci0 event 4 [ 1618.172865][T21209] kernfs persistent: removing [ 1618.184193][T21181] hdev 0000000000000000 len 8 [ 1618.196098][ T11] kernfs phys_port_name: removing [ 1618.200133][T21181] hci0: Cleanup of MSFT extension [ 1618.210667][ T11] kernfs phys_switch_id: removing [ 1618.212307][T21181] hdev hci0 event 8 [ 1618.219802][T21209] kernfs state: removing [ 1618.221877][T21181] hci0 orig refcnt 6 [ 1618.263020][T21209] kernfs soft: removing [ 1618.272159][T21181] channel 3 len 6 [ 1618.287730][ T11] kernfs proto_down: removing [ 1618.291089][T21181] channel 3 len 8 [ 1618.299648][ T11] kernfs carrier_up_count: removing [ 1618.309075][T21181] hdev hci0 event 2 [ 1618.312177][T21209] kernfs hard: removing [ 1618.317215][T21181] hdev 0000000000000000 len 8 [ 1618.322005][ T11] kernfs carrier_down_count: removing [ 1618.397591][T21181] kernfs runtime_status: removing [ 1618.403342][T21209] kernfs hard_block_reasons: removing [ 1618.408795][T21181] kernfs control: removing [ 1618.412760][T21209] PM: Removing info for No Bus:rfkill201 [ 1618.414069][ T11] kernfs threaded: removing [ 1618.419260][T21209] kobject: 'rfkill201' (ffff88805cfc3110): kobject_uevent_env [ 1618.423617][T21181] kernfs runtime_suspended_time: removing [ 1618.423689][ C0] virtqueue callback for ffff88801e666200 (ffffffff84a02460) [ 1618.437917][T21209] kobject: 'rfkill201' (ffff88805cfc3110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/rfkill201' [ 1618.444313][ C0] virtqueue interrupt with no work for ffff88801e666000 [ 1618.463001][ C0] virtqueue interrupt with no work for ffff88801e65de00 [ 1618.470116][T13124] Added buffer head 0 to ffff88801e666200 [ 1618.478525][ T11] PM: Removing info for No Bus:wlan1 [ 1618.484971][ T11] kobject: 'wlan1' (ffff8880632d86a8): kobject_uevent_env [ 1618.490208][T21181] kernfs runtime_active_time: removing [ 1618.492101][ T11] kobject: 'wlan1' (ffff8880632d86a8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1618.509434][T21209] kernfs rfkill201: removing [ 1618.516089][T21209] kobject: 'rfkill201' (ffff88805cfc3110): kobject_cleanup, parent 0000000000000000 [ 1618.516423][ T11] kernfs wlan1: removing [ 1618.530045][T21209] kobject: 'rfkill201' (ffff88805cfc3110): calling ktype release [ 1618.531253][ T11] kernfs net: removing [ 1618.538414][T21209] kobject: 'rfkill201': free name [ 1618.542131][ T11] kobject: 'net' (ffff888025a05b00): kobject_cleanup, parent 0000000000000000 [ 1618.547555][T21181] kernfs autosuspend_delay_ms: removing [ 1618.562001][T21181] kernfs power: removing [ 1618.564135][ T11] kobject: 'net' (ffff888025a05b00): calling ktype release [ 1618.567096][T21209] kernfs runtime_status: removing [ 1618.579187][T21181] kernfs device: removing [ 1618.580309][ T11] kobject: 'net': free name [ 1618.587344][T21209] kernfs control: removing [ 1618.593541][T21181] kernfs subsystem: removing [ 1618.598213][T21181] kernfs rfkill200: removing [ 1618.603336][T21266] syz_tun: bond_netdev_event received NETDEV_GOING_DOWN [ 1618.610299][T21266] net syz_tun: siw: event 10 [ 1618.615565][T21209] kernfs runtime_suspended_time: removing [ 1618.621585][T21266] In tnode_resize ffff88805d513d20 inflate_threshold=50 threshold=25 [ 1618.629689][ C0] wireguard: wg1: Handshake for peer 82 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 8) [ 1618.629756][ C0] wireguard: wg0: Handshake for peer 61 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1618.629894][ C0] wireguard: wg0: Handshake for peer 79 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1618.643621][T21181] kernfs uevent: removing [ 1618.656487][T17357] nf_nat: Already setup manip DST for ct ffff88802f4c8d80 (status bits 0x188) [ 1618.678019][T17357] nf_nat: Already setup manip SRC for ct ffff88802f4c8d80 (status bits 0x188) [ 1618.690262][T21266] In tnode_resize ffff88805c8f5820 inflate_threshold=50 threshold=25 [ 1618.698817][ T11] kobject: 'wlan1' (ffff8880632d86a8): kobject_cleanup, parent 0000000000000000 [ 1618.707892][T21209] kernfs runtime_active_time: removing [ 1618.707938][T21209] kernfs autosuspend_delay_ms: removing [ 1618.707980][T21209] kernfs power: removing [ 1618.708017][T21209] kernfs subsystem: removing [ 1618.708049][T21209] kernfs hci2: removing [ 1618.708081][T21209] kernfs uevent: removing [ 1618.708097][T21209] PM: Removing info for No Bus:hci2 [ 1618.708170][T21209] kobject: 'hci2' (ffff888068505490): kobject_uevent_env [ 1618.708219][T21209] kobject: 'hci2' (ffff888068505490): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2' [ 1618.708588][T21209] kernfs hci2: removing [ 1618.765412][T21181] kernfs name: removing [ 1618.769653][T21181] kernfs type: removing [ 1618.774194][T21181] kernfs index: removing [ 1618.778483][T21181] kernfs persistent: removing [ 1618.784823][T21181] kernfs state: removing [ 1618.789823][T21266] In tnode_resize ffff8881426df820 inflate_threshold=50 threshold=25 [ 1618.789847][T21266] In tnode_resize ffff88802fb7e520 inflate_threshold=50 threshold=25 [ 1618.789867][T21266] In tnode_resize ffff888030c8d820 inflate_threshold=50 threshold=25 [ 1618.789885][T21266] In tnode_resize ffff8880647cf2a0 inflate_threshold=50 threshold=25 [ 1618.789903][T21266] In tnode_resize ffff88802c155720 inflate_threshold=50 threshold=25 [ 1618.789921][T21266] trie_flush found=1 [ 1618.789986][T21266] In tnode_resize ffff88805d513d20 inflate_threshold=50 threshold=25 [ 1618.790013][T21266] In tnode_resize ffff88805c8f5820 inflate_threshold=50 threshold=25 [ 1618.790036][T21266] In tnode_resize ffff8881426df820 inflate_threshold=50 threshold=25 [ 1618.790054][T21266] In tnode_resize ffff88802fb7e520 inflate_threshold=50 threshold=25 [ 1618.790072][T21266] In tnode_resize ffff888030c8d820 inflate_threshold=50 threshold=25 [ 1618.790089][T21266] In tnode_resize ffff8880647cf2a0 inflate_threshold=50 threshold=25 [ 1618.790107][T21266] In tnode_resize ffff88802c155720 inflate_threshold=50 threshold=25 [ 1618.790124][T21266] trie_flush found=1 [ 1618.790150][T21266] syz_tun: bond_netdev_event received NETDEV_DOWN [ 1618.790177][T21266] net syz_tun: siw: event 2 [ 1618.909225][T21209] hci2 orig refcnt 2 [ 1618.913730][T21266] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::a8aa:aaff:feaa:aaaa in wq:ffff888066be4b58 [ 1618.925135][T21209] kobject: 'hci2' (ffff888068505490): kobject_cleanup, parent 0000000000000000 [ 1618.934135][ T11] kobject: 'wlan1' (ffff8880632d86a8): calling ktype release [ 1618.941575][ T11] kobject: 'wlan1': free name [ 1618.946527][T21209] kobject: 'hci2' (ffff888068505490): calling ktype release [ 1618.954472][T21209] All LE connection parameters were removed [ 1618.960392][T21209] hci2: Unregister MSFT extension [ 1618.964192][T21266] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::aa in wq:ffff888066be4b58 [ 1618.965836][T21209] kobject: 'hci2': free name [ 1618.983002][ T11] kernfs runtime_status: removing [ 1618.988081][ T11] kernfs control: removing [ 1618.992669][ T11] kernfs runtime_suspended_time: removing [ 1618.999864][ T11] kernfs runtime_active_time: removing [ 1619.005437][T21181] kernfs soft: removing [ 1619.009661][T21181] kernfs hard: removing [ 1619.017531][ T11] kernfs autosuspend_delay_ms: removing [ 1619.023425][ T11] kernfs power: removing [ 1619.027749][ T11] kernfs device: removing [ 1619.032139][ T11] kernfs subsystem: removing [ 1619.038123][T21181] kernfs hard_block_reasons: removing [ 1619.045988][T21181] PM: Removing info for No Bus:rfkill200 [ 1619.051636][T21181] kobject: 'rfkill200' (ffff8880742d0110): kobject_uevent_env [ 1619.059184][ T11] kernfs rfkill199: removing [ 1619.066749][T21266] Deleting ac141400/24 dsfield=0x00 t=ffff888141671630 [ 1619.073749][ T11] kernfs uevent: removing [ 1619.074556][T21266] Deleting ac1414ff/32 dsfield=0x00 t=ffff888141671630 [ 1619.082968][T21181] kobject: 'rfkill200' (ffff8880742d0110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/rfkill200' [ 1619.102480][ T11] kernfs name: removing [ 1619.107007][ T11] kernfs type: removing [ 1619.111346][T21266] Deleting ac1414aa/32 dsfield=0x00 t=ffff888141671630