last executing test programs: 9m50.76398401s ago: executing program 2 (id=505): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) read(r1, &(0x7f0000000340)=""/157, 0x9d) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x1, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x1, 0x0, 0xee01}, {0x9, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50, 0x6b4d}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 9m49.918017956s ago: executing program 2 (id=506): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f00000002c0), 0xfa, 0x47f, &(0x7f0000001200)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001680)={0x7, 0x100}, 0x0) syz_mount_image$exfat(&(0x7f00000016c0), &(0x7f0000001700)='./file2\x00', 0x2000000, &(0x7f0000001740)=ANY=[], 0xfb, 0x1501, &(0x7f0000001780)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXA4XOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//hBVVxg==") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000002cc0)='.\x00', 0xfffffe41) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000002d00)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000002d40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002dc0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000002e40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002e80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002ec0)=0x6) socket$netlink(0x10, 0x3, 0x0) setreuid(0xee01, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000002f00), &(0x7f0000002f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824000, 0x0, 0x40, 0x0, &(0x7f0000003040)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000030c0)=0xb2, 0x4) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 9m48.408037858s ago: executing program 2 (id=524): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 9m47.845175235s ago: executing program 2 (id=529): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) read(r1, &(0x7f0000000340)=""/157, 0x9d) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x1, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x1, 0x0, 0xee01}, {0x9, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50, 0x6b4d}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 9m46.847406046s ago: executing program 2 (id=534): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_conn_rsp={{0x3, 0x95, 0x8}, {0x1, 0xf4, 0xf, 0x356}}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0x2}}]}}, 0x1b) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, 0x0, 0x20044010) 9m45.899843062s ago: executing program 2 (id=545): openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi0\x00', 0x181001, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x3, 0x2) r1 = socket(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='.\x00', &(0x7f0000000780), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) 9m31.135890875s ago: executing program 32 (id=545): openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi0\x00', 0x181001, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x3, 0x2) r1 = socket(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='.\x00', &(0x7f0000000780), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) 1m0.400474202s ago: executing program 4 (id=3009): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file0\x00', 0x0, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$igmp(0x2, 0x3, 0x2) setns(0xc9, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000028c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0x3, 0x8, &(0x7f00000029c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000002a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002a40)={r1, 0x0, 0xe80, 0x2f, &(0x7f0000002ac0)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m0.006351002s ago: executing program 4 (id=3012): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000004980)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}], 0x20, 0x8860}, 0x80) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x4, 0x81, 0x6}]}) syz_open_pts(0xffffffffffffffff, 0x101482) close_range(r2, 0xffffffffffffffff, 0x0) 59.028413751s ago: executing program 4 (id=3013): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bc09080000000000b60a0104000000000f000000000000003f93000000000000b5030000000000008500000076000000b70000000000000095000000000000005880d37eb38167fa6f1bff8782b7ebb99c15597d6e97d074eedba31cf48f10268ce013f2bfe9e17e7efeaf4d8882c27b5e83da041cb1c0de85bec0f28289065b4f70e8464b0354b14cd1c21c787f8333502244b225ac0d829ee05fc814143fc936e11e79555c534bcf47924019"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000800)={r3, r3, 0xc, 0x1, &(0x7f00000008c0)='\x00', 0xb, 0x1, 0x10cf, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000900)={0x1, &(0x7f0000000940)=[{}]}) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 58.066235908s ago: executing program 4 (id=3015): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0xff) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x803, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0xffffffffffffffff, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 57.773484668s ago: executing program 4 (id=3017): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) capset(&(0x7f0000000640)={0x20080522}, &(0x7f0000000680)={0x200000, 0x200010}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f00000006c0)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000740)=[{&(0x7f0000000dc0)=""/4095, 0x440000}], 0x100000000000011a) 56.273522989s ago: executing program 4 (id=3018): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000b00)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x75b, &(0x7f0000000b40)="$eJzs3M9rHHUbAPBnpknTH+m7eeE9vLynFypWqN2kqdqTEPFcKPQPqGEzCSGTbMhuahMDbT14EAQVwR+96H/gRRG8lP4PiuBNwYOgNY0HwUNkNpvEbnfT1CadGj8fmOzz/c7uPM+THb7swM4G8I/1/+JPEjEYERcjotKeTyPicCs6EnF943l3V1dqa6srtSTW1y/dSYqXteY2j5W0H49H6yXx34i43R9x+vX78zaWlmfG8zxbaI+Hm7Pzw42l5TPTs+NT2VQ2Nzoycu7cC6PPPzeyZ72+9dqnP7/5xctffXR+9vcX7zw7kcRYq+/o6GMvbfxP+mOsY35uP5KVKCm7AAAAdqX4nH8oIvpan1IrcagVAQAAAAfJ+sA6AAAAcOAlUXYFAAAAwP7a/B7A3dWV2ub2OL9/8NNLETG0fW/x2lb+vtY9xBFHoj8ijq0l99yZkGy8DB7J9RsRcWusy/mftM+/hzSwHXbeue4e6SfPrWL9Geu2/qVb6090WX/6Nn874RFtrn9r961/2/kP9Vj/Lu4mwfWIgYVTX/fMfyPif33d8idb+ZMe+V/ZZY+fDX77Xa99659EnIru+f+ca4ffhxienM6z9t+uOU5+fu30Tv0f65U/2bn/+V32//3N0alea0mR/5mTO7//3fIX58Tb7TrSiHin/ViM3+3I8fTtkQ936n+iR/8Pev8/7nXQa/cOv3xj+YdeTwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBu0ogYjCStbsVpWq1GHI+I/8SxNK83mqcn64tzE8W+iKHoTyen82wkIiob46QYn23F2+PRjvG5iPh3RLxXOdoaV2v1fKLs5gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhyPCIGI0mrEZFGxK+VNK1Wy64KAAAA2HNDZRcAAAAA7DvX/wAAAHDwPcz1/419rAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA40C5euFBs62urK7ViPHFlaXGmfuXMRNaYqc4u1qq1+sJ8dapen8qzaq0++6Dj5fX6/PmYW7w63MwazeHG0vLl2friXPPy9Oz4VHY5638sXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCwBltbklYjIm3FaVqtRpyIiKHoTyan82wkIv4VEd9U+geK8dmyiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDPNZaWZ8bzPFu4NzjR3t1l1wEJjrY7fFLqEQieqKDERQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNI0lpZnxvM8W2iUXQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADlSn9MIqLYTlWeGuzcezj5rdJ6jIhXb156/+p4s7lwtpj/ZWu++UF7frSM+gEAAIBOm9fp7ev4tOx6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv4/G0vLMeJ5nC/sYlN0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw1/wRAAD//4hJxgU=") r0 = openat(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000013c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x2, 0xfffffffffffffff7, 0x0, 0x0}) 56.089816258s ago: executing program 3 (id=3020): r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x10b442, 0x79) r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file2\x00', 0x42, 0xe) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000007c0)={0x0, r0, 0x1, 0x3, 0x4, 0x1000000000001}) 55.880640909s ago: executing program 3 (id=3021): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file0\x00', 0x0, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$igmp(0x2, 0x3, 0x2) setns(0xc9, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000028c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0x3, 0x8, &(0x7f00000029c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000002a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002a40)={r1, 0x0, 0xe80, 0x2f, &(0x7f0000002ac0)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 54.756617893s ago: executing program 3 (id=3026): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0xff) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x803, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0xffffffffffffffff, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 53.878917051s ago: executing program 3 (id=3030): r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x10b442, 0x79) r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file2\x00', 0x42, 0xe) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000007c0)={0x0, r0, 0x1, 0x3, 0x4, 0x1000000000001}) 53.610524089s ago: executing program 3 (id=3032): mkdirat(0xffffffffffffff9c, 0x0, 0x18) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x62000, 0xc1) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, &(0x7f0000000000)) 52.787988212s ago: executing program 3 (id=3034): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001010000f77f0000cc00000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0008000003008000000000000000"], 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f00000000c0)={'bond0\x00', @ifru_names='vcan0\x00'}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0x43c37000) shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) socket(0x2, 0x5, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r3, &(0x7f0000002580)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r3, &(0x7f00000025c0)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000002600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002840)=@caif=@dbg={0x25, 0x1}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002900)="80035c7617dd3e144cdee02f1015faa25c8b436bb0c1e414fdfcc6574029a21215dbab263ffeaaddc7d32c13bf71df29c2422f2f7265b5291c597d59996d2308be2c4249926f289761505903f185cc40761109ea5bd4ec836e436b28baa9571b8f92d5d0", 0x64}], 0x1, &(0x7f0000002980)=[{0x38, 0x119, 0x1, "ef1675edeb833def44c3ceebcec73a3bab23c5af844cc92a3460df979f45063e85757637d1f531b7"}], 0x38}}, {{0x0, 0x0, &(0x7f0000002a00), 0x0, &(0x7f0000002a40)=[{0x28, 0x0, 0x7, "d72354afcdba183b1ef62b0cf2be4f059f2b"}, {0x48, 0x1, 0x400, "041591698655f87a63218ba4ebdd825e632461a7fc3108d3bf5be801c02467301aa5acd26be8fcb8eb4b6a8c60614a0848341d62f45f10c4"}, {0x10, 0x10e, 0xfffffffe}], 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)}}], 0x4, 0x81) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000002480), 0x0, 0x0) read(r4, &(0x7f00000024c0)=""/148, 0xffffff96) landlock_restrict_self(0xffffffffffffffff, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x4a8e) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x2000c080) flistxattr(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000000406010300000000000000000500000805000100070000eca777215e4970a1310000000005871a5b3c55a2036b3490585c8680d4b90f1c3ed86347cb095d855e535e8551c5e04cf293080401c8c49835ef06562f55db747575e3fe1c0f65c6a0ac39891ddac621f9bd3cbf328be4e17c86a5259ec1a6047bbf319f921e8fda1750034a2203b596e2fc59496e0e879997f964597aacc05792ab67cf82c6595733b86960cf69e968087cb08efa5c5bd437f2531d72f7265d29cfb0a33b436fd1ac72246a98f4305d1babfaf3a8fce40f1be2bda1"], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x0) 37.392187669s ago: executing program 33 (id=3034): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001010000f77f0000cc00000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0008000003008000000000000000"], 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f00000000c0)={'bond0\x00', @ifru_names='vcan0\x00'}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0x43c37000) shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) socket(0x2, 0x5, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r3, &(0x7f0000002580)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r3, &(0x7f00000025c0)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000002600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002840)=@caif=@dbg={0x25, 0x1}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002900)="80035c7617dd3e144cdee02f1015faa25c8b436bb0c1e414fdfcc6574029a21215dbab263ffeaaddc7d32c13bf71df29c2422f2f7265b5291c597d59996d2308be2c4249926f289761505903f185cc40761109ea5bd4ec836e436b28baa9571b8f92d5d0", 0x64}], 0x1, &(0x7f0000002980)=[{0x38, 0x119, 0x1, "ef1675edeb833def44c3ceebcec73a3bab23c5af844cc92a3460df979f45063e85757637d1f531b7"}], 0x38}}, {{0x0, 0x0, &(0x7f0000002a00), 0x0, &(0x7f0000002a40)=[{0x28, 0x0, 0x7, "d72354afcdba183b1ef62b0cf2be4f059f2b"}, {0x48, 0x1, 0x400, "041591698655f87a63218ba4ebdd825e632461a7fc3108d3bf5be801c02467301aa5acd26be8fcb8eb4b6a8c60614a0848341d62f45f10c4"}, {0x10, 0x10e, 0xfffffffe}], 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)}}], 0x4, 0x81) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000002480), 0x0, 0x0) read(r4, &(0x7f00000024c0)=""/148, 0xffffff96) landlock_restrict_self(0xffffffffffffffff, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x4a8e) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x2000c080) flistxattr(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000000406010300000000000000000500000805000100070000eca777215e4970a1310000000005871a5b3c55a2036b3490585c8680d4b90f1c3ed86347cb095d855e535e8551c5e04cf293080401c8c49835ef06562f55db747575e3fe1c0f65c6a0ac39891ddac621f9bd3cbf328be4e17c86a5259ec1a6047bbf319f921e8fda1750034a2203b596e2fc59496e0e879997f964597aacc05792ab67cf82c6595733b86960cf69e968087cb08efa5c5bd437f2531d72f7265d29cfb0a33b436fd1ac72246a98f4305d1babfaf3a8fce40f1be2bda1"], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x0) 11.675313499s ago: executing program 5 (id=3159): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000002c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000480)={'veth1_virt_wifi\x00', &(0x7f00000004c0)=@ethtool_dump={0x32, 0x9, 0x6}}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) sched_setscheduler(r0, 0x0, &(0x7f0000000080)=0xffff) unshare(0x42000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x5678, @loopback}}, 0x1e) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10.064497412s ago: executing program 1 (id=3163): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@abort}, {@noload}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x51d, &(0x7f00000014c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000500)="$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") syz_open_procfs(0x0, &(0x7f00000008c0)='net/route\x00') write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000980)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000009c0)=0x7) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, 0x0, 0x20000082) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a40)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ac0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b40), 0xf241f1a146326c4, 0x2, 0x0) shmctl$IPC_RMID(0x0, 0xc00000000000000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_read_part_table(0x107a, &(0x7f0000003280)="$eJzs0CFOxEAUx+F/l+0AhhVcCIFbB5a7gEFyARJuwYkQOBIkZvPIdDYNFwDM94lJ2/f6ExP+1baSOmmpqkoOrc6Pg7vTfo63jymVzLsxqWQ7J5vH3Y9Onc2ZxuNVL06HWrwtmYelf/+StB6devcym6TdXN/uM2f67Guv45/nizX7fmw+rV/acu6/xmr94tUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ/5DgAA//9Qiy9Q") r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000040), 0x4) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000004980)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r4, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 6.063328827s ago: executing program 5 (id=3168): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af25, 0xfffffffffffffffe) 5.92737104s ago: executing program 1 (id=3169): ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f00000033c0)={0x7cd8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 5.83764737s ago: executing program 0 (id=3170): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000062) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./cfg\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000ffffffff0000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f6164003400028008000440000000000800054000000000082b45224f88dfe07b00024000000002080006400000000208000740000000080900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0x9c}}, 0x4) 5.730168671s ago: executing program 1 (id=3172): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x18) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x62000, 0xc1) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, &(0x7f0000000000)) 5.547409609s ago: executing program 5 (id=3173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x47, 0x2, 0x2, "43490802000000008000", 0x41495043}) 4.774686287s ago: executing program 0 (id=3174): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x26}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.688011876s ago: executing program 1 (id=3175): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x47, 0x7, 0x0, 0x0, r4}) 3.959494979s ago: executing program 5 (id=3176): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002fc0)="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", 0x2000, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.926234963s ago: executing program 0 (id=3177): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0xfc) mount(0x0, 0x0, &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)="61707072616973652066756e633d46c5c73bb274b8bf98aea9e7dec9a3219240895ab6a91956d58432df59d3ba4cade97cc8b7c683cefa6bbed62ab2973e8497ca23bc215ed9a47dea4c9ea054dea5183b97a87160dab06b7437d862dec530bc06e7f84916d8c19a4cace75920", 0x6d) 3.147873382s ago: executing program 1 (id=3178): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r0, 0x84, 0x7d, &(0x7f0000000000)={r1, 0x1598}, &(0x7f0000000080)=0x8) 3.055581451s ago: executing program 5 (id=3179): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b40)={'batadv_slave_0\x00'}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0xc0ed4040, &(0x7f0000000c00)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000cc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000001180)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000011c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001300), 0x651, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000001380), 0xaa201, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000001400)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001440)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x404, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000004, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 3.054683071s ago: executing program 0 (id=3187): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000380)="6fcb", 0x2) 340.303426ms ago: executing program 5 (id=3180): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@abort}, {@noload}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x51d, &(0x7f00000014c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000500)="$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") syz_open_procfs(0x0, &(0x7f00000008c0)='net/route\x00') write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000980)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000009c0)=0x7) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, 0x0, 0x20000082) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a40)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ac0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b40), 0xf241f1a146326c4, 0x2, 0x0) shmctl$IPC_RMID(0x0, 0xc00000000000000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_read_part_table(0x107a, &(0x7f0000003280)="$eJzs0CFOxEAUx+F/l+0AhhVcCIFbB5a7gEFyARJuwYkQOBIkZvPIdDYNFwDM94lJ2/f6ExP+1baSOmmpqkoOrc6Pg7vTfo63jymVzLsxqWQ7J5vH3Y9Onc2ZxuNVL06HWrwtmYelf/+StB6devcym6TdXN/uM2f67Guv45/nizX7fmw+rV/acu6/xmr94tUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ/5DgAA//9Qiy9Q") r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000040), 0x4) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000004980)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r4, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 321.001158ms ago: executing program 0 (id=3189): syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000740)='./file1\x00', 0x1008800, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x4, 0x284, &(0x7f0000000b40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cgroup.controllers\x00', 0x275a, 0x0) 320.282988ms ago: executing program 1 (id=3181): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000540)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x7a2002, 0x23456}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af25, 0xfffffffffffffffe) 0s ago: executing program 0 (id=3182): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='wg2\x00', 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000400)='syz_tun\x00', 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x66, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x4, "e023"}, {0x7, 0x9, "263c1e6ad8c9da"}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x400, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x7, 0x0, 0xe}}}}}}, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x69e}, 0x0, 0x0, '\x00', {0x2, 0x434, 0x0, 0x0}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) write$nci(r0, &(0x7f0000000440)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="500404"], 0x7) write$nci(r0, &(0x7f00000004c0)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:'], 0xa) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x24, r3, 0x1, 0x70bd28, 0x234, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4851}, 0x0) kernel console output (not intermixed with test programs): 63][T12319] RDX: 0000000000000000 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 514.912138][T12319] RBP: 00007f3aa5a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 514.920122][T12319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.928088][T12319] R13: 00007f3aa5c26038 R14: 00007f3aa5c25fa0 R15: 00007ffdcaf028c8 [ 514.936163][T12319] [ 514.981152][T12321] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 515.041898][T12321] EXT4-fs (loop4): 1 truncate cleaned up [ 515.063533][T12321] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 515.506496][T12332] UBIFS error (pid: 12332): cannot open "ubi0/file0", error -22 [ 515.631641][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 515.650923][T12336] device syzkaller0 entered promiscuous mode [ 515.657545][T12334] md: array md3 already initialised! [ 515.671650][T12334] md: could not open device unknown-block(1,7). [ 515.696186][T12336] tipc: Enabling of bearer rejected, failed to enable media [ 515.707564][T12334] md: error, md_import_device() returned -16 [ 515.843754][T12342] tipc: Enabling of bearer rejected, failed to enable media [ 515.859120][T12338] device syzkaller0 entered promiscuous mode [ 516.333295][T12357] can0: slcan on ttyS3. [ 516.427214][T12358] capability: warning: `syz.1.2379' uses 32-bit capabilities (legacy support in use) [ 516.488125][T12357] can0 (unregistered): slcan off ttyS3. [ 517.813174][T12373] binder: 12372:12373 ioctl c0306201 2000000001c0 returned -14 [ 518.075882][T12380] md: couldn't update array info. -22 [ 518.117178][T12380] md: could not open device unknown-block(1,3). [ 518.140324][T12380] md: md_import_device returned -16 [ 518.855118][T12387] device syzkaller0 entered promiscuous mode [ 521.170573][T12405] loop4: detected capacity change from 0 to 8 [ 521.206694][T12405] squashfs: Unknown parameter 'J—‡$Kà ž‹„FÅB/æ' [ 522.675561][ T4495] hid-generic 0005:10CF:4155.001A: unknown main item tag 0x0 [ 522.779817][ T4495] hid-generic 0005:10CF:4155.001A: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 523.422176][T12442] FAULT_INJECTION: forcing a failure. [ 523.422176][T12442] name failslab, interval 1, probability 0, space 0, times 0 [ 523.450254][T12442] CPU: 1 PID: 12442 Comm: syz.4.2410 Not tainted syzkaller #0 [ 523.457782][T12442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 523.467864][T12442] Call Trace: [ 523.471163][T12442] [ 523.474125][T12442] dump_stack_lvl+0x188/0x24e [ 523.478840][T12442] ? show_regs_print_info+0x12/0x12 [ 523.484159][T12442] ? load_image+0x410/0x410 [ 523.488790][T12442] ? __might_sleep+0xd0/0xd0 [ 523.493408][T12442] ? __lock_acquire+0x7ea0/0x7ea0 [ 523.498471][T12442] should_fail_ex+0x390/0x4c0 [ 523.503186][T12442] should_failslab+0x5/0x20 [ 523.507723][T12442] slab_pre_alloc_hook+0x59/0x300 [ 523.512781][T12442] ? aa_get_newest_label+0xf9/0x5b0 [ 523.518017][T12442] ? debugfs_file_get+0x114/0x460 [ 523.523087][T12442] __kmem_cache_alloc_node+0x4f/0x270 [ 523.528496][T12442] ? debugfs_file_get+0x114/0x460 [ 523.533558][T12442] kmalloc_trace+0x26/0xe0 [ 523.538020][T12442] debugfs_file_get+0x114/0x460 [ 523.542921][T12442] ? debugfs_real_fops+0xa0/0xa0 [ 523.547892][T12442] ? apparmor_inode_getattr+0x20/0x20 [ 523.553301][T12442] ? __rwlock_init+0x140/0x140 [ 523.558105][T12442] full_proxy_open+0x49/0x820 [ 523.562818][T12442] ? fsnotify_perm+0x248/0x550 [ 523.567614][T12442] ? open_proxy_open+0x4b0/0x4b0 [ 523.572588][T12442] do_dentry_open+0x7dd/0x10b0 [ 523.577399][T12442] path_openat+0x2674/0x2f10 [ 523.582036][T12442] ? kasan_set_track+0x60/0x70 [ 523.586841][T12442] ? verify_lock_unused+0x140/0x140 [ 523.592077][T12442] ? do_sys_openat2+0xdd/0x4f0 [ 523.596879][T12442] ? do_filp_open+0x420/0x420 [ 523.601599][T12442] do_filp_open+0x1ee/0x420 [ 523.606131][T12442] ? vfs_tmpfile+0x470/0x470 [ 523.610771][T12442] ? _raw_spin_unlock+0x24/0x40 [ 523.615656][T12442] ? alloc_fd+0x590/0x640 [ 523.620026][T12442] do_sys_openat2+0x14b/0x4f0 [ 523.624745][T12442] ? do_sys_open+0xe0/0xe0 [ 523.629194][T12442] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 523.635216][T12442] ? lock_chain_count+0x20/0x20 [ 523.640111][T12442] __x64_sys_openat+0x135/0x160 [ 523.645005][T12442] do_syscall_64+0x4c/0xa0 [ 523.649467][T12442] ? clear_bhb_loop+0x60/0xb0 [ 523.654178][T12442] ? clear_bhb_loop+0x60/0xb0 [ 523.658882][T12442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.664811][T12442] RIP: 0033:0x7f9aa3f9f559 [ 523.669249][T12442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.688967][T12442] RSP: 002b:00007f9aa4f15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 523.697410][T12442] RAX: ffffffffffffffda RBX: 00007f9aa4225fa0 RCX: 00007f9aa3f9f559 [ 523.705496][T12442] RDX: 0000000000000000 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 523.713494][T12442] RBP: 00007f9aa4036b20 R08: 0000000000000000 R09: 0000000000000000 [ 523.721491][T12442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.729518][T12442] R13: 00007f9aa4226038 R14: 00007f9aa4225fa0 R15: 00007ffc3673af88 [ 523.737531][T12442] [ 524.265775][T12449] unsupported nlmsg_type 40 [ 524.391995][T12451] rxe_eth0 speed is unknown, defaulting to 1000 [ 525.302285][T12465] loop4: detected capacity change from 0 to 512 [ 525.379043][T12465] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 526.045447][T12465] EXT4-fs (loop4): 1 truncate cleaned up [ 526.070059][T12465] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 526.165678][ T26] audit: type=1326 audit(1793106370.010:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.0.2422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa599f559 code=0x7ffc0000 [ 526.192092][T12480] sctp: [Deprecated]: syz.1.2421 (pid 12480) Use of int in max_burst socket option deprecated. [ 526.192092][T12480] Use struct sctp_assoc_value instead [ 526.229137][ T26] audit: type=1326 audit(1793106370.080:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.0.2422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3aa599f559 code=0x7ffc0000 [ 526.306677][ T26] audit: type=1326 audit(1793106370.080:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.0.2422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa599f559 code=0x7ffc0000 [ 526.411375][ T4367] hid-generic 0005:10CF:4155.001B: unknown main item tag 0x0 [ 526.490986][ T4367] hid-generic 0005:10CF:4155.001B: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 526.508525][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 528.155658][T12519] rxe_eth0 speed is unknown, defaulting to 1000 [ 528.352680][T12522] overlayfs: missing 'lowerdir' [ 528.394179][T12522] FAULT_INJECTION: forcing a failure. [ 528.394179][T12522] name failslab, interval 1, probability 0, space 0, times 0 [ 528.515111][T12522] CPU: 0 PID: 12522 Comm: syz.0.2434 Not tainted syzkaller #0 [ 528.522642][T12522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 528.532735][T12522] Call Trace: [ 528.536043][T12522] [ 528.539012][T12522] dump_stack_lvl+0x188/0x24e [ 528.543733][T12522] ? show_regs_print_info+0x12/0x12 [ 528.548961][T12522] ? load_image+0x410/0x410 [ 528.553525][T12522] ? __might_sleep+0xd0/0xd0 [ 528.558160][T12522] ? __lock_acquire+0x7ea0/0x7ea0 [ 528.563229][T12522] should_fail_ex+0x390/0x4c0 [ 528.567955][T12522] should_failslab+0x5/0x20 [ 528.572490][T12522] slab_pre_alloc_hook+0x59/0x300 [ 528.577558][T12522] ? __kernfs_new_node+0xa6/0x7f0 [ 528.582655][T12522] ? rcu_is_watching+0x11/0xa0 [ 528.587468][T12522] kmem_cache_alloc+0x56/0x2f0 [ 528.592267][T12522] ? __kernfs_new_node+0xe1/0x7f0 [ 528.597329][T12522] __kernfs_new_node+0xe1/0x7f0 [ 528.602207][T12522] ? vsnprintf+0x1b22/0x1c20 [ 528.606812][T12522] ? kernfs_new_node+0x250/0x250 [ 528.611756][T12522] ? snprintf+0xe5/0x140 [ 528.616001][T12522] ? vscnprintf+0x80/0x80 [ 528.620332][T12522] kernfs_new_node+0x148/0x250 [ 528.625102][T12522] __kernfs_create_file+0x47/0x2e0 [ 528.630215][T12522] cgroup_addrm_files+0x80c/0xd50 [ 528.635335][T12522] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 528.641497][T12522] ? mark_lock+0x94/0x320 [ 528.645848][T12522] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 528.651844][T12522] ? __local_bh_enable_ip+0x136/0x1c0 [ 528.657222][T12522] ? lockdep_hardirqs_on+0x94/0x140 [ 528.662435][T12522] css_populate_dir+0x157/0x3b0 [ 528.667320][T12522] cgroup_apply_control_enable+0x641/0xb00 [ 528.673157][T12522] cgroup_mkdir+0xc7f/0xe70 [ 528.677665][T12522] ? css_task_iter_end+0x280/0x280 [ 528.682785][T12522] ? kernfs_iop_permission+0x26d/0x350 [ 528.688333][T12522] ? css_task_iter_end+0x280/0x280 [ 528.693442][T12522] kernfs_iop_mkdir+0x23d/0x3d0 [ 528.698302][T12522] vfs_mkdir+0x386/0x570 [ 528.702555][T12522] do_mkdirat+0x1d8/0x440 [ 528.706884][T12522] ? vfs_mkdir+0x570/0x570 [ 528.711301][T12522] __x64_sys_mkdirat+0x85/0x90 [ 528.716063][T12522] do_syscall_64+0x4c/0xa0 [ 528.720474][T12522] ? clear_bhb_loop+0x60/0xb0 [ 528.725152][T12522] ? clear_bhb_loop+0x60/0xb0 [ 528.729827][T12522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.735723][T12522] RIP: 0033:0x7f3aa599f559 [ 528.740143][T12522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.759771][T12522] RSP: 002b:00007f3aa6903028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 528.768196][T12522] RAX: ffffffffffffffda RBX: 00007f3aa5c25fa0 RCX: 00007f3aa599f559 [ 528.776169][T12522] RDX: 00000000000001ff RSI: 0000200000000d00 RDI: ffffffffffffff9c [ 528.784144][T12522] RBP: 00007f3aa5a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 528.792135][T12522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.800106][T12522] R13: 00007f3aa5c26038 R14: 00007f3aa5c25fa0 R15: 00007ffdcaf028c8 [ 528.808102][T12522] [ 528.866427][T12522] cgroup: cgroup_addrm_files: failed to add usage_percpu, err=-12 [ 529.266066][ T131] hid-generic 0005:10CF:4155.001C: unknown main item tag 0x0 [ 529.290021][ T131] hid-generic 0005:10CF:4155.001C: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 533.688621][T12581] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 534.186785][ T4367] hid-generic 0005:10CF:4155.001D: unknown main item tag 0x0 [ 534.227228][ T4367] hid-generic 0005:10CF:4155.001D: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 534.245423][T12596] ip_tables: iptables: counters copy to user failed while replacing table [ 536.327339][T12627] rxe_eth0 speed is unknown, defaulting to 1000 [ 538.232178][ T4365] hid-generic 0005:10CF:4155.001E: unknown main item tag 0x0 [ 538.251831][ T4365] hid-generic 0005:10CF:4155.001E: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 538.530948][T12666] loop4: detected capacity change from 0 to 512 [ 538.612462][T12666] EXT4-fs (loop4): Test dummy encryption mode enabled [ 538.645254][T12666] EXT4-fs (loop4): can't mount with commit=7, fs mounted w/o journal [ 538.854199][T12673] 0x000000000000-0x000000010000 : "" [ 539.394354][T12673] ftl_cs: FTL header not found. [ 539.447339][T12673] FAULT_INJECTION: forcing a failure. [ 539.447339][T12673] name failslab, interval 1, probability 0, space 0, times 0 [ 539.476492][T12673] CPU: 1 PID: 12673 Comm: syz.3.2472 Not tainted syzkaller #0 [ 539.484021][T12673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 539.494147][T12673] Call Trace: [ 539.497452][T12673] [ 539.500407][T12673] dump_stack_lvl+0x188/0x24e [ 539.505132][T12673] ? show_regs_print_info+0x12/0x12 [ 539.510367][T12673] ? load_image+0x410/0x410 [ 539.514908][T12673] ? __might_sleep+0xd0/0xd0 [ 539.519534][T12673] ? __lock_acquire+0x7ea0/0x7ea0 [ 539.524605][T12673] should_fail_ex+0x390/0x4c0 [ 539.529333][T12673] should_failslab+0x5/0x20 [ 539.533868][T12673] slab_pre_alloc_hook+0x59/0x300 [ 539.538941][T12673] kmem_cache_alloc+0x56/0x2f0 [ 539.543743][T12673] ? __kernfs_new_node+0xe1/0x7f0 [ 539.548830][T12673] __kernfs_new_node+0xe1/0x7f0 [ 539.553739][T12673] ? __lock_acquire+0x7ea0/0x7ea0 [ 539.558803][T12673] ? kernfs_new_node+0x250/0x250 [ 539.563800][T12673] kernfs_new_node+0x148/0x250 [ 539.568608][T12673] __kernfs_create_file+0x47/0x2e0 [ 539.573773][T12673] sysfs_add_file_mode_ns+0x233/0x2f0 [ 539.579200][T12673] internal_create_group+0x490/0xce0 [ 539.584564][T12673] ? kernfs_add_one+0x14e/0x8f0 [ 539.589460][T12673] ? __lock_acquire+0x7ea0/0x7ea0 [ 539.594528][T12673] ? sysfs_create_group+0x20/0x20 [ 539.599608][T12673] sysfs_create_groups+0x55/0x120 [ 539.604688][T12673] device_add_attrs+0x129/0x830 [ 539.609591][T12673] ? get_device_parent+0x3e0/0x3e0 [ 539.614746][T12673] ? kernfs_create_link+0x186/0x200 [ 539.619983][T12673] device_add+0x677/0x1050 [ 539.624447][T12673] device_add_disk+0x485/0x1020 [ 539.629458][T12673] add_mtd_blktrans_dev+0x1035/0x14e0 [ 539.634958][T12673] mtdblock_add_mtd+0x186/0x240 [ 539.639850][T12673] blktrans_notify_add+0x95/0xe0 [ 539.644835][T12673] add_mtd_device+0x1093/0x1640 [ 539.649734][T12673] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 539.655620][T12673] ? __mutex_lock+0x1bf/0xae0 [ 539.660347][T12673] ? mtd_cls_resume+0x130/0x130 [ 539.665255][T12673] mtd_add_partition+0x25d/0x420 [ 539.670236][T12673] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 539.675394][T12673] ? shrink_ecclayout+0xab0/0xab0 [ 539.680558][T12673] ? __might_fault+0xa6/0x120 [ 539.685269][T12673] ? __might_fault+0xc2/0x120 [ 539.689980][T12673] ? __might_fault+0xa6/0x120 [ 539.694700][T12673] mtdchar_ioctl+0x13d3/0x1ae0 [ 539.699510][T12673] ? mtdchar_close+0x180/0x180 [ 539.704315][T12673] ? verify_lock_unused+0x140/0x140 [ 539.709642][T12673] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 539.715319][T12673] ? tomoyo_path_number_perm+0x205/0x650 [ 539.720986][T12673] ? __lock_acquire+0x7ea0/0x7ea0 [ 539.726043][T12673] ? slab_free_freelist_hook+0x133/0x1b0 [ 539.731732][T12673] ? __mutex_trylock_common+0x15c/0x260 [ 539.737317][T12673] ? trace_raw_output_contention_end+0xd0/0xd0 [ 539.743503][T12673] ? rcu_is_watching+0x11/0xa0 [ 539.748297][T12673] ? trace_contention_end+0x5f/0x170 [ 539.753620][T12673] ? __mutex_lock+0x1ab/0xae0 [ 539.758345][T12673] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 539.763758][T12673] ? mutex_lock_nested+0x10/0x10 [ 539.768733][T12673] ? __fget_files+0x28/0x460 [ 539.773390][T12673] mtdchar_unlocked_ioctl+0xad/0xd0 [ 539.778637][T12673] ? mtdchar_write+0x5c0/0x5c0 [ 539.783434][T12673] __se_sys_ioctl+0xfa/0x170 [ 539.788062][T12673] do_syscall_64+0x4c/0xa0 [ 539.792520][T12673] ? clear_bhb_loop+0x60/0xb0 [ 539.797250][T12673] ? clear_bhb_loop+0x60/0xb0 [ 539.801956][T12673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 539.807882][T12673] RIP: 0033:0x7f595e59f559 [ 539.812326][T12673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.831964][T12673] RSP: 002b:00007f595f38a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.840410][T12673] RAX: ffffffffffffffda RBX: 00007f595e825fa0 RCX: 00007f595e59f559 [ 539.848408][T12673] RDX: 0000200000000a80 RSI: 0000000000001269 RDI: 0000000000000009 [ 539.856401][T12673] RBP: 00007f595e636b20 R08: 0000000000000000 R09: 0000000000000000 [ 539.864400][T12673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.872395][T12673] R13: 00007f595e826038 R14: 00007f595e825fa0 R15: 00007ffcca6ec088 [ 539.880425][T12673] [ 539.883483][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.363799][T12710] rxe_eth0 speed is unknown, defaulting to 1000 [ 542.724851][ T4367] hid-generic 0005:10CF:4155.001F: unknown main item tag 0x0 [ 542.753042][ T4367] hid-generic 0005:10CF:4155.001F: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 545.228551][T12765] FAULT_INJECTION: forcing a failure. [ 545.228551][T12765] name failslab, interval 1, probability 0, space 0, times 0 [ 545.501120][T12765] CPU: 1 PID: 12765 Comm: syz.5.2492 Not tainted syzkaller #0 [ 545.508650][T12765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 545.518732][T12765] Call Trace: [ 545.522034][T12765] [ 545.524984][T12765] dump_stack_lvl+0x188/0x24e [ 545.529675][T12765] ? show_regs_print_info+0x12/0x12 [ 545.534881][T12765] ? load_image+0x410/0x410 [ 545.539391][T12765] ? __might_sleep+0xd0/0xd0 [ 545.543988][T12765] ? __lock_acquire+0x7ea0/0x7ea0 [ 545.549035][T12765] should_fail_ex+0x390/0x4c0 [ 545.553726][T12765] should_failslab+0x5/0x20 [ 545.558229][T12765] slab_pre_alloc_hook+0x59/0x300 [ 545.563256][T12765] ? aa_get_newest_label+0xf9/0x5b0 [ 545.568567][T12765] ? debugfs_file_get+0x114/0x460 [ 545.573631][T12765] __kmem_cache_alloc_node+0x4f/0x270 [ 545.579010][T12765] ? debugfs_file_get+0x114/0x460 [ 545.584042][T12765] kmalloc_trace+0x26/0xe0 [ 545.588489][T12765] debugfs_file_get+0x114/0x460 [ 545.593348][T12765] ? debugfs_real_fops+0xa0/0xa0 [ 545.598284][T12765] ? apparmor_inode_getattr+0x20/0x20 [ 545.603661][T12765] ? __rwlock_init+0x140/0x140 [ 545.608525][T12765] full_proxy_open+0x49/0x820 [ 545.613209][T12765] ? fsnotify_perm+0x248/0x550 [ 545.617975][T12765] ? open_proxy_open+0x4b0/0x4b0 [ 545.622914][T12765] do_dentry_open+0x7dd/0x10b0 [ 545.627783][T12765] path_openat+0x2674/0x2f10 [ 545.632385][T12765] ? kasan_set_track+0x60/0x70 [ 545.637167][T12765] ? verify_lock_unused+0x140/0x140 [ 545.642382][T12765] ? do_sys_openat2+0xdd/0x4f0 [ 545.647150][T12765] ? do_filp_open+0x420/0x420 [ 545.651841][T12765] do_filp_open+0x1ee/0x420 [ 545.656349][T12765] ? vfs_tmpfile+0x470/0x470 [ 545.660954][T12765] ? _raw_spin_unlock+0x24/0x40 [ 545.665805][T12765] ? alloc_fd+0x590/0x640 [ 545.670141][T12765] do_sys_openat2+0x14b/0x4f0 [ 545.674837][T12765] ? do_sys_open+0xe0/0xe0 [ 545.679274][T12765] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 545.685275][T12765] ? lock_chain_count+0x20/0x20 [ 545.690237][T12765] __x64_sys_openat+0x135/0x160 [ 545.695093][T12765] do_syscall_64+0x4c/0xa0 [ 545.699508][T12765] ? clear_bhb_loop+0x60/0xb0 [ 545.704180][T12765] ? clear_bhb_loop+0x60/0xb0 [ 545.708856][T12765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.714773][T12765] RIP: 0033:0x7fa2b099f559 [ 545.719188][T12765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.738800][T12765] RSP: 002b:00007fa2b17c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 545.747219][T12765] RAX: ffffffffffffffda RBX: 00007fa2b0c25fa0 RCX: 00007fa2b099f559 [ 545.755210][T12765] RDX: 0000000000000000 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 545.763192][T12765] RBP: 00007fa2b0a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 545.771163][T12765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.779132][T12765] R13: 00007fa2b0c26038 R14: 00007fa2b0c25fa0 R15: 00007ffdcc876878 [ 545.787118][T12765] [ 545.790259][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.214892][T12778] rxe_eth0 speed is unknown, defaulting to 1000 [ 547.074051][ T14] hid-generic 0005:10CF:4155.0020: unknown main item tag 0x0 [ 547.098067][ T14] hid-generic 0005:10CF:4155.0020: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 547.143893][T12788] FAULT_INJECTION: forcing a failure. [ 547.143893][T12788] name failslab, interval 1, probability 0, space 0, times 0 [ 547.459382][T12788] CPU: 1 PID: 12788 Comm: syz.1.2499 Not tainted syzkaller #0 [ 547.466920][T12788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 547.476999][T12788] Call Trace: [ 547.480294][T12788] [ 547.483233][T12788] dump_stack_lvl+0x188/0x24e [ 547.488037][T12788] ? show_regs_print_info+0x12/0x12 [ 547.493344][T12788] ? load_image+0x410/0x410 [ 547.497877][T12788] ? __lock_acquire+0x7ea0/0x7ea0 [ 547.502928][T12788] should_fail_ex+0x390/0x4c0 [ 547.507637][T12788] should_failslab+0x5/0x20 [ 547.512156][T12788] slab_pre_alloc_hook+0x59/0x300 [ 547.517207][T12788] ? __split_vma+0x4f0/0x4f0 [ 547.521833][T12788] ? vma_merge+0x883/0xa50 [ 547.526268][T12788] kmem_cache_alloc+0x56/0x2f0 [ 547.531054][T12788] ? vm_area_dup+0x23/0x1a0 [ 547.535582][T12788] vm_area_dup+0x23/0x1a0 [ 547.539931][T12788] __split_vma+0xb9/0x4f0 [ 547.544281][T12788] ? split_vma+0x70/0xf0 [ 547.548549][T12788] mprotect_fixup+0x52d/0x840 [ 547.553259][T12788] ? change_protection+0x3980/0x3980 [ 547.558572][T12788] ? mas_walk+0x15f/0x180 [ 547.562932][T12788] ? apparmor_file_mprotect+0xf4/0x110 [ 547.568421][T12788] ? bpf_lsm_file_mprotect+0x5/0x10 [ 547.573682][T12788] ? security_file_mprotect+0x7e/0xb0 [ 547.579087][T12788] do_mprotect_pkey+0x7ff/0xba0 [ 547.583972][T12788] ? do_futex+0x310/0x320 [ 547.588322][T12788] ? prot_none_test+0x10/0x10 [ 547.593039][T12788] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 547.599061][T12788] __x64_sys_mprotect+0x7c/0x90 [ 547.603939][T12788] do_syscall_64+0x4c/0xa0 [ 547.608370][T12788] ? clear_bhb_loop+0x60/0xb0 [ 547.613061][T12788] ? clear_bhb_loop+0x60/0xb0 [ 547.617756][T12788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.623672][T12788] RIP: 0033:0x7fbff819f559 [ 547.628102][T12788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.647737][T12788] RSP: 002b:00007fbff90db028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 547.656173][T12788] RAX: ffffffffffffffda RBX: 00007fbff8425fa0 RCX: 00007fbff819f559 [ 547.664170][T12788] RDX: 0000000000000005 RSI: 0000000000002000 RDI: 0000200000002000 [ 547.672167][T12788] RBP: 00007fbff8236b20 R08: 0000000000000000 R09: 0000000000000000 [ 547.680169][T12788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.688167][T12788] R13: 00007fbff8426038 R14: 00007fbff8425fa0 R15: 00007ffc6bca9498 [ 547.696182][T12788] [ 547.699262][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.396448][T12788] ip_tables: iptables: counters copy to user failed while replacing table [ 549.594970][T12820] FAULT_INJECTION: forcing a failure. [ 549.594970][T12820] name failslab, interval 1, probability 0, space 0, times 0 [ 549.613951][T12820] CPU: 0 PID: 12820 Comm: syz.4.2508 Not tainted syzkaller #0 [ 549.621475][T12820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 549.631562][T12820] Call Trace: [ 549.634876][T12820] [ 549.637834][T12820] dump_stack_lvl+0x188/0x24e [ 549.642545][T12820] ? show_regs_print_info+0x12/0x12 [ 549.647776][T12820] ? load_image+0x410/0x410 [ 549.652319][T12820] ? __might_sleep+0xd0/0xd0 [ 549.656948][T12820] ? __lock_acquire+0x7ea0/0x7ea0 [ 549.662053][T12820] should_fail_ex+0x390/0x4c0 [ 549.666775][T12820] should_failslab+0x5/0x20 [ 549.671311][T12820] slab_pre_alloc_hook+0x59/0x300 [ 549.676383][T12820] ? __kmem_cache_alloc_node+0x19d/0x270 [ 549.682048][T12820] ? ceph_msg_new2+0x272/0x490 [ 549.686853][T12820] __kmem_cache_alloc_node+0x4f/0x270 [ 549.692264][T12820] ? ceph_msg_new2+0x272/0x490 [ 549.697073][T12820] __kmalloc+0xa3/0x240 [ 549.701257][T12820] ? kvmalloc_node+0xb1/0x180 [ 549.705965][T12820] ceph_msg_new2+0x272/0x490 [ 549.710600][T12820] msgpool_alloc+0x7c/0x1b0 [ 549.715134][T12820] ? ceph_msgpool_init+0x180/0x180 [ 549.720291][T12820] mempool_init_node+0x1e5/0x480 [ 549.725285][T12820] ? msgpool_alloc+0x1b0/0x1b0 [ 549.730086][T12820] ? ceph_msgpool_init+0x180/0x180 [ 549.735237][T12820] mempool_create+0x7d/0xc0 [ 549.739784][T12820] ceph_msgpool_init+0xa3/0x180 [ 549.744678][T12820] ceph_osdc_init+0x56e/0x8a0 [ 549.749420][T12820] ceph_create_client+0x242/0x300 [ 549.754489][T12820] ceph_get_tree+0x1c1/0x1350 [ 549.759202][T12820] ? bpf_lsm_capable+0x5/0x10 [ 549.763915][T12820] ? security_capable+0x85/0xb0 [ 549.768797][T12820] vfs_get_tree+0x88/0x270 [ 549.773357][T12820] do_new_mount+0x247/0xa40 [ 549.777929][T12820] __se_sys_mount+0x2e3/0x3d0 [ 549.782917][T12820] ? __x64_sys_mount+0xc0/0xc0 [ 549.787725][T12820] ? lockdep_hardirqs_on+0x94/0x140 [ 549.793054][T12820] ? __x64_sys_mount+0x1c/0xc0 [ 549.797946][T12820] do_syscall_64+0x4c/0xa0 [ 549.802390][T12820] ? clear_bhb_loop+0x60/0xb0 [ 549.807095][T12820] ? clear_bhb_loop+0x60/0xb0 [ 549.811810][T12820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.817746][T12820] RIP: 0033:0x7f9aa3f9f559 [ 549.822188][T12820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.842170][T12820] RSP: 002b:00007f9aa4f15028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 549.850614][T12820] RAX: ffffffffffffffda RBX: 00007f9aa4225fa0 RCX: 00007f9aa3f9f559 [ 549.858622][T12820] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0 [ 549.866619][T12820] RBP: 00007f9aa4036b20 R08: 0000000000000000 R09: 0000000000000000 [ 549.874617][T12820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.882617][T12820] R13: 00007f9aa4226038 R14: 00007f9aa4225fa0 R15: 00007ffc3673af88 [ 549.890637][T12820] [ 550.213244][ T26] audit: type=1326 audit(1793106394.060:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.5.2507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2b099f559 code=0x0 [ 550.404453][ T4367] hid-generic 0005:10CF:4155.0021: unknown main item tag 0x0 [ 550.427451][ T4367] hid-generic 0005:10CF:4155.0021: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 550.485958][T12840] loop1: detected capacity change from 0 to 8192 [ 550.530488][T12840] loop1: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 550.530574][T12840] loop1: partition table partially beyond EOD, [ 550.680728][T12839] rxe_eth0 speed is unknown, defaulting to 1000 [ 550.804358][T12840] truncated [ 550.813972][T12840] loop1: p1 start 51379968 is beyond EOD, truncated [ 550.854705][T12840] loop1: p2 start 4293394690 is beyond EOD, truncated [ 550.891884][T12840] loop1: p3 size 100663552 extends beyond EOD, truncated [ 550.965344][T12840] loop1: p5 start 51379968 is beyond EOD, truncated [ 550.999061][T12840] loop1: p6 start 4293394690 is beyond EOD, truncated [ 551.034976][T12840] loop1: p7 start 51379968 is beyond EOD, truncated [ 551.065391][T12840] loop1: p8 start 4293394690 is beyond EOD, truncated [ 551.110780][T12840] loop1: p9 start 51379968 is beyond EOD, truncated [ 551.661307][T12840] loop1: p10 start 4293394690 is beyond EOD, truncated [ 551.845617][T12840] loop1: p11 start 51379968 is beyond EOD, truncated [ 551.886450][T12840] loop1: p12 start 4293394690 is beyond EOD, truncated [ 552.161651][T12840] loop1: p13 start 51379968 is beyond EOD, truncated [ 552.430138][T12840] loop1: p14 start 4293394690 is beyond EOD, truncated [ 552.583823][T12840] loop1: p15 start 51379968 is beyond EOD, truncated [ 552.606338][T12840] loop1: p16 start 4293394690 is beyond EOD, truncated [ 552.613767][T12840] loop1: p17 start 51379968 is beyond EOD, truncated [ 552.628711][T12856] tmpfs: Unknown parameter 'casefold' [ 552.672383][T12840] loop1: p18 start 4293394690 is beyond EOD, truncated [ 552.685353][T12840] loop1: p19 start 51379968 is beyond EOD, truncated [ 552.693991][T12840] loop1: p20 start 4293394690 is beyond EOD, truncated [ 552.746414][T12840] loop1: p21 start 51379968 is beyond EOD, truncated [ 552.753329][T12840] loop1: p22 start 4293394690 is beyond EOD, truncated [ 552.771656][T12840] loop1: p23 start 51379968 is beyond EOD, truncated [ 552.821116][T12840] loop1: p24 start 4293394690 is beyond EOD, truncated [ 552.834293][T12840] loop1: p25 start 51379968 is beyond EOD, truncated [ 552.851880][T12862] loop5: detected capacity change from 0 to 512 [ 552.870838][T12862] EXT4-fs (loop5): Test dummy encryption mode enabled [ 552.891399][T12862] EXT4-fs (loop5): can't mount with commit=7, fs mounted w/o journal [ 552.906779][T12840] loop1: p26 start 4293394690 is beyond EOD, truncated [ 552.929777][T12840] loop1: p27 start 51379968 is beyond EOD, truncated [ 552.966033][T12840] loop1: p28 start 4293394690 is beyond EOD, truncated [ 552.991264][T12840] loop1: p29 start 51379968 is beyond EOD, truncated [ 552.991310][T12787] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 553.022578][T12840] loop1: p30 start 4293394690 is beyond EOD, truncated [ 553.063118][T12840] loop1: p31 start 51379968 is beyond EOD, truncated [ 553.099592][T12840] loop1: p32 start 4293394690 is beyond EOD, truncated [ 553.147197][T12840] loop1: p33 start 51379968 is beyond EOD, truncated [ 553.207952][T12840] loop1: p34 start 4293394690 is beyond EOD, truncated [ 553.248003][T12840] loop1: p35 start 51379968 is beyond EOD, truncated [ 553.254754][T12840] loop1: p36 start 4293394690 is beyond EOD, truncated [ 553.316667][T12840] loop1: p37 start 51379968 is beyond EOD, truncated [ 553.351684][T12840] loop1: p38 start 4293394690 is beyond EOD, truncated [ 553.385796][T12840] loop1: p39 start 51379968 is beyond EOD, truncated [ 553.425635][T12840] loop1: p40 start 4293394690 is beyond EOD, truncated [ 553.466191][T12840] loop1: p41 start 51379968 is beyond EOD, truncated [ 553.510750][T12840] loop1: p42 start 4293394690 is beyond EOD, truncated [ 553.515902][T12868] md: couldn't update array info. -22 [ 553.549483][T12868] md: could not open device unknown-block(1,1). [ 553.555857][T12868] md: md_import_device returned -16 [ 553.558532][T12840] loop1: p43 start 51379968 is beyond EOD, truncated [ 553.616338][T12840] loop1: p44 start 4293394690 is beyond EOD, truncated [ 553.666568][T12840] loop1: p45 start 51379968 is beyond EOD, truncated [ 553.673318][T12840] loop1: p46 start 4293394690 is beyond EOD, truncated [ 553.731231][T12840] loop1: p47 start 51379968 is beyond EOD, truncated [ 553.759046][T12840] loop1: p48 start 4293394690 is beyond EOD, truncated [ 553.801503][T12840] loop1: p49 start 51379968 is beyond EOD, truncated [ 553.839113][T12840] loop1: p50 start 4293394690 is beyond EOD, truncated [ 553.846074][T12840] loop1: p51 start 51379968 is beyond EOD, truncated [ 553.946368][T12840] loop1: p52 start 4293394690 is beyond EOD, truncated [ 553.953288][T12840] loop1: p53 start 51379968 is beyond EOD, truncated [ 554.013191][T12840] loop1: p54 start 4293394690 is beyond EOD, truncated [ 554.056332][T12840] loop1: p55 start 51379968 is beyond EOD, truncated [ 554.063130][T12840] loop1: p56 start 4293394690 is beyond EOD, truncated [ 554.124327][T12840] loop1: p57 start 51379968 is beyond EOD, truncated [ 554.166471][T12840] loop1: p58 start 4293394690 is beyond EOD, truncated [ 554.634955][T12891] ip_tables: iptables: counters copy to user failed while replacing table [ 554.664095][T12840] loop1: p59 start 51379968 is beyond EOD, truncated [ 554.716785][T12840] loop1: p60 start 4293394690 is beyond EOD, truncated [ 554.757905][ T14] hid-generic 0005:10CF:4155.0022: unknown main item tag 0x0 [ 554.761501][T12840] loop1: p61 start 51379968 is beyond EOD, [ 554.768254][ T14] hid-generic 0005:10CF:4155.0022: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 554.775812][T12840] truncated [ 554.816137][T12840] loop1: p62 start 4293394690 is beyond EOD, truncated [ 554.833780][T12840] loop1: p63 start 51379968 is beyond EOD, truncated [ 554.858959][T12840] loop1: p64 start 4293394690 is beyond EOD, truncated [ 554.882167][T12840] loop1: p65 start 51379968 is beyond EOD, truncated [ 554.906205][T12840] loop1: p66 start 4293394690 is beyond EOD, truncated [ 554.939533][T12840] loop1: p67 start 51379968 is beyond EOD, truncated [ 554.956422][T12840] loop1: p68 start 4293394690 is beyond EOD, truncated [ 554.965847][T12840] loop1: p69 start 51379968 is beyond EOD, truncated [ 554.980087][T12840] loop1: p70 start 4293394690 is beyond EOD, truncated [ 555.042296][T12840] loop1: p71 start 51379968 is beyond EOD, truncated [ 555.066627][T12840] loop1: p72 start 4293394690 is beyond EOD, truncated [ 555.074253][T12840] loop1: p73 start 51379968 is beyond EOD, truncated [ 555.123151][T12840] loop1: p74 start 4293394690 is beyond EOD, truncated [ 555.145241][T12840] loop1: p75 start 51379968 is beyond EOD, truncated [ 555.165041][T12840] loop1: p76 start 4293394690 is beyond EOD, truncated [ 555.173913][T12840] loop1: p77 start 51379968 is beyond EOD, truncated [ 555.189862][T12840] loop1: p78 start 4293394690 is beyond EOD, truncated [ 555.202772][T12840] loop1: p79 start 51379968 is beyond EOD, truncated [ 555.224608][T12840] loop1: p80 start 4293394690 is beyond EOD, truncated [ 555.232811][T12840] loop1: p81 start 51379968 is beyond EOD, truncated [ 555.436689][T12840] loop1: p82 start 4293394690 is beyond EOD, truncated [ 555.458160][T12840] loop1: p83 start 51379968 is beyond EOD, truncated [ 555.568601][T12840] loop1: p84 start 4293394690 is beyond EOD, truncated [ 555.679895][T12840] loop1: p85 start 51379968 is beyond EOD, truncated [ 555.930782][T12840] loop1: p86 start 4293394690 is beyond EOD, truncated [ 555.938114][T12840] loop1: p87 start 51379968 is beyond EOD, truncated [ 555.945029][T12840] loop1: p88 start 4293394690 is beyond EOD, truncated [ 555.954455][T12840] loop1: p89 start 51379968 is beyond EOD, truncated [ 555.961695][T12840] loop1: p90 start 4293394690 is beyond EOD, truncated [ 555.969171][T12840] loop1: p91 start 51379968 is beyond EOD, truncated [ 555.976065][T12840] loop1: p92 start 4293394690 is beyond EOD, truncated [ 555.987274][T12840] loop1: p93 start 51379968 is beyond EOD, truncated [ 556.036343][T12840] loop1: p94 start 4293394690 is beyond EOD, truncated [ 556.043309][T12840] loop1: p95 start 51379968 is beyond EOD, truncated [ 556.079700][T12840] loop1: p96 start 4293394690 is beyond EOD, truncated [ 556.092835][T12840] loop1: p97 start 51379968 is beyond EOD, truncated [ 556.101358][T12840] loop1: p98 start 4293394690 is beyond EOD, truncated [ 556.116315][T12840] loop1: p99 start 51379968 is beyond EOD, truncated [ 556.123322][T12840] loop1: p100 start 4293394690 is beyond EOD, truncated [ 556.136568][T12840] loop1: p101 start 51379968 is beyond EOD, truncated [ 556.143790][T12840] loop1: p102 start 4293394690 is beyond EOD, truncated [ 556.192182][T12840] loop1: p103 start 51379968 is beyond EOD, truncated [ 556.201500][T12840] loop1: p104 start 4293394690 is beyond EOD, truncated [ 556.231907][T12840] loop1: p105 start 51379968 is beyond EOD, truncated [ 556.246410][T12840] loop1: p106 start 4293394690 is beyond EOD, truncated [ 556.252048][T12904] rxe_eth0 speed is unknown, defaulting to 1000 [ 556.285763][T12840] loop1: p107 start 51379968 is beyond EOD, truncated [ 556.303286][T12840] loop1: p108 start 4293394690 is beyond EOD, truncated [ 556.332941][T12840] loop1: p109 start 51379968 is beyond EOD, truncated [ 556.347858][T12913] md: array md3 already initialised! [ 556.362822][T12912] tmpfs: Unknown parameter 'casefold' [ 556.372711][T12840] loop1: p110 start 4293394690 is beyond EOD, truncated [ 556.380413][T12913] md: could not open device unknown-block(1,6). [ 556.393257][T12840] loop1: p111 start 51379968 is beyond EOD, truncated [ 556.401072][T12913] md: error, md_import_device() returned -16 [ 556.408517][T12840] loop1: p112 start 4293394690 is beyond EOD, truncated [ 556.416051][T12913] md: could not open device unknown-block(1,7). [ 556.433725][T12840] loop1: p113 start 51379968 is beyond EOD, truncated [ 556.440763][T12913] md: error, md_import_device() returned -16 [ 556.446888][T12840] loop1: p114 start 4293394690 is beyond EOD, truncated [ 556.474281][T12840] loop1: p115 start 51379968 is beyond EOD, truncated [ 556.486286][T12840] loop1: p116 start 4293394690 is beyond EOD, truncated [ 556.502229][T12840] loop1: p117 start 51379968 is beyond EOD, truncated [ 556.513168][T12840] loop1: p118 start 4293394690 is beyond EOD, truncated [ 556.546850][T12840] loop1: p119 start 51379968 is beyond EOD, truncated [ 556.555321][T12840] loop1: p120 start 4293394690 is beyond EOD, truncated [ 556.575601][T12840] loop1: p121 start 51379968 is beyond EOD, truncated [ 556.696350][T12840] loop1: p122 start 4293394690 is beyond EOD, truncated [ 556.705631][T12840] loop1: p123 start 51379968 is beyond EOD, truncated [ 556.712662][T12840] loop1: p124 start 4293394690 is beyond EOD, truncated [ 556.719767][T12840] loop1: p125 start 51379968 is beyond EOD, truncated [ 556.726688][T12840] loop1: p126 start 4293394690 is beyond EOD, truncated [ 556.733828][T12840] loop1: p127 start 51379968 is beyond EOD, truncated [ 556.740908][T12840] loop1: p128 start 4293394690 is beyond EOD, truncated [ 556.748585][T12840] loop1: p129 start 51379968 is beyond EOD, truncated [ 556.755681][T12840] loop1: p130 start 4293394690 is beyond EOD, truncated [ 556.763021][T12840] loop1: p131 start 51379968 is beyond EOD, truncated [ 556.770506][T12840] loop1: p132 start 4293394690 is beyond EOD, truncated [ 556.787711][T12840] loop1: p133 start 51379968 is beyond EOD, truncated [ 556.843478][T12840] loop1: p134 start 4293394690 is beyond EOD, truncated [ 556.860204][T12840] loop1: p135 start 51379968 is beyond EOD, truncated [ 556.867937][T12840] loop1: p136 start 4293394690 is beyond EOD, truncated [ 556.875060][T12840] loop1: p137 start 51379968 is beyond EOD, truncated [ 556.882353][T12840] loop1: p138 start 4293394690 is beyond EOD, truncated [ 556.889881][T12840] loop1: p139 start 51379968 is beyond EOD, truncated [ 556.897275][T12840] loop1: p140 start 4293394690 is beyond EOD, truncated [ 556.911847][T12840] loop1: p141 start 51379968 is beyond EOD, truncated [ 556.927390][T12840] loop1: p142 start 4293394690 is beyond EOD, truncated [ 556.942858][T12840] loop1: p143 start 51379968 is beyond EOD, truncated [ 556.958517][T12840] loop1: p144 start 4293394690 is beyond EOD, truncated [ 556.966050][T12840] loop1: p145 start 51379968 is beyond EOD, truncated [ 556.973394][T12840] loop1: p146 start 4293394690 is beyond EOD, truncated [ 556.980710][T12840] loop1: p147 start 51379968 is beyond EOD, truncated [ 556.987960][T12840] loop1: p148 start 4293394690 is beyond EOD, truncated [ 556.995395][T12840] loop1: p149 start 51379968 is beyond EOD, truncated [ 557.002667][T12840] loop1: p150 start 4293394690 is beyond EOD, truncated [ 557.010064][T12840] loop1: p151 start 51379968 is beyond EOD, truncated [ 557.019041][T12840] loop1: p152 start 4293394690 is beyond EOD, truncated [ 557.026183][T12840] loop1: p153 start 51379968 is beyond EOD, truncated [ 557.034243][T12840] loop1: p154 start 4293394690 is beyond EOD, truncated [ 557.041706][T12840] loop1: p155 start 51379968 is beyond EOD, truncated [ 557.048889][T12840] loop1: p156 start 4293394690 is beyond EOD, truncated [ 557.057018][T12840] loop1: p157 start 51379968 is beyond EOD, truncated [ 557.063901][T12840] loop1: p158 start 4293394690 is beyond EOD, truncated [ 557.071401][T12840] loop1: p159 start 51379968 is beyond EOD, truncated [ 557.078664][T12840] loop1: p160 start 4293394690 is beyond EOD, truncated [ 557.085775][T12840] loop1: p161 start 51379968 is beyond EOD, truncated [ 557.093018][T12840] loop1: p162 start 4293394690 is beyond EOD, truncated [ 557.100576][T12840] loop1: p163 start 51379968 is beyond EOD, truncated [ 557.107998][T12840] loop1: p164 start 4293394690 is beyond EOD, truncated [ 557.115772][T12840] loop1: p165 start 51379968 is beyond EOD, truncated [ 557.123283][T12840] loop1: p166 start 4293394690 is beyond EOD, truncated [ 557.131524][T12840] loop1: p167 start 51379968 is beyond EOD, truncated [ 557.138867][T12840] loop1: p168 start 4293394690 is beyond EOD, truncated [ 557.145980][T12840] loop1: p169 start 51379968 is beyond EOD, truncated [ 557.153220][T12840] loop1: p170 start 4293394690 is beyond EOD, truncated [ 557.160622][T12840] loop1: p171 start 51379968 is beyond EOD, truncated [ 557.167816][T12840] loop1: p172 start 4293394690 is beyond EOD, truncated [ 557.174931][T12840] loop1: p173 start 51379968 is beyond EOD, truncated [ 557.182485][T12840] loop1: p174 start 4293394690 is beyond EOD, truncated [ 557.189890][T12840] loop1: p175 start 51379968 is beyond EOD, truncated [ 557.196986][T12840] loop1: p176 start 4293394690 is beyond EOD, truncated [ 557.204297][T12840] loop1: p177 start 51379968 is beyond EOD, truncated [ 557.212813][T12840] loop1: p178 start 4293394690 is beyond EOD, truncated [ 557.220845][T12840] loop1: p179 start 51379968 is beyond EOD, truncated [ 557.228126][T12840] loop1: p180 start 4293394690 is beyond EOD, truncated [ 557.235278][T12840] loop1: p181 start 51379968 is beyond EOD, truncated [ 557.242650][T12840] loop1: p182 start 4293394690 is beyond EOD, truncated [ 557.250744][T12840] loop1: p183 start 51379968 is beyond EOD, truncated [ 557.258071][T12840] loop1: p184 start 4293394690 is beyond EOD, truncated [ 557.265181][T12840] loop1: p185 start 51379968 is beyond EOD, truncated [ 557.273197][T12840] loop1: p186 start 4293394690 is beyond EOD, truncated [ 557.280626][T12840] loop1: p187 start 51379968 is beyond EOD, truncated [ 557.291800][T12840] loop1: p188 start 4293394690 is beyond EOD, truncated [ 557.300108][T12840] loop1: p189 start 51379968 is beyond EOD, truncated [ 557.307449][T12840] loop1: p190 start 4293394690 is beyond EOD, truncated [ 557.314511][T12840] loop1: p191 start 51379968 is beyond EOD, truncated [ 557.322516][T12840] loop1: p192 start 4293394690 is beyond EOD, truncated [ 557.329883][T12840] loop1: p193 start 51379968 is beyond EOD, truncated [ 557.337144][T12840] loop1: p194 start 4293394690 is beyond EOD, truncated [ 557.344220][T12840] loop1: p195 start 51379968 is beyond EOD, truncated [ 557.351548][T12840] loop1: p196 start 4293394690 is beyond EOD, truncated [ 557.358973][T12840] loop1: p197 start 51379968 is beyond EOD, truncated [ 557.365987][T12840] loop1: p198 start 4293394690 is beyond EOD, truncated [ 557.373347][T12840] loop1: p199 start 51379968 is beyond EOD, truncated [ 557.380740][T12840] loop1: p200 start 4293394690 is beyond EOD, truncated [ 557.388176][T12840] loop1: p201 start 51379968 is beyond EOD, truncated [ 557.395185][T12840] loop1: p202 start 4293394690 is beyond EOD, truncated [ 557.455156][T12840] loop1: p203 start 51379968 is beyond EOD, truncated [ 557.463496][T12840] loop1: p204 start 4293394690 is beyond EOD, truncated [ 557.472190][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2530'. [ 557.481307][T12840] loop1: p205 start 51379968 is beyond EOD, truncated [ 557.497048][T12840] loop1: p206 start 4293394690 is beyond EOD, truncated [ 557.514333][T12840] loop1: p207 start 51379968 is beyond EOD, truncated [ 557.525027][T12840] loop1: p208 start 4293394690 is beyond EOD, truncated [ 557.555558][T12925] loop3: detected capacity change from 0 to 1024 [ 557.576582][T12840] loop1: p209 start 51379968 is beyond EOD, truncated [ 557.607652][T12840] loop1: p210 start 4293394690 is beyond EOD, truncated [ 557.614671][T12840] loop1: p211 start 51379968 is beyond EOD, truncated [ 557.648501][T12923] rxe_eth0 speed is unknown, defaulting to 1000 [ 557.676484][T12840] loop1: p212 start 4293394690 is beyond EOD, truncated [ 557.736269][T12840] loop1: p213 start 51379968 is beyond EOD, truncated [ 557.738504][T12925] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 557.745362][T12840] loop1: p214 start 4293394690 is beyond EOD, truncated [ 557.876656][T12840] loop1: p215 start 51379968 is beyond EOD, truncated [ 557.883497][T12840] loop1: p216 start 4293394690 is beyond EOD, truncated [ 557.938541][T12840] loop1: p217 start 51379968 is beyond EOD, truncated [ 557.945379][T12840] loop1: p218 start 4293394690 is beyond EOD, truncated [ 558.012626][T12840] loop1: p219 start 51379968 is beyond EOD, truncated [ 558.021911][T12840] loop1: p220 start 4293394690 is beyond EOD, truncated [ 558.054353][T12840] loop1: p221 start 51379968 is beyond EOD, truncated [ 558.126464][T12840] loop1: p222 start 4293394690 is beyond EOD, truncated [ 558.143893][T12840] loop1: p223 start 51379968 is beyond EOD, truncated [ 558.234893][T12840] loop1: p224 start 4293394690 is beyond EOD, truncated [ 558.372371][T12840] loop1: p225 start 51379968 is beyond EOD, truncated [ 558.484680][T12840] loop1: p226 start 4293394690 is beyond EOD, truncated [ 558.592940][T12840] loop1: p227 start 51379968 is beyond EOD, truncated [ 558.712451][T12840] loop1: p228 start 4293394690 is beyond EOD, truncated [ 558.753665][T12840] loop1: p229 start 51379968 is beyond EOD, truncated [ 558.785519][T12840] loop1: p230 start 4293394690 is beyond EOD, truncated [ 558.803198][T12840] loop1: p231 start 51379968 is beyond EOD, truncated [ 558.823428][T12840] loop1: p232 start 4293394690 is beyond EOD, truncated [ 558.840951][T12840] loop1: p233 start 51379968 is beyond EOD, truncated [ 558.851088][T12840] loop1: p234 start 4293394690 is beyond EOD, truncated [ 558.876446][T12840] loop1: p235 start 51379968 is beyond EOD, truncated [ 558.903721][T12840] loop1: p236 start 4293394690 is beyond EOD, truncated [ 558.949714][T12840] loop1: p237 start 51379968 is beyond EOD, truncated [ 558.966288][T12840] loop1: p238 start 4293394690 is beyond EOD, truncated [ 558.973299][T12840] loop1: p239 start 51379968 is beyond EOD, truncated [ 559.026484][T12840] loop1: p240 start 4293394690 is beyond EOD, truncated [ 559.033695][T12840] loop1: p241 start 51379968 is beyond EOD, truncated [ 559.056431][T12840] loop1: p242 start 4293394690 is beyond EOD, truncated [ 559.064018][T12840] loop1: p243 start 51379968 is beyond EOD, truncated [ 559.095847][T12840] loop1: p244 start 4293394690 is beyond EOD, truncated [ 559.178889][ T4367] hid-generic 0005:10CF:4155.0023: unknown main item tag 0x0 [ 559.326467][T12840] loop1: p245 start 51379968 is beyond EOD, truncated [ 559.355377][T12840] loop1: p246 start 4293394690 is beyond EOD, truncated [ 559.418393][ T4367] hid-generic 0005:10CF:4155.0023: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 559.507829][T12840] loop1: p247 start 51379968 is beyond EOD, truncated [ 559.674269][T12840] loop1: p248 start 4293394690 is beyond EOD, truncated [ 559.757097][T12840] loop1: p249 start 51379968 is beyond EOD, truncated [ 559.763931][T12840] loop1: p250 start 4293394690 is beyond EOD, truncated [ 559.771070][T12840] loop1: p251 start 51379968 is beyond EOD, truncated [ 559.778569][T12840] loop1: p252 start 4293394690 is beyond EOD, truncated [ 559.785975][T12840] loop1: p253 start 51379968 is beyond EOD, truncated [ 559.824336][T12840] loop1: p254 start 4293394690 is beyond EOD, truncated [ 559.896322][T12840] loop1: p255 start 51379968 is beyond EOD, truncated [ 560.210278][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 560.228526][T12945] ip_tables: iptables: counters copy to user failed while replacing table [ 561.904072][T12962] md: couldn't update array info. -22 [ 562.081124][T12962] md: could not open device unknown-block(1,3). [ 562.115186][T12787] udevd[12787]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 562.123964][T12962] md: md_import_device returned -16 [ 562.221010][T12841] udevd[12841]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 562.358556][T12966] tmpfs: Unknown parameter 'casefold' [ 562.858426][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.865155][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.139661][ T14] hid-generic 0005:10CF:4155.0024: unknown main item tag 0x0 [ 564.195736][ T14] hid-generic 0005:10CF:4155.0024: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 564.690123][T12999] ip_tables: iptables: counters copy to user failed while replacing table [ 564.709480][T12998] device syzkaller0 entered promiscuous mode [ 564.782119][T13005] FAULT_INJECTION: forcing a failure. [ 564.782119][T13005] name failslab, interval 1, probability 0, space 0, times 0 [ 564.808153][T13007] md: couldn't update array info. -22 [ 564.815188][T13007] md: could not open device unknown-block(1,3). [ 564.820307][T13005] CPU: 0 PID: 13005 Comm: syz.3.2557 Not tainted syzkaller #0 [ 564.823509][T13007] md: md_import_device returned -16 [ 564.828928][T13005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 564.828951][T13005] Call Trace: [ 564.828961][T13005] [ 564.828971][T13005] dump_stack_lvl+0x188/0x24e [ 564.829002][T13005] ? show_regs_print_info+0x12/0x12 [ 564.829022][T13005] ? load_image+0x410/0x410 [ 564.829047][T13005] ? __lock_acquire+0x7ea0/0x7ea0 [ 564.829075][T13005] should_fail_ex+0x390/0x4c0 [ 564.829134][T13005] should_failslab+0x5/0x20 [ 564.829153][T13005] slab_pre_alloc_hook+0x59/0x300 [ 564.829174][T13005] ? __split_vma+0x4f0/0x4f0 [ 564.829196][T13005] ? vma_merge+0x883/0xa50 [ 564.829217][T13005] kmem_cache_alloc+0x56/0x2f0 [ 564.898118][T13005] ? vm_area_dup+0x23/0x1a0 [ 564.902667][T13005] vm_area_dup+0x23/0x1a0 [ 564.907034][T13005] __split_vma+0xb9/0x4f0 [ 564.911403][T13005] ? split_vma+0x70/0xf0 [ 564.915686][T13005] mprotect_fixup+0x52d/0x840 [ 564.920414][T13005] ? change_protection+0x3980/0x3980 [ 564.926027][T13005] ? mas_walk+0x15f/0x180 [ 564.930413][T13005] ? apparmor_file_mprotect+0xf4/0x110 [ 564.935972][T13005] ? bpf_lsm_file_mprotect+0x5/0x10 [ 564.941203][T13005] ? security_file_mprotect+0x7e/0xb0 [ 564.946602][T13005] do_mprotect_pkey+0x7ff/0xba0 [ 564.951484][T13005] ? do_futex+0x310/0x320 [ 564.955811][T13005] ? prot_none_test+0x10/0x10 [ 564.960497][T13005] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 564.966486][T13005] __x64_sys_mprotect+0x7c/0x90 [ 564.971338][T13005] do_syscall_64+0x4c/0xa0 [ 564.975753][T13005] ? clear_bhb_loop+0x60/0xb0 [ 564.980451][T13005] ? clear_bhb_loop+0x60/0xb0 [ 564.985146][T13005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.991045][T13005] RIP: 0033:0x7f595e59f559 [ 564.995454][T13005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.015059][T13005] RSP: 002b:00007f595f38a028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 565.023472][T13005] RAX: ffffffffffffffda RBX: 00007f595e825fa0 RCX: 00007f595e59f559 [ 565.031468][T13005] RDX: 0000000000000005 RSI: 0000000000002000 RDI: 0000200000002000 [ 565.039459][T13005] RBP: 00007f595e636b20 R08: 0000000000000000 R09: 0000000000000000 [ 565.047431][T13005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.055397][T13005] R13: 00007f595e826038 R14: 00007f595e825fa0 R15: 00007ffcca6ec088 [ 565.063403][T13005] [ 565.288312][ T26] audit: type=1326 audit(1793106409.140:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13016 comm="syz.3.2563" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f595e59f559 code=0x0 [ 566.015041][T13023] loop1: detected capacity change from 0 to 512 [ 566.071444][T13025] loop4: detected capacity change from 0 to 512 [ 566.114417][T13023] EXT4-fs (loop1): Test dummy encryption mode enabled [ 566.184835][T13025] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.2565: bad orphan inode 15 [ 566.207387][T13023] EXT4-fs (loop1): can't mount with commit=7, fs mounted w/o journal [ 566.215757][T13025] ext4_test_bit(bit=14, block=5) = 0 [ 566.229697][T13025] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 566.630219][T13038] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2565: bg 0: block 13: invalid block bitmap [ 567.735243][T13050] loop3: detected capacity change from 0 to 2048 [ 567.861342][T13050] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 568.328022][T13054] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 568.389500][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 569.743199][T13058] ip_tables: iptables: counters copy to user failed while replacing table [ 570.793668][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 570.859677][T13066] FAULT_INJECTION: forcing a failure. [ 570.859677][T13066] name failslab, interval 1, probability 0, space 0, times 0 [ 570.877101][T13066] CPU: 0 PID: 13066 Comm: syz.0.2576 Not tainted syzkaller #0 [ 570.884607][T13066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 570.894663][T13066] Call Trace: [ 570.897949][T13066] [ 570.900893][T13066] dump_stack_lvl+0x188/0x24e [ 570.905578][T13066] ? show_regs_print_info+0x12/0x12 [ 570.910783][T13066] ? load_image+0x410/0x410 [ 570.915295][T13066] ? __lock_acquire+0x7ea0/0x7ea0 [ 570.920331][T13066] should_fail_ex+0x390/0x4c0 [ 570.925020][T13066] should_failslab+0x5/0x20 [ 570.929536][T13066] slab_pre_alloc_hook+0x59/0x300 [ 570.934560][T13066] ? __split_vma+0x4f0/0x4f0 [ 570.939158][T13066] ? vma_merge+0x883/0xa50 [ 570.943586][T13066] kmem_cache_alloc+0x56/0x2f0 [ 570.948352][T13066] ? vm_area_dup+0x23/0x1a0 [ 570.952862][T13066] vm_area_dup+0x23/0x1a0 [ 570.957205][T13066] __split_vma+0xb9/0x4f0 [ 570.961538][T13066] ? split_vma+0x70/0xf0 [ 570.965782][T13066] mprotect_fixup+0x52d/0x840 [ 570.970473][T13066] ? change_protection+0x3980/0x3980 [ 570.975761][T13066] ? mas_walk+0x15f/0x180 [ 570.980094][T13066] ? apparmor_file_mprotect+0xf4/0x110 [ 570.985561][T13066] ? bpf_lsm_file_mprotect+0x5/0x10 [ 570.990768][T13066] ? security_file_mprotect+0x7e/0xb0 [ 570.996144][T13066] do_mprotect_pkey+0x7ff/0xba0 [ 571.001003][T13066] ? do_futex+0x310/0x320 [ 571.005361][T13066] ? prot_none_test+0x10/0x10 [ 571.010076][T13066] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 571.016080][T13066] __x64_sys_mprotect+0x7c/0x90 [ 571.020950][T13066] do_syscall_64+0x4c/0xa0 [ 571.025374][T13066] ? clear_bhb_loop+0x60/0xb0 [ 571.030076][T13066] ? clear_bhb_loop+0x60/0xb0 [ 571.034771][T13066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 571.040687][T13066] RIP: 0033:0x7f3aa599f559 [ 571.045133][T13066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.064757][T13066] RSP: 002b:00007f3aa6903028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 571.073185][T13066] RAX: ffffffffffffffda RBX: 00007f3aa5c25fa0 RCX: 00007f3aa599f559 [ 571.081166][T13066] RDX: 0000000000000005 RSI: 0000000000002000 RDI: 0000200000002000 [ 571.089141][T13066] RBP: 00007f3aa5a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 571.097141][T13066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.105139][T13066] R13: 00007f3aa5c26038 R14: 00007f3aa5c25fa0 R15: 00007ffdcaf028c8 [ 571.113130][T13066] [ 571.123622][T13065] device syzkaller0 entered promiscuous mode [ 572.165698][T13063] rxe_eth0 speed is unknown, defaulting to 1000 [ 572.591887][ T26] audit: type=1326 audit(1793106416.440:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13085 comm="syz.3.2585" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f595e59f559 code=0x0 [ 572.846158][T13061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2575'. [ 573.354943][T13093] ip_tables: iptables: counters copy to user failed while replacing table [ 573.717990][T13103] device syzkaller0 entered promiscuous mode [ 573.791381][T13104] smc: removing ib device rxe0 [ 573.950953][T13101] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 574.675983][T13101] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 574.837935][ T9084] RDS/IB: rds_ib_setup_qp failed (-95) [ 576.379885][T13131] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2598'. [ 577.354943][ T26] audit: type=1326 audit(1793106421.190:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13139 comm="syz.1.2601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbff819f559 code=0x0 [ 580.879022][ C1] net_ratelimit: 31 callbacks suppressed [ 581.625077][T13172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2613'. [ 582.709784][T13215] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.717189][T13215] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.763081][T13216] device bridge_slave_1 left promiscuous mode [ 582.772423][T13216] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.422913][T13216] device bridge_slave_0 left promiscuous mode [ 583.430604][T13216] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.518543][T13245] FAULT_INJECTION: forcing a failure. [ 585.518543][T13245] name failslab, interval 1, probability 0, space 0, times 0 [ 585.647751][T13245] CPU: 1 PID: 13245 Comm: syz.4.2636 Not tainted syzkaller #0 [ 585.655276][T13245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 585.665339][T13245] Call Trace: [ 585.668621][T13245] [ 585.671552][T13245] dump_stack_lvl+0x188/0x24e [ 585.676285][T13245] ? show_regs_print_info+0x12/0x12 [ 585.681489][T13245] ? load_image+0x410/0x410 [ 585.686099][T13245] ? __lock_acquire+0x7ea0/0x7ea0 [ 585.691133][T13245] should_fail_ex+0x390/0x4c0 [ 585.695825][T13245] should_failslab+0x5/0x20 [ 585.700336][T13245] slab_pre_alloc_hook+0x59/0x300 [ 585.705390][T13245] ? __split_vma+0x4f0/0x4f0 [ 585.710007][T13245] ? up_write+0x1b6/0x410 [ 585.714365][T13245] kmem_cache_alloc+0x56/0x2f0 [ 585.719139][T13245] ? vm_area_dup+0x23/0x1a0 [ 585.723651][T13245] vm_area_dup+0x23/0x1a0 [ 585.727982][T13245] __split_vma+0xb9/0x4f0 [ 585.732403][T13245] ? split_vma+0x70/0xf0 [ 585.736652][T13245] mprotect_fixup+0x5dc/0x840 [ 585.741349][T13245] ? change_protection+0x3980/0x3980 [ 585.746639][T13245] ? mas_walk+0x15f/0x180 [ 585.750975][T13245] ? apparmor_file_mprotect+0xf4/0x110 [ 585.756511][T13245] ? bpf_lsm_file_mprotect+0x5/0x10 [ 585.762595][T13245] ? security_file_mprotect+0x7e/0xb0 [ 585.767975][T13245] do_mprotect_pkey+0x7ff/0xba0 [ 585.772837][T13245] ? do_futex+0x310/0x320 [ 585.777175][T13245] ? prot_none_test+0x10/0x10 [ 585.781869][T13245] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 585.787861][T13245] __x64_sys_mprotect+0x7c/0x90 [ 585.792734][T13245] do_syscall_64+0x4c/0xa0 [ 585.797150][T13245] ? clear_bhb_loop+0x60/0xb0 [ 585.801908][T13245] ? clear_bhb_loop+0x60/0xb0 [ 585.806590][T13245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.812491][T13245] RIP: 0033:0x7f9aa3f9f559 [ 585.816908][T13245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.836523][T13245] RSP: 002b:00007f9aa4f15028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 585.844940][T13245] RAX: ffffffffffffffda RBX: 00007f9aa4225fa0 RCX: 00007f9aa3f9f559 [ 585.852916][T13245] RDX: 0000000000000005 RSI: 0000000000002000 RDI: 0000200000002000 [ 585.860894][T13245] RBP: 00007f9aa4036b20 R08: 0000000000000000 R09: 0000000000000000 [ 585.868881][T13245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.876868][T13245] R13: 00007f9aa4226038 R14: 00007f9aa4225fa0 R15: 00007ffc3673af88 [ 585.884870][T13245] [ 585.894406][ C1] net_ratelimit: 40 callbacks suppressed [ 586.076992][T13251] ip_tables: iptables: counters copy to user failed while replacing table [ 586.892573][T13242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2635'. [ 587.726030][T13273] loop4: detected capacity change from 0 to 1024 [ 588.514187][T13277] loop1: detected capacity change from 0 to 2048 [ 588.546846][T13273] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 588.601766][T13277] EXT4-fs: Ignoring removed nomblk_io_submit option [ 588.789376][T13277] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 588.944529][T13277] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2649: bg 0: block 2: invalid block bitmap [ 588.994363][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 589.090999][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 590.535665][ T26] audit: type=1326 audit(1793106434.380:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.3.2661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f595e59f559 code=0x0 [ 590.762333][T13329] loop5: detected capacity change from 0 to 1024 [ 590.901217][T13329] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 591.020840][ T4514] net_ratelimit: 55 callbacks suppressed [ 591.109835][ T6432] EXT4-fs (loop5): unmounting filesystem. [ 591.332561][T13338] loop1: detected capacity change from 0 to 2048 [ 591.665873][T13338] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 592.620058][T13319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2660'. [ 592.799208][T13357] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 594.027470][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 595.455870][T13381] device syzkaller0 entered promiscuous mode [ 595.504781][T13381] tipc: Enabled bearer , priority 0 [ 595.696676][T13377] tipc: Resetting bearer [ 595.743437][T13377] tipc: Disabling bearer [ 595.896959][T13397] loop5: detected capacity change from 0 to 2048 [ 596.031503][T13396] device syzkaller0 entered promiscuous mode [ 596.136397][ C1] net_ratelimit: 34 callbacks suppressed [ 596.672460][T13397] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 597.018892][T13412] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 598.845967][T13409] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.853358][T13409] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.867798][T13411] device bridge_slave_1 left promiscuous mode [ 598.874096][T13411] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.960898][ T6432] EXT4-fs (loop5): unmounting filesystem. [ 598.969115][T13411] device bridge_slave_0 left promiscuous mode [ 598.975420][T13411] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.368894][T13429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2692'. [ 600.768116][ T26] audit: type=1326 audit(1793106444.620:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.5.2702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2b099f559 code=0x0 [ 600.992711][T13452] device syzkaller0 entered promiscuous mode [ 601.019846][T13452] tipc: Enabled bearer , priority 0 [ 601.062682][T13451] tipc: Resetting bearer [ 601.140767][T13451] tipc: Disabling bearer [ 601.256651][ T9] net_ratelimit: 34 callbacks suppressed [ 601.382950][T13445] ceph: No mds server is up or the cluster is laggy [ 603.365113][T13491] loop3: detected capacity change from 0 to 512 [ 603.508118][T13491] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.2717: bad orphan inode 15 [ 603.525849][T13491] ext4_test_bit(bit=14, block=5) = 0 [ 603.533938][T13491] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 603.794269][T13499] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2717: bg 0: block 13: invalid block bitmap [ 604.879492][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 605.784761][T13506] FAULT_INJECTION: forcing a failure. [ 605.784761][T13506] name failslab, interval 1, probability 0, space 0, times 0 [ 605.830390][T13506] CPU: 0 PID: 13506 Comm: syz.0.2721 Not tainted syzkaller #0 [ 605.838515][T13506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 605.848595][T13506] Call Trace: [ 605.851891][T13506] [ 605.854838][T13506] dump_stack_lvl+0x188/0x24e [ 605.859549][T13506] ? show_regs_print_info+0x12/0x12 [ 605.864779][T13506] ? load_image+0x410/0x410 [ 605.869312][T13506] ? __might_sleep+0xd0/0xd0 [ 605.873897][T13506] ? __lock_acquire+0x7ea0/0x7ea0 [ 605.878926][T13506] should_fail_ex+0x390/0x4c0 [ 605.883604][T13506] should_failslab+0x5/0x20 [ 605.888099][T13506] slab_pre_alloc_hook+0x59/0x300 [ 605.893207][T13506] ? alloc_workqueue+0x1f3/0x14a0 [ 605.898252][T13506] __kmem_cache_alloc_node+0x4f/0x270 [ 605.903623][T13506] ? alloc_workqueue+0x1f3/0x14a0 [ 605.908661][T13506] kmalloc_trace+0x26/0xe0 [ 605.913075][T13506] alloc_workqueue+0x1f3/0x14a0 [ 605.917932][T13506] ? mempool_init_node+0x3c0/0x480 [ 605.923049][T13506] ? apply_workqueue_attrs+0x180/0x180 [ 605.928515][T13506] ? msgpool_alloc+0x1b0/0x1b0 [ 605.933271][T13506] ? ceph_msgpool_init+0x180/0x180 [ 605.938418][T13506] ? mempool_create+0x7d/0xc0 [ 605.943091][T13506] ? mempool_create+0xad/0xc0 [ 605.947768][T13506] ? ceph_msgpool_init+0xcd/0x180 [ 605.952793][T13506] ceph_osdc_init+0x5fe/0x8a0 [ 605.957474][T13506] ceph_create_client+0x242/0x300 [ 605.962503][T13506] ceph_get_tree+0x1c1/0x1350 [ 605.967181][T13506] ? bpf_lsm_capable+0x5/0x10 [ 605.971866][T13506] ? security_capable+0x85/0xb0 [ 605.976726][T13506] vfs_get_tree+0x88/0x270 [ 605.981323][T13506] do_new_mount+0x247/0xa40 [ 605.985832][T13506] __se_sys_mount+0x2e3/0x3d0 [ 605.990527][T13506] ? __x64_sys_mount+0xc0/0xc0 [ 605.995457][T13506] ? lockdep_hardirqs_on+0x94/0x140 [ 606.000644][T13506] ? __x64_sys_mount+0x1c/0xc0 [ 606.005420][T13506] do_syscall_64+0x4c/0xa0 [ 606.009824][T13506] ? clear_bhb_loop+0x60/0xb0 [ 606.014510][T13506] ? clear_bhb_loop+0x60/0xb0 [ 606.019189][T13506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.025080][T13506] RIP: 0033:0x7f3aa599f559 [ 606.029488][T13506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.049111][T13506] RSP: 002b:00007f3aa6903028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 606.057523][T13506] RAX: ffffffffffffffda RBX: 00007f3aa5c25fa0 RCX: 00007f3aa599f559 [ 606.065508][T13506] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0 [ 606.073478][T13506] RBP: 00007f3aa5a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 606.081445][T13506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.089414][T13506] R13: 00007f3aa5c26038 R14: 00007f3aa5c25fa0 R15: 00007ffdcaf028c8 [ 606.097445][T13506] [ 606.377240][ T9084] net_ratelimit: 35 callbacks suppressed [ 607.687484][T13538] loop4: detected capacity change from 0 to 512 [ 607.725370][T13538] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.2733: bad orphan inode 15 [ 607.763044][T13538] ext4_test_bit(bit=14, block=5) = 0 [ 607.768668][T13538] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 608.072640][T13542] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2733: bg 0: block 13: invalid block bitmap [ 609.811737][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 611.496486][ T5578] net_ratelimit: 34 callbacks suppressed [ 611.614081][T13217] hid-generic 0005:10CF:4155.0025: unknown main item tag 0x0 [ 611.704971][T13217] hid-generic 0005:10CF:4155.0025: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 612.178240][T13582] fido_id[13582]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 612.200628][T13590] loop4: detected capacity change from 0 to 512 [ 612.338371][T13590] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.2747: bad orphan inode 15 [ 612.353732][T13590] ext4_test_bit(bit=14, block=5) = 0 [ 612.359352][T13590] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 612.479206][T13594] loop1: detected capacity change from 0 to 2048 [ 612.500957][T13594] EXT4-fs: Ignoring removed i_version option [ 612.581316][T13596] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2747: bg 0: block 13: invalid block bitmap [ 613.662316][T13594] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 613.671117][T13594] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.815781][T13566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2741'. [ 613.846213][T13594] fs-verity: sha512 using implementation "sha512-avx2" [ 614.746182][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 614.759343][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 616.389881][ T4284] hid-generic 0005:10CF:4155.0026: unknown main item tag 0x0 [ 616.402064][ T4284] hid-generic 0005:10CF:4155.0026: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 616.783759][ C1] net_ratelimit: 36 callbacks suppressed [ 617.185057][T13640] input: syz1 as /devices/virtual/input/input54 [ 617.533286][T13654] loop3: detected capacity change from 0 to 512 [ 617.700696][T13654] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2768: bg 0: block 5: invalid block bitmap [ 617.727458][T13654] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 617.765022][T13654] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2768: invalid indirect mapped block 3 (level 2) [ 617.859648][T13654] EXT4-fs (loop3): 1 orphan inode deleted [ 617.891658][T13654] EXT4-fs (loop3): 1 truncate cleaned up [ 617.926297][T13654] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 618.811153][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2769'. [ 618.859426][T13664] siw: device registration error -23 [ 618.882038][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 619.676437][ T128] hid-generic 0005:10CF:4155.0027: unknown main item tag 0x0 [ 619.731417][ T128] hid-generic 0005:10CF:4155.0027: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 620.016930][T13678] loop1: detected capacity change from 0 to 1024 [ 620.061789][T13678] EXT4-fs: Ignoring removed mblk_io_submit option [ 620.097221][T13678] EXT4-fs: Ignoring removed oldalloc option [ 620.680478][T13678] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 620.704396][T13678] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.581342][T13678] device syzkaller0 entered promiscuous mode [ 621.976285][ C1] net_ratelimit: 46 callbacks suppressed [ 621.999357][T13713] Console: switching to colour VGA+ 80x25 [ 623.084617][ T4495] hid-generic 0005:10CF:4155.0028: unknown main item tag 0x0 [ 623.128310][ T4495] hid-generic 0005:10CF:4155.0028: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 623.835715][T13730] loop5: detected capacity change from 0 to 2048 [ 623.883312][T13730] EXT4-fs: Ignoring removed i_version option [ 624.026023][T13730] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 624.026108][T13730] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.202699][ T6432] EXT4-fs (loop5): unmounting filesystem. [ 624.298685][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.305001][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.563424][T13714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2784'. [ 625.023025][T13691] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 625.574454][T13758] loop3: detected capacity change from 0 to 512 [ 625.654775][T13758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 625.665552][T13758] ext4 filesystem being mounted at /554/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.827613][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 627.006391][ T4284] hid-generic 0005:10CF:4155.0029: unknown main item tag 0x0 [ 627.122262][ T4284] hid-generic 0005:10CF:4155.0029: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 627.328481][ C1] net_ratelimit: 37 callbacks suppressed [ 627.595093][T13779] loop3: detected capacity change from 0 to 2048 [ 627.638370][T13779] EXT4-fs: Ignoring removed i_version option [ 627.695172][T13779] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 627.712194][T13779] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.833246][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 628.086036][T13791] input: syz1 as /devices/virtual/input/input55 [ 628.100369][T13791] input: failed to attach handler leds to device input55, error: -6 [ 628.265401][T13794] loop3: detected capacity change from 0 to 2048 [ 628.277800][T13794] EXT4-fs: Ignoring removed i_version option [ 628.368951][T13794] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 628.378060][T13794] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.515202][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 629.137360][ T4392] hid-generic 0005:10CF:4155.002A: unknown main item tag 0x0 [ 629.150836][ T4392] hid-generic 0005:10CF:4155.002A: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 630.845764][T13825] loop3: detected capacity change from 0 to 2048 [ 630.859693][T13825] EXT4-fs: Ignoring removed i_version option [ 630.948526][T13825] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 630.967650][T13825] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.124293][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 631.509963][T13839] loop3: detected capacity change from 0 to 2048 [ 631.607667][T13839] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 631.887819][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 632.337743][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 632.936515][ C1] net_ratelimit: 61 callbacks suppressed [ 633.291462][T13871] loop5: detected capacity change from 0 to 512 [ 633.338396][T13868] loop1: detected capacity change from 0 to 2048 [ 633.364590][T13868] EXT4-fs: Ignoring removed i_version option [ 633.413951][T13871] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 633.479837][T13871] ext4 filesystem being mounted at /430/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.558258][T13868] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 634.309132][T13868] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.620028][ T6432] EXT4-fs (loop5): unmounting filesystem. [ 634.655276][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 636.830827][T13934] loop3: detected capacity change from 0 to 1024 [ 637.030322][T13934] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 637.195932][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 637.963150][ C1] net_ratelimit: 38 callbacks suppressed [ 639.004120][T13983] loop4: detected capacity change from 0 to 1024 [ 639.095739][T13983] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 640.422677][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 641.253680][T14018] md: couldn't update array info. -22 [ 641.260233][T14018] md: could not open device unknown-block(1,1). [ 641.266621][T14018] md: md_import_device returned -16 [ 642.833508][T14042] loop3: detected capacity change from 0 to 1024 [ 643.016548][ C0] net_ratelimit: 41 callbacks suppressed [ 643.055644][T14042] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8003c01c, mo2=0002] [ 643.670994][T14053] input: syz1 as /devices/virtual/input/input58 [ 643.734281][T14042] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 644.049441][T14042] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8003c01c, mo2=0002] [ 644.059107][T14056] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.066710][T14056] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.080923][T14057] device bridge_slave_1 left promiscuous mode [ 644.087628][T14057] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.183560][T14057] device bridge_slave_0 left promiscuous mode [ 644.189958][T14057] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.204174][T14042] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 644.589782][T14065] md: couldn't update array info. -22 [ 644.606546][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 644.625884][T14065] md: could not open device unknown-block(1,3). [ 644.657889][T14065] md: md_import_device returned -16 [ 645.719173][ T4277] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 645.731530][ T4277] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 645.741419][ T4277] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 645.755942][ T4277] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 645.772906][ T4277] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 645.782117][ T4277] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 645.940576][T14095] loop1: detected capacity change from 0 to 4096 [ 645.948155][T14095] EXT4-fs: inline encryption not supported [ 645.956624][T14095] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 645.965388][T14095] EXT4-fs (loop1): Test dummy encryption mode enabled [ 645.979508][T14095] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 645.987836][T14095] System zones: 0-5 [ 645.994080][T14095] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 646.741699][T14095] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 646.762471][T14100] overlayfs: failed to resolve './bus': -2 [ 647.184491][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 647.228555][T14115] input: syz1 as /devices/virtual/input/input59 [ 647.908108][ T4294] Bluetooth: hci6: command 0x0409 tx timeout [ 648.306285][ C1] net_ratelimit: 43 callbacks suppressed [ 648.362582][T14129] md: could not open device unknown-block(1,8). [ 648.379437][T14129] md: md_import_device returned -16 [ 648.395420][T14129] md: could not open device unknown-block(1,9). [ 648.502494][T14129] md: md_import_device returned -16 [ 648.723738][T14081] chnl_net:caif_netlink_parms(): no params data found [ 649.571022][T14139] 8021q: VLANs not supported on ip6gre0 [ 649.612874][T12272] bond0: (slave syz_tun): Releasing backup interface [ 649.630841][T14144] ceph: No mds server is up or the cluster is laggy [ 649.976378][ T4294] Bluetooth: hci6: command 0x041b tx timeout [ 650.361600][ T7722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.574810][T14081] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.610272][T14081] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.799661][T14081] device bridge_slave_0 entered promiscuous mode [ 651.611071][T14163] loop5: detected capacity change from 0 to 2048 [ 651.652550][ T7722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.670840][T14163] EXT4-fs: Ignoring removed i_version option [ 651.734701][T14163] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 651.755112][T14163] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.759074][T14081] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.836966][T14081] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.846126][T14081] device bridge_slave_1 entered promiscuous mode [ 652.034557][ T6432] EXT4-fs (loop5): unmounting filesystem. [ 652.056362][ T4294] Bluetooth: hci6: command 0x040f tx timeout [ 652.066120][ T7722] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.215286][T14081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.735408][ T4392] hid-generic 0005:10CF:4155.002B: unknown main item tag 0x0 [ 653.009816][ T4392] hid-generic 0005:10CF:4155.002B: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 653.025443][ T7722] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.059495][T14081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.319110][ C0] net_ratelimit: 36 callbacks suppressed [ 653.407067][T14081] team0: Port device team_slave_0 added [ 653.428932][T14203] loop4: detected capacity change from 0 to 1024 [ 653.453640][T14203] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8003c01c, mo2=0002] [ 653.601573][T14203] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 653.665671][T14081] team0: Port device team_slave_1 added [ 654.150735][ T4294] Bluetooth: hci6: command 0x0419 tx timeout [ 654.193278][T14081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.198561][T14203] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8003c01c, mo2=0002] [ 654.200374][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.286299][T14081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.313504][T14081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.329155][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.355437][T14203] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 654.363441][T14081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.760146][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 654.956001][T14222] loop1: detected capacity change from 0 to 2048 [ 655.029493][T14222] EXT4-fs: Ignoring removed i_version option [ 655.264794][T14222] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 655.342591][T14081] device hsr_slave_0 entered promiscuous mode [ 655.410656][T14222] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.575490][T14081] device hsr_slave_1 entered promiscuous mode [ 655.750183][T14081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 655.780287][T14081] Cannot create hsr debugfs directory [ 655.799996][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 656.058538][T14236] md: array md3 already initialised! [ 656.077635][T14236] md: could not open device unknown-block(1,7). [ 656.083972][T14236] md: error, md_import_device() returned -16 [ 656.105341][ T7722] tipc: Left network mode [ 656.631454][ T4491] hid-generic 0005:10CF:4155.002C: unknown main item tag 0x0 [ 656.660584][ T4491] hid-generic 0005:10CF:4155.002C: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 656.966972][T14258] usb usb8: usbfs: process 14258 (syz.3.2938) did not claim interface 0 before use [ 657.599608][T14271] 8021q: VLANs not supported on ip6tnl0 [ 657.882485][T14277] X25: received unknown 00 with LCI 000 [ 658.362025][T14271] ceph: No mds server is up or the cluster is laggy [ 658.776343][ C0] net_ratelimit: 37 callbacks suppressed [ 659.500607][T14290] md: array md5 already initialised! [ 659.733171][T14290] md: could not open device unknown-block(1,11). [ 660.377063][T14290] md: error, md_import_device() returned -16 [ 661.022377][T14304] loop3: detected capacity change from 0 to 512 [ 661.360369][T14304] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.2950: bad orphan inode 15 [ 661.379555][T14304] ext4_test_bit(bit=14, block=5) = 0 [ 661.385001][T14304] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 663.881284][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 663.977394][ T5468] net_ratelimit: 30 callbacks suppressed [ 664.791502][T14342] loop4: detected capacity change from 0 to 2048 [ 664.813692][T14342] EXT4-fs: Ignoring removed i_version option [ 665.378065][T14342] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 665.531831][T14342] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.622274][T14356] md: array md3 already initialised! [ 665.654283][T14356] md: could not open device unknown-block(1,6). [ 665.663771][T14356] md: error, md_import_device() returned -16 [ 665.893835][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 666.721898][T14372] loop1: detected capacity change from 0 to 512 [ 666.889835][T14372] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.2967: bad orphan inode 15 [ 666.903387][T14081] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 666.928101][T14372] ext4_test_bit(bit=14, block=5) = 0 [ 666.933545][T14372] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 668.066519][T14380] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 669.021633][ T52] net_ratelimit: 35 callbacks suppressed [ 670.265383][T14081] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 670.306439][T14081] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 670.396970][T14081] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 670.503136][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 671.462622][T14404] loop5: detected capacity change from 0 to 2048 [ 671.476984][T14404] EXT4-fs: Ignoring removed i_version option [ 671.628372][T14404] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 671.644351][T14404] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.697933][ T7722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.709977][ T7722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.766120][ T7722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.794393][ T6432] EXT4-fs (loop5): unmounting filesystem. [ 671.799112][ T7722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.814292][T14416] md: could not open device unknown-block(1,8). [ 671.861419][T14416] md: error, md_import_device() returned -16 [ 671.939057][ T7722] device veth1_macvtap left promiscuous mode [ 671.965366][ T7722] device veth0_macvtap left promiscuous mode [ 671.990879][ T7722] device veth1_vlan left promiscuous mode [ 672.010857][ T7722] device veth0_vlan left promiscuous mode [ 672.215156][T14428] loop5: detected capacity change from 0 to 512 [ 672.480059][T14428] EXT4-fs error (device loop5): ext4_orphan_get:1435: comm syz.5.2981: bad orphan inode 15 [ 672.944183][T14428] ext4_test_bit(bit=14, block=5) = 0 [ 673.088181][T14428] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 674.281926][ C1] net_ratelimit: 53 callbacks suppressed [ 674.576837][T14423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2979'. [ 674.865314][T14410] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 675.235514][ T7722] team0 (unregistering): Port device team_slave_1 removed [ 675.303902][ T7722] team0 (unregistering): Port device team_slave_0 removed [ 675.389791][ T7722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.467473][ T7722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.006660][ T7722] bond0 (unregistering): Released all slaves [ 676.227904][ T6432] EXT4-fs (loop5): unmounting filesystem. [ 676.502028][T14081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.604717][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 676.634939][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 676.720219][T14081] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.381193][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 677.427429][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 677.496945][ T9084] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.504075][ T9084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.529339][T14458] loop5: detected capacity change from 0 to 2048 [ 677.552296][T14459] loop4: detected capacity change from 0 to 2048 [ 677.565206][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 677.578524][T14458] EXT4-fs: Ignoring removed i_version option [ 677.599040][T14459] EXT4-fs: Ignoring removed i_version option [ 677.634283][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 677.677486][ T9084] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.684622][ T9084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.732368][T14459] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 677.741712][T14458] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 677.765292][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 677.774280][T14459] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.807903][T14458] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.897735][ T6432] EXT4-fs (loop5): unmounting filesystem. [ 677.928083][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 677.948698][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 678.021817][T14471] md: couldn't update array info. -22 [ 678.077699][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 678.089521][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 678.132717][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 678.218649][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 678.239135][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 678.265454][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 678.287329][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 678.307748][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 678.317089][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 678.354261][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 678.394243][T14081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 679.303322][ C0] net_ratelimit: 22 callbacks suppressed [ 679.420778][T14490] FAULT_INJECTION: forcing a failure. [ 679.420778][T14490] name failslab, interval 1, probability 0, space 0, times 0 [ 679.495912][T14490] CPU: 1 PID: 14490 Comm: syz.4.2994 Not tainted syzkaller #0 [ 679.503412][T14490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 679.503430][T14490] Call Trace: [ 679.503439][T14490] [ 679.519725][T14490] dump_stack_lvl+0x188/0x24e [ 679.524405][T14490] ? show_regs_print_info+0x12/0x12 [ 679.529602][T14490] ? load_image+0x410/0x410 [ 679.534106][T14490] ? __might_sleep+0xd0/0xd0 [ 679.538717][T14490] ? __lock_acquire+0x7ea0/0x7ea0 [ 679.543748][T14490] should_fail_ex+0x390/0x4c0 [ 679.548432][T14490] should_failslab+0x5/0x20 [ 679.552951][T14490] slab_pre_alloc_hook+0x59/0x300 [ 679.557987][T14490] kmem_cache_alloc+0x56/0x2f0 [ 679.562768][T14490] ? security_file_alloc+0x30/0x110 [ 679.567967][T14490] security_file_alloc+0x30/0x110 [ 679.573075][T14490] __alloc_file+0xc2/0x230 [ 679.577491][T14490] alloc_empty_file+0x90/0x180 [ 679.582262][T14490] alloc_file+0x5b/0x5f0 [ 679.586514][T14490] alloc_file_pseudo+0x180/0x200 [ 679.591453][T14490] ? alloc_empty_file_noaccount+0x80/0x80 [ 679.597173][T14490] ? alloc_fd+0x590/0x640 [ 679.601504][T14490] sock_alloc_file+0xb3/0x240 [ 679.606182][T14490] __sys_socket+0x12d/0x190 [ 679.610687][T14490] __x64_sys_socket+0x76/0x80 [ 679.615372][T14490] do_syscall_64+0x4c/0xa0 [ 679.619795][T14490] ? clear_bhb_loop+0x60/0xb0 [ 679.624492][T14490] ? clear_bhb_loop+0x60/0xb0 [ 679.629163][T14490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.635052][T14490] RIP: 0033:0x7f9aa3f9f559 [ 679.639466][T14490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.659155][T14490] RSP: 002b:00007f9aa4f15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 679.667564][T14490] RAX: ffffffffffffffda RBX: 00007f9aa4225fa0 RCX: 00007f9aa3f9f559 [ 679.675555][T14490] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 679.683533][T14490] RBP: 00007f9aa4036b20 R08: 0000000000000000 R09: 0000000000000000 [ 679.691499][T14490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.699464][T14490] R13: 00007f9aa4226038 R14: 00007f9aa4225fa0 R15: 00007ffc3673af88 [ 679.707435][T14490] [ 680.388219][T13217] hid-generic 0005:10CF:4155.002D: unknown main item tag 0x0 [ 680.545384][T13217] hid-generic 0005:10CF:4155.002D: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 681.152480][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 681.172623][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 681.199004][T14081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.297466][T14004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 681.322949][T14004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 681.369345][T14004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 681.379339][T14004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 681.650974][T14081] device veth0_vlan entered promiscuous mode [ 681.767594][T14004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 681.890028][T14004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 682.110948][T14081] device veth1_vlan entered promiscuous mode [ 682.134569][T14534] loop5: detected capacity change from 0 to 512 [ 682.242134][T14081] device veth0_macvtap entered promiscuous mode [ 682.266672][T14534] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 682.275665][T14534] ext4 filesystem being mounted at /466/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.289319][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 682.337949][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 682.377752][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 682.433620][T14081] device veth1_macvtap entered promiscuous mode [ 682.504913][ T6432] EXT4-fs (loop5): unmounting filesystem. [ 682.556923][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.621433][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.675903][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.709812][ T26] audit: type=1326 audit(1793106526.560:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.4.3012" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aa3f9f559 code=0x0 [ 682.716669][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.806341][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.845797][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.886061][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.924046][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.952876][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.000972][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.094138][T14081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.129628][T14004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 683.152368][T14004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 683.202958][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.236105][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.278375][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.313812][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.339934][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.376133][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.410982][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.444260][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.475478][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.503134][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.545771][T14081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.565772][T14540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3008'. [ 683.626566][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 683.645065][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 683.669660][T14081] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.691931][T14081] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.728677][T14081] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.860738][ T4392] hid-generic 0005:10CF:4155.002E: unknown main item tag 0x0 [ 683.872929][T14081] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.452415][ C1] net_ratelimit: 27 callbacks suppressed [ 684.459571][ T4392] hid-generic 0005:10CF:4155.002E: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 684.874147][T14583] loop3: detected capacity change from 0 to 512 [ 684.900451][ T4414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.941268][ T4414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.984073][T14583] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.3016: bad orphan inode 15 [ 685.002320][T14580] fido_id[14580]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci6/hci6:200/report_descriptor': No such file or directory [ 685.011044][T14583] ext4_test_bit(bit=14, block=5) = 0 [ 685.042903][T14583] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 685.274338][T14593] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.3016: bg 0: block 13: invalid block bitmap [ 686.346682][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.353025][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.378103][T14596] loop4: detected capacity change from 0 to 2048 [ 686.414952][T14596] EXT4-fs: Ignoring removed i_version option [ 686.423263][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 686.524061][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 686.544511][ T6673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.615246][ T6673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.633513][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 686.670318][T14596] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 686.752143][T14596] ext4 filesystem being mounted at /600/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.637894][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 688.015259][ T4392] hid-generic 0005:10CF:4155.002F: unknown main item tag 0x0 [ 688.294553][ T4392] hid-generic 0005:10CF:4155.002F: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 689.372897][T14629] fido_id[14629]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci6/hci6:200/report_descriptor': No such file or directory [ 689.496521][ T9084] net_ratelimit: 83 callbacks suppressed [ 689.984889][ T26] audit: type=1326 audit(1793106533.830:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14657 comm="syz.1.3036" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbff819f559 code=0x0 [ 690.134723][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 690.151006][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 690.161021][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 690.172471][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 690.184056][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 690.206565][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 690.239191][ T4287] bond0: (slave syz_tun): Releasing backup interface [ 690.298913][T13217] infiniband syz1: ib_query_port failed (-19) [ 691.161362][T14660] rxe_eth0 speed is unknown, defaulting to 1000 [ 691.273231][T14660] rxe_eth0 speed is unknown, defaulting to 1000 [ 692.254399][T14683] autofs4:pid:14683:autofs_fill_super: called with bogus options [ 692.296584][ T4294] Bluetooth: hci0: command 0x0409 tx timeout [ 692.338553][T14654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3034'. [ 692.389029][ T9470] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.479418][T14660] rxe_eth0 speed is unknown, defaulting to 1000 [ 693.384192][ T9470] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.394858][ T26] audit: type=1807 audit(1793106537.230:41): action=appraise func=FÅÇ;²t¸¿˜®©çÞÉ£!’@‰Z¶©VÕ„2ßYÓºL­é|ȷƃÎúk¾Ö*²—>„—Ê#¼!^Ù¤}êLž TÞ¥;—¨q`Ú°kt7ØbÞÅ0¼çøIØÁšL¬çY res=0 [ 693.399851][T14700] ima: policy update failed [ 693.444138][ T26] audit: type=1802 audit(1793106537.230:42): pid=14701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.3049" res=0 errno=0 [ 693.574127][ T26] audit: type=1802 audit(1793106537.340:43): pid=14700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3049" res=0 errno=0 [ 693.641772][ T26] audit: type=1326 audit(1793106537.470:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14702 comm="syz.0.3050" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5c959f559 code=0x0 [ 693.663951][T14660] infiniband rxe0: set active [ 693.692471][ T9470] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.713190][T14660] infiniband rxe0: added rxe_eth0 [ 693.743446][ T4493] rxe_eth0 speed is unknown, defaulting to 1000 [ 693.822476][ T7599] RDS/IB: rds_ib_setup_qp failed (-95) [ 693.867370][T14660] RDS/IB: rxe0: added [ 693.871446][T14660] smc: adding ib device rxe0 with port count 1 [ 693.874479][ T9470] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.894973][T14660] smc: ib device rxe0 port 1 has pnetid [ 693.902320][ T4284] rxe_eth0 speed is unknown, defaulting to 1000 [ 693.937262][T14713] loop1: detected capacity change from 0 to 512 [ 694.627957][ T4294] Bluetooth: hci0: command 0x041b tx timeout [ 694.629944][ C1] net_ratelimit: 44 callbacks suppressed [ 694.652273][T14660] rxe_eth0 speed is unknown, defaulting to 1000 [ 694.662537][T13217] hid-generic 0005:10CF:4155.0030: unknown main item tag 0x0 [ 694.736677][T13217] hid-generic 0005:10CF:4155.0030: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 694.775943][T14720] autofs4:pid:14720:autofs_fill_super: called with bogus options [ 694.822535][T14713] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 694.859579][T14713] ext4 filesystem being mounted at /623/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 695.004093][T14660] rxe_eth0 speed is unknown, defaulting to 1000 [ 695.156310][T14660] rxe_eth0 speed is unknown, defaulting to 1000 [ 695.208074][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 695.351343][T14660] rxe_eth0 speed is unknown, defaulting to 1000 [ 695.469570][ T9470] tipc: Left network mode [ 695.534184][T14733] loop1: detected capacity change from 0 to 512 [ 695.714958][T14733] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.3058: bad orphan inode 15 [ 695.728334][T14733] ext4_test_bit(bit=14, block=5) = 0 [ 695.733715][T14733] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 695.916385][ T26] audit: type=1326 audit(1793106539.720:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14746 comm="syz.0.3064" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5c959f559 code=0x0 [ 696.006894][T14660] rxe_eth0 speed is unknown, defaulting to 1000 [ 696.097816][T14751] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.3058: bg 0: block 13: invalid block bitmap [ 696.697035][ T4294] Bluetooth: hci0: command 0x040f tx timeout [ 697.168651][T14660] rxe_eth0 speed is unknown, defaulting to 1000 [ 697.239150][T13217] hid-generic 0005:10CF:4155.0031: unknown main item tag 0x0 [ 697.275403][T13217] hid-generic 0005:10CF:4155.0031: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 697.401588][T14764] autofs4:pid:14764:autofs_fill_super: called with bogus options [ 697.725023][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 697.758698][T14768] loop5: detected capacity change from 0 to 512 [ 697.892017][T14768] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 697.951670][T14768] ext4 filesystem being mounted at /484/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 697.985496][T14776] loop1: detected capacity change from 0 to 2048 [ 697.996658][T14660] rxe_eth0 speed is unknown, defaulting to 1000 [ 698.021351][T14776] EXT4-fs: Ignoring removed i_version option [ 698.113447][T14776] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 698.195364][T14776] ext4 filesystem being mounted at /625/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 698.308950][ T6432] EXT4-fs (loop5): unmounting filesystem. [ 698.787158][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 699.209290][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 699.816628][ C1] net_ratelimit: 41 callbacks suppressed [ 700.349525][ T26] audit: type=1326 audit(1793106544.200:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.1.3075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbff819f559 code=0x0 [ 700.433114][T14660] rxe_eth0 speed is unknown, defaulting to 1000 [ 701.306360][T13217] hid-generic 0005:10CF:4155.0032: unknown main item tag 0x0 [ 701.317613][T13217] hid-generic 0005:10CF:4155.0032: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 701.402068][T14820] loop1: detected capacity change from 0 to 512 [ 701.472907][T14820] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 701.500088][T14820] ext4 filesystem being mounted at /628/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 702.375744][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 702.391366][T14829] loop5: detected capacity change from 0 to 2048 [ 702.408058][T14829] EXT4-fs: Ignoring removed i_version option [ 702.494170][T14829] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 702.504377][T14829] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.854949][ T6432] EXT4-fs (loop5): unmounting filesystem. [ 705.039706][ T7722] net_ratelimit: 38 callbacks suppressed [ 705.484253][ T26] audit: type=1326 audit(1793106549.330:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.0.3089" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5c959f559 code=0x0 [ 705.809256][T14868] loop5: detected capacity change from 0 to 512 [ 705.891024][T14868] EXT4-fs error (device loop5): ext4_orphan_get:1435: comm syz.5.3092: bad orphan inode 15 [ 705.982936][T14868] ext4_test_bit(bit=14, block=5) = 0 [ 705.991449][T14868] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 706.272831][T14875] loop1: detected capacity change from 0 to 512 [ 706.333939][T14876] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.3092: bg 0: block 13: invalid block bitmap [ 706.793485][T14875] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 706.885016][T14875] ext4 filesystem being mounted at /632/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 706.903592][ T4294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 706.916601][ T4294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 706.925762][ T4294] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 706.937076][ T4294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 706.945323][ T4294] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 706.953166][ T4294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 707.352512][ T4286] bond0: (slave syz_tun): Releasing backup interface [ 707.414230][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 707.649820][ T9470] device hsr_slave_0 left promiscuous mode [ 707.692861][ T9470] device hsr_slave_1 left promiscuous mode [ 707.760243][ T9470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.797606][ T9470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.840305][ T9470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.884733][ T9470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.940008][ T6432] EXT4-fs (loop5): unmounting filesystem. [ 707.961855][ T9470] device veth0_macvtap left promiscuous mode [ 708.023848][ T9470] device veth1_vlan left promiscuous mode [ 708.030173][ T9470] device veth0_vlan left promiscuous mode [ 708.740458][ T26] audit: type=1326 audit(1793106552.590:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14901 comm="syz.1.3102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbff819f559 code=0x0 [ 709.016653][ T4294] Bluetooth: hci4: command 0x0409 tx timeout [ 709.059611][T14909] loop5: detected capacity change from 0 to 512 [ 709.208331][T14909] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 709.226511][T14909] ext4 filesystem being mounted at /495/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.397151][ T6432] EXT4-fs (loop5): unmounting filesystem. [ 710.936281][ C0] net_ratelimit: 34 callbacks suppressed [ 711.681555][ T4294] Bluetooth: hci4: command 0x041b tx timeout [ 712.743572][ T9470] team0 (unregistering): Port device team_slave_1 removed [ 712.808188][ T9470] team0 (unregistering): Port device team_slave_0 removed [ 712.874163][ T9470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.943682][ T9470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.737325][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 715.258884][ T9470] bond0 (unregistering): Released all slaves [ 715.493686][T14937] rxe_eth0 speed is unknown, defaulting to 1000 [ 715.709365][T14879] rxe_eth0 speed is unknown, defaulting to 1000 [ 715.818338][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 715.877910][T14660] chnl_net:caif_netlink_parms(): no params data found [ 715.921975][T14951] loop1: detected capacity change from 0 to 512 [ 716.122956][T14951] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 716.136668][T14951] ext4 filesystem being mounted at /642/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.147424][ T4373] net_ratelimit: 40 callbacks suppressed [ 716.372397][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 716.515962][T14660] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.573879][T14660] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.602371][T14660] device bridge_slave_0 entered promiscuous mode [ 716.731676][T14660] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.772972][T14660] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.838787][T14660] device bridge_slave_1 entered promiscuous mode [ 717.282704][T14660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.444460][T14660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.910981][T14660] team0: Port device team_slave_0 added [ 717.994779][T14660] team0: Port device team_slave_1 added [ 718.646860][ T9470] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.933135][T14660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.323637][T14660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.787537][T14996] Bluetooth: MGMT ver 1.22 [ 719.867767][T14660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.900801][T14999] rxe_eth0 speed is unknown, defaulting to 1000 [ 720.051952][ T9470] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.123371][T14660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.139391][T14660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.615862][T14660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.900522][T14879] chnl_net:caif_netlink_parms(): no params data found [ 721.077362][ T9470] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.369474][T14660] device hsr_slave_0 entered promiscuous mode [ 721.395774][T14660] device hsr_slave_1 entered promiscuous mode [ 721.422012][T14660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 721.440355][T14660] Cannot create hsr debugfs directory [ 721.551514][ T9559] net_ratelimit: 32 callbacks suppressed [ 721.570544][ T9470] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.469710][T14879] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.479967][T14879] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.547323][T14879] device bridge_slave_0 entered promiscuous mode [ 722.669463][T14879] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.694292][T14879] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.756991][T14879] device bridge_slave_1 entered promiscuous mode [ 723.479233][T14879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.625383][T14879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.503834][T14879] team0: Port device team_slave_0 added [ 724.512637][T14879] team0: Port device team_slave_1 added [ 724.636762][T14879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.657862][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.741035][T14879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.761251][ T9470] tipc: Left network mode [ 724.873333][T14879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.891627][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.921705][T14879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.943907][T15058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3138'. [ 725.480002][ T4284] hid-generic 0005:10CF:4155.0033: unknown main item tag 0x0 [ 725.555975][ T4284] hid-generic 0005:10CF:4155.0033: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 726.698955][ T7646] net_ratelimit: 37 callbacks suppressed [ 726.868761][T15076] fido_id[15076]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 727.371868][T15089] rxe_eth0 speed is unknown, defaulting to 1000 [ 727.695598][T14879] device hsr_slave_0 entered promiscuous mode [ 727.767039][T14879] device hsr_slave_1 entered promiscuous mode [ 727.792125][T14879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 727.806552][T14879] Cannot create hsr debugfs directory [ 729.891351][ T131] hid-generic 0005:10CF:4155.0034: unknown main item tag 0x0 [ 729.902313][ T131] hid-generic 0005:10CF:4155.0034: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 731.308573][T15132] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3158'. [ 731.807228][ C1] net_ratelimit: 29 callbacks suppressed [ 732.300313][T15131] rxe_eth0 speed is unknown, defaulting to 1000 [ 732.474787][T15140] autofs4:pid:15140:autofs_fill_super: called with bogus options [ 732.633164][T15144] loop1: detected capacity change from 0 to 512 [ 732.672732][T15144] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 732.770080][T14660] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 733.607533][T15144] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 733.657601][T15144] EXT4-fs (loop1): mount failed [ 733.802898][T14660] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 734.200092][T14660] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 734.354963][T15144] loop1: detected capacity change from 0 to 512 [ 734.458807][T15144] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 735.196706][T15166] loop1: detected capacity change from 0 to 8192 [ 735.255371][T14660] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 736.428925][ T3640] Dev loop1: RDB in block 1 has bad checksum [ 736.448651][T14879] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 736.709173][T14879] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 736.868044][T14879] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 736.936631][ T52] net_ratelimit: 38 callbacks suppressed [ 737.061752][T15183] autofs4:pid:15183:autofs_fill_super: called with bogus options [ 737.159386][T15185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3170'. [ 737.337236][T14879] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 737.921389][T14660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.970223][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 738.136671][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 738.501234][T14660] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.423678][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 739.433218][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 739.441919][T13810] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.449057][T13810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.458737][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 739.467716][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 739.476418][T13810] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.483543][T13810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.592846][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 739.646686][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 739.655847][T15205] loop5: detected capacity change from 0 to 512 [ 739.695256][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 739.712935][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 739.783550][T15205] EXT4-fs error (device loop5): ext4_orphan_get:1435: comm syz.5.3179: bad orphan inode 15 [ 739.824605][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 739.830445][T15205] ext4_test_bit(bit=14, block=5) = 0 [ 739.838160][T15205] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 739.855243][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 740.065979][ T9470] device hsr_slave_0 left promiscuous mode [ 740.072907][ T9470] device hsr_slave_1 left promiscuous mode [ 740.093276][ T9470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.101515][ T9470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.113954][T15211] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.3179: bg 0: block 13: invalid block bitmap [ 740.128423][ T9470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.137378][ T9470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.196369][ T9470] device veth1_macvtap left promiscuous mode [ 740.202437][ T9470] device veth0_macvtap left promiscuous mode [ 740.216838][ T9470] device veth1_vlan left promiscuous mode [ 740.222719][ T9470] device veth0_vlan left promiscuous mode [ 741.278514][ T9470] team0 (unregistering): Port device team_slave_1 removed [ 741.344510][ T9470] team0 (unregistering): Port device team_slave_0 removed [ 741.412089][ T9470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.480169][ T9470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.003895][ T9470] bond0 (unregistering): Released all slaves [ 742.083725][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 742.097507][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 742.125440][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 742.134571][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 742.142381][ C1] net_ratelimit: 39 callbacks suppressed [ 742.164689][T14660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 742.176856][T14660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 742.267547][T14879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.274518][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 742.307732][ T6432] EXT4-fs (loop5): unmounting filesystem. [ 742.387045][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 742.431101][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 742.479332][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 742.519534][T14879] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.527829][T15221] loop5: detected capacity change from 0 to 512 [ 742.567369][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 742.585450][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 742.607295][T15221] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 742.637664][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.644800][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.703494][T15221] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 742.731594][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 742.762222][T15221] EXT4-fs (loop5): mount failed [ 742.821828][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 742.907532][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 742.943953][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.951176][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.992596][T15221] loop5: detected capacity change from 0 to 512 [ 743.003576][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 743.048384][T15221] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 743.074673][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 743.107827][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 743.123753][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 743.176560][T15236] [ 743.176849][ C1] wireguard: wg1: Receiving keepalive packet from peer 41 ([::1]:20001/0%0) [ 743.178936][T15236] ====================================================== [ 743.178944][T15236] WARNING: possible circular locking dependency detected [ 743.189796][T14660] Insert table=255 ac14142a/32 [ 743.194629][T15236] syzkaller #0 Not tainted [ 743.210918][T15236] ------------------------------------------------------ [ 743.217942][T15236] syz.0.3182/15236 is trying to acquire lock: [ 743.218984][T15014] inotify_handle_inode_event: group=ffff88814d2c3800 mark=ffff88807cfe8d48 mask=8000 [ 743.224109][T15236] ffff888065c9e350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x8de/0xd10 [ 743.233832][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:172.20.20.28 for cmd:0 at entry:ffff88801e701880 [ 743.242677][T15236] [ 743.242677][T15236] but task is already holding lock: [ 743.242685][T15236] ffff888065c9f510 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 743.256289][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::1c for cmd:0 at entry:ffff88801e701480 [ 743.263757][T15236] [ 743.263757][T15236] which lock already depends on the new lock. [ 743.263757][T15236] [ 743.263765][T15236] [ 743.263765][T15236] the existing dependency chain (in reverse order) is: [ 743.274394][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:172.20.20.29 for cmd:0 at entry:ffff88801e701580 [ 743.287562][T15236] [ 743.287562][T15236] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 743.287589][T15236] __mutex_lock+0x12d/0xae0 [ 743.298030][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::1d for cmd:0 at entry:ffff88801e701300 [ 743.306990][T15236] nfc_urelease_event_work+0x120/0x310 [ 743.307023][T15236] process_one_work+0x8ab/0x1160 [ 743.307042][T15236] worker_thread+0xaf5/0x12a0 [ 743.320707][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:172.20.20.30 for cmd:0 at entry:ffff88802e294900 [ 743.329299][T15236] kthread+0x29d/0x330 [ 743.329317][T15236] ret_from_fork+0x1f/0x30 [ 743.334334][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::1e for cmd:0 at entry:ffff888055dea980 [ 743.347482][T15236] [ 743.347482][T15236] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 743.347509][T15236] __mutex_lock+0x12d/0xae0 [ 743.353491][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::a8aa:aaff:feaa:aa0c for cmd:0 at entry:ffff88801deeac00 [ 743.358937][T15236] nfc_register_device+0x38/0x300 [ 743.358967][T15236] nci_register_device+0x89f/0x9f0 [ 743.358982][T15236] virtual_ncidev_open+0x55/0xc0 [ 743.364191][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::a8aa:aaff:feaa:aa1c for cmd:0 at entry:ffff888057b9a480 [ 743.377684][T15236] misc_open+0x31f/0x390 [ 743.382315][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::c85c:65ff:fe57:5a75 for cmd:0 at entry:ffff888024e2db00 [ 743.387213][T15236] chrdev_open+0x585/0x5f0 [ 743.387234][T15236] do_dentry_open+0x7dd/0x10b0 [ 743.387255][T15236] path_openat+0x2674/0x2f10 [ 743.400458][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::a8aa:aaff:feaa:aa1d for cmd:0 at entry:ffff888057628a00 [ 743.408369][T15236] do_filp_open+0x1ee/0x420 [ 743.408391][T15236] do_sys_openat2+0x14b/0x4f0 [ 743.413411][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:172.20.20.31 for cmd:0 at entry:ffff888057628900 [ 743.428035][T15236] __x64_sys_openat+0x135/0x160 [ 743.428063][T15236] do_syscall_64+0x4c/0xa0 [ 743.428079][T15236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 743.433613][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::1f for cmd:0 at entry:ffff888030e73480 [ 743.439214][T15236] [ 743.439214][T15236] -> #1 (nci_mutex){+.+.}-{3:3}: [ 743.439246][T15236] __mutex_lock+0x12d/0xae0 [ 743.439269][T15236] virtual_nci_close+0x13/0x40 [ 743.444736][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:172.20.20.32 for cmd:0 at entry:ffff8880285c4480 [ 743.459357][T15236] nci_dev_up+0x976/0xd90 [ 743.459386][T15236] nfc_dev_up+0x15d/0x310 [ 743.459401][T15236] nfc_genl_dev_up+0x85/0xd0 [ 743.459419][T15236] genl_family_rcv_msg_doit+0x22f/0x350 [ 743.464187][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::a8aa:aaff:feaa:aa1e for cmd:0 at entry:ffff88802d5b5800 [ 743.478812][T15236] genl_rcv_msg+0x601/0x790 [ 743.478845][T15236] netlink_rcv_skb+0x1ef/0x440 [ 743.483829][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::a8aa:aaff:feaa:aa1f for cmd:0 at entry:ffff88802d5b5d00 [ 743.489071][T15236] genl_rcv+0x24/0x40 [ 743.489088][T15236] netlink_unicast+0x7ad/0x920 [ 743.489107][T15236] netlink_sendmsg+0x8ad/0xbd0 [ 743.494209][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::d029:54ff:feb0:401 for cmd:0 at entry:ffff888031583d00 [ 743.508834][T15236] ____sys_sendmsg+0x5ed/0x9a0 [ 743.508860][T15236] ___sys_sendmsg+0x2a2/0x360 [ 743.513886][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::20 for cmd:0 at entry:ffff888030e6be80 [ 743.519045][T15236] __se_sys_sendmsg+0x1c3/0x2b0 [ 743.519067][T15236] do_syscall_64+0x4c/0xa0 [ 743.519082][T15236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 743.532618][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:172.20.20.33 for cmd:0 at entry:ffff888030e6bf80 [ 743.537933][T15236] [ 743.537933][T15236] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 743.537961][T15236] __lock_acquire+0x3a03/0x7ea0 [ 743.542880][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::21 for cmd:0 at entry:ffff888030e6b280 [ 743.549258][T15236] lock_acquire+0x1bc/0x4a0 [ 743.549280][T15236] __mutex_lock+0x12d/0xae0 [ 743.562505][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:172.20.20.34 for cmd:0 at entry:ffff8880464e9580 [ 743.569555][T15236] nci_start_poll+0x8de/0xd10 [ 743.569577][T15236] nfc_start_poll+0x141/0x2c0 [ 743.574623][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::22 for cmd:0 at entry:ffff8880464e9280 [ 743.579878][T15236] nfc_genl_start_poll+0x1d7/0x340 [ 743.579909][T15236] genl_family_rcv_msg_doit+0x22f/0x350 [ 743.579925][T15236] genl_rcv_msg+0x601/0x790 [ 743.579939][T15236] netlink_rcv_skb+0x1ef/0x440 [ 743.593791][ C1] nf_conntrack: new packet for ffff88801e729200 [ 743.598289][T15236] genl_rcv+0x24/0x40 [ 743.598315][T15236] netlink_unicast+0x7ad/0x920 [ 743.598335][T15236] netlink_sendmsg+0x8ad/0xbd0 [ 743.603909][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888055748e58 is addr:172.20.20.38 for cmd:0 at entry:ffff888057628f00 [ 743.608261][T15236] ____sys_sendmsg+0x5ed/0x9a0 [ 743.608290][T15236] ___sys_sendmsg+0x2a2/0x360 [ 743.608309][T15236] __se_sys_sendmsg+0x1c3/0x2b0 [ 743.614365][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888055748e58 is addr:fe80::26 for cmd:0 at entry:ffff888057628380 [ 743.629101][T15236] do_syscall_64+0x4c/0xa0 [ 743.629122][T15236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 743.629146][T15236] [ 743.629146][T15236] other info that might help us debug this: [ 743.629146][T15236] [ 743.634159][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888055748e58 is addr:172.20.20.39 for cmd:0 at entry:ffff888024878300 [ 743.639408][T15236] Chain exists of: [ 743.639408][T15236] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 743.639408][T15236] [ 743.639437][T15236] Possible unsafe locking scenario: [ 743.639437][T15236] [ 743.639442][T15236] CPU0 CPU1 [ 743.639447][T15236] ---- ---- [ 743.639452][T15236] lock( [ 743.654131][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888055748e58 is addr:172.20.20.40 for cmd:0 at entry:ffff888028284e00 [ 743.658565][T15236] &genl_data->genl_data_mutex); [ 743.658577][T15236] lock(nfc_devlist_mutex); [ 743.658591][T15236] lock( [ 743.663858][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888055748e58 is addr:172.20.20.41 for cmd:0 at entry:ffff888028284600 [ 743.669109][T15236] &genl_data->genl_data_mutex); [ 743.669120][T15236] lock(&ndev->req_lock); [ 743.669130][T15236] [ 743.669130][T15236] *** DEADLOCK *** [ 743.669130][T15236] [ 743.669134][T15236] 4 locks held by syz.0.3182/15236: [ 743.683721][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888055748e58 is addr:fe80::29 for cmd:0 at entry:ffff888028284980 [ 743.688949][T15236] #0: ffffffff8edd6bd0 (cb_lock){++++}-{3:3} [ 743.716345][T14660] In tnode_resize ffff88801ae89320 inflate_threshold=50 threshold=25 [ 743.717595][T15236] , at: genl_rcv+0x15/0x40 [ 743.744320][T15014] fsnotify_insert_event: group=ffff88814d2c3800 event=ffff8880256cd240 [ 743.745215][T15236] #1: ffffffff8edd69e8 [ 743.750812][T14660] In tnode_resize ffff88802eb62920 inflate_threshold=50 threshold=25 [ 743.763728][T15236] (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x107/0x790 [ 743.763767][T15236] #2: ffff888065c9f510 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 743.770132][T15240] kcov: kcov_start: t = ffff88801bf75a00, size = 524288, area = ffffc9001cfab000 [ 743.773791][T15236] #3: ffff888065c9f100 [ 743.787576][ T3640] get_one_event: group=ffff88814d2c3800 event=ffff8880256cd240 [ 743.792478][T15236] (&dev->mutex [ 743.797702][ T3640] fsnotify_remove_first_event: group=ffff88814d2c3800 event=ffff8880256cd240 [ 743.810810][T15236] ){....}-{3:3}, at: nfc_start_poll+0x4f/0x2c0 [ 743.823324][T15227] MPTCP: msk=ffff8880542e1900 state=7 [ 743.827507][T15236] [ 743.827507][T15236] stack backtrace: [ 743.827520][T15236] CPU: 0 PID: 15236 Comm: syz.0.3182 Not tainted syzkaller #0 [ 743.827536][T15236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 743.827546][T15236] Call Trace: [ 743.827552][T15236] [ 743.827560][T15236] dump_stack_lvl+0x188/0x24e [ 743.846259][T14660] In tnode_resize ffff88801f69dca0 inflate_threshold=50 threshold=25 [ 743.848797][T15236] ? load_image+0x410/0x410 [ 743.861738][T15227] MPTCP: msk=ffff8880542e1900 [ 743.867568][T15236] ? show_regs_print_info+0x12/0x12 [ 743.867595][T15236] ? print_circular_bug+0x12b/0x1a0 [ 743.867620][T15236] check_noncircular+0x2f8/0x400 [ 743.873371][T14660] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:172.20.20.42 in wq:ffff888055748e58 [ 743.878067][T15236] ? print_deadlock_bug+0x5d0/0x5d0 [ 743.878100][T15236] ? lockdep_lock+0xf1/0x1f0 [ 743.878121][T15236] ? _find_first_zero_bit+0xd2/0x100 [ 743.883806][ T3640] inotify_read: group=ffff88814d2c3800 kevent=ffff8880256cd240 [ 743.896767][T15236] __lock_acquire+0x3a03/0x7ea0 [ 743.896814][T15236] ? verify_lock_unused+0x140/0x140 [ 743.907922][T15227] MPTCP: msk=ffff8880542e1900 [ 743.908221][T15236] ? verify_lock_unused+0x140/0x140 [ 743.922481][ T3640] copy_event_to_user: group=ffff88814d2c3800 event=ffff8880256cd240 [ 743.931959][T15236] lock_acquire+0x1bc/0x4a0 [ 743.931988][T15236] ? nci_start_poll+0x8de/0xd10 [ 743.932009][T15236] ? __might_sleep+0xd0/0xd0 [ 743.946707][T15227] nfc: nfc_unregister_rfkill: dev_name=nfc2 [ 743.953657][T15236] ? read_lock_is_recursive+0x10/0x10 [ 743.959466][T15241] kcov: kcov_start: t = ffff888026eebc00, size = 524288, area = ffffc9001d5ad000 [ 743.964369][T15236] ? lock_chain_count+0x20/0x20 [ 743.986304][ T3640] inotify_read: group=ffff88814d2c3800 kevent=0000000000000000 [ 743.992842][T15236] __mutex_lock+0x12d/0xae0 [ 744.078946][ T4263] nf_conntrack: normal packet for ffff888076984480 [ 744.086698][T15236] ? nci_start_poll+0x8de/0xd10 [ 744.086722][T15236] ? preempt_count_add+0x8d/0x190 [ 744.344533][T15236] ? __wake_up_klogd+0xd9/0x100 [ 744.349395][T15236] ? vprintk_emit+0x59f/0x6a0 [ 744.354077][T15236] ? nci_start_poll+0x8de/0xd10 [ 744.358925][T15236] ? printk_sprint+0x460/0x460 [ 744.363689][T15236] ? mutex_lock_nested+0x10/0x10 [ 744.368631][T15236] nci_start_poll+0x8de/0xd10 [ 744.373307][T15236] ? nci_dev_down+0x40/0x40 [ 744.377804][T15236] ? trace_raw_output_contention_end+0xd0/0xd0 [ 744.383955][T15236] ? __mutex_trylock_common+0x15c/0x260 [ 744.389525][T15236] ? rcu_is_watching+0x11/0xa0 [ 744.394289][T15236] ? trace_contention_end+0x5f/0x170 [ 744.399572][T15236] ? __mutex_lock+0x1ab/0xae0 [ 744.404510][T15236] ? param_get_dyndbg_classes+0x160/0x160 [ 744.410587][T15236] ? __mutex_lock+0x1ab/0xae0 [ 744.415260][T15236] ? nfc_start_poll+0x4f/0x2c0 [ 744.420027][T15236] ? mutex_lock_nested+0x10/0x10 [ 744.425055][T15236] ? nfc_get_device+0x82/0xd0 [ 744.429730][T15236] ? nfc_release+0x2e0/0x2e0 [ 744.434332][T15236] nfc_start_poll+0x141/0x2c0 [ 744.439446][T15236] nfc_genl_start_poll+0x1d7/0x340 [ 744.444554][T15236] genl_family_rcv_msg_doit+0x22f/0x350 [ 744.450128][T15236] ? end_current_label_crit_section+0x170/0x170 [ 744.456373][T15236] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 744.462356][T15236] ? bpf_lsm_capable+0x5/0x10 [ 744.467035][T15236] ? security_capable+0x85/0xb0 [ 744.471883][T15236] genl_rcv_msg+0x601/0x790 [ 744.476384][T15236] ? genl_bind+0x360/0x360 [ 744.480793][T15236] ? nfc_genl_dev_down+0xd0/0xd0 [ 744.485734][T15236] netlink_rcv_skb+0x1ef/0x440 [ 744.490504][T15236] ? genl_bind+0x360/0x360 [ 744.494911][T15236] ? netlink_ack+0x1160/0x1160 [ 744.499674][T15236] ? down_read+0x1a8/0x2d0 [ 744.504104][T15236] genl_rcv+0x24/0x40 [ 744.508074][T15236] netlink_unicast+0x7ad/0x920 [ 744.512839][T15236] netlink_sendmsg+0x8ad/0xbd0 [ 744.517608][T15236] ? netlink_getsockopt+0x550/0x550 [ 744.522804][T15236] ? apparmor_socket_sendmsg+0x8a/0x330 [ 744.528354][T15236] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 744.533637][T15236] ? security_socket_sendmsg+0x7c/0xa0 [ 744.539100][T15236] ? netlink_getsockopt+0x550/0x550 [ 744.544308][T15236] ____sys_sendmsg+0x5ed/0x9a0 [ 744.549073][T15236] ? __sys_sendmsg_sock+0x30/0x30 [ 744.554090][T15236] ? __import_iovec+0x306/0x510 [ 744.558941][T15236] ? import_iovec+0x6f/0xa0 [ 744.563441][T15236] ___sys_sendmsg+0x2a2/0x360 [ 744.568120][T15236] ? __sys_sendmsg+0x2a0/0x2a0 [ 744.572993][T15236] __se_sys_sendmsg+0x1c3/0x2b0 [ 744.577848][T15236] ? __x64_sys_sendmsg+0x80/0x80 [ 744.582788][T15236] ? lockdep_hardirqs_on+0x94/0x140 [ 744.587981][T15236] do_syscall_64+0x4c/0xa0 [ 744.592421][T15236] ? clear_bhb_loop+0x60/0xb0 [ 744.597112][T15236] ? clear_bhb_loop+0x60/0xb0 [ 744.601786][T15236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 744.607679][T15236] RIP: 0033:0x7fd5c959f559 [ 744.612089][T15236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.631710][T15236] RSP: 002b:00007fd5ca415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 744.640121][T15236] RAX: ffffffffffffffda RBX: 00007fd5c9826090 RCX: 00007fd5c959f559 [ 744.648089][T15236] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 744.656057][T15236] RBP: 00007fd5c9636b20 R08: 0000000000000000 R09: 0000000000000000 [ 744.664069][T15236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.672050][T15236] R13: 00007fd5c9826128 R14: 00007fd5c9826090 R15: 00007ffd1c5b7728 [ 744.680021][T15236] [ 744.683091][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.686632][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888055748e58 is addr:172.20.20.42 for cmd:0 at entry:ffff88802fa4ab00 [ 744.689202][ C0] virtqueue callback for ffff888144a63200 (ffffffff858ab770) [ 744.710194][ C0] virtqueue callback for ffff888019e54a00 (ffffffff84767210) [ 744.710789][ T9559] sd 0:0:1:0: cmd ffff888028f8b520 CDB: 0x2a [ 744.717611][ C0] virtqueue interrupt with no work for ffff888019e54800 [ 744.730554][ C0] virtqueue interrupt with no work for ffff888019e54600 [ 744.736286][ T4263] tcp_conntracks: [ 744.737533][ T4263] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 744.737578][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.741892][ T4263] No more buffers in queue [ 744.747285][ C0] tcp_conntracks: [ 744.752608][ T4263] eth0: xmit ffff888053ee9c70 42:01:0a:80:00:01 [ 744.752632][ T4263] Added buffer head 3 to ffff888144a63c00 [ 744.757083][ C1] virtqueue callback for ffff888144a63c00 (ffffffff858ab860) [ 744.757083][ C0] virtqueue callback for ffff888144a63200 (ffffffff858ab770) [ 744.757102][ C0] syn=0 ack=1 fin=0 rst=0 old=2 new=2 [ 744.761383][ T9559] Added buffer head 222 to ffff888024e09c00 [ 744.767581][ C0] wireguard: wg1: Handshake for peer 10 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 14) [ 744.773249][ C1] Sent skb ffff888053ee9c70 [ 744.780167][ C0] wireguard: wg2: Handshake for peer 11 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 12) [ 744.787535][ C1] No more buffers in queue [ 744.792912][ C0] wireguard: wg0: Handshake for peer 31 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 744.806480][ T4263] nf_conntrack: normal packet for ffff888076984480 [ 744.813919][ C0] No more buffers in queue [ 744.815233][ T3603] sd 0:0:1:0: cmd ffff888028f8bca0 CDB: 0x2a [ 744.826543][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 744.836831][ T95] sd 0:0:1:0: cmd ffff888028f8b8e0 CDB: 0x2a [ 744.842444][ C1] virtqueue callback for ffff888024e09c00 (ffffffff85445d80) [ 744.842466][ C1] sd 0:0:1:0: cmd ffff888028f8b520 response 0 status 0x0 sense_len 0 [ 744.842484][ C1] No more buffers in queue [ 744.842481][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 744.842603][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 744.849059][ T95] Added buffer head 222 to ffff888024e09c00 [ 744.853495][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 744.859465][ T95] sd 0:0:1:0: cmd ffff888028f50120 CDB: 0x2a [ 744.865227][ C0] Receiving skb proto 0x0800 len 40 type 0 [ 744.871204][ T95] Added buffer head 37 to ffff888024e09c00 [ 744.878648][ C0] No more buffers in queue [ 744.886716][ T95] sd 0:0:1:0: cmd ffff888028f504e0 CDB: 0x2a [ 744.891117][ C0] tcp_conntracks: [ 744.896893][ T95] Added buffer head 186 to ffff888024e09c00 [ 744.902690][ C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 744.908602][ T95] sd 0:0:1:0: cmd ffff888028f508a0 CDB: 0x2a [ 744.914367][ C0] tcp_conntracks: [ 744.920335][ T95] Added buffer head 17 to ffff888024e09c00 [ 744.926103][ C0] syn=0 ack=1 fin=1 rst=0 old=4 new=6 [ 744.931939][ T95] sd 0:0:1:0: cmd ffff888028f50c60 CDB: 0x2a [ 744.936339][ C0] tcp_conntracks: [ 744.942297][ T95] Added buffer head 131 to ffff888024e09c00 [ 744.945990][ C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 744.951904][ T95] sd 0:0:1:0: cmd ffff888028f51020 CDB: 0x2a [ 744.957262][ C0] tcp_conntracks: [ 744.963213][ T95] Added buffer head 217 to ffff888024e09c00 [ 744.966920][ C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 744.972727][ T95] sd 0:0:1:0: cmd ffff888028f513e0 CDB: 0x2a [ 744.978053][ C0] tcp_conntracks: [ 744.984002][ T95] Added buffer head 239 to ffff888024e09c00 [ 744.987708][ C0] syn=0 ack=0 fin=0 rst=1 old=6 new=8 [ 744.995483][ C1] virtqueue callback for ffff888024e09c00 (ffffffff85445d80) [ 745.006713][ C0] No more buffers in queue [ 745.008597][ C1] sd 0:0:1:0: cmd ffff888028f513e0 response 0 status 0x0 sense_len 0 [ 745.014467][ C0] No more buffers in queue [ 745.019940][ C1] sd 0:0:1:0: cmd ffff888028f8b8e0 response 0 status 0x0 sense_len 0 [ 745.019967][ C1] sd 0:0:1:0: cmd ffff888028f50120 response 0 status 0x0 sense_len 0 [ 745.019984][ C1] sd 0:0:1:0: cmd ffff888028f504e0 response 0 status 0x0 sense_len 0 [ 745.056263][ T5468] nf_conntrack: normal packet for ffff88807c744f00 [ 745.060792][ C1] sd 0:0:1:0: cmd ffff888028f508a0 response 0 status 0x0 sense_len 0 [ 745.071505][ T52] hsr0: bond_netdev_event received NETDEV_CHANGE [ 745.073233][ C1] sd 0:0:1:0: cmd ffff888028f51020 response 0 status 0x0 sense_len 0 [ 745.118654][ C1] sd 0:0:1:0: cmd ffff888028f50c60 response 0 status 0x0 sense_len 0 [ 745.126718][ C1] No more buffers in queue [ 745.131199][ T4263] tcp_conntracks: [ 745.131212][ T4263] syn=0 ack=1 fin=0 rst=0 old=8 new=8 [ 745.134100][T15239] kcov: kcov_start: t = ffff88801bf71e00, size = 524288, area = ffffc9001cbaa000 [ 745.137633][ T95] sd 0:0:1:0: cmd ffff888028f517a0 CDB: 0x2a [ 745.146363][ T128] Added buffer head 0 to ffff888019e54a00 [ 745.149418][ T95] Added buffer head 131 to ffff888024e09c00 [ 745.155815][ C0] virtqueue callback for ffff888019e54a00 (ffffffff84767210) [ 745.161465][ T95] sd 0:0:1:0: cmd ffff888028f51b60 CDB: 0x2a [ 745.167322][ C0] virtqueue interrupt with no work for ffff888019e54800 [ 745.167340][ C0] virtqueue interrupt with no work for ffff888019e54600 [ 745.174697][ T95] Added buffer head 217 to ffff888024e09c00 [ 745.200436][ T3603] Added buffer head 17 to ffff888024e09c00 [ 745.200499][ T95] sd 0:0:1:0: cmd ffff888028f51f20 CDB: 0x2a [ 745.206281][ C0] wireguard: wg2: Handshake for peer 36 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 7) [ 745.212237][ T95] Added buffer head 187 to ffff888024e09c00 [ 745.226773][ T52] net hsr0: siw: event 4 [ 745.229736][ T95] sd 0:0:1:0: cmd ffff888028f522e0 CDB: 0x2a [ 745.239962][ T95] Added buffer head 37 to ffff888024e09c00 [ 745.241863][ T52] team0: bond_netdev_event received NETDEV_CHANGE [ 745.245828][ T95] sd 0:0:1:0: cmd ffff888028f526a0 CDB: 0x2a [ 745.257020][ T4495] Added buffer head 0 to ffff888019e54a00 [ 745.258350][ T95] Added buffer head 27 to ffff888024e09c00 [ 745.264254][ T4493] nf_conntrack: normal packet for ffff88801e728180 [ 745.269797][ T95] sd 0:0:1:0: cmd ffff888028f52a60 CDB: 0x2a [ 745.282346][ T95] Added buffer head 6 to ffff888024e09c00 [ 745.288152][ T95] sd 0:0:1:0: cmd ffff888028f52e20 CDB: 0x2a [ 745.290129][ T4495] nf_conntrack: normal packet for ffff888076984d80 [ 745.294142][ T95] Added buffer head 36 to ffff888024e09c00 [ 745.306551][ T95] sd 0:0:1:0: cmd ffff888028f531e0 CDB: 0x2a [ 745.310732][ T52] net team0: siw: event 4 [ 745.312535][ T95] Added buffer head 238 to ffff888024e09c00 [ 745.312570][ T95] sd 0:0:1:0: cmd ffff888028f535a0 CDB: 0x2a [ 745.326628][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 745.328791][ C1] virtqueue callback for ffff888024e09c00 (ffffffff85445d80) [ 745.336712][ T52] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::a8aa:aaff:feaa:aa1a in wq:ffff888054188e58 [ 745.343321][ C1] sd 0:0:1:0: cmd ffff888028f51b60 response 0 status 0x0 sense_len 0 [ 745.362703][ C1] sd 0:0:1:0: cmd ffff888028f517a0 response 0 status 0x0 sense_len 0 [ 745.370812][ C1] sd 0:0:1:0: cmd ffff888028f52e20 response 0 status 0x0 sense_len 0 [ 745.375676][ T52] veth1_to_team: bond_netdev_event received NETDEV_CHANGE [ 745.379238][ C1] sd 0:0:1:0: cmd ffff888028f52a60 response 0 status 0x0 sense_len 0 [ 745.379263][ C1] sd 0:0:1:0: cmd ffff888028f522e0 response 0 status 0x0 sense_len 0 [ 745.402699][ C1] sd 0:0:1:0: cmd ffff888028f526a0 response 0 status 0x0 sense_len 0 [ 745.404951][ T52] net veth1_to_team: siw: event 4 [ 745.410777][ C1] sd 0:0:1:0: cmd ffff888028f531e0 response 0 status 0x0 sense_len 0 [ 745.410799][ C1] sd 0:0:1:0: cmd ffff888028f51f20 response 0 status 0x0 sense_len 0 [ 745.410816][ C1] sd 0:0:1:0: cmd ffff888028f8bca0 response 0 status 0x0 sense_len 0 [ 745.424252][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 745.431966][ C1] No more buffers in queue [ 745.432022][ T95] Added buffer head 17 to ffff888024e09c00 [ 745.432058][ T95] sd 0:0:1:0: cmd ffff888028f53960 CDB: 0x2a [ 745.432075][ T95] Added buffer head 186 to ffff888024e09c00 [ 745.432095][ T95] sd 0:0:1:0: cmd ffff888028f53d20 CDB: 0x2a [ 745.432110][ T95] Added buffer head 134 to ffff888024e09c00 [ 745.432129][ T95] sd 0:0:1:0: cmd ffff888028f540e0 CDB: 0x2a [ 745.432144][ T95] Added buffer head 35 to ffff888024e09c00 [ 745.432163][ T95] sd 0:0:1:0: cmd ffff888028f544a0 CDB: 0x2a [ 745.432178][ T95] Added buffer head 239 to ffff888024e09c00 [ 745.432198][ T95] sd 0:0:1:0: cmd ffff888028f54860 CDB: 0x2a [ 745.432213][ T95] Added buffer head 14 to ffff888024e09c00 [ 745.432232][ T95] sd 0:0:1:0: cmd ffff888028f54c20 CDB: 0x2a [ 745.432247][ T95] Added buffer head 150 to ffff888024e09c00 [ 745.432266][ T95] sd 0:0:1:0: cmd ffff888028f54fe0 CDB: 0x2a [ 745.432281][ T95] Added buffer head 8 to ffff888024e09c00 [ 745.432526][ C1] wireguard: wg2: Handshake for peer 35 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 13) [ 745.440381][ C1] virtqueue callback for ffff888024e09c00 (ffffffff85445d80) [ 745.440401][ C1] sd 0:0:1:0: cmd ffff888028f540e0 response 0 status 0x0 sense_len 0 [ 745.440423][ C1] sd 0:0:1:0: cmd ffff888028f53d20 response 0 status 0x0 sense_len 0 [ 745.440441][ C1] sd 0:0:1:0: cmd ffff888028f53960 response 0 status 0x0 sense_len 0 [ 745.440459][ C1] sd 0:0:1:0: cmd ffff888028f54860 response 0 status 0x0 sense_len 0 [ 745.440477][ C1] sd 0:0:1:0: cmd ffff888028f535a0 response 0 status 0x0 sense_len 0 [ 745.440495][ C1] sd 0:0:1:0: cmd ffff888028f544a0 response 0 status 0x0 sense_len 0 [ 745.440512][ C1] sd 0:0:1:0: cmd ffff888028f54c20 response 0 status 0x0 sense_len 0 [ 745.440528][ C1] sd 0:0:1:0: cmd ffff888028f54fe0 response 0 status 0x0 sense_len 0 [ 745.440543][ C1] No more buffers in queue [ 745.461140][ T52] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::a8aa:aaff:feaa:aa20 in wq:ffff888054188e58 [ 745.464976][ C1] wireguard: wg0: Handshake for peer 8 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 745.483577][ T52] team_slave_1: bond_netdev_event received NETDEV_CHANGE [ 745.489229][ C1] tcp_conntracks: [ 745.495070][ T4414] nf_conntrack: normal packet for ffff888076985080 [ 745.500710][ C1] syn=0 ack=1 fin=0 rst=0 old=2 new=2 [ 745.507419][ T9559] sd 0:0:1:0: cmd ffff888028f5fc60 CDB: 0x2a [ 745.513418][T15236] nci: nci_send_cmd: opcode 0x103, plen 3 [ 745.524526][ T54] sd 0:0:1:0: cmd ffff888026cef120 CDB: 0x35 [ 745.536408][T13810] nci: nci_cmd_work: cmd_cnt 0 [ 745.538249][ T4263] No more buffers in queue [ 745.543030][ T54] Added buffer head 8 to ffff888024e09c00 [ 745.554051][ T4263] eth0: xmit ffff8880320ceff0 42:01:0a:80:00:01 [ 745.569582][ C1] virtqueue callback for ffff888024e09c00 (ffffffff85445d80) [ 745.569616][ C1] sd 0:0:1:0: cmd ffff888026cef120 response 0 status 0x0 sense_len 0 [ 745.569640][ C1] No more buffers in queue [ 745.573540][ T9559] Added buffer head 8 to ffff888024e09c00 [ 745.577772][ T4263] Added buffer head 3 to ffff888144a63c00 [ 745.585768][ C1] virtqueue callback for ffff888144a63c00 (ffffffff858ab860) [ 745.585800][ C0] virtqueue callback for ffff888144a63200 (ffffffff858ab770) [ 745.593982][ C1] Sent skb ffff8880320ceff0 [ 745.604393][ C0] No more buffers in queue [ 745.609979][ C1] No more buffers in queue [ 745.618152][ C0] Receiving skb proto 0x0800 len 40 type 0 [ 745.626702][ T95] sd 0:0:1:0: cmd ffff888028f617a0 CDB: 0x2a [ 745.630612][ C0] No more buffers in queue [ 745.641879][ T95] Added buffer head 150 to ffff888024e09c00 [ 745.653334][ C0] tcp_conntracks: [ 745.665544][ C1] virtqueue callback for ffff888024e09c00 (ffffffff85445d80) [ 745.670539][ C0] syn=0 ack=0 fin=0 rst=1 old=8 new=8 [ 745.675857][ C1] sd 0:0:1:0: cmd ffff888028f617a0 response 0 status 0x0 sense_len 0 [ 745.706440][ T52] team_slave_1: bond_netdev_event received NETDEV_CHANGELOWERSTATE [ 745.708388][ C1] sd 0:0:1:0: cmd ffff888028f5fc60 response 0 status 0x0 sense_len 0 [ 745.714786][ T52] net team_slave_1: siw: event 27 [ 745.722207][ C1] No more buffers in queue [ 745.730690][ T9559] sd 0:0:1:0: cmd ffff888028f60120 CDB: 0x2a [ 745.776648][ T52] net team_slave_1: siw: event 4 [ 745.784048][ T9559] Added buffer head 8 to ffff888024e09c00 [ 745.804393][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 745.816462][ T9559] sd 0:0:1:0: cmd ffff888028f604e0 CDB: 0x2a [ 745.838439][ T52] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::4827:b8ff:fe92:e7f1 in wq:ffff888054188e58 [ 745.838937][ T52] veth0_to_hsr: bond_netdev_event received NETDEV_CHANGE [ 745.863808][ T9559] Added buffer head 150 to ffff888024e09c00 [ 745.869523][ T4263] nf_conntrack: normal packet for ffff888076984480 [ 745.885439][ T9559] sd 0:0:1:0: cmd ffff888028f608a0 CDB: 0x2a [ 745.896471][ C0] tcp_conntracks: [ 745.902762][ T9559] Added buffer head 239 to ffff888024e09c00 [ 745.903112][ C0] syn=0 ack=1 fin=0 rst=0 old=2 new=2 [ 745.909770][ T9559] sd 0:0:1:0: cmd ffff888028f60c60 CDB: 0x2a [ 745.916028][ C0] wireguard: wg0: Handshake for peer 32 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 745.921266][ T9559] Added buffer head 17 to ffff888024e09c00 [ 745.925397][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::a8aa:aaff:feaa:aa1a for cmd:0 at entry:ffff888029f7ee00 [ 745.931233][ T4414] nf_conntrack: normal packet for ffff88807c745380 [ 745.936749][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::a8aa:aaff:feaa:aa20 for cmd:0 at entry:ffff888047f86c00 [ 745.950630][ T9559] sd 0:0:1:0: cmd ffff888028f61020 CDB: 0x2a [ 745.954085][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::4827:b8ff:fe92:e7f1 for cmd:0 at entry:ffff888056e29000 [ 745.977845][ T52] net veth0_to_hsr: siw: event 4 [ 745.990024][ C0] wireguard: wg1: Handshake for peer 33 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 19) [ 746.006154][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 746.015386][T15240] kobject: 'loop5' (ffff888148db6e48): kobject_uevent_env [ 746.016055][T15241] sock ffff888074984e00 [ 746.027414][ T4263] tcp_conntracks: [ 746.027429][ T4263] syn=0 ack=1 fin=0 rst=0 old=8 new=8 [ 746.027515][ T4263] No more buffers in queue [ 746.035400][T15241] chan ffff888141ef2000 [ 746.042429][ T4263] eth0: xmit ffff8880475e7140 42:01:0a:80:00:01 [ 746.046936][T15241] sk ffff888141ef6000 [ 746.050300][ T4263] Added buffer head 11 to ffff888144a63800 [ 746.055780][ C0] virtqueue callback for ffff888144a63200 (ffffffff858ab770) [ 746.055806][ C0] virtqueue callback for ffff888144a63800 (ffffffff858ab860) [ 746.056316][ T4414] nf_conntrack: normal packet for ffff88807c745200 [ 746.080927][T15240] kobject: 'loop5' (ffff888148db6e48): kobject_uevent_env: uevent_suppress caused the event to drop! [ 746.087998][T15241] sk ffff888141ef6000 [ 746.095526][T15240] loop5: detected capacity change from 0 to 8192 [ 746.101765][T15241] 00:00:00:00:00:00 -> 10:aa:aa:aa:aa:aa (type 0) psm 0x0000 mode 0x00 [ 746.113014][ T4263] nf_conntrack: normal packet for ffff888076984480 [ 746.116669][T15241] 00:00:00:00:00:00 -> 10:aa:aa:aa:aa:aa [ 746.122952][ T4263] tcp_conntracks: [ 746.131202][T15241] hci4 orig refcnt 12 [ 746.137690][ T4263] syn=0 ack=1 fin=0 rst=0 old=8 new=8 [ 746.141703][T15250] kcov: kcov_start: t = ffff88802bea9e00, size = 524288, area = ffffc9001d9ae000 [ 746.143428][T15241] hcon ffff8880632e6000 orig refcnt 0 [ 746.147172][T15250] sk ffff888141ef6000 [ 746.149329][ T4263] Sent skb ffff8880475e7140 [ 746.151414][T15241] conn ffff88805f873000, psm 0x00, dcid 0x0000 [ 746.151433][T15241] chan ffff888141ef2000 orig refcnt 1 [ 746.156824][ C0] virtqueue callback for ffff888019e54a00 (ffffffff84767210) [ 746.165902][T15241] hcon ffff8880632e6000 orig refcnt 1 [ 746.171295][ C0] virtqueue interrupt with no work for ffff888019e54800 [ 746.175251][T15241] hcon ffff8880632e6000 orig refcnt 2 [ 746.179751][ C0] virtqueue interrupt with no work for ffff888019e54600 [ 746.179831][ T4263] No more buffers in queue [ 746.185937][T15241] chan ffff888141ef2000 BT_OPEN -> BT_CONNECT [ 746.191311][ T4263] eth0: xmit ffff88807585eb40 42:01:0a:80:00:01 [ 746.191335][ T4263] Added buffer head 11 to ffff888144a63800 [ 746.198695][ C0] virtqueue callback for ffff888144a63200 (ffffffff858ab770) [ 746.198698][T15241] chan ffff888141ef2000 state BT_CONNECT timeout 4000 [ 746.198717][T15241] chan ffff888141ef2000 orig refcnt 2 [ 746.198718][ C0] virtqueue callback for ffff888144a63800 (ffffffff858ab860) [ 746.198736][T15241] chan ffff888141ef2000 orig refcnt 3 [ 746.204592][ T4493] Added buffer head 0 to ffff888019e54a00 [ 746.211127][T15241] hcon ffff8880632e6000 [ 746.217192][T15240] kobject: 'loop5' (ffff888148db6e48): kobject_uevent_env [ 746.223471][T15241] chan ffff888141ef2000 BT_CONNECT -> BT_CONNECTED [ 746.223491][T15241] hci4 orig refcnt 13 [ 746.223504][T15241] sk ffff888141ef6000 [ 746.228312][ T4263] nf_conntrack: normal packet for ffff888076984480 [ 746.253685][ T9559] Added buffer head 14 to ffff888024e09c00 [ 746.324791][ T52] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::a8aa:aaff:feaa:aa21 in wq:ffff888054188e58 [ 746.344895][T15220] sock ffff888074984e00, sk ffff888141ef6000 [ 746.347949][ T52] hsr_slave_0: bond_netdev_event received NETDEV_CHANGE [ 746.350952][T15220] parent ffff888141ef6000 state BT_CONNECTED [ 746.350970][T15220] parent ffff888141ef6000 [ 746.350983][T15220] sock ffff888074984e00, sk ffff888141ef6000, how 2 [ 746.350997][T15220] Handling sock shutdown [ 746.351004][T15220] chan ffff888141ef2000 orig refcnt 2 [ 746.351016][T15220] chan ffff888141ef2000 state BT_CONNECTED [ 746.351030][T15220] chan ffff888141ef2000 state BT_CONNECTED [ 746.351044][T15220] chan ffff888141ef2000, err 0, state BT_CONNECTED [ 746.351057][T15220] chan ffff888141ef2000 state BT_CONNECTED [ 746.351071][T15220] chan ffff888141ef2000 orig refcnt 3 [ 746.351083][T15220] hcon ffff8880632e6000 orig refcnt 1 [ 746.351103][T15220] chan ffff888141ef2000 orig refcnt 2 [ 746.351115][T15220] Sock shutdown complete err: 0 [ 746.351124][T15220] chan ffff888141ef2000 orig refcnt 1 [ 746.351137][T15220] sk ffff888141ef6000 state BT_CLOSED [ 746.351148][T15220] chan ffff888141ef2000 orig refcnt 2 [ 746.351161][T15220] sk ffff888141ef6000 [ 746.351213][T15220] chan ffff888141ef2000 orig refcnt 1 [ 746.368489][ T52] net hsr_slave_0: siw: event 4 [ 746.375049][T15220] chan ffff888141ef2000 [ 746.375437][T15250] kcov: kcov_task_exit: t = ffff88802bea9e00, kcov->t = ffff88802bea9e00 [ 746.379559][T15241] kcov: kcov_task_exit: t = ffff888026eebc00, kcov->t = ffff888026eebc00 [ 746.384969][ T4493] nf_conntrack: normal packet for ffff888076984900 [ 746.392509][T15221] kcov: kcov_task_exit: t = ffff88802b669e00, kcov->t = ffff88802b669e00 [ 746.398014][T15240] kobject: 'loop5' (ffff888148db6e48): kobject_uevent_env: uevent_suppress caused the event to drop! [ 746.403150][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 746.409597][ C0] Sent skb ffff88807585eb40 [ 746.416458][ C1] tcp_conntracks: [ 746.419572][ C0] No more buffers in queue [ 746.424875][ C1] syn=0 ack=1 fin=0 rst=0 old=2 new=2 [ 746.429754][ C0] Receiving skb proto 0x0800 len 40 type 0 [ 746.445609][ T52] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::9056:c7ff:fe10:1240 in wq:ffff888054188e58 [ 746.446074][ C0] Receiving skb proto 0x0800 len 40 type 0 [ 746.473925][ T52] vxcan1: bond_netdev_event received NETDEV_CHANGE [ 746.481255][ C0] No more buffers in queue [ 746.481292][ C0] tcp_conntracks: [ 746.481300][ C0] syn=0 ack=0 fin=0 rst=1 old=8 new=8 [ 746.481322][ C0] tcp_conntracks: [ 746.481329][ C0] syn=0 ack=0 fin=0 rst=1 old=8 new=8 [ 746.482451][ C0] No more buffers in queue [ 746.489505][T15240] kobject: 'loop5' (ffff888148db6e48): kobject_uevent_env [ 746.499704][ T9559] sd 0:0:1:0: cmd ffff888028f613e0 CDB: 0x2a [ 746.509250][ T52] net vxcan1: siw: event 4 [ 746.514876][ T4263] tcp_conntracks: [ 746.527908][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 746.532849][ T4263] syn=0 ack=1 fin=0 rst=0 old=8 new=8 [ 746.533347][ T4263] No more buffers in queue [ 746.538883][T15228] kcov: kcov_task_exit: t = ffff88802b6cda00, kcov->t = ffff88802b6cda00 [ 746.550016][ T4263] eth0: xmit ffff88802d573b40 42:01:0a:80:00:01 [ 746.569302][ T52] vxcan0: bond_netdev_event received NETDEV_CHANGE [ 746.570431][ T4263] Added buffer head 11 to ffff888144a63800 [ 746.570475][ C0] virtqueue callback for ffff888144a63800 (ffffffff858ab860) [ 746.575814][ T52] net vxcan0: siw: event 4 [ 746.579534][ C0] virtqueue callback for ffff888144a63200 (ffffffff858ab770) [ 746.580151][ T9559] Added buffer head 186 to ffff888024e09c00 [ 746.586975][T15240] kobject: 'loop5' (ffff888148db6e48): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 746.596546][ C1] virtqueue callback for ffff888024e09c00 (ffffffff85445d80) [ 746.596577][ C1] sd 0:0:1:0: cmd ffff888028f608a0 response 0 status 0x0 sense_len 0 [ 746.596603][ C1] sd 0:0:1:0: cmd ffff888028f60c60 response 0 status 0x0 sense_len 0 [ 746.596623][ C1] sd 0:0:1:0: cmd ffff888028f60120 response 0 status 0x0 sense_len 0 [ 746.596642][ C1] sd 0:0:1:0: cmd ffff888028f61020 response 0 status 0x0 sense_len 0 [ 746.596662][ C1] sd 0:0:1:0: cmd ffff888028f613e0 response 0 status 0x0 sense_len 0 [ 746.596680][ C1] sd 0:0:1:0: cmd ffff888028f604e0 response 0 status 0x0 sense_len 0 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 746.596698][ C1] No more buffers in queue [ 746.612405][ T4271] kcov: kcov_task_exit: t = ffff88807d1d8000, kcov->t = ffff88807d1d8000 [ 746.619145][ T4262] tcp_conntracks: [ 746.623956][ T6419] kcov: kcov_task_exit: t = ffff888050f89e00, kcov->t = ffff888050f89e00 [ 746.628265][ T4262] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 746.636833][T14058] kcov: kcov_task_exit: t = ffff88807c928000, kcov->t = ffff88807c928000 [ 746.646298][T14615] kcov: kcov_task_exit: t = ffff88801bfc9e00, kcov->t = ffff88801bfc9e00 [ 746.649543][T14856] kcov: kcov_task_exit: t = ffff88801dff0000, kcov->t = ffff88801dff0000 [ 746.663808][T15236] nci: __nci_request: wait_for_completion return -512 [ 746.667602][ C0] wireguard: wg0: Handshake for peer 7 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 746.686271][T15236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 746.691100][ C0] wireguard: wg1: Handshake for peer 34 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 12) [ 746.698524][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 746.706837][ C0] Sent skb ffff88802d573b40 [ 746.719561][T15227] kernfs runtime_status: removing [ 746.722925][ C0] No more buffers in queue [ 746.731029][ T4262] No more buffers in queue [ 746.739026][ C0] Receiving skb proto 0x0800 len 40 type 0 [ 746.747087][ T4262] eth0: xmit ffff8880320ce370 42:01:0a:80:00:01 [ 746.751482][ C0] No more buffers in queue [ 746.759885][ T4262] Added buffer head 3 to ffff888144a63c00 [ 746.763597][ C1] virtqueue callback for ffff888144a63c00 (ffffffff858ab860) [ 746.763615][ C1] virtqueue callback for ffff888144a63a00 (ffffffff858ab770) [ 746.763620][ C0] tcp_conntracks: [ 746.763632][ C0] syn=0 ack=0 fin=0 rst=1 old=8 new=8 [ 746.772071][ C1] Sent skb ffff8880320ce370 [ 746.778411][ T9470] kobject: 'batadv0' (ffff8880583e0688): kobject_cleanup, parent 0000000000000000 [ 746.785782][ C1] No more buffers in queue [ 746.794632][ C0] No more buffers in queue [ 746.803113][ C1] No more buffers in queue [ 746.811183][ T5468] nf_conntrack: normal packet for ffff88807c745b00 [ 746.820945][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 746.846362][ C0] No more buffers in queue [ 746.848647][ C1] No more buffers in queue [ 746.853108][ C0] No more buffers in queue [ 746.858241][ C1] nf_conntrack: normal packet for ffff888076984300 [ 746.862734][ C0] rdma_rxe: qp#1 state = GET_REQ [ 746.867025][ C1] tcp_conntracks: [ 746.872798][ C0] rdma_rxe: qp#1 state = CHK_PSN [ 746.879031][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 746.883422][ C0] rdma_rxe: qp#1 state = CHK_OP_SEQ [ 746.890591][T14879] veth1_to_hsr: bond_netdev_event received NETDEV_PRE_CHANGEADDR [ 746.896514][ C0] rdma_rxe: qp#1 state = CHK_OP_VALID [ 746.926446][T15236] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 181 [ 746.926668][ C0] rdma_rxe: qp#1 state = CHK_RESOURCE [ 746.936283][T14879] net veth1_to_hsr: siw: event 9 [ 746.939869][ C0] rdma_rxe: qp#1 state = CHK_LENGTH [ 746.946644][ T4284] nfc: nfc_urelease_event_work: portid 181 [ 746.952122][ C0] rdma_rxe: qp#1 state = CHK_RKEY [ 746.952134][ C0] rdma_rxe: qp#1 state = EXECUTE [ 746.952152][ C0] rdma_rxe: qp#1 state = COMPLETE [ 746.956568][ T9470] kobject: 'batadv0' (ffff8880583e0688): calling ktype release [ 746.960951][ C0] rdma_rxe: qp#1 state = CLEANUP [ 746.965356][ T9470] kobject: 'batadv0': free name [ 746.971865][ C0] rdma_rxe: qp#1 state = DONE [ 746.977124][T15236] kcov: kcov_task_exit: t = ffff8880263f9e00, kcov->t = ffff8880263f9e00 [ 746.980449][ C0] rdma_rxe: qp#1 state = GET_REQ [ 747.007549][T14879] veth1_to_hsr: bond_netdev_event received NETDEV_CHANGEADDR [ 747.009044][ C0] rdma_rxe: qp#1 state = EXIT [ 747.016860][T15227] kernfs control: removing [ 747.026802][ C0] MPTCP: subflow_req=ffff888030decb40 [ 747.046275][T14879] net veth1_to_hsr: siw: event 8 [ 747.048278][ C0] No more buffers in queue [ 747.053279][T14879] veth1_to_hsr: bond_netdev_event received NETDEV_PRE_UP [ 747.060749][ C0] rdma_rxe: qp#1 state = GET ACK [ 747.065831][T15227] kernfs runtime_suspended_time: removing [ 747.070313][ C0] rdma_rxe: qp#1 state = GET WQE [ 747.070328][ C0] rdma_rxe: qp#1 state = COMP WQE [ 747.075096][ T9470] kobject: 'caif0' (ffff88807933e688): kobject_cleanup, parent 0000000000000000 [ 747.083391][ C0] rdma_rxe: qp#1 state = GET WQE [ 747.106342][T15227] kernfs runtime_active_time: removing [ 747.110135][ C0] rdma_rxe: qp#1 state = EXIT [ 747.117013][ T4283] ffff888079d88000 name hci2 bus 0 [ 747.155699][ C0] virtqueue callback for ffff888019e54a00 (ffffffff84767210) [ 747.157291][ T4262] tcp_conntracks: [ 747.161146][ C0] virtqueue interrupt with no work for ffff888019e54800 [ 747.166595][ T4262] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 747.171205][ C0] virtqueue interrupt with no work for ffff888019e54600 [ 747.196281][T14879] net veth1_to_hsr: siw: event 14 [ 747.199720][ T4493] Added buffer head 0 to ffff888019e54a00 [ 747.216289][ T9470] kobject: 'caif0' (ffff88807933e688): calling ktype release [ 747.225431][ T9470] kobject: 'caif0': free name [ 747.228249][ C0] wireguard: wg1: Handshake for peer 9 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 19) [ 747.239593][T15240] send_to_group: group=ffff88814d2c3800 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff888029f7c790 data_type=1 dir=0000000000000000 cookie=0 [ 747.241716][ C0] wireguard: wg0: Handshake for peer 38 (100.1.1.0:20004) did not complete after 5 seconds, retrying (try 2) [ 747.257664][T14879] Insert table=255 ac141422/32 [ 747.268970][ T4493] cfg80211: Verifying active interfaces after reg change [ 747.281654][ T4414] net_ratelimit: 25 callbacks suppressed [ 747.281669][ T4414] wireguard: wg1: Sending handshake initiation to peer 9 ([::1]:20001/0%0) [ 747.286446][ T9470] kobject: 'nlmon0' (ffff88807374e688): kobject_cleanup, parent 0000000000000000 [ 747.296532][ T5468] wireguard: wg0: Sending handshake initiation to peer 38 (100.1.1.0:20004) [ 747.305100][T14879] Insert table=254 ac141400/24 [ 747.318805][ T4414] nf_conntrack: normal packet for ffff88807c744d80 [ 747.325490][ T4262] No more buffers in queue [ 747.326267][T15240] inotify_handle_inode_event: group=ffff88814d2c3800 mark=ffff88807cfe8640 mask=8 [ 747.329936][ T4262] eth0: xmit ffff8880320ce5f0 42:01:0a:80:00:01 [ 747.345344][ T4262] Added buffer head 11 to ffff888144a63800 [ 747.345501][ C1] virtqueue callback for ffff888144a63a00 (ffffffff858ab770) [ 747.351259][ C0] virtqueue callback for ffff888144a63800 (ffffffff858ab860) [ 747.358699][ C1] virtqueue callback for ffff888144a63a00 (ffffffff858ab770) [ 747.367188][ T4495] nf_conntrack: normal packet for ffff88801e728f00 [ 747.373651][T14879] Insert table=255 ac1414ff/32 [ 747.379897][ C1] virtqueue callback for ffff888144a63a00 (ffffffff858ab770) [ 747.380059][ T4283] hci2 ffff888079d88000 [ 747.396327][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::a8aa:aaff:feaa:aa21 for cmd:0 at entry:ffff88802f73af80 [ 747.396608][ T5468] wireguard: wg0: No route to 100.1.1.0:20004, error -101 [ 747.411073][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::9056:c7ff:fe10:1240 for cmd:0 at entry:ffff888055305a80 [ 747.426277][ T4283] hci2: [ 747.433359][ C1] wireguard: wg0: Sending keepalive packet to peer 39 ([::1]:20002/0%0) [ 747.436098][ T4283] hci2: err 0x13 [ 747.446403][ C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 747.456356][ C1] No more buffers in queue [ 747.457880][ C0] Sent skb ffff8880320ce5f0 [ 747.460773][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 747.465256][ C0] No more buffers in queue [ 747.471067][ C1] Receiving skb proto 0x0800 len 88 type 0 [ 747.477094][ T1275] No more buffers in queue [ 747.481269][ C1] Receiving skb proto 0x0800 len 112 type 0 [ 747.485623][ T1275] eth0: xmit ffff88802ebac640 ff:ff:ff:ff:ff:ff [ 747.491538][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 747.497746][ T1275] Added buffer head 11 to ffff888144a63800 [ 747.497764][ C0] virtqueue callback for ffff888144a63800 (ffffffff858ab860) [ 747.503531][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 747.516769][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.522496][ C1] No more buffers in queue [ 747.528756][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.533127][ C1] Added buffer head 197 to ffff888144a63a00 [ 747.545374][ C1] Added buffer head 196 to ffff888144a63a00 [ 747.547730][ T9470] kobject: 'nlmon0' (ffff88807374e688): calling ktype release [ 747.551332][ C1] Added buffer head 195 to ffff888144a63a00 [ 747.558940][ T4283] hci2: cancelling interleave scan [ 747.564607][ C1] Added buffer head 194 to ffff888144a63a00 [ 747.575818][ C1] Added buffer head 193 to ffff888144a63a00 [ 747.576005][T14879] veth1_to_hsr: bond_netdev_event received NETDEV_UP [ 747.581742][ C1] Added buffer head 192 to ffff888144a63a00 [ 747.594283][ C1] virtqueue callback for ffff888144a63a00 (ffffffff858ab770) [ 747.596278][ T9470] kobject: 'nlmon0': free name [ 747.601719][ C1] Added buffer head 191 to ffff888144a63a00 [ 747.606708][ T4283] hci2 state 0 -> 0 [ 747.612300][ C1] Added buffer head 190 to ffff888144a63a00 [ 747.616092][ T4283] All LE pending actions cleared [ 747.621995][ C1] Added buffer head 189 to ffff888144a63a00 [ 747.627242][T15240] fsnotify_insert_event: group=ffff88814d2c3800 event=ffff88802ee77e40 [ 747.632884][ C1] Added buffer head 188 to ffff888144a63a00 [ 747.641330][T14879] net veth1_to_hsr: siw: event 1 [ 747.647034][ C1] Added buffer head 187 to ffff888144a63a00 [ 747.652610][ C0] Sent skb ffff88802ebac640 [ 747.657892][ C1] Added buffer head 186 to ffff888144a63a00 [ 747.662396][ C0] No more buffers in queue [ 747.668336][ C1] Added buffer head 185 to ffff888144a63a00 [ 747.673189][ C0] tcp_conntracks: [ 747.678652][ C1] Added buffer head 184 to ffff888144a63a00 [ 747.678670][ C1] Added buffer head 183 to ffff888144a63a00 [ 747.682370][ C0] syn=0 ack=1 fin=0 rst=0 old=2 new=2 [ 747.688253][ C1] Added buffer head 182 to ffff888144a63a00 [ 747.705561][ C1] Added buffer head 181 to ffff888144a63a00 [ 747.711511][ C1] Added buffer head 180 to ffff888144a63a00 [ 747.713093][ T9470] kobject: 'dummy0' (ffff888025f98688): kobject_cleanup, parent 0000000000000000 [ 747.717440][ C1] Added buffer head 179 to ffff888144a63a00 [ 747.726929][T14879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 747.732439][ C1] Added buffer head 178 to ffff888144a63a00 [ 747.745741][ C1] Added buffer head 177 to ffff888144a63a00 [ 747.746255][ T4283] hdev hci2 [ 747.751672][ C1] Added buffer head 176 to ffff888144a63a00 [ 747.756260][ T9470] kobject: 'dummy0' (ffff888025f98688): calling ktype release [ 747.760618][ C1] Added buffer head 175 to ffff888144a63a00 [ 747.774159][ C1] Added buffer head 174 to ffff888144a63a00 [ 747.776513][T15240] kcov: kcov_task_exit: t = ffff88801bf75a00, kcov->t = ffff88801bf75a00 [ 747.780100][ C1] Added buffer head 173 to ffff888144a63a00 [ 747.788692][ T4283] hcon ffff888024b26000 reason 22 [ 747.794365][ C1] Added buffer head 172 to ffff888144a63a00 [ 747.803999][ C0] tcp_conntracks: [ 747.805275][ C1] Added buffer head 171 to ffff888144a63a00 [ 747.805292][ C1] Added buffer head 170 to ffff888144a63a00 [ 747.809014][ C0] syn=0 ack=1 fin=0 rst=0 old=2 new=2 [ 747.814892][ C1] Added buffer head 169 to ffff888144a63a00 [ 747.826284][ T9470] kobject: 'dummy0': free name [ 747.832049][ C1] Added buffer head 168 to ffff888144a63a00 [ 747.842735][ C1] Added buffer head 167 to ffff888144a63a00 [ 747.846259][ T4283] hcon ffff888024b26000 conn ffff888073e82000, err 103 [ 747.848668][ C1] Added buffer head 166 to ffff888144a63a00 [ 747.856382][ T4283] hci2 hcon ffff888024b26000 chan ffff8880263e6600 [ 747.861372][ C1] Added buffer head 165 to ffff888144a63a00 [ 747.868247][ C0] tcp_conntracks: [ 747.873746][ C1] nf_conntrack: normal packet for ffff888076984300 [ 747.883973][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 747.889370][ C1] tcp_conntracks: [ 747.889382][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 747.889418][ C0] No more buffers in queue [ 747.893113][ C1] nf_conntrack: normal packet for ffff888076984300 [ 747.898477][ C0] eth0: xmit ffff8880320ce5f0 42:01:0a:80:00:01 [ 747.902893][ C1] tcp_conntracks: [ 747.909385][ C0] Added buffer head 11 to ffff888144a63800 [ 747.915681][ C0] virtqueue callback for ffff888144a63800 (ffffffff858ab860) [ 747.915681][ C1] virtqueue callback for ffff888144a63a00 (ffffffff858ab770) [ 747.915704][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 747.936541][ T9470] kobject: 'team0' (ffff88805861c688): kobject_cleanup, parent 0000000000000000 [ 747.939977][ C1] nf_conntrack: normal packet for ffff888076984300 [ 747.945306][ T9470] kobject: 'team0' (ffff88805861c688): calling ktype release [ 747.954333][ C1] tcp_conntracks: [ 747.968294][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 747.977433][ C1] nf_conntrack: normal packet for ffff888076984300 [ 747.983948][ C1] tcp_conntracks: [ 747.983962][ C1] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 747.986280][ T9470] kobject: 'team0': free name [ 747.987727][ C1] nf_conntrack: normal packet for ffff888076984300 [ 748.004220][ C1] tcp_conntracks: [ 748.004236][ C1] syn=0 ack=1 fin=1 rst=0 old=4 new=6 [ 748.013561][ C1] tcp_conntracks: [ 748.013574][ C1] syn=0 ack=1 fin=0 rst=0 old=6 new=7 [ 748.022724][ C1] Sent skb ffff8880320ce5f0 [ 748.027264][ C1] No more buffers in queue [ 748.031661][ C1] eth0: xmit ffff8880287c7780 42:01:0a:80:00:01 [ 748.037947][ C1] virtqueue callback for ffff888144a63a00 (ffffffff858ab770) [ 748.045331][ C1] Added buffer head 11 to ffff888144a63800 [ 748.045406][ C0] virtqueue callback for ffff888144a63800 (ffffffff858ab860) [ 748.053480][ C1] wireguard: wg2: Handshake for peer 12 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 7) [ 748.070216][ T5468] wireguard: wg2: Sending handshake initiation to peer 12 (127.0.0.1:20002) [ 748.070400][ C1] No more buffers in queue [ 748.080325][ C0] Sent skb ffff8880287c7780 [ 748.083358][ C1] Receiving skb proto 0x0800 len 148 type 0 [ 748.087853][ C0] No more buffers in queue [ 748.093737][ C1] Receiving skb proto 0x0800 len 64 type 0 [ 748.098683][ C0] No more buffers in queue [ 748.103943][ C1] Receiving skb proto 0x0800 len 148 type 0 [ 748.114306][ C1] No more buffers in queue [ 748.114487][ T3640] get_one_event: group=ffff88814d2c3800 event=ffff88802ee77e40 [ 748.118755][ C1] nf_conntrack: normal packet for ffff888076984300 [ 748.126271][ T3640] fsnotify_remove_first_event: group=ffff88814d2c3800 event=ffff88802ee77e40 [ 748.132753][ C1] tcp_conntracks: [ 748.141535][ C1] syn=0 ack=1 fin=1 rst=0 old=7 new=7 [ 748.143813][ T9470] kobject: 'bond0' (ffff888058580688): kobject_cleanup, parent 0000000000000000 [ 748.145261][ C1] nf_conntrack: normal packet for ffff888076984300 [ 748.162254][ C0] virtqueue callback for ffff888019e54a00 (ffffffff84767210) [ 748.166175][ C1] tcp_conntracks: [ 748.173547][ C0] virtqueue interrupt with no work for ffff888019e54800 [ 748.173561][ C0] virtqueue interrupt with no work for ffff888019e54600 [ 748.177277][ C1] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 748.196535][ T9470] kobject: 'bond0' (ffff888058580688): calling ktype release [ 748.196582][ T9470] kobject: 'bond0': free name [ 748.203910][ C1] nf_conntrack: normal packet for ffff888076984300 [ 748.215127][ C1] tcp_conntracks: [ 748.215143][ C1] syn=0 ack=1 fin=1 rst=0 old=7 new=7 [ 748.216640][ T128] Added buffer head 0 to ffff888019e54a00 [ 748.219883][T14660] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::2a in wq:ffff888055748e58 [ 748.246364][ T9470] kobject: 'vcan0' (ffff888058540688): kobject_cleanup, parent 0000000000000000 [ 748.254319][ C1] virtqueue callback for ffff888144a63a00 (ffffffff858ab770) [ 748.255408][ T9470] kobject: 'vcan0' (ffff888058540688): calling ktype release [ 748.262936][T14660] IPv6: now = 4295011948, schedule = 4295023997, rounded schedule = 4295024097 => 4295023997 [ 748.271779][ T9084] nci: nci_cmd_work: cmd_cnt 1 [ 748.296195][ T4283] hci2 hcon ffff888024b26000 handle 201 [ 748.296322][ C0] wireguard: wg0: Sending keepalive packet to peer 40 ([::1]:20003/0%0) [ 748.310477][ T4283] hcon ffff888024b26000 [ 748.315453][ C1] No more buffers in queue [ 748.315602][ T3935] netdevsim netdevsim3 eth6: bond_netdev_event received NETDEV_PRE_UP [ 748.319924][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 748.328360][ T4491] nf_conntrack: normal packet for ffff88801e728180 [ 748.333934][ C1] No more buffers in queue [ 748.344989][ C1] No more buffers in queue [ 748.349472][ C1] eth0: xmit ffff888028e6f3c0 42:01:0a:80:00:01 [ 748.355740][ C1] Added buffer head 3 to ffff888144a63c00 [ 748.361512][ C1] virtqueue callback for ffff888144a63c00 (ffffffff858ab860) [ 748.366302][ T3640] inotify_read: group=ffff88814d2c3800 kevent=ffff88802ee77e40 [ 748.369471][ C1] Sent skb ffff888028e6f3c0 [ 748.376804][ T4283] hci2: conn ffff888024b26000 [ 748.380963][ C1] No more buffers in queue [ 748.385603][ T4283] device: 'hci2:201': device_unregister [ 748.397129][T15251] inotify_handle_inode_event: group=ffff88814d2c3800 mark=ffff88807cfe8640 mask=8000 [ 748.406698][T15227] kernfs autosuspend_delay_ms: removing [ 748.412315][T15227] kernfs power: removing [ 748.426287][T15227] kernfs device: removing [ 748.427886][ T3640] copy_event_to_user: group=ffff88814d2c3800 event=ffff88802ee77e40 [ 748.430695][T15227] kernfs subsystem: removing [ 748.443309][T15251] fsnotify_insert_event: group=ffff88814d2c3800 event=ffff8880256cdf40 [ 748.446289][ T3935] net eth6: siw: event 14 [ 748.451607][ T9084] nci: nci_cmd_work: NCI TX: MT=cmd, PBF=0, GID=0x1, OID=0x3, plen=3 [ 748.466365][ T4262] tcp_conntracks: [ 748.466382][ T4262] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 748.475548][ T4262] No more buffers in queue [ 748.480040][ T4262] eth0: xmit ffff88823bce2f00 42:01:0a:80:00:01 [ 748.486315][ T4262] Added buffer head 3 to ffff888144a63c00 [ 748.488172][ T3935] netdevsim netdevsim3 eth6: bond_netdev_event received NETDEV_UP [ 748.492033][ C1] virtqueue callback for ffff888144a63c00 (ffffffff858ab860) [ 748.517748][ T9470] kobject: 'vcan0': free name [ 748.520887][ T3640] get_one_event: group=ffff88814d2c3800 event=ffff8880256cdf40 [ 748.523114][ T9470] kobject: 'lo' (ffff88807d3d8688): kobject_cleanup, parent 0000000000000000 [ 748.530123][ T3640] fsnotify_remove_first_event: group=ffff88814d2c3800 event=ffff8880256cdf40 [ 748.538877][ T9084] nci: nci_send_frame: len 6 [ 748.541530][ C1] wireguard: wg2: Receiving keepalive packet from peer 43 ([::1]:20001/0%0) [ 748.561552][ C1] wireguard: wg1: Receiving keepalive packet from peer 41 ([::1]:20001/0%0) [ 748.566455][ T3935] bpq9 (uninitialized): bond_netdev_event received NETDEV_POST_INIT [ 748.570348][ C1] wireguard: wg1: Receiving keepalive packet from peer 3 ([::1]:20001/0%0) [ 748.598118][ T4283] kernfs runtime_status: removing [ 748.610740][ T4283] kernfs control: removing [ 748.615243][ T4283] kernfs runtime_suspended_time: removing [ 748.626435][ T4262] tcp_conntracks: [ 748.626456][ T4262] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 748.635672][ T4262] Sent skb ffff88823bce2f00 [ 748.640314][ T4262] No more buffers in queue [ 748.644742][ T4262] eth0: xmit ffff8880799dc280 42:01:0a:80:00:01 [ 748.651053][ T4262] Added buffer head 3 to ffff888144a63c00 [ 748.656796][ C1] virtqueue callback for ffff888144a63c00 (ffffffff858ab860) [ 748.657791][ T3935] (null): siw: event 17 [ 748.664206][ T9470] kobject: 'lo' (ffff88807d3d8688): calling ktype release [ 748.675715][ C1] Sent skb ffff8880799dc280 [ 748.680285][ C1] No more buffers in queue [ 748.685124][T15227] kernfs rfkill35: removing [ 748.689683][ C1] No more buffers in queue [ 748.698794][ T3640] inotify_read: group=ffff88814d2c3800 kevent=ffff8880256cdf40 [ 748.706525][T15227] kernfs uevent: removing [ 748.706547][T15227] kernfs name: removing [ 748.706567][T15227] kernfs type: removing [ 748.706585][T15227] kernfs index: removing [ 748.706604][T15227] kernfs persistent: removing [ 748.706622][T15227] kernfs state: removing [ 748.706640][T15227] kernfs soft: removing [ 748.706658][T15227] kernfs hard: removing [ 748.706675][T15227] kernfs hard_block_reasons: removing [ 748.706692][T15227] PM: Removing info for No Bus:rfkill35 [ 748.716262][ T4283] kernfs runtime_active_time: removing [ 748.727288][ T9470] kobject: 'lo': free name [ 748.736376][ T3935] device: 'bpq9': device_add [ 748.746565][T15227] kobject: 'rfkill35' (ffff888079ec5110): kobject_uevent_env [ 748.766276][ T3640] copy_event_to_user: group=ffff88814d2c3800 event=ffff8880256cdf40 [ 748.776263][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888055748e58 is addr:fe80::2a for cmd:0 at entry:ffff888144f75380 [ 748.796323][ T4283] kernfs autosuspend_delay_ms: removing [ 748.802889][ T4283] kernfs power: removing [ 748.825151][ T4260] tcp_conntracks: [ 748.825172][ T4260] syn=0 ack=1 fin=1 rst=0 old=7 new=7 [ 748.836315][ T3935] kobject: 'bpq9' (ffff888058808688): kobject_add_internal: parent: 'net', set: 'devices' [ 748.839014][T15227] kobject: 'rfkill35' (ffff888079ec5110): fill_kobj_path: path = '/devices/virtual/nfc/nfc2/rfkill35' [ 748.846446][ T4283] kernfs device: removing [ 748.866269][ T3640] inotify_read: group=ffff88814d2c3800 kevent=0000000000000000 [ 748.885830][T14879] ffff888072dec000 name hci4 bus 0 [ 748.886426][ T4260] No more buffers in queue [ 748.895428][ T4260] eth0: xmit ffff8880320ce870 42:01:0a:80:00:01 [ 748.901746][ T4260] Added buffer head 3 to ffff888144a63c00 [ 748.907516][ C1] virtqueue callback for ffff888144a63c00 (ffffffff858ab860) [ 748.907543][ C1] virtqueue callback for ffff888144a63a00 (ffffffff858ab770) [ 748.909755][ T4283] kernfs subsystem: removing [ 748.915142][ C1] Sent skb ffff8880320ce870 [ 748.915161][ C1] No more buffers in queue [ 748.915172][ C1] No more buffers in queue [ 748.915205][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 748.915224][ C1] No more buffers in queue [ 748.915253][ C1] nf_conntrack: normal packet for ffff888076984300 [ 748.915267][ C1] tcp_conntracks: [ 748.915273][ C1] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 748.931647][T14660] ffff88807ce9c000 name hci0 bus 0 [ 748.947147][T14879] hci4 ffff888072dec000 [ 748.989245][ T3935] net bpq9: No ACPI support [ 748.994676][ T3935] PM: Adding info for No Bus:bpq9 [ 748.996353][T15227] kernfs rfkill35: removing [ 749.004212][ T4283] kernfs hci2:201: removing [ 749.004225][T15227] kobject: 'rfkill35' (ffff888079ec5110): kobject_cleanup, parent 0000000000000000 [ 749.016261][ T3935] kobject: 'bpq9' (ffff888058808688): kobject_uevent_env [ 749.025195][T14660] hci0 ffff88807ce9c000 [ 749.026512][ T3935] kobject: 'bpq9' (ffff888058808688): fill_kobj_path: path = '/devices/virtual/net/bpq9' [ 749.029949][T14660] hci0: [ 749.040339][ T4283] kernfs uevent: removing [ 749.044158][T14660] hci0: err 0x13 [ 749.050088][T14660] hci0: cancelling interleave scan [ 749.055847][T15227] kobject: 'rfkill35' (ffff888079ec5110): calling ktype release [ 749.056268][ T4283] PM: Removing info for No Bus:hci2:201 [ 749.066899][T14660] hci0 state 0 -> 0 [ 749.073209][T14660] channel 3 len 10 [ 749.077675][ T3935] kobject: 'queues' (ffff88823bcdafb8): kobject_add_internal: parent: 'bpq9', set: '' [ 749.087865][T14879] hci4: [ 749.090736][T14879] hci4: err 0x13 [ 749.090766][T15227] kobject: 'rfkill35': free name [ 749.094268][T14879] hci4: cancelling interleave scan [ 749.105302][T14660] All LE pending actions cleared [ 749.110408][T14660] hdev hci0 [ 749.113526][T14660] hcon ffff888053ac2000 reason 22 [ 749.116277][ T4283] kobject: 'hci2:201' (ffff888024b26618): kobject_uevent_env [ 749.121629][T15227] nci: nci_send_cmd: opcode 0x0, plen 1 [ 749.125914][ T4283] kobject: 'hci2:201' (ffff888024b26618): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/hci2:201' [ 749.131672][T14660] hcon ffff888053ac2000 conn ffff88802fbb5000, err 103 [ 749.143142][ T3935] kobject: 'queues' (ffff88823bcdafb8): kobject_uevent_env [ 749.143159][ T3935] kobject: 'queues' (ffff88823bcdafb8): kobject_uevent_env: filter function caused the event to drop! [ 749.143201][ T3935] kobject: 'rx-0' (ffff8880747e0550): kobject_add_internal: parent: 'queues', set: 'queues' [ 749.143259][ T3935] kobject: 'rx-0' (ffff8880747e0550): kobject_uevent_env [ 749.152499][T14004] nci: nci_cmd_work: cmd_cnt 1 [ 749.157335][ C0] virtqueue callback for ffff888019e54a00 (ffffffff84767210) [ 749.170103][T15227] nci: __nci_request: wait_for_completion return -512 [ 749.178366][ C0] virtqueue interrupt with no work for ffff888019e54800 [ 749.178387][ C0] virtqueue interrupt with no work for ffff888019e54600 [ 749.185418][T14879] hci4 state 0 -> 0 [ 749.190451][ T4491] Added buffer head 0 to ffff888019e54a00 [ 749.215927][T15227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 749.237776][T14004] nci: nci_cmd_work: NCI TX: MT=cmd, PBF=0, GID=0x0, OID=0x0, plen=1 [ 749.245874][T14004] nci: nci_send_frame: len 4 [ 749.247104][ T4283] kernfs hci2:201: removing [ 749.255004][T14660] hci0 hcon ffff888053ac2000 chan ffff8880478d9c00 [ 749.255194][ T4283] kobject: 'hci2:201' (ffff888024b26618): kobject_cleanup, parent 0000000000000000 [ 749.263459][T14879] All LE pending actions cleared [ 749.276197][T14660] hci0 hcon ffff888053ac2000 handle 201 [ 749.276453][ T3935] kobject: 'rx-0' (ffff8880747e0550): fill_kobj_path: path = '/devices/virtual/net/bpq9/queues/rx-0' [ 749.281867][T14660] hcon ffff888053ac2000 [ 749.306333][ T4283] kobject: 'hci2:201' (ffff888024b26618): calling ktype release [ 749.310352][T14879] hdev hci4 [ 749.314505][ T4283] kobject: 'hci2:201': free name [ 749.334130][T15227] kernfs runtime_status: removing [ 749.334417][ T3935] kobject: 'tx-0' (ffff88802ff66020): kobject_add_internal: parent: 'queues', set: 'queues' [ 749.341850][T14879] hcon ffff888061570000 reason 22 [ 749.351356][ T4283] hci2 orig refcnt 10 [ 749.354987][T15227] kernfs control: removing [ 749.365850][T14660] hci0: conn ffff888053ac2000 [ 749.370815][T15227] kernfs runtime_suspended_time: removing [ 749.376683][T14660] device: 'hci0:201': device_unregister [ 749.382425][T14879] hcon ffff888061570000 conn ffff88805f873800, err 103 [ 749.389653][T15227] kernfs runtime_active_time: removing [ 749.395163][T15227] kernfs autosuspend_delay_ms: removing [ 749.400863][T14879] hci4 hcon ffff888061570000 chan ffff888079820900 [ 749.407506][T14879] hci4 hcon ffff888061570000 handle 201 [ 749.407850][ T4283] hcon ffff88801ebd8000 reason 22 [ 749.413060][T14879] hcon ffff888061570000 [ 749.422823][ T4495] nf_conntrack: normal packet for ffff888076984900 [ 749.422855][T15227] kernfs power: removing [ 749.433821][T14660] kernfs runtime_status: removing [ 749.438938][T14660] kernfs control: removing [ 749.438964][ T4283] hcon ffff88801ebd8000 conn ffff888073e81800, err 103 [ 749.443368][T14660] kernfs runtime_suspended_time: removing [ 749.456006][T14879] hci4: conn ffff888061570000 [ 749.460744][T14879] device: 'hci4:201': device_unregister [ 749.468170][T14660] kernfs runtime_active_time: removing [ 749.473711][T15227] kernfs subsystem: removing [ 749.478721][T14879] kernfs runtime_status: removing [ 749.483773][T14879] kernfs control: removing [ 749.486288][ T4283] hci2 hcon ffff88801ebd8000 chan ffff8880263e6400 [ 749.488506][T15227] kernfs nfc2: removing [ 749.499039][T14660] kernfs autosuspend_delay_ms: removing [ 749.504656][T14879] kernfs runtime_suspended_time: removing [ 749.510663][T14879] kernfs runtime_active_time: removing [ 749.510900][ T4283] hci2 hcon ffff88801ebd8000 handle 200 [ 749.516142][T14879] kernfs autosuspend_delay_ms: removing [ 749.527969][T14879] kernfs power: removing [ 749.532273][T14660] kernfs power: removing [ 749.536759][T15227] kernfs uevent: removing [ 749.541117][T15227] PM: Removing info for No Bus:nfc2 [ 749.546619][T14660] kernfs device: removing [ 749.550570][ T4283] hcon ffff88801ebd8000 [ 749.550980][T14660] kernfs subsystem: removing [ 749.559957][ T4283] hci2: conn ffff88801ebd8000 [ 749.560732][T15227] kobject: 'nfc2' (ffff888065c9f018): kobject_uevent_env [ 749.564647][ T4283] device: 'hci2:200': device_unregister [ 749.571953][T14660] kernfs hci0:201: removing [ 749.582502][T15227] kobject: 'nfc2' (ffff888065c9f018): fill_kobj_path: path = '/devices/virtual/nfc/nfc2' [ 749.592703][T14660] kernfs uevent: removing [ 749.597253][T14879] kernfs device: removing [ 749.601659][T14879] kernfs subsystem: removing [ 749.606822][T14879] kernfs hci4:201: removing [ 749.611376][T14879] kernfs uevent: removing [ 749.616258][T15227] kernfs nfc2: removing [ 749.620476][T14660] PM: Removing info for No Bus:hci0:201 [ 749.620506][ T4283] kernfs runtime_status: removing [ 749.626019][T14660] kobject: 'hci0:201' (ffff888053ac2618): kobject_uevent_env [ 749.639152][ T3935] kobject: 'tx-0' (ffff88802ff66020): kobject_uevent_env [ 749.639511][T15227] kobject: 'nfc2' (ffff888065c9f018): kobject_cleanup, parent 0000000000000000 [ 749.647991][ T4283] kernfs control: removing [ 749.656321][T14660] kobject: 'hci0:201' (ffff888053ac2618): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/hci0:201' [ 749.671712][T15227] kobject: 'nfc2' (ffff888065c9f018): calling ktype release [ 749.677920][ T3935] kobject: 'tx-0' (ffff88802ff66020): fill_kobj_path: path = '/devices/virtual/net/bpq9/queues/tx-0' [ 749.679306][T15227] nfc: nfc_release: dev_name=nfc2 [ 749.691689][ T4283] kernfs runtime_suspended_time: removing [ 749.700897][ T3935] bpq9: Dropping NETIF_F_GSO since no SG feature. [ 749.701253][T15227] kobject: 'nfc2': free name [ 749.716278][ T3935] bpq9: Features changed: 0x0000000000005800 -> 0x0000000000005000 [ 749.724658][ T3935] bpq9: bond_netdev_event received NETDEV_REGISTER [ 749.732110][T14660] kernfs hci0:201: removing [ 749.737733][ T4283] kernfs runtime_active_time: removing [ 749.743284][T14879] PM: Removing info for No Bus:hci4:201 [ 749.749120][T14660] kobject: 'hci0:201' (ffff888053ac2618): kobject_cleanup, parent 0000000000000000 [ 749.757944][T14879] kobject: 'hci4:201' (ffff888061570618): kobject_uevent_env [ 749.765944][ T3935] net bpq9: siw: event 5 [ 749.766568][ T4283] kernfs autosuspend_delay_ms: removing [ 749.775589][ T3935] lapb9 (uninitialized): bond_netdev_event received NETDEV_POST_INIT [ 749.776176][ T4283] kernfs power: removing [ 749.796297][T14660] kobject: 'hci0:201' (ffff888053ac2618): calling ktype release [ 749.798085][T14879] kobject: 'hci4:201' (ffff888061570618): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/hci4:201' [ 749.803976][T14660] kobject: 'hci0:201': free name [ 749.820475][ T3935] (null): siw: event 17 [ 749.820651][ T3935] device: 'lapb9': device_add [ 749.836323][ T4283] kernfs device: removing [ 749.840728][ T4283] kernfs subsystem: removing [ 749.845358][ T4283] kernfs hci2:200: removing [ 749.846298][ T3935] kobject: 'lapb9' (ffff88805880a688): kobject_add_internal: parent: 'net', set: 'devices' [ 749.859916][ T4283] kernfs uevent: removing [ 749.859940][ T4283] PM: Removing info for No Bus:hci2:200 [ 749.859960][ T4283] kobject: 'hci2:200' (ffff88801ebd8618): kobject_uevent_env [ 749.859995][ T4283] kobject: 'hci2:200' (ffff88801ebd8618): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/hci2:200' [ 749.867082][T14879] kernfs hci4:201: removing [ 749.870294][T14660] hci0 orig refcnt 10 [ 749.886264][T14879] kobject: 'hci4:201' (ffff888061570618): kobject_cleanup, parent 0000000000000000 [ 749.906437][ T4283] kernfs hci2:200: removing [ 749.911174][ T4283] kobject: 'hci2:200' (ffff88801ebd8618): kobject_cleanup, parent 0000000000000000 [ 749.911182][ T3935] net lapb9: No ACPI support [ 749.911194][ T4283] kobject: 'hci2:200' (ffff88801ebd8618): calling ktype release [ 749.935491][ T3935] PM: Adding info for No Bus:lapb9 [ 749.936298][T14660] hcon ffff888078148000 reason 22 [ 749.946279][T14660] hcon ffff888078148000 conn ffff88802fbb1000, err 103 [ 749.953173][T14660] hci0 hcon ffff888078148000 chan ffff8880478d9300 [ 749.959873][ T3935] kobject: 'lapb9' (ffff88805880a688): kobject_uevent_env [ 749.968892][T14879] kobject: 'hci4:201' (ffff888061570618): calling ktype release [ 749.976584][ T4283] kobject: 'hci2:200': free name [ 749.976607][ T4283] hci2 orig refcnt 7 [ 749.985451][ T4283] hdev hci2 event 4 [ 749.986288][ T3935] kobject: 'lapb9' (ffff88805880a688): fill_kobj_path: path = '/devices/virtual/net/lapb9' [ 749.996322][ T4283] hdev 0000000000000000 len 8 [ 750.006303][T14879] kobject: 'hci4:201': free name [ 750.006628][T14660] hci0 hcon ffff888078148000 handle 200 [ 750.011259][T14879] hci4 orig refcnt 10 [ 750.026341][ T4283] hci2: Cleanup of MSFT extension [ 750.031596][ T4283] hdev hci2 event 8 [ 750.035472][T14660] hcon ffff888078148000 [ 750.038448][ T3935] kobject: 'queues' (ffff88804032a250): kobject_add_internal: parent: 'lapb9', set: '' [ 750.049922][T14660] hci0: conn ffff888078148000 [ 750.050209][T14879] hcon ffff8880632e6000 reason 22 [ 750.054611][T14660] device: 'hci0:200': device_unregister [ 750.066370][T14879] hcon ffff8880632e6000 conn ffff88805f873000, err 103 [ 750.067532][ T4283] hci2 orig refcnt 6 [ 750.073266][T14879] hci4 hcon ffff8880632e6000 chan ffff888079820400 [ 750.078904][T15227] ffff888070fe4000 name hci6 bus 0 [ 750.089056][T14660] kernfs runtime_status: removing [ 750.094127][T14660] kernfs control: removing [ 750.098690][ T4283] channel 3 len 6 [ 750.102385][ T4283] channel 3 len 8 [ 750.106058][ T4283] hdev hci2 event 2 [ 750.112378][T14879] hci4 hcon ffff8880632e6000 handle 200 [ 750.116651][T14660] kernfs runtime_suspended_time: removing [ 750.123754][T15227] hci6 ffff888070fe4000 [ 750.125291][T15239] kcov: kcov_task_exit: t = ffff88801bf71e00, kcov->t = ffff88801bf71e00 [ 750.136367][T15227] hci6: [ 750.137540][ T3935] kobject: 'queues' (ffff88804032a250): kobject_uevent_env [ 750.139590][T15227] hci6: err 0x13 [ 750.149109][T14879] hcon ffff8880632e6000 [ 750.150601][ T4283] hdev 0000000000000000 len 8 [ 750.154714][ T3935] kobject: 'queues' (ffff88804032a250): kobject_uevent_env: filter function caused the event to drop! [ 750.159377][ C0] virtqueue callback for ffff888019e54a00 (ffffffff84767210) [ 750.159426][T14660] kernfs runtime_active_time: removing [ 750.159425][ C0] virtqueue interrupt with no work for ffff888019e54800 [ 750.159439][ C0] virtqueue interrupt with no work for ffff888019e54600 [ 750.159460][T14660] kernfs autosuspend_delay_ms: removing [ 750.159490][T14660] kernfs power: removing [ 750.170994][ T4495] Added buffer head 0 to ffff888019e54a00 [ 750.179583][T15227] hci6: cancelling interleave scan [ 750.183580][T14879] hci4: conn ffff8880632e6000 [ 750.190673][T15227] hci6 state 0 -> 0 [ 750.206362][T14879] device: 'hci4:200': device_unregister [ 750.221782][ T4283] kernfs runtime_status: removing [ 750.237077][ T3935] kobject: 'rx-0' (ffff8880282f9e50): kobject_add_internal: parent: 'queues', set: 'queues' [ 750.247758][T14660] kernfs device: removing [ 750.247792][T14660] kernfs subsystem: removing [ 750.247805][T14660] kernfs hci0:200: removing [ 750.247837][T14660] kernfs uevent: removing [ 750.247850][T14660] PM: Removing info for No Bus:hci0:200 [ 750.247869][T14660] kobject: 'hci0:200' (ffff888078148618): kobject_uevent_env [ 750.247906][T14660] kobject: 'hci0:200' (ffff888078148618): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/hci0:200' [ 750.256356][ T3935] kobject: 'rx-0' (ffff8880282f9e50): kobject_uevent_env [ 750.259330][ T4283] kernfs control: removing [ 750.261340][ T3935] kobject: 'rx-0' (ffff8880282f9e50): fill_kobj_path: path = '/devices/virtual/net/lapb9/queues/rx-0' [ 750.265652][ T4283] kernfs runtime_suspended_time: removing [ 750.279901][ T3935] kobject: 'tx-0' (ffff88807cedb020): kobject_add_internal: parent: 'queues', set: 'queues' [ 750.301802][T15227] All LE pending actions cleared [ 750.337204][T14660] kernfs hci0:200: removing [ 750.341778][ T4283] kernfs runtime_active_time: removing [ 750.348020][T14660] kobject: 'hci0:200' (ffff888078148618): kobject_cleanup, parent 0000000000000000 [ 750.358991][ T4283] kernfs autosuspend_delay_ms: removing [ 750.364613][T14660] kobject: 'hci0:200' (ffff888078148618): calling ktype release [ 750.372551][ T4283] kernfs power: removing [ 750.379797][ T4283] kernfs device: removing [ 750.384185][ T4283] kernfs subsystem: removing [ 750.386248][ C0] wireguard: wg2: Handshake for peer 36 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2) [ 750.388833][T14660] kobject: 'hci0:200': free name [ 750.400413][ C0] wireguard: wg0: Handshake for peer 31 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 750.400460][ C0] wireguard: wg2: Handshake for peer 11 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 13) [ 750.416944][T15227] hdev hci6 [ 750.416961][T15227] hcon ffff88802aa7e000 reason 22 [ 750.446680][T14660] hci0 orig refcnt 7 [ 750.451402][T14660] hdev hci0 event 4 [ 750.451553][ T3935] kobject: 'tx-0' (ffff88807cedb020): kobject_uevent_env [ 750.455242][T14660] hdev 0000000000000000 len 8 [ 750.462594][T14879] kernfs runtime_status: removing [ 750.485141][T15227] hcon ffff88802aa7e000 conn ffff888055f9a000, err 103 [ 750.492216][ T3935] kobject: 'tx-0' (ffff88807cedb020): fill_kobj_path: path = '/devices/virtual/net/lapb9/queues/tx-0' [ 750.492306][ T3935] lapb9: Dropping NETIF_F_GSO since no SG feature. [ 750.510339][T14879] kernfs control: removing [ 750.514781][ T4283] kernfs rfkill7: removing [ 750.516485][ T3935] lapb9: Features changed: 0x0000000000004800 -> 0x0000000000004000 [ 750.526304][T14660] hci0: Cleanup of MSFT extension [ 750.527689][ T3935] lapb9: bond_netdev_event received NETDEV_REGISTER [ 750.532275][T14660] hdev hci0 event 8 [ 750.539120][ T3935] net lapb9: siw: event 5 [ 750.547803][T14879] kernfs runtime_suspended_time: removing [ 750.554050][T14879] kernfs runtime_active_time: removing [ 750.554210][T15227] hci6 hcon ffff88802aa7e000 chan ffff88802fcbaf00 [ 750.560214][ T3935] net eth6: siw: event 1 [ 750.570963][T14879] kernfs autosuspend_delay_ms: removing [ 750.577329][ T4283] kernfs uevent: removing [ 750.582464][T14879] kernfs power: removing [ 750.582627][T15239] ffff88807e6bc000 name hci5 bus 0 [ 750.587151][T14660] hci0 orig refcnt 6 [ 750.595986][T15227] hci6 hcon ffff88802aa7e000 handle 201 [ 750.599237][ C0] nf_conntrack: clean_from_lists(ffff88801e729800) [ 750.603594][ T52] veth1_to_hsr: bond_netdev_event received NETDEV_CHANGE [ 750.608062][ C0] nf_conntrack: nf_ct_destroy(ffff88801e729800) [ 750.608078][ C0] nf_conntrack: nf_ct_destroy: returning ct=ffff88801e729800 to slab [ 750.615239][T15227] hcon ffff88802aa7e000 [ 750.621497][ C0] nf_conntrack: new packet for ffff88807c745800 [ 750.621577][ C0] nf_conntrack: Confirming conntrack ffff88807c745800 [ 750.631249][ T52] net veth1_to_hsr: siw: event 4 [ 750.646294][T14660] channel 3 len 6 [ 750.647151][T15239] hci5 ffff88807e6bc000 [ 750.652309][T14660] channel 3 len 8 [ 750.655869][T15239] hci5: [ 750.660431][T14660] hdev hci0 event 2 [ 750.668532][T14879] kernfs device: removing [ 750.674936][T14879] kernfs subsystem: removing [ 750.676268][T14660] hdev 0000000000000000 len 8 [ 750.679637][T15239] hci5: err 0x13 [ 750.686520][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 750.696896][ T52] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::a8aa:aaff:feaa:aa22 in wq:ffff888054188e58 [ 750.698486][T15227] hci6: conn ffff88802aa7e000 [ 750.708894][ T52] hsr_slave_1: bond_netdev_event received NETDEV_CHANGE [ 750.712957][T14879] kernfs hci4:200: removing [ 750.724883][ T52] net hsr_slave_1: siw: event 4 [ 750.730193][T14879] kernfs uevent: removing [ 750.734620][T15239] hci5: cancelling interleave scan [ 750.734647][T14660] kernfs runtime_status: removing [ 750.741409][T15227] device: 'hci6:201': device_unregister [ 750.745232][T14660] kernfs control: removing [ 750.750695][T15239] hci5 state 0 -> 0 [ 750.755428][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 750.760990][T15239] All LE pending actions cleared [ 750.766992][ T4283] kernfs name: removing [ 750.775943][T14660] kernfs runtime_suspended_time: removing [ 750.784313][T15239] hdev hci5 [ 750.784644][ T52] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::c8df:8cff:fe17:ac42 in wq:ffff888054188e58 [ 750.787594][T15239] hcon ffff88804b0ce000 reason 22 [ 750.799320][ T4283] kernfs type: removing [ 750.805849][T15239] hcon ffff88804b0ce000 conn ffff888028d18000, err 103 [ 750.808843][ T4283] kernfs index: removing [ 750.822656][T15239] hci5 hcon ffff88804b0ce000 chan ffff88801b72b600 [ 750.826517][T15227] kernfs runtime_status: removing [ 750.834739][T14879] PM: Removing info for No Bus:hci4:200 [ 750.838335][T14660] kernfs runtime_active_time: removing [ 750.847226][ T4283] kernfs persistent: removing [ 750.852000][ T4283] kernfs state: removing [ 750.852122][T14879] kobject: 'hci4:200' (ffff8880632e6618): kobject_uevent_env [ 750.857298][T15227] kernfs control: removing [ 750.864261][ T9470] sctp: sctp_close: sk:ffff888028c90900, timeout:0 [ 750.875665][T15239] hci5 hcon ffff88804b0ce000 handle 201 [ 750.881480][T14660] kernfs autosuspend_delay_ms: removing [ 750.887581][ T4283] kernfs soft: removing [ 750.889153][ T9470] sctp: sctp_destroy_sock: sk:ffff888028c90900 [ 750.891790][ T4283] kernfs hard: removing [ 750.897995][T14879] kobject: 'hci4:200' (ffff8880632e6618): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/hci4:200' [ 750.903091][T15239] hcon ffff88804b0ce000 [ 750.919228][T15227] kernfs runtime_suspended_time: removing [ 750.920097][ T9470] sctp: sctp_close: sk:ffff888031769200, timeout:0 [ 750.931694][T15239] hci5: conn ffff88804b0ce000 [ 750.931951][T14660] kernfs power: removing [ 750.936808][T15239] device: 'hci5:201': device_unregister [ 750.944335][T15227] kernfs runtime_active_time: removing [ 750.952766][T15227] kernfs autosuspend_delay_ms: removing [ 750.956469][ T9470] sctp: sctp_destroy_sock: sk:ffff888031769200 [ 750.967064][ T4283] kernfs hard_block_reasons: removing [ 750.972536][T14879] kernfs hci4:200: removing [ 750.977562][T14879] kobject: 'hci4:200' (ffff8880632e6618): kobject_cleanup, parent 0000000000000000 [ 750.978579][T15227] kernfs power: removing [ 750.987084][ T4283] PM: Removing info for No Bus:rfkill7 [ 750.997892][T14660] kernfs device: removing [ 751.002291][T14660] kernfs subsystem: removing [ 751.007880][ T9470] ffff88807d6f9f00: free with kfree [ 751.013119][ T9470] ffff888028adc000: free with kfree [ 751.016539][T14879] kobject: 'hci4:200' (ffff8880632e6618): calling ktype release [ 751.018355][ C1] wireguard: wg0: Handshake for peer 8 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 751.026121][ T4283] kobject: 'rfkill7' (ffff888141ed6110): kobject_uevent_env [ 751.037378][ C0] wireguard: wg2: Handshake for peer 35 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 14) [ 751.037429][ C0] wireguard: wg1: Handshake for peer 10 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 15) [ 751.038177][T14004] nf_conntrack: normal packet for ffff888076985080 [ 751.045324][ T3603] sd 0:0:1:0: cmd ffff888028f61b60 CDB: 0x2a [ 751.069539][ T9559] nf_conntrack: normal packet for ffff88807c744f00 [ 751.075772][T14879] kobject: 'hci4:200': free name [ 751.094671][T14660] kernfs rfkill33: removing [ 751.099529][ C1] wireguard: wg0: Handshake for peer 32 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 751.106298][ C0] tcp_conntracks: [ 751.111293][ C0] syn=0 ack=1 fin=0 rst=0 old=2 new=2 [ 751.113019][ T9559] nf_conntrack: normal packet for ffff88807c745380 [ 751.117117][ T4283] kobject: 'rfkill7' (ffff888141ed6110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/rfkill7' [ 751.120733][ T9470] nf_conntrack: nf_ct_destroy(ffff888054784c00) [ 751.127556][ C0] tcp_conntracks: [ 751.140089][T15227] kernfs device: removing [ 751.144476][ C0] syn=0 ack=1 fin=0 rst=0 old=2 new=2 [ 751.148336][ T9470] nf_conntrack: nf_ct_destroy(ffff88801fec2800) [ 751.152700][T15239] kernfs runtime_status: removing [ 751.157916][ C0] virtqueue callback for ffff888019e54a00 (ffffffff84767210) [ 751.157963][ C0] virtqueue interrupt with no work for ffff888019e54800 [ 751.157974][ C0] virtqueue interrupt with no work for ffff888019e54600 [ 751.159755][ T3603] Added buffer head 150 to ffff888024e09c00 [ 751.164271][ T4276] Added buffer head 0 to ffff888019e54a00 [ 751.171311][ T9470] nf_conntrack: clean_from_lists(ffff88807c745c80) [ 751.176897][T14879] hci4 orig refcnt 7 [ 751.185650][ T9470] nf_conntrack: nf_ct_destroy(ffff88807c745c80) [ 751.190560][T15239] kernfs control: removing [ 751.190585][T15239] kernfs runtime_suspended_time: removing [ 751.196478][ C1] virtqueue callback for ffff888024e09c00 (ffffffff85445d80) [ 751.202565][T15239] kernfs runtime_active_time: removing [ 751.208679][ C1] sd 0:0:1:0: cmd ffff888028f61b60 response 0 status 0x0 sense_len 0 [ 751.208708][ C1] No more buffers in queue [ 751.212583][T14879] hdev hci4 event 4 [ 751.226566][ T95] sd 0:0:1:0: cmd ffff888026cef120 CDB: 0x35 [ 751.229671][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::a8aa:aaff:feaa:aa22 for cmd:0 at entry:ffff888055305b00 [ 751.236500][ T95] Added buffer head 150 to ffff888024e09c00 [ 751.241852][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888054188e58 is addr:fe80::c8df:8cff:fe17:ac42 for cmd:0 at entry:ffff88802f981d80 [ 751.252645][ C1] virtqueue callback for ffff888024e09c00 (ffffffff85445d80) [ 751.258235][ T9470] nf_conntrack: nf_ct_destroy: returning ct=ffff88807c745c80 to slab [ 751.264126][ C1] sd 0:0:1:0: cmd ffff888026cef120 response 0 status 0x0 sense_len 0 [ 751.278868][T14660] kernfs uevent: removing [ 751.284637][ C1] No more buffers in queue [ 751.299363][T14879] hdev 0000000000000000 len 8 [ 751.307241][ T95] sd 0:0:1:0: cmd ffff888028f553a0 CDB: 0x2a [ 751.315026][T15227] kernfs subsystem: removing [ 751.323429][ T95] Added buffer head 150 to ffff888024e09c00 [ 751.327334][T14879] hci4: Cleanup of MSFT extension [ 751.333049][ C1] virtqueue callback for ffff888024e09c00 (ffffffff85445d80) [ 751.342454][ T9470] nf_conntrack: clean_from_lists(ffff888076985380) [ 751.346683][ C1] sd 0:0:1:0: cmd ffff888028f553a0 response 0 status 0x0 sense_len 0 [ 751.346706][ C1] No more buffers in queue [ 751.352919][T14879] hdev hci4 event 8 [ 751.366450][ T9470] nf_conntrack: nf_ct_destroy(ffff888076985380) [ 751.376489][ T4283] kernfs rfkill7: removing [ 751.382208][ T9470] nf_conntrack: nf_ct_destroy: returning ct=ffff888076985380 to slab [ 751.384247][ T4493] nf_conntrack: normal packet for ffff88801e728180 [ 751.390198][ T9470] nf_conntrack: clean_from_lists(ffff888076985680) [ 751.398475][T15239] kernfs autosuspend_delay_ms: removing [ 751.399032][ T9470] nf_conntrack: nf_ct_destroy(ffff888076985680) [ 751.408907][ T4283] kobject: 'rfkill7' (ffff888141ed6110): kobject_cleanup, parent 0000000000000000 [ 751.413285][ T9470] nf_conntrack: nf_ct_destroy: returning ct=ffff888076985680 to slab [ 751.421581][T14660] kernfs name: removing [ 751.446780][ T9470] nf_conntrack: clean_from_lists(ffff888076985500) [ 751.460541][ T9470] nf_conntrack: nf_ct_destroy(ffff888076985500) [ 751.461888][ T4283] kobject: 'rfkill7' (ffff888141ed6110): calling ktype release [ 751.466841][ T9470] nf_conntrack: nf_ct_destroy: returning ct=ffff888076985500 to slab [ 751.467707][T14879] hci4 orig refcnt 6 [ 751.486930][ T4283] kobject: 'rfkill7': free name [ 751.487000][T15227] kernfs hci6:201: removing [ 751.487133][ T4283] kernfs runtime_status: removing [ 751.487157][ T4283] kernfs control: removing [ 751.498742][T14879] channel 3 len 6 [ 751.506526][ T9470] kernfs bonding_masters: removing [ 751.510397][ C1] nf_conntrack: nf_ct_destroy(ffff888053847c00) [ 751.514892][T15227] kernfs uevent: removing [ 751.522839][T14879] channel 3 len 8 [ 751.529407][T14879] hdev hci4 event 2 [ 751.533265][T14879] hdev 0000000000000000 len 8 [ 751.533470][T15239] kernfs power: removing [ 751.546389][T14660] kernfs type: removing [ 751.550641][ T4283] kernfs runtime_suspended_time: removing [ 751.557120][ T4283] kernfs runtime_active_time: removing [ 751.562629][ T4283] kernfs autosuspend_delay_ms: removing [ 751.568643][ T9470] kernfs bonding_masters: removing [ 751.574454][T15227] PM: Removing info for No Bus:hci6:201 [ 751.574457][T14879] kernfs runtime_status: removing [ 751.574479][T15227] kobject: 'hci6:201' (ffff88802aa7e618): kobject_uevent_env [ 751.580908][T14879] kernfs control: removing [ 751.587778][T15227] kobject: 'hci6:201' (ffff88802aa7e618): fill_kobj_path: path = '/devices/virtual/bluetooth/hci6/hci6:201' [ 751.608777][T14879] kernfs runtime_suspended_time: removing [ 751.615240][ T9470] kobject: 'nfs_client' (ffff88802f7c6a80): kobject_uevent_env [ 751.622877][T15239] kernfs device: removing [ 751.627529][T15227] kernfs hci6:201: removing [ 751.632055][T14660] kernfs index: removing [ 751.632055][T15227] kobject: 'hci6:201' (ffff88802aa7e618): kobject_cleanup, parent 0000000000000000 [ 751.636769][ T9470] kobject: 'nfs_client' (ffff88802f7c6a80): fill_kobj_path: path = '/fs/nfs/net/nfs_client' [ 751.647586][T15227] kobject: 'hci6:201' (ffff88802aa7e618): calling ktype release [ 751.663404][ C1] wireguard: wg1: Handshake for peer 33 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 20) [ 751.675940][T14879] kernfs runtime_active_time: removing [ 751.681780][T14004] nf_conntrack: normal packet for ffff88807c745200 [ 751.682502][ T9559] sd 0:0:1:0: cmd ffff888028f61f20 CDB: 0x2a [ 751.693622][T14879] kernfs autosuspend_delay_ms: removing [ 751.701894][T15239] kernfs subsystem: removing [ 751.701920][T15227] kobject: 'hci6:201': free name [ 751.710520][ T9559] Added buffer head 150 to ffff888024e09c00 [ 751.711797][T14879] kernfs power: removing [ 751.726893][ T9559] sd 0:0:1:0: cmd ffff888028f622e0 CDB: 0x2a [ 751.732918][ T9559] Added buffer head 47 to ffff888024e09c00 [ 751.737103][ T4283] kernfs power: removing [ 751.742963][T14660] kernfs persistent: removing [ 751.748327][T15227] hci6 orig refcnt 10 [ 751.752335][T15227] hcon ffff888032dec000 reason 22 [ 751.756534][ T9470] kernfs identifier: removing [ 751.757454][T15227] hcon ffff888032dec000 conn ffff888055f9f800, err 103 [ 751.763003][T15239] kernfs hci5:201: removing [ 751.770698][T15227] hci6 hcon ffff888032dec000 chan ffff8880468de300 [ 751.774691][T15239] kernfs uevent: removing [ 751.785032][ T9559] sd 0:0:1:0: cmd ffff888028f626a0 CDB: 0x2a [ 751.788444][ C1] virtqueue callback for ffff888024e09c00 (ffffffff85445d80) [ 751.796270][ T9559] Added buffer head 199 to ffff888024e09c00 [ 751.804283][ C1] sd 0:0:1:0: cmd ffff888028f61f20 response 0 status 0x0 sense_len 0 [ 751.804309][ T9559] sd 0:0:1:0: cmd ffff888028f62a60 CDB: 0x2a [ 751.812358][ C1] sd 0:0:1:0: cmd ffff888028f622e0 response 0 status 0x0 sense_len 0 [ 751.812375][ C1] No more buffers in queue [ 751.812704][ T4283] kernfs subsystem: removing [ 751.821340][ T9559] Added buffer head 47 to ffff888024e09c00 [ 751.842410][ T4283] kernfs hci2: removing [ 751.856314][T14879] kernfs device: removing [ 751.860985][ T9470] kernfs nfs_client: removing [ 751.863600][ T9559] sd 0:0:1:0: cmd ffff888028f62e20 CDB: 0x2a [ 751.865681][T14660] kernfs state: removing [ 751.872239][ T9559] Added buffer head 36 to ffff888024e09c00 [ 751.876540][ T9470] kobject: 'nfs_client' (ffff88802f7c6a80): kobject_cleanup, parent 0000000000000000 [ 751.883463][ T9559] sd 0:0:1:0: cmd ffff888028f631e0 CDB: 0x2a [ 751.892128][ T9470] kobject: 'nfs_client' (ffff88802f7c6a80): calling ktype release [ 751.902666][T15239] PM: Removing info for No Bus:hci5:201 [ 751.907174][T14660] kernfs soft: removing [ 751.915206][T14879] kernfs subsystem: removing [ 751.919157][T15239] kobject: 'hci5:201' (ffff88804b0ce618): kobject_uevent_env [ 751.924677][ T4283] kernfs uevent: removing [ 751.927309][ T9559] Added buffer head 25 to ffff888024e09c00 [ 751.931803][T14879] kernfs rfkill34: removing [ 751.942359][T15239] kobject: 'hci5:201' (ffff88804b0ce618): fill_kobj_path: path = '/devices/virtual/bluetooth/hci5/hci5:201' [ 751.945476][ T4283] PM: Removing info for No Bus:hci2 [ 751.953908][ T9470] kobject: 'nfs_client': free name [ 751.953957][ T9470] kobject: 'nfs_client' (ffff88801f69de00): kobject_uevent_env [ 751.959540][T14660] kernfs hard: removing [ 751.966001][T15227] hci6 hcon ffff888032dec000 handle 200 [ 751.971863][ C1] virtqueue callback for ffff888024e09c00 (ffffffff85445d80) [ 751.971885][ C1] sd 0:0:1:0: cmd ffff888028f62e20 response 0 status 0x0 sense_len 0 [ 751.971908][ C1] sd 0:0:1:0: cmd ffff888028f631e0 response 0 status 0x0 sense_len 0 [ 751.971922][ C1] No more buffers in queue [ 751.974155][T14879] kernfs uevent: removing [ 751.979161][ T9559] sd 0:0:1:0: cmd ffff888028f55760 CDB: 0x2a [ 751.982820][ T4283] kobject: 'hci2' (ffff888079d897f8): kobject_uevent_env [ 751.989128][ C1] virtqueue callback for ffff888024e09c00 (ffffffff85445d80) [ 751.997374][T15227] hcon ffff888032dec000 [ 752.005213][ C1] sd 0:0:1:0: cmd ffff888028f62a60 response 0 status 0x0 sense_len 0 [ 752.010837][T14879] kernfs name: removing [ 752.013912][ C1] sd 0:0:1:0: cmd ffff888028f626a0 response 0 status 0x0 sense_len 0 [ 752.020179][T14660] kernfs hard_block_reasons: removing [ 752.026858][ C1] No more buffers in queue [ 752.037975][ T9470] kobject: 'nfs_client' (ffff88801f69de00): fill_kobj_path: path = '/fs/nfs/net/nfs_client' [ 752.051491][ T4283] kobject: 'hci2' (ffff888079d897f8): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2' [ 752.070507][T14660] PM: Removing info for No Bus:rfkill33 [ 752.079331][ T9559] Added buffer head 199 to ffff888024e09c00 [ 752.091511][T15239] kernfs hci5:201: removing [ 752.107889][T15239] kobject: 'hci5:201' (ffff88804b0ce618): kobject_cleanup, parent 0000000000000000 [ 752.107895][T14879] kernfs type: removing [ 752.107913][T15239] kobject: 'hci5:201' (ffff88804b0ce618): calling ktype release [ 752.107952][T15239] kobject: 'hci5:201': free name [ 752.117551][ T9559] sd 0:0:1:0: cmd ffff888028f55b20 CDB: 0x2a [ 752.121753][T14660] kobject: 'rfkill33' (ffff888076e62110): kobject_uevent_env [ 752.136309][T14879] kernfs index: removing [ 752.146505][T15239] hci5 orig refcnt 10 [ 752.155371][ C0] virtqueue callback for ffff888019e54a00 (ffffffff84767210) [ 752.156036][T15239] hcon ffff88804b0ca000 reason 22 [ 752.163133][ C0] virtqueue interrupt with no work for ffff888019e54800 [ 752.163147][ C0] virtqueue interrupt with no work for ffff888019e54600 [ 752.163322][ T4276] Added buffer head 0 to ffff888019e54a00 [ 752.173605][T14660] kobject: 'rfkill33' (ffff888076e62110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/rfkill33' [ 752.176079][ T9559] Added buffer head 47 to ffff888024e09c00 [ 752.206145][T15239] hcon ffff88804b0ca000 conn ffff888028d19800, err 103 [ 752.213112][ T9470] kernfs identifier: removing [ 752.213288][ T9559] sd 0:0:1:0: cmd ffff888028f55ee0 CDB: 0x2a [ 752.217950][T15239] hci5 hcon ffff88804b0ca000 chan ffff88801b72b300 [ 752.227657][ T4283] kernfs hci2: removing [ 752.234570][T14879] kernfs persistent: removing [ 752.236310][ T9559] Added buffer head 150 to ffff888024e09c00 [ 752.244136][T14879] kernfs state: removing [ 752.250106][ T4283] hci2 orig refcnt 2 [ 752.250737][ T9559] sd 0:0:1:0: cmd ffff888028f562a0 CDB: 0x2a [ 752.256075][ T4283] kobject: 'hci2' (ffff888079d897f8): kobject_cleanup, parent 0000000000000000 [ 752.263314][ T9559] Added buffer head 14 to ffff888024e09c00 [ 752.274912][ T9470] kernfs nfs_client: removing [ 752.274911][ T4283] kobject: 'hci2' (ffff888079d897f8): calling ktype release [ 752.287940][ T9559] sd 0:0:1:0: cmd ffff888028f635a0 CDB: 0x2a [ 752.292085][T15227] hci6: conn ffff888032dec000 [ 752.293952][ C1] virtqueue callback for ffff888024e09c00 (ffffffff85445d80) [ 752.298946][ T4283] All LE connection parameters were removed [ 752.306018][ C1] sd 0:0:1:0: cmd ffff888028f55b20 response 0 status 0x0 sense_len 0 [ 752.311928][T15227] device: 'hci6:200': device_unregister [ 752.319932][ C1] sd 0:0:1:0: cmd ffff888028f562a0 response 0 status 0x0 sense_len 0 [ 752.319958][ C1] sd 0:0:1:0: cmd ffff888028f55ee0 response 0 status 0x0 sense_len 0 [ 752.319975][ C1] sd 0:0:1:0: cmd ffff888028f55760 response 0 status 0x0 sense_len 0 [ 752.319991][ C1] No more buffers in queue [ 752.337911][ T4283] hci2: Unregister MSFT extension [ 752.343067][ T4277] hcon ffff88804b0ca000 state BT_CLOSED [ 752.349771][ C0] wireguard: wg0: Handshake for peer 7 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 752.354182][ T4277] hcon ffff88804b0ca000 [ 752.359742][ T52] wireguard: wg2: Zeroing out all keys for peer 36 (127.0.0.1:20002), since we haven't received a new one in 540 seconds [ 752.365037][ T4283] kobject: 'hci2': free name [ 752.376548][T14004] wireguard: wg1: Zeroing out all keys for peer 34 (127.0.0.1:20003), since we haven't received a new one in 540 seconds [ 752.380598][ T9559] Added buffer head 199 to ffff888024e09c00 [ 752.393550][ T9084] wireguard: wg0: Zeroing out all keys for peer 32 ([::1]:20003/0%0), since we haven't received a new one in 540 seconds [ 752.398083][T15239] hci5 hcon ffff88804b0ca000 handle 200 [ 752.410294][ C1] virtqueue callback for ffff888024e09c00 (ffffffff85445d80) [ 752.410318][ C1] sd 0:0:1:0: cmd ffff888028f635a0 response 0 status 0x0 sense_len 0 [ 752.410341][ C1] No more buffers in queue [ 752.441860][ T52] net_ratelimit: 26 callbacks suppressed [ 752.441874][ T52] wireguard: wg2: Keypair 41 destroyed for peer 36 [ 752.450371][ T4414] wireguard: wg2: Zeroing out all keys for peer 35 ([::1]:20001/0%0), since we haven't received a new one in 540 seconds [ 752.454668][ T9559] wireguard: wg1: Zeroing out all keys for peer 33 ([::1]:20001/0%0), since we haven't received a new one in 540 seconds [ 752.460021][ C0] wireguard: wg0: Sending keepalive packet to peer 2 ([::1]:20003/0%0) [ 752.460339][T13810] wireguard: wg0: Zeroing out all keys for peer 31 ([::1]:20002/0%0), since we haven't received a new one in 540 seconds [ 752.466673][ T128] nf_conntrack: normal packet for ffff888076984900 [ 752.486333][ T33] wireguard: wg0: Sending handshake initiation to peer 7 ([::1]:20002/0%0) [ 752.512818][ T9559] wireguard: wg1: Keypair 38 destroyed for peer 33 [ 752.512853][ T9559] wireguard: wg1: Keypair 44 destroyed for peer 33 [ 752.526334][T15239] hcon ffff88804b0ca000 [ 752.528120][ C1] wireguard: wg2: Receiving keepalive packet from peer 5 ([::1]:20001/0%0) [ 752.534545][T14004] wireguard: wg1: Keypair 40 destroyed for peer 34 [ 752.541124][ T9084] wireguard: wg0: Keypair 39 destroyed for peer 32 [ 752.545906][ T9470] kobject: 'nfs_client' (ffff88801f69de00): kobject_cleanup, parent 0000000000000000 [ 752.553773][ T9084] wireguard: wg0: Keypair 45 destroyed for peer 32 [ 752.553811][ T4414] wireguard: wg2: Keypair 42 destroyed for peer 35 [ 752.560495][T14660] kernfs rfkill33: removing [ 752.594242][T15239] hci5: conn ffff88804b0ca000 [ 752.594433][ T9470] kobject: 'nfs_client' (ffff88801f69de00): calling ktype release [ 752.610473][ T9470] kobject: 'nfs_client': free name [ 752.611596][T15239] device: 'hci5:200': device_unregister [ 752.623223][T14660] kobject: 'rfkill33' (ffff888076e62110): kobject_cleanup, parent 0000000000000000 [ 752.632714][T14879] kernfs soft: removing [ 752.637319][T15227] kernfs runtime_status: removing [ 752.642392][T15227] kernfs control: removing [ 752.647154][ T4283] Deleting ac141400/24 dsfield=0x00 t=ffff88801ea948b0 [ 752.654049][ T4283] Deleting ac1414ff/32 dsfield=0x00 t=ffff88801ea948b0 [ 752.661558][T14879] kernfs hard: removing [ 752.665749][T15227] kernfs runtime_suspended_time: removing [ 752.668237][ T4283] Deleting ac1414aa/32 dsfield=0x00 t=ffff88801ea948b0 [ 752.671933][T14660] kobject: 'rfkill33' (ffff888076e62110): calling ktype release [ 752.686358][T14660] kobject: 'rfkill33': free name [ 752.688594][T14879] kernfs hard_block_reasons: removing [ 752.697174][ T4283] In tnode_resize ffff888058b33220 inflate_threshold=50 threshold=25 [ 752.705479][ T4283] In tnode_resize ffff888027d10620 inflate_threshold=50 threshold=25 [ 752.707080][T15239] kernfs runtime_status: removing [ 752.720176][ T4283] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:172.20.20.170 in wq:ffff88807cc40e58 [ 752.721443][T14879] PM: Removing info for No Bus:rfkill34 [ 752.731155][ T4283] syz_tun (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 752.739862][T15227] kernfs runtime_active_time: removing [ 752.744831][ T4283] bond0: (slave syz_tun): bond_slave_netdev_event called [ 752.757077][ T4283] syz_tun (unregistering): bond_netdev_event received NETDEV_CHANGELOWERSTATE [ 752.766053][ T4283] bond0: (slave syz_tun): bond_slave_netdev_event called [ 752.766832][T14879] kobject: 'rfkill34' (ffff888073f74110): kobject_uevent_env [ 752.776428][T15239] kernfs control: removing [ 752.785018][T14879] kobject: 'rfkill34' (ffff888073f74110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/rfkill34' [ 752.785064][T14660] kernfs runtime_status: removing [ 752.802165][ T4283] net syz_tun: siw: event 27 [ 752.805328][T15227] kernfs autosuspend_delay_ms: removing [ 752.812447][ T4283] kernfs state: removing [ 752.826407][T14879] kernfs rfkill34: removing [ 752.831095][T15227] kernfs power: removing [ 752.831103][T14879] kobject: 'rfkill34' (ffff888073f74110): kobject_cleanup, parent 0000000000000000 [ 752.835363][T15227] kernfs device: removing [ 752.849619][T14879] kobject: 'rfkill34' (ffff888073f74110): calling ktype release [ 752.861201][T14879] kobject: 'rfkill34': free name [ 752.866067][T14660] kernfs control: removing [ 752.870690][T15227] kernfs subsystem: removing [ 752.875286][T15239] kernfs runtime_suspended_time: removing [ 752.881188][ T4283] kernfs mii_status: removing [ 752.885923][ T4283] kernfs link_failure_count: removing [ 752.896291][T15227] kernfs hci6:200: removing [ 752.900905][ T4283] kernfs perm_hwaddr: removing [ 752.906586][T14660] kernfs runtime_suspended_time: removing [ 752.912458][T15239] kernfs runtime_active_time: removing [ 752.919065][T15239] kernfs autosuspend_delay_ms: removing [ 752.924686][T15239] kernfs power: removing [ 752.929147][T15227] kernfs uevent: removing [ 752.933492][T15239] kernfs device: removing [ 752.937841][ C0] wireguard: wg0: Handshake for peer 38 (100.1.1.0:20004) did not complete after 5 seconds, retrying (try 2) [ 752.937900][ C0] wireguard: wg1: Handshake for peer 9 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 20) [ 752.937942][ C0] wireguard: wg1: Handshake for peer 34 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 13) [ 752.946919][ T4414] nf_conntrack: normal packet for ffff88807c744d80 [ 752.980405][ T33] nf_conntrack: normal packet for ffff88807c745b00 [ 752.986322][ T4283] kernfs queue_id: removing [ 752.991471][ T4283] kernfs ad_aggregator_id: removing [ 752.997106][T14660] kernfs runtime_active_time: removing [ 753.002708][T14879] kernfs runtime_status: removing [ 753.016295][T15239] kernfs subsystem: removing [ 753.020958][T15239] kernfs hci5:200: removing [ 753.025508][ T4283] kernfs ad_actor_oper_port_state: removing [ 753.033078][T14660] kernfs autosuspend_delay_ms: removing [ 753.038780][T15227] PM: Removing info for No Bus:hci6:200 [ 753.044350][T15227] kobject: 'hci6:200' (ffff888032dec618): kobject_uevent_env [ 753.044397][T14660] kernfs power: removing [ 753.056045][T15227] kobject: 'hci6:200' (ffff888032dec618): fill_kobj_path: path = '/devices/virtual/bluetooth/hci6/hci6:200' [ 753.067638][T14879] kernfs control: removing [ 753.072068][T14660] kernfs subsystem: removing [ 753.078744][T15239] kernfs uevent: removing [ 753.083096][T14660] kernfs hci0: removing [ 753.087387][ T4283] kernfs ad_partner_oper_port_state: removing [ 753.093675][T14660] kernfs uevent: removing [ 753.099745][ T4283] syz_tun (unregistering): bond_netdev_event received NETDEV_PRECHANGEUPPER [ 753.108787][T14879] kernfs runtime_suspended_time: removing [ 753.108873][ T4283] syz_tun (unregistering): bond_slave_netdev_event called on NULL slave [ 753.114562][T15227] kernfs hci6:200: removing [ 753.124717][ T4283] net syz_tun: siw: event 26 [ 753.127705][T15239] PM: Removing info for No Bus:hci5:200 [ 753.132623][T14660] PM: Removing info for No Bus:hci0 [ 753.137921][T14879] kernfs runtime_active_time: removing [ 753.137951][T14879] kernfs autosuspend_delay_ms: removing [ 753.137977][T14879] kernfs power: removing [ 753.144749][T14660] kobject: 'hci0' (ffff88807ce9d7f8): kobject_uevent_env [ 753.148685][T15227] kobject: 'hci6:200' (ffff888032dec618): kobject_cleanup, parent 0000000000000000 [ 753.154542][ T4283] Remove adjacency: dev syz_tun adj_dev bond0 ref_nr 1 [ 753.158479][ C0] virtqueue callback for ffff888019e54a00 (ffffffff84767210) [ 753.158528][ C0] virtqueue interrupt with no work for ffff888019e54800 [ 753.158538][ C0] virtqueue interrupt with no work for ffff888019e54600 [ 753.158757][ T4493] Added buffer head 0 to ffff888019e54a00