last executing test programs: 6.08775559s ago: executing program 0 (id=225): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 6.019354972s ago: executing program 1 (id=227): mount(0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) timer_create(0x3, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) 5.768723573s ago: executing program 0 (id=228): bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$tun(r0, &(0x7f0000004340)=ANY=[], 0x76) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x2000000068ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x49, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x76) 5.767775013s ago: executing program 2 (id=229): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 5.630189016s ago: executing program 0 (id=230): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x4, 0xffff85e5, 'syz1\x00'}, 0x0, [0x400, 0xf73, 0x7ffc, 0x800005, 0xd, 0x100000000, 0x0, 0x45, 0x3, 0x7, 0x3, 0x8007f, 0x1, 0xffffffff, 0x8000000, 0x0, 0x1, 0xfffffffffffffffd, 0x2000000000000001, 0x1, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x8001, 0x40, 0x2, 0xff, 0x4, 0x4, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x992, 0x0, 0x0, 0x3, 0x20, 0xee4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x2000008, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x7, 0x80000000, 0x7, 0x0, 0x0, 0x80000001, 0x20000000000, 0x0, 0x0, 0x3, 0x5, 0x9, 0xb4f, 0xffffffff, 0x9, 0xfffffff8, 0x80000010, 0x0, 0xffffffd, 0xd87, 0x0, 0x0, 0x1, 0x80, 0x400002, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4b7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x20bb, 0x200000, 0x0, 0x7, 0x7, 0x7, 0x7ffffffd, 0x4, 0x0, 0x2, 0x1, 0x400003, 0x3, 0x0, 0xfffffffd, 0x7, 0x3, 0x6, 0x6, 0x0, 0x8, 0x4, 0x0, 0x88, 0xe1, 0x1, 0x8, 0xfffffffffffffffe, 0x0, 0x40000000, 0x10, 0x0, 0x0, 0x7ff]}) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) close(r1) close(r0) 5.4279124s ago: executing program 2 (id=232): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4410, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000002440)="$eJzs3c1rXOUaAPDnTPN109zbXLhwrauAoIHSiamxVXBRcSGChYKubcNkGmommZKZlCYEtIjgRlBxIeima6t159aPrf4B7l1IS9W0GHEhkTM5k06bmXSSZjIt+f3gJO97zpk873Pe8/FmzmEmgH1rJP2RizgcER8kEYey+UlE9NZKPREn19dbXVkupFMSa2uv/ZbU1rm9slyIhtekDmaVxyLiu3cjjuQ2x60sLs1MlkrF+aw+Vp29MFZZXDp6fnZyujhdnDs+PjFx7MSzJ47vXq5//Lg0dOPDl5/68uRf7/z/2vvfJ3EyhrJljXnslpEYybZJb7oJ7/JSvLXb4boq6XYD2JH00DywfpTH4SQt93S7SQBAh6Wj0DUAYJ9JtnP9H8iGDR1sDwDQafX3AW6vLBfqU/fejdh7N1+MiIH1/Ov3N9eX9GT37AZq90EHbyd33RlJImJ4F+KPRMRnX79xNZ2iQ/chAZp5+3JEnB0e2Xz+TzY9s7BdT7exzsg99Y34P/U+YHTgfr5Jxz/PNRv/5TbGP9Fk/NPf5NjdiZbH/4bc9V0I01I6/nuh4dm21Yb8M8MHstq/a2O+3uTc+VIxPbf9JyJGo7c/rY9vEWP01t+3Wi1rHP/9/tGbn6fx09931shd7+m/+zVTk9XJB8m50c3LEY/3NMs/2ej/pMX493SbMV55/r1PWy1L80/zrU+b8++stSsRTzbt/ztPtCVbPp84Vtsdxuo7RRNf/fzJYKv4jf2fTqsry2tJxNXdz7S5tP8Ht85/OGl8XrOy/Rg/XDn0batlTfIv1P8XWtd8/+9LXq+V+7J5lyar1fnxiL7k1c3zj915bb1eXz/Nf/SJ5sf/Vvt/Ojo522b+PTd+/WLn+XdWmv/Utvq//cJQRKSFa6szB1rFb6//J2ql0WxOO+e/dlv6INsOAAAAAAAAAAAAAAAAAAAAAAAAANqVi4ihSHL5jXIul8+vf4f3/2IwVypXqkfOlRfmpqL2XdnD0Zurf9TloYbPQx3PPg+/Xj92T/2ZiPhvRHzc/69aPV8ol6a6nTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZA62+P7/1C/93W4dANAxA91uAACw51z/AWD/cf0HgP3H9R8A9h/XfwDYf1z/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LDTp06l09qfK8uFtD51cXFhpnzx6FSxMpOfXSjkC+X5C/npcnm6VMwXyrP3+3ulcvnCRMwtXBqrFivVscri0pnZ8sJc9cz52cnp4pli755kBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbU1lcmpkslYrzCo9AoSfrtYelPTsq5OpJ7FXQvk5l8RBszM4VunhSAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiE/BMAAP//2yQXtw==") openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000300)=0x3ff, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x5f0}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {0x0, 0xe}, {0x1, 0xa}, {0x7, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0xf8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20010094}, 0xc050) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 5.375306279s ago: executing program 3 (id=233): fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1000002, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 5.24729435s ago: executing program 2 (id=234): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 5.18383898s ago: executing program 1 (id=235): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r5, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.736919574s ago: executing program 2 (id=236): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) unshare(0x24020400) mlock2(&(0x7f000017a000/0x1000)=nil, 0x1000, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) r3 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000088000/0x2000)=nil, 0x2000, 0x1000006, 0x9, 0x40) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4.627221443s ago: executing program 1 (id=237): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 4.315869665s ago: executing program 3 (id=238): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000340)={0x40002009}) close_range(r0, 0xffffffffffffffff, 0x0) 4.089714032s ago: executing program 1 (id=239): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) close(r1) write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='8\n', 0x2) 3.947387056s ago: executing program 0 (id=240): ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='secret\x00', &(0x7f0000000200)='AQB1234567890123456789012345678901234567890=\x00', 0x0) 3.868512489s ago: executing program 3 (id=241): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.343927676s ago: executing program 1 (id=242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.305515162s ago: executing program 2 (id=243): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x8410, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec01b3b820b1fdfffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f29405a620f375b81080001cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8"], 0xff, 0x2a0, &(0x7f00000001c0)="$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") setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000100)=0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x18dd, &(0x7f0000000040)={0x0, 0x370, 0xc000, 0xc, 0xa0002f5}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3e, 0xa, 0x8, 0x0, 0x10}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.150071244s ago: executing program 0 (id=244): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x24414809, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x8, 0x4}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) close(r0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x3a89, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x4, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.095950563s ago: executing program 1 (id=245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x50) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r4, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) 1.866471811s ago: executing program 3 (id=246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1b2e}, @TCA_TBF_BURST={0x8, 0x6, 0x7}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x1, 0x3a, 0x9, 0xc55, 0x1}, {0x8, 0x2, 0x2, 0x10, 0x6, 0x8}, 0xff, 0x1000, 0x1c0d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc1400fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.589159817s ago: executing program 0 (id=247): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x19}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.09164263s ago: executing program 3 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00040'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000180), &(0x7f00000003c0)="2de0f8833174fb39f7f3fd6e4f14ef1dc582aaeb659ae729c8146c217e55725c5b7b78e44262228bc3d62cc2886bcc21bd975f5f6348617e71f114c7b2fe612629194f5b5a7da24451ab2b30d204915426c2d1568cbd7a9feca40620647db3f3526f2565a2cd23dc3322bb16e677f195707b0c925bac6b680b8c57e447771188e32745b7c05b58cf9be8f04c719fcc5b82f0e7b881b7fc7713d7821a9b750d5acb011e8d6545d656a15d5876a06c20810750188c93ac7d2ac09d3610268c22b936ba2225b624a4d0fad228fa3b67a5bd4bfa68d389014419715bb5bb2c11cf5039c04d07fd073e280306d95591b89d8144d230ca8eb52f", 0xf7, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0xd9) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0xff64cd9d00000000, 0x8, 0x0, 0x7, 0x41, 0x2, 0x9797, 0xfffffffffffffffc, 0x201, 0x7, 0xa, 0xa, 0x2, 0x7f, 0xffffffffffffffff, 0x0, 0x8000006, 0x0, 0x100, 0xffffffffffffffff, 0x8, 0x2000000000, 0x0, 0x0, 0x3}) 46.944463ms ago: executing program 3 (id=249): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x0, 0xc9, 0x1, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x10, 0x0, 0x64}}}}, 0x16) nanosleep(&(0x7f00000000c0)={0x0, 0x5f5e100}, 0x0) r1 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x3e8}, 0x10) connect(r1, &(0x7f0000000180)=@generic={0x1f, "0000000000000100"}, 0xa) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x15}}}, 0x18) nanosleep(&(0x7f0000000240)={0x0, 0x5f5e100}, 0x0) bind(r1, &(0x7f0000000300)=@generic={0x1f, "0000000000000100aaaaaaaaaa110101010100"}, 0x32) nanosleep(&(0x7f0000000380)={0x0, 0x5f5e100}, 0x0) close(r1) 0s ago: executing program 2 (id=250): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'xfrm0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4) sendmsg$can_raw(r4, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r3}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x4004000) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000000c0)={&(0x7f00000003c0)=[{0x8, 0x4800, 0x0, 0x0}, {0x5, 0x2000, 0x0, 0x0}], 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. [ 67.249896][ T5761] cgroup: Unknown subsys name 'net' [ 67.382913][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.798257][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.728071][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.737380][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.756722][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.766333][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.774250][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.781975][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.789914][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.789972][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.800861][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.813601][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.821383][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.829630][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.837015][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.845256][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.845699][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.859930][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.861418][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.876186][ T5088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.883703][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.891157][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.900566][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.908652][ T5088] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.921055][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.929807][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.332277][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 71.367656][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 71.413902][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 71.509710][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 71.550847][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.557802][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.562885][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.572322][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.579851][ T5773] bridge_slave_0: entered allmulticast mode [ 71.587503][ T5773] bridge_slave_0: entered promiscuous mode [ 71.620634][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.627992][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.635237][ T5773] bridge_slave_1: entered allmulticast mode [ 71.642323][ T5773] bridge_slave_1: entered promiscuous mode [ 71.725815][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.733188][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.740866][ T5775] bridge_slave_0: entered allmulticast mode [ 71.748566][ T5775] bridge_slave_0: entered promiscuous mode [ 71.758847][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.771631][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.795684][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.802929][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.810392][ T5772] bridge_slave_0: entered allmulticast mode [ 71.817705][ T5772] bridge_slave_0: entered promiscuous mode [ 71.825047][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.832254][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.839750][ T5772] bridge_slave_1: entered allmulticast mode [ 71.846937][ T5772] bridge_slave_1: entered promiscuous mode [ 71.854062][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.861817][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.869146][ T5775] bridge_slave_1: entered allmulticast mode [ 71.875860][ T5775] bridge_slave_1: entered promiscuous mode [ 71.938424][ T5773] team0: Port device team_slave_0 added [ 71.947390][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.956872][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.964056][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.973583][ T5776] bridge_slave_0: entered allmulticast mode [ 71.980507][ T5776] bridge_slave_0: entered promiscuous mode [ 71.989168][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.996435][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.003596][ T5776] bridge_slave_1: entered allmulticast mode [ 72.010812][ T5776] bridge_slave_1: entered promiscuous mode [ 72.030964][ T5773] team0: Port device team_slave_1 added [ 72.038394][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.080559][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.094263][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.115132][ T5775] team0: Port device team_slave_0 added [ 72.152560][ T5775] team0: Port device team_slave_1 added [ 72.160504][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.172045][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.190590][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.198343][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.224858][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.238681][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.245655][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.272631][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.302960][ T5772] team0: Port device team_slave_0 added [ 72.343561][ T5772] team0: Port device team_slave_1 added [ 72.367339][ T5776] team0: Port device team_slave_0 added [ 72.382900][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.390052][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.416282][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.440643][ T5776] team0: Port device team_slave_1 added [ 72.447798][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.454771][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.481361][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.493528][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.502917][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.536211][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.558168][ T5773] hsr_slave_0: entered promiscuous mode [ 72.564898][ T5773] hsr_slave_1: entered promiscuous mode [ 72.580998][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.590254][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.618572][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.647533][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.654521][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.681114][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.703058][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.710152][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.736478][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.800313][ T5772] hsr_slave_0: entered promiscuous mode [ 72.806914][ T5772] hsr_slave_1: entered promiscuous mode [ 72.813419][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.822760][ T5772] Cannot create hsr debugfs directory [ 72.833528][ T5775] hsr_slave_0: entered promiscuous mode [ 72.840436][ T5775] hsr_slave_1: entered promiscuous mode [ 72.846711][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.854331][ T5775] Cannot create hsr debugfs directory [ 72.906465][ T5783] Bluetooth: hci0: command tx timeout [ 72.934187][ T5776] hsr_slave_0: entered promiscuous mode [ 72.940705][ T5776] hsr_slave_1: entered promiscuous mode [ 72.948478][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.956204][ T5776] Cannot create hsr debugfs directory [ 72.986819][ T5781] Bluetooth: hci3: command tx timeout [ 72.992742][ T5781] Bluetooth: hci1: command tx timeout [ 72.998871][ T5783] Bluetooth: hci2: command tx timeout [ 73.300735][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.319858][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.330568][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.342610][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.419201][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.428594][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.444219][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.454513][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.542186][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.557280][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.586376][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.612232][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.674895][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.684674][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.695499][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.707650][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.729643][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.805204][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.833782][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.841159][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.855423][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.898968][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.906138][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.943967][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.983255][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.990422][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.012036][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.019259][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.040714][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.060614][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.122125][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.149045][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.199677][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.206974][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.248918][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.256128][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.265961][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.273117][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.307516][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.314684][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.583000][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.610528][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.758297][ T5773] veth0_vlan: entered promiscuous mode [ 74.775756][ T5775] veth0_vlan: entered promiscuous mode [ 74.790658][ T5773] veth1_vlan: entered promiscuous mode [ 74.837436][ T5775] veth1_vlan: entered promiscuous mode [ 74.857901][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.885461][ T5773] veth0_macvtap: entered promiscuous mode [ 74.909156][ T5773] veth1_macvtap: entered promiscuous mode [ 74.936433][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.950987][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.965679][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.981421][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.990286][ T5781] Bluetooth: hci0: command tx timeout [ 74.996756][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.005474][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.015834][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.058549][ T5775] veth0_macvtap: entered promiscuous mode [ 75.066881][ T5781] Bluetooth: hci1: command tx timeout [ 75.072325][ T5781] Bluetooth: hci2: command tx timeout [ 75.079136][ T5783] Bluetooth: hci3: command tx timeout [ 75.104518][ T5772] veth0_vlan: entered promiscuous mode [ 75.127463][ T5775] veth1_macvtap: entered promiscuous mode [ 75.141391][ T5772] veth1_vlan: entered promiscuous mode [ 75.191709][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.203282][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.220593][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.247529][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.260997][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.272758][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.298896][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.309562][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.324737][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.338590][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.348712][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.358535][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.407577][ T5776] veth0_vlan: entered promiscuous mode [ 75.414856][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.426255][ T5772] veth0_macvtap: entered promiscuous mode [ 75.435866][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.453906][ T5772] veth1_macvtap: entered promiscuous mode [ 75.506623][ T5776] veth1_vlan: entered promiscuous mode [ 75.537702][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.552383][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.567600][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.579221][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.591014][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.602700][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.613508][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.624031][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.635076][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.646706][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.703965][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.713642][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.724043][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.735943][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.753737][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.779296][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.888726][ T4312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.910069][ T4312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.958089][ T5776] veth0_macvtap: entered promiscuous mode [ 76.008321][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.008699][ T5776] veth1_macvtap: entered promiscuous mode [ 76.032254][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.073685][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.116370][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.140776][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.156183][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.167009][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.178211][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.190810][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.362686][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.393860][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.467756][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.656154][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.767377][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.882005][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.067899][ T5781] Bluetooth: hci0: command tx timeout [ 77.098440][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.130279][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.152149][ T5781] Bluetooth: hci2: command tx timeout [ 77.169348][ T5783] Bluetooth: hci3: command tx timeout [ 77.170676][ T5788] Bluetooth: hci1: command tx timeout [ 77.195374][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.204516][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.244904][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.267223][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.296274][ T5849] syz.2.5[5849]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.310315][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.365615][ T5849] loop2: detected capacity change from 0 to 2048 [ 77.471315][ T5849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.683884][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.736503][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.829587][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.829611][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.177392][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.527466][ T5781] Bluetooth: Too big LE L2CAP SDU length: len 44510 > 1280 [ 78.712635][ T5862] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 79.156478][ T5781] Bluetooth: hci0: command tx timeout [ 79.226379][ T5781] Bluetooth: hci2: command tx timeout [ 79.231835][ T5781] Bluetooth: hci1: command tx timeout [ 79.237519][ T5788] Bluetooth: hci3: command tx timeout [ 82.643996][ T5911] capability: warning: `syz.2.17' uses 32-bit capabilities (legacy support in use) [ 82.982847][ T5915] syz.3.18 uses obsolete (PF_INET,SOCK_PACKET) [ 83.061109][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 83.173347][ T5915] vlan2: entered promiscuous mode [ 83.190265][ T5915] bond0: entered promiscuous mode [ 83.190287][ T5915] bond_slave_0: entered promiscuous mode [ 83.190485][ T5915] bond_slave_1: entered promiscuous mode [ 83.212018][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 83.343617][ T5919] Zero length message leads to an empty skb [ 83.404117][ T5915] netlink: 'syz.3.18': attribute type 10 has an invalid length. [ 83.511442][ T5915] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 83.537895][ T5915] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 84.186011][ C1] net_ratelimit: 72 callbacks suppressed [ 86.793760][ T5931] loop2: detected capacity change from 0 to 40427 [ 86.821408][ T5931] ======================================================= [ 86.821408][ T5931] WARNING: The mand mount option has been deprecated and [ 86.821408][ T5931] and is ignored by this kernel. Remove the mand [ 86.821408][ T5931] option from the mount to silence this warning. [ 86.821408][ T5931] ======================================================= [ 86.943243][ T8] cfg80211: failed to load regulatory.db [ 86.960456][ T5931] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 87.003373][ T5931] F2FS-fs (loop2): invalid crc value [ 87.076531][ T5931] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.278247][ T5931] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.730843][ T5971] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by " [ 89.225977][ C1] net_ratelimit: 40 callbacks suppressed [ 91.441256][ T5987] netlink: 'syz.2.39': attribute type 1 has an invalid length. [ 91.459674][ T5986] autofs4:pid:5986:autofs_fill_super: called with bogus options [ 91.944986][ T5991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.39'. [ 92.461318][ T5997] bridge1: entered promiscuous mode [ 92.481424][ T5997] bridge1: entered allmulticast mode [ 92.507297][ T5997] team0: Port device bridge1 added [ 92.541676][ T6000] bridge0: port 3(team0) entered blocking state [ 92.548814][ T6000] bridge0: port 3(team0) entered disabled state [ 92.555647][ T6000] team0: entered allmulticast mode [ 92.565122][ T6000] team_slave_0: entered allmulticast mode [ 92.571982][ T6000] team_slave_1: entered allmulticast mode [ 92.656541][ T6000] team0: entered promiscuous mode [ 92.676249][ T6000] team_slave_0: entered promiscuous mode [ 92.706605][ T6000] team_slave_1: entered promiscuous mode [ 92.725160][ T6000] bridge0: port 3(team0) entered blocking state [ 92.732003][ T6000] bridge0: port 3(team0) entered forwarding state [ 94.147421][ T6029] loop0: detected capacity change from 0 to 512 [ 94.212812][ T6029] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.238878][ T6033] netlink: 48 bytes leftover after parsing attributes in process `syz.3.52'. [ 94.292562][ T6029] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 94.346025][ T6029] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.51: bg 0: block 248: padding at end of block bitmap is not set [ 94.399777][ T6029] Quota error (device loop0): write_blk: dquota write failed [ 94.412261][ T6040] hub 2-0:1.0: USB hub found [ 94.423794][ T6033] netlink: 'syz.3.52': attribute type 4 has an invalid length. [ 94.426238][ T6029] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 94.442558][ T6033] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.52'. [ 94.453319][ T6040] hub 2-0:1.0: 1 port detected [ 94.468640][ T6029] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.51: Failed to acquire dquot type 1 [ 94.516132][ T6029] EXT4-fs (loop0): 1 truncate cleaned up [ 94.547029][ T6029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 94.986044][ C0] net_ratelimit: 41 callbacks suppressed [ 95.932600][ T6029] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.269280][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 97.335407][ T6073] syzkaller0: entered promiscuous mode [ 97.353049][ T6073] syzkaller0: entered allmulticast mode [ 97.377101][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.596006][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.621689][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.638262][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.661257][ T8] usb 2-1: Product: syz [ 97.665487][ T8] usb 2-1: Manufacturer: syz [ 97.685987][ T8] usb 2-1: SerialNumber: syz [ 97.967219][ T6065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.987438][ T6065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.031889][ T6076] bridge0: port 3(team0) entered disabled state [ 98.038873][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.047684][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.243584][ T6065] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 98.254527][ T6065] kvm: requested 36876 ns i8254 timer period limited to 200000 ns [ 98.269061][ T6065] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 98.286119][ T6065] kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 98.296158][ T6065] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 98.305303][ T6065] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 98.315749][ T6065] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 98.329184][ T6065] kvm: requested 157562 ns i8254 timer period limited to 200000 ns [ 98.340240][ T6065] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 98.351461][ T6065] kvm: requested 30171 ns i8254 timer period limited to 200000 ns [ 98.459364][ T8] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 98.504745][ T8] usb 2-1: USB disconnect, device number 2 [ 98.756689][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.794295][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.124624][ T6076] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.133781][ T6076] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.143447][ T6076] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.152564][ T6076] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.281504][ T6076] vlan2: left promiscuous mode [ 99.290392][ T6076] bond0: left promiscuous mode [ 99.295192][ T6076] bond_slave_0: left promiscuous mode [ 99.301182][ T6076] bond_slave_1: left promiscuous mode [ 99.307301][ T6076] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 99.618623][ T5572] IPVS: starting estimator thread 0... [ 99.632001][ T6104] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 99.708645][ T6103] IPVS: using max 19 ests per chain, 45600 per kthread [ 100.025968][ C1] net_ratelimit: 48 callbacks suppressed [ 100.433400][ T6109] process 'syz.2.71' launched '/dev/fd/3' with NULL argv: empty string added [ 100.515812][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 101.840733][ T6138] loop3: detected capacity change from 0 to 164 [ 101.898287][ T6093] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.251979][ T5850] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.457113][ T5850] usb 4-1: Using ep0 maxpacket: 8 [ 102.464463][ T6155] loop2: detected capacity change from 0 to 1024 [ 102.478424][ T5850] usb 4-1: unable to get BOS descriptor or descriptor too short [ 102.506030][ T5850] usb 4-1: config 10 has an invalid interface number: 157 but max is 0 [ 102.526375][ T5850] usb 4-1: config 10 has no interface number 0 [ 102.535003][ T5850] usb 4-1: config 10 interface 157 altsetting 134 endpoint 0xA has an invalid bInterval 127, changing to 10 [ 102.564297][ T5850] usb 4-1: config 10 interface 157 altsetting 134 endpoint 0xA has invalid maxpacket 18369, setting to 1024 [ 102.600632][ T5850] usb 4-1: config 10 interface 157 has no altsetting 0 [ 102.631441][ T5850] usb 4-1: New USB device found, idVendor=1b3d, idProduct=930e, bcdDevice=53.18 [ 102.659867][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.696324][ T5850] usb 4-1: Product: syz [ 102.710350][ T5850] usb 4-1: Manufacturer: syz [ 102.727627][ T5850] usb 4-1: SerialNumber: syz [ 102.755952][ T6138] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.836026][ T5781] Bluetooth: hci1: command tx timeout [ 103.001639][ T5850] ftdi_sio 4-1:10.157: FTDI USB Serial Device converter detected [ 103.012068][ T5850] ftdi_sio ttyUSB0: unknown device type: 0x5318 [ 103.041828][ T5850] usb 4-1: USB disconnect, device number 2 [ 103.091880][ T5850] ftdi_sio 4-1:10.157: device disconnected [ 103.443455][ T6164] syzkaller0: entered promiscuous mode [ 103.484514][ T6164] syzkaller0: entered allmulticast mode [ 104.606362][ T6181] loop2: detected capacity change from 0 to 128 [ 104.724429][ T27] audit: type=1804 audit(1790807649.111:2): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.91" name="/newroot/22/file0/file0" dev="loop2" ino=1048594 res=1 errno=0 [ 105.646566][ C1] net_ratelimit: 39 callbacks suppressed [ 108.587726][ T6215] loop1: detected capacity change from 0 to 2048 [ 108.660505][ T6215] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c11c, mo2=0002] [ 108.748866][ T6215] System zones: 0-7 [ 108.803637][ T6215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.022789][ T6225] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #2: block 16: comm syz.1.100: lblock 0 mapped to illegal pblock 16 (length 1) [ 109.195744][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.821851][ T6246] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 109.903824][ T6246] bond1: entered promiscuous mode [ 109.910313][ T6246] bond1: entered allmulticast mode [ 109.916679][ T6246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.979864][ T6246] bridge1: entered promiscuous mode [ 109.985287][ T6246] bridge1: entered allmulticast mode [ 110.033353][ T6246] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 110.094165][ T6248] bridge2: entered promiscuous mode [ 110.103131][ T6248] bridge2: entered allmulticast mode [ 110.113844][ T6248] bond1: (slave bridge2): Enslaving as a backup interface with a down link [ 110.179375][ T6248] bridge3: entered promiscuous mode [ 110.184960][ T6248] bridge3: entered allmulticast mode [ 110.201788][ T6248] bond1: (slave bridge3): Enslaving as a backup interface with a down link [ 110.269908][ T6253] futex_wake_op: syz.0.110 tries to shift op by 144; fix this program [ 110.489183][ T6255] loop0: detected capacity change from 0 to 8192 [ 110.582890][ T6255] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 110.659251][ T6255] loop0: partition table partially beyond EOD, truncated [ 110.666443][ C1] net_ratelimit: 21 callbacks suppressed [ 110.965287][ T6255] loop0: p1 start 100663296 is beyond EOD, truncated [ 111.369604][ T6255] loop0: p2 size 134217732 extends beyond EOD, truncated [ 111.430950][ T6255] loop0: p4 size 14876672 extends beyond EOD, truncated [ 111.453701][ T6255] loop0: p5 size 134217732 extends beyond EOD, truncated [ 111.465495][ T6255] loop0: p6 size 14876672 extends beyond EOD, truncated [ 112.492382][ T6276] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 112.556038][ T6093] udevd[6093]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 112.566278][ T6036] udevd[6036]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 112.578392][ T6144] udevd[6144]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 112.601789][ T6034] udevd[6034]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 112.653346][ T6282] udevd[6282]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 114.880834][ T6297] loop0: detected capacity change from 0 to 512 [ 114.954834][ T6297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.005287][ T6297] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.081413][ T6309] jffs2: notice: (6309) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 115.357821][ T6316] loop2: detected capacity change from 0 to 1024 [ 115.410625][ T6316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.705975][ C1] net_ratelimit: 22 callbacks suppressed [ 116.290142][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.380189][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.019706][ T6338] loop1: detected capacity change from 0 to 512 [ 117.064400][ T6338] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.102066][ T6338] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 117.118870][ T6338] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 117.138574][ T6338] EXT4-fs (loop1): group descriptors corrupted! [ 117.178592][ T6144] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.537332][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802e736400: rx timeout, send abort [ 118.046980][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802e736400: abort rx timeout. Force session deactivation [ 119.665871][ C0] sched: RT throttling activated [ 120.254745][ T6385] loop1: detected capacity change from 0 to 256 [ 120.317980][ T6385] gretap0: entered promiscuous mode [ 120.344741][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 120.380917][ T6385] gretap0: left promiscuous mode [ 120.856791][ T8] smpboot: CPU 1 is now offline [ 120.903522][ T6404] loop1: detected capacity change from 0 to 1024 [ 121.135937][ C0] net_ratelimit: 36 callbacks suppressed [ 121.299030][ T6408] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 121.334617][ T6404] hfsplus: unable to parse mount options [ 121.483381][ T6401] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 121.817472][ T6421] netlink: 'syz.2.150': attribute type 4 has an invalid length. [ 121.878804][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 121.934254][ T6424] loop0: detected capacity change from 0 to 2048 [ 122.029129][ T6424] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.225788][ T6430] loop1: detected capacity change from 0 to 512 [ 122.259264][ T6430] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.153: iget: bad i_size value: 38620345925642 [ 122.293045][ T6430] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.153: couldn't read orphan inode 15 (err -117) [ 122.331467][ T6430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.403286][ T6430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.608832][ T6430] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 122.644080][ T6434] syzkaller0: entered promiscuous mode [ 122.662682][ T6434] syzkaller0: entered allmulticast mode [ 122.729567][ T6436] FAULT_INJECTION: forcing a failure. [ 122.729567][ T6436] name fail_futex, interval 1, probability 0, space 0, times 1 [ 122.765343][ T6436] CPU: 0 PID: 6436 Comm: syz.3.155 Not tainted syzkaller #0 [ 122.772678][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.782746][ T6436] Call Trace: [ 122.786107][ T6436] [ 122.789047][ T6436] dump_stack_lvl+0x18c/0x250 [ 122.793753][ T6436] ? show_regs_print_info+0x20/0x20 [ 122.798955][ T6436] ? load_image+0x420/0x420 [ 122.803450][ T6436] ? stack_trace_save+0xaa/0x100 [ 122.808397][ T6436] ? stack_trace_snprint+0xf0/0xf0 [ 122.813538][ T6436] should_fail_ex+0x394/0x4c0 [ 122.818232][ T6436] get_futex_key+0x136/0x1030 [ 122.822915][ T6436] ? kasan_set_track+0x4e/0x70 [ 122.827706][ T6436] ? kasan_save_free_info+0x28/0x40 [ 122.832907][ T6436] ? ____kasan_slab_free+0x126/0x1f0 [ 122.838195][ T6436] ? __kmem_cache_free+0xba/0x1f0 [ 122.843231][ T6436] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.849309][ T6436] ? futex_setup_timer+0xc0/0xc0 [ 122.854254][ T6436] futex_wake+0x127/0x4f0 [ 122.858594][ T6436] ? futex_wake_mark+0x150/0x150 [ 122.863532][ T6436] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 122.869516][ T6436] ? lock_chain_count+0x20/0x20 [ 122.874392][ T6436] do_futex+0x35d/0x3e0 [ 122.878556][ T6436] ? __ia32_sys_get_robust_list+0x110/0x110 [ 122.884455][ T6436] ? slab_free_freelist_hook+0x130/0x1a0 [ 122.890123][ T6436] __se_sys_futex+0x3a9/0x440 [ 122.894837][ T6436] ? __x64_sys_futex+0xf0/0xf0 [ 122.899617][ T6436] ? __x64_sys_futex+0x21/0xf0 [ 122.904381][ T6436] do_syscall_64+0x55/0xb0 [ 122.908805][ T6436] ? clear_bhb_loop+0x40/0x90 [ 122.913486][ T6436] ? clear_bhb_loop+0x40/0x90 [ 122.918168][ T6436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.924134][ T6436] RIP: 0033:0x7f1ddcf9e159 [ 122.928596][ T6436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.948303][ T6436] RSP: 002b:00007f1ddde390e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.956743][ T6436] RAX: ffffffffffffffda RBX: 00007f1ddd225fa8 RCX: 00007f1ddcf9e159 [ 122.964720][ T6436] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1ddd225fac [ 122.972717][ T6436] RBP: 00007f1ddd225fa0 R08: 0000000000745a08 R09: 0000000000000000 [ 122.980689][ T6436] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 122.988664][ T6436] R13: 00007f1ddd226038 R14: 00007ffcdbfd3fd0 R15: 00007ffcdbfd40b8 [ 122.996648][ T6436] [ 123.366619][ T6449] netlink: 'syz.2.157': attribute type 1 has an invalid length. [ 123.408025][ T6442] bond2: Removing last arp target with arp_interval on [ 123.433320][ T6449] netlink: 'syz.2.157': attribute type 2 has an invalid length. [ 124.580163][ T6459] loop0: detected capacity change from 0 to 256 [ 124.649992][ T6459] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 124.717371][ T6463] netlink: 'syz.2.164': attribute type 8 has an invalid length. [ 125.016004][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.089126][ T6468] lo: entered promiscuous mode [ 125.222186][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 53, changing to 9 [ 125.256027][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25855, setting to 1024 [ 125.277762][ T6468] tunl0: entered promiscuous mode [ 125.298828][ T8] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 125.316835][ T6468] gre0: entered promiscuous mode [ 125.323347][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.371858][ T8] usb 1-1: config 0 descriptor?? [ 125.392980][ T6459] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 125.454351][ T6468] gretap0: entered promiscuous mode [ 125.460870][ T6480] capability: warning: `syz.3.163' uses deprecated v2 capabilities in a way that may be insecure [ 125.500823][ T6468] erspan0: entered promiscuous mode [ 125.522760][ T5781] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 125.533846][ T5781] CPU: 0 PID: 5781 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 125.541677][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.551820][ T5781] Workqueue: hci1 hci_rx_work [ 125.556502][ T5781] Call Trace: [ 125.559774][ T5781] [ 125.562695][ T5781] dump_stack_lvl+0x18c/0x250 [ 125.567459][ T5781] ? show_regs_print_info+0x20/0x20 [ 125.572649][ T5781] ? load_image+0x420/0x420 [ 125.577150][ T5781] sysfs_create_dir_ns+0x26e/0x2a0 [ 125.582255][ T5781] ? sysfs_warn_dup+0xa0/0xa0 [ 125.586946][ T5781] ? do_raw_spin_unlock+0x121/0x230 [ 125.592189][ T5781] kobject_add_internal+0x617/0xc90 [ 125.597418][ T5781] kobject_add+0x164/0x240 [ 125.601853][ T5781] ? __rwlock_init+0x150/0x150 [ 125.606640][ T5781] ? kobject_init+0x1d0/0x1d0 [ 125.611329][ T5781] ? _raw_spin_unlock+0x28/0x40 [ 125.616178][ T5781] ? get_device_parent+0x366/0x390 [ 125.621306][ T5781] device_add+0x3fa/0xc40 [ 125.625655][ T5781] hci_conn_add_sysfs+0xd5/0x1e0 [ 125.630616][ T5781] hci_sync_conn_complete_evt+0x6d6/0x9a0 [ 125.636358][ T5781] ? hci_remote_ext_features_evt+0xa80/0xa80 [ 125.642337][ T5781] hci_event_packet+0x807/0x1280 [ 125.647316][ T5781] ? __lock_acquire+0x7d80/0x7d80 [ 125.652361][ T5781] ? bis_list+0x290/0x290 [ 125.652408][ T5781] ? hci_send_to_monitor+0xd7/0x4f0 [ 125.656915][ T5781] hci_rx_work+0x43a/0xd60 [ 125.656950][ T5781] ? process_scheduled_works+0x975/0x1600 [ 125.656978][ T5781] process_scheduled_works+0xa60/0x1600 [ 125.666604][ T5781] ? worker_attach_to_pool+0x370/0x370 [ 125.677867][ T5781] ? assign_work+0x3cc/0x5d0 [ 125.677902][ T5781] worker_thread+0xa5e/0xfe0 [ 125.677952][ T5781] kthread+0x2fa/0x390 [ 125.677970][ T5781] ? pr_cont_work+0x550/0x550 [ 125.683566][ T5781] ? kthread_blkcg+0xd0/0xd0 [ 125.692846][ T5781] ret_from_fork+0x48/0x80 [ 125.692877][ T5781] ? kthread_blkcg+0xd0/0xd0 [ 125.706166][ T5781] ret_from_fork_asm+0x11/0x20 [ 125.715345][ T5781] [ 125.731999][ T5781] kobject: kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 125.748257][ T5781] Bluetooth: hci1: failed to register connection device [ 125.790617][ T6468] ip_vti0: entered promiscuous mode [ 125.842231][ T6468] ip6_vti0: entered promiscuous mode [ 125.882028][ T6468] sit0: entered promiscuous mode [ 125.915547][ T6468] ip6tnl0: entered promiscuous mode [ 125.938494][ T6468] ip6gre0: entered promiscuous mode [ 125.975174][ T6468] syz_tun: entered promiscuous mode [ 125.999144][ T6468] ip6gretap0: entered promiscuous mode [ 126.021468][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.029035][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.038914][ T6468] bridge0: entered promiscuous mode [ 126.063458][ T6468] vcan0: entered promiscuous mode [ 126.074784][ T6468] bond0: entered promiscuous mode [ 126.080175][ T6468] bond_slave_0: entered promiscuous mode [ 126.086633][ T6468] bond_slave_1: entered promiscuous mode [ 126.108942][ T6468] team0: entered promiscuous mode [ 126.114229][ T6468] team_slave_0: entered promiscuous mode [ 126.120371][ T6468] team_slave_1: entered promiscuous mode [ 126.144116][ T6468] dummy0: entered promiscuous mode [ 126.171080][ T6468] nlmon0: entered promiscuous mode [ 126.179834][ T8] hid-led 0003:1D34:000A.0001: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 126.194942][ T6468] caif0: entered promiscuous mode [ 126.213791][ T6468] batadv0: entered promiscuous mode [ 126.230805][ T8] hid-led 0003:1D34:000A.0001: Dream Cheeky Webmail Notifier initialized [ 126.251267][ T6468] vxcan0: entered promiscuous mode [ 126.267887][ T6468] vxcan1: entered promiscuous mode [ 126.284136][ T6468] veth0: entered promiscuous mode [ 126.310510][ T6468] veth1: entered promiscuous mode [ 126.339689][ T6468] net_ratelimit: 28 callbacks suppressed [ 126.349769][ T6468] wg0: entered promiscuous mode [ 126.426383][ T6468] wg1: entered promiscuous mode [ 126.458599][ T6468] wg2: entered promiscuous mode [ 126.491523][ T6468] veth0_to_bridge: entered promiscuous mode [ 126.560052][ T6468] veth1_to_bridge: entered promiscuous mode [ 126.647231][ T6468] veth0_to_bond: entered promiscuous mode [ 126.712191][ T6468] veth1_to_bond: entered promiscuous mode [ 126.768359][ T6468] veth0_to_team: entered promiscuous mode [ 126.781567][ T5816] usb 1-1: USB disconnect, device number 2 [ 126.870103][ T6468] veth1_to_team: entered promiscuous mode [ 126.938442][ T6468] veth0_to_batadv: entered promiscuous mode [ 126.952790][ T6468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.970681][ T6468] batadv_slave_0: entered promiscuous mode [ 126.992769][ T6468] veth1_to_batadv: entered promiscuous mode [ 127.006166][ T6468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.021443][ T6468] batadv_slave_1: entered promiscuous mode [ 127.043560][ T6468] xfrm0: entered promiscuous mode [ 127.063710][ T6468] veth0_to_hsr: entered promiscuous mode [ 127.094153][ T6468] veth1_to_hsr: entered promiscuous mode [ 127.129281][ T6468] hsr0: entered promiscuous mode [ 127.149279][ T6468] veth1_virt_wifi: entered promiscuous mode [ 127.170926][ T6468] veth0_virt_wifi: entered promiscuous mode [ 127.189974][ T6468] virt_wifi0: entered promiscuous mode [ 127.263861][ T6468] vlan0: entered promiscuous mode [ 127.276706][ T6468] vlan1: entered promiscuous mode [ 127.294918][ T6468] macvlan0: entered promiscuous mode [ 127.317033][ T6468] macvlan1: entered promiscuous mode [ 127.333478][ T6468] ipvlan0: entered promiscuous mode [ 127.343705][ T6468] ipvlan1: entered promiscuous mode [ 127.390569][ T6468] macvtap0: entered promiscuous mode [ 127.434258][ T6468] macsec0: entered promiscuous mode [ 127.480753][ T6468] geneve0: entered promiscuous mode [ 127.525104][ T6468] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.544410][ T6468] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.553455][ T5781] Bluetooth: hci1: command tx timeout [ 127.575616][ T6468] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.597221][ T6468] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.616267][ T6468] geneve1: entered promiscuous mode [ 127.664184][ T6468] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 127.694279][ T6468] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 127.741273][ T6468] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 127.776806][ T6468] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 127.814897][ T6468] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 127.848101][ T6468] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 127.880524][ T6475] netlink: 'syz.2.167': attribute type 1 has an invalid length. [ 127.890325][ T6475] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 127.960224][ T6468] syz.1.166 (6468) used greatest stack depth: 20840 bytes left [ 128.020666][ T6476] veth3: entered allmulticast mode [ 128.121177][ T6489] tipc: Failed to obtain node identity [ 128.138416][ T6489] tipc: Enabling of bearer rejected, failed to enable media [ 128.201836][ T6493] cgroup: fork rejected by pids controller in /syz0 [ 128.319372][ T6527] loop3: detected capacity change from 0 to 256 [ 128.405604][ T6532] loop1: detected capacity change from 0 to 512 [ 128.416750][ T6527] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.438519][ T6532] EXT4-fs (loop1): Test dummy encryption mode enabled [ 128.455594][ T6527] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 128.508727][ T6532] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.175: inode has both inline data and extents flags [ 128.556976][ T6532] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.175: couldn't read orphan inode 15 (err -117) [ 128.578911][ T6527] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 128.613716][ T6532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.626545][ T6527] exFAT-fs (loop3): failed to load alloc-bitmap [ 128.633449][ T6527] exFAT-fs (loop3): failed to recognize exfat type [ 129.244615][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.494965][ T6557] md/raid10:md0: not clean -- starting background reconstruction [ 129.518971][ T6564] Bluetooth: MGMT ver 1.22 [ 129.546118][ T6557] md/raid10:md0: active with 1 out of 2 devices [ 129.576018][ T6557] md0: detected capacity change from 0 to 2048 [ 129.626044][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 129.687435][ T6568] loop2: detected capacity change from 0 to 16 [ 129.718144][ T6568] erofs: Unknown parameter '1844674407370955161518446744073709551615' [ 129.723557][ T6144] udevd[6144]: incorrect erofs checksum on /dev/loop2 [ 130.356964][ T6082] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.641407][ T6082] usb 1-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 130.665338][ T6082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.699356][ T6082] usb 1-1: Product: syz [ 130.725601][ T6082] usb 1-1: Manufacturer: syz [ 130.734827][ T6082] usb 1-1: SerialNumber: syz [ 131.602753][ T6579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.724831][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.736033][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.871425][ T6082] usb 1-1: unable to issue vendor read request (ret = -71) [ 131.905453][ T6082] usb 1-1: unable to issue vendor read request (ret = -71) [ 131.938985][ T6082] usb 1-1: unable to issue vendor read request (ret = -71) [ 131.979730][ T6082] usb 1-1: unable to issue vendor read request (ret = -71) [ 132.009840][ T6082] usb 1-1: unable to issue vendor read request (ret = -71) [ 132.026267][ T6626] md: couldn't update array info. -22 [ 132.043552][ T6082] usb 1-1: unable to issue vendor read request (ret = -71) [ 132.054668][ T6626] md: could not open device unknown-block(1,1). [ 132.077885][ T6626] md: md_import_device returned -16 [ 132.086616][ T6082] usb 1-1: unable to issue vendor read request (ret = -71) [ 132.117749][ T6082] usb 1-1: unable to issue vendor read request (ret = -71) [ 132.265995][ C0] net_ratelimit: 26 callbacks suppressed [ 132.328389][ T6082] usb 1-1: USB disconnect, device number 3 [ 132.355424][ T6590] cgroup: fork rejected by pids controller in /syz1 [ 132.479489][ T6144] udevd[6144]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.479544][ T6689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.500758][ T6693] md: couldn't update array info. -22 [ 134.511730][ T6689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.525479][ T6693] md: could not open device unknown-block(1,1). [ 134.538865][ T6693] md: md_import_device returned -16 [ 134.548345][ T6689] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 134.564626][ T6689] bond0 (unregistering): Released all slaves [ 134.633930][ T6691] macvtap1: entered promiscuous mode [ 135.103225][ T6082] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 135.296036][ T6082] usb 3-1: Using ep0 maxpacket: 16 [ 135.303882][ T6082] usb 3-1: too many endpoints for config 0 interface 0 altsetting 9: 255, using maximum allowed: 30 [ 135.315162][ T6082] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 144, changing to 11 [ 135.327324][ T6082] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 135.352967][ T6082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 135.369280][ T6082] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 135.398161][ T6082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.443314][ T6082] usb 3-1: config 0 descriptor?? [ 136.350570][ T6082] usbhid 3-1:0.0: can't add hid device: -71 [ 136.364625][ T6082] usbhid: probe of 3-1:0.0 failed with error -71 [ 136.387453][ T6082] usb 3-1: USB disconnect, device number 2 [ 137.163189][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 137.306140][ C0] net_ratelimit: 13 callbacks suppressed [ 137.429339][ T27] audit: type=1326 audit(1790807681.824:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.2.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1742f9e159 code=0x0 [ 138.499446][ T6782] loop1: detected capacity change from 0 to 128 [ 138.533766][ T6144] udevd[6144]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 138.558972][ T6144] udevd[6144]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 138.577376][ T6144] udevd[6144]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 139.007328][ T6786] syz.1.222 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 139.048040][ T6751] cgroup: fork rejected by pids controller in /syz3 [ 139.551842][ T27] audit: type=1400 audit(1790807683.944:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/:o" pid=6807 comm="syz.2.224" [ 139.862609][ T6821] RPC: Couldn't create pipefs entry nfs/clnt1, error -12 [ 139.979396][ T6827] loop2: detected capacity change from 0 to 2048 [ 140.013610][ T6144] udevd[6144]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 140.048010][ T6144] udevd[6144]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 140.060003][ T6827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.125998][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.159717][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.230726][ T6144] udevd[6144]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 140.269201][ T6835] futex_wake_op: syz.1.235 tries to shift op by 144; fix this program [ 140.270280][ T6144] udevd[6144]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 140.298731][ T6835] trusted_key: syz.1.235 sent an empty control message without MSG_MORE. [ 140.340637][ T8] usb 1-1: config 0 has no interfaces? [ 140.355014][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.380008][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.404320][ T8] usb 1-1: Product: syz [ 140.417749][ T8] usb 1-1: Manufacturer: syz [ 140.436487][ T8] usb 1-1: SerialNumber: syz [ 140.468183][ T8] usb 1-1: config 0 descriptor?? [ 140.856709][ T6082] usb 1-1: USB disconnect, device number 4 [ 140.863450][ T6847] mmap: syz.2.236 (6847) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.890564][ T6849] netlink: 'syz.1.237': attribute type 1 has an invalid length. [ 141.000787][ T6849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.020870][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'. [ 141.182849][ T6849] bond1: (slave bridge1): making interface the new active one [ 141.229490][ T6849] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 141.415371][ T27] audit: type=1800 audit(1790807685.804:5): pid=6857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.239" name="no_out_endpoint" dev="configfs" ino=10938 res=0 errno=0 [ 141.487273][ T27] audit: type=1800 audit(1790807685.884:6): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.239" name="report_length" dev="configfs" ino=10944 res=0 errno=0 [ 141.565221][ T27] audit: type=1800 audit(1790807685.954:7): pid=6857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.239" name="subclass" dev="configfs" ino=10939 res=0 errno=0 [ 143.065974][ C0] net_ratelimit: 17 callbacks suppressed [ 143.330031][ T6866] Set syz1 is full, maxelem 2 reached [ 143.415741][ T6875] loop2: detected capacity change from 0 to 256 [ 143.511119][ T6144] udevd[6144]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 143.552720][ T27] audit: type=1804 audit(1790807687.944:8): pid=6874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.244" name="/newroot/59/file0" dev="fuse" ino=1 res=1 errno=0 [ 144.063589][ T6887] netlink: 'syz.0.247': attribute type 1 has an invalid length. [ 144.241173][ T6889] bond1: entered promiscuous mode [ 144.270739][ T6889] bond1: entered allmulticast mode [ 144.386264][ T6889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.360992][ T6890] bridge1: entered promiscuous mode [ 145.418719][ T6890] bridge1: entered allmulticast mode [ 145.424511][ T6890] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 145.484068][ T6144] udevd[6144]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 145.500930][ T6144] udevd[6144]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 145.670380][ T6887] bridge2: entered promiscuous mode [ 145.675689][ T6887] bridge2: entered allmulticast mode [ 145.726537][ T6887] bond1: (slave bridge2): Enslaving as a backup interface with a down link [ 145.970482][ T6887] bridge3: entered promiscuous mode [ 146.212095][ T5788] [ 146.212805][ T8] Added buffer head 0 to ffff88801ba68a00 [ 146.214531][ T5788] ====================================================== [ 146.214540][ T5788] WARNING: possible circular locking dependency detected [ 146.220389][ T6082] dummy_hcd dummy_hcd.2: port status 0x00100503 has changes [ 146.227276][ T5788] syzkaller #0 Not tainted [ 146.246019][ T5788] ------------------------------------------------------ [ 146.253057][ T5788] kworker/u5:8/5788 is trying to acquire lock: [ 146.255420][ C0] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 146.259204][ T5788] ffffffff8e562248 ( [ 146.267351][ C0] kcov: kcov_start: t = ffff88801a27da00, size = 262144, area = ffffc900022b2000 [ 146.271247][ T5788] rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x41/0x550 [ 146.280642][ C0] kcov: kcov_move_area: ffffc90015d7d000 1048576 <= ffffc900022b2000 433 [ 146.288194][ T5788] [ 146.288194][ T5788] but task is already holding lock: [ 146.288202][ T5788] ffffffff8e53eb68 [ 146.296641][ C0] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 146.303937][ T5788] (hci_cb_list_lock [ 146.307640][ C0] kcov: kcov_start: t = ffff88801a27da00, size = 262144, area = ffffc900022b2000 [ 146.315776][ T5788] ){+.+.}-{3:3} [ 146.319699][ C0] kcov: kcov_move_area: ffffc90015d7d000 1048576 <= ffffc900022b2000 14 [ 146.328741][ T5788] , at: hci_key_refresh_complete_evt+0x394/0x810 [ 146.333872][ C0] nf_nat: Already setup manip DST for ct ffff888024a08600 (status bits 0x188) [ 146.340830][ T5788] [ 146.340830][ T5788] which lock already depends on the new lock. [ 146.340830][ T5788] [ 146.340838][ T5788] [ 146.340838][ T5788] the existing dependency chain (in reverse order) is: [ 146.340844][ T5788] [ 146.340844][ T5788] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 146.340872][ T5788] __mutex_lock+0x135/0xc80 [ 146.347251][ C0] nf_nat: Already setup manip SRC for ct ffff888024a08600 (status bits 0x188) [ 146.356022][ T5788] hci_remote_features_evt+0x535/0x900 [ 146.356047][ T5788] hci_event_packet+0x807/0x1280 [ 146.356061][ T5788] hci_rx_work+0x43a/0xd60 [ 146.356080][ T5788] process_scheduled_works+0xa60/0x1600 [ 146.370661][ T6887] bridge3: entered allmulticast mode [ 146.375485][ T5788] worker_thread+0xa5e/0xfe0 [ 146.375513][ T5788] kthread+0x2fa/0x390 [ 146.375529][ T5788] ret_from_fork+0x48/0x80 [ 146.375551][ T5788] ret_from_fork_asm+0x11/0x20 [ 146.375572][ T5788] [ 146.375572][ T5788] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 146.375602][ T5788] __mutex_lock+0x135/0xc80 [ 146.375619][ T5788] l2cap_chan_connect+0xfc/0xe30 [ 146.375637][ T5788] l2cap_sock_connect+0x586/0x760 [ 146.375657][ T5788] kernel_connect+0x142/0x1c0 [ 146.375679][ T5788] rfcomm_dlc_open+0xa1f/0xec0 [ 146.375704][ T5788] rfcomm_sock_connect+0x2ed/0x600 [ 146.375723][ T5788] __sys_connect+0x3da/0x470 [ 146.375744][ T5788] __x64_sys_connect+0x7a/0x90 [ 146.375764][ T5788] do_syscall_64+0x55/0xb0 [ 146.375787][ T5788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.375812][ T5788] [ 146.375812][ T5788] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 146.375839][ T5788] __lock_acquire+0x37ef/0x7d80 [ 146.375861][ T5788] lock_acquire+0x19e/0x420 [ 146.375880][ T5788] __mutex_lock+0x135/0xc80 [ 146.375897][ T5788] rfcomm_security_cfm+0x41/0x550 [ 146.375915][ T5788] hci_key_refresh_complete_evt+0x405/0x810 [ 146.390384][ C0] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 146.397474][ T5788] hci_event_packet+0x807/0x1280 [ 146.403454][ C0] kcov: kcov_start: t = ffff888029fbda00, size = 262144, area = ffffc900022b2000 [ 146.408894][ T5788] hci_rx_work+0x43a/0xd60 [ 146.413885][ C0] kcov: kcov_move_area: ffffc90015d7d000 1048576 <= ffffc900022b2000 14 [ 146.419974][ T5788] process_scheduled_works+0xa60/0x1600 [ 146.440475][ T6889] kcov: kcov_task_exit: t = ffff888024cb5a00, kcov->t = ffff888024cb5a00 [ 146.445195][ T5788] worker_thread+0xa5e/0xfe0 [ 146.468033][ T6890] kcov: kcov_task_exit: t = ffff88805ad3bc00, kcov->t = ffff88805ad3bc00 [ 146.468476][ T5788] kthread+0x2fa/0x390 [ 146.480567][ T6887] bond1: bond_netdev_event received NETDEV_FEAT_CHANGE [ 146.484573][ T5788] ret_from_fork+0x48/0x80 [ 146.484604][ T5788] ret_from_fork_asm+0x11/0x20 [ 146.484624][ T5788] [ 146.484624][ T5788] other info that might help us debug this: [ 146.484624][ T5788] [ 146.484630][ T5788] Chain exists of: [ 146.484630][ T5788] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 146.484630][ T5788] [ 146.484660][ T5788] Possible unsafe locking scenario: [ 146.484660][ T5788] [ 146.484665][ T5788] CPU0 CPU1 [ 146.484670][ T5788] ---- ---- [ 146.484675][ T5788] lock(hci_cb_list_lock); [ 146.484685][ T5788] lock(&hdev->lock [ 146.495314][ T6887] bond1: bond_master_netdev_event called [ 146.500000][ T5788] ); [ 146.500007][ T5788] lock(hci_cb_list_lock); [ 146.506563][ T6082] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 146.513767][ T5788] lock(rfcomm_mutex); [ 146.513786][ T5788] [ 146.513786][ T5788] *** DEADLOCK *** [ 146.513786][ T5788] [ 146.513791][ T5788] 4 locks held by kworker/u5:8/5788: [ 146.513803][ T5788] #0: [ 146.531197][ C0] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 146.534738][ T5788] ffff88803062d138 [ 146.541145][ C0] kcov: kcov_start: t = ffff888029fbda00, size = 262144, area = ffffc900022b2000 [ 146.549287][ T5788] ((wq_completion)hci0 [ 146.554764][ C0] kcov: kcov_move_area: ffffc90015d7d000 1048576 <= ffffc900022b2000 14 [ 146.563822][ T5788] #2){+.+.}-{0:0} [ 146.569328][ T6887] net bond1: siw: event 12 [ 146.577051][ T5788] , at: process_scheduled_works+0x975/0x1600 [ 146.577079][ T5788] #1: ffffc90004737d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 146.577129][ T5788] #2: ffff88802f1dc0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_key_refresh_complete_evt+0x3f/0x810 [ 146.577181][ T5788] #3: ffffffff8e53eb68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_key_refresh_complete_evt+0x394/0x810 [ 146.577230][ T5788] [ 146.577230][ T5788] stack backtrace: [ 146.577237][ T5788] CPU: 1 PID: 5788 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 146.584178][ T6887] bond1: (slave bridge1): Adding slave to tx hash array[0] [ 146.591687][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.591701][ T5788] Workqueue: hci0 hci_rx_work [ 146.591725][ T5788] Call Trace: [ 146.591733][ T5788] [ 146.591740][ T5788] dump_stack_lvl+0x18c/0x250 [ 146.591766][ T5788] ? load_image+0x420/0x420 [ 146.591787][ T5788] ? show_regs_print_info+0x20/0x20 [ 146.591816][ T5788] ? print_circular_bug+0x12b/0x1a0 [ 146.591841][ T5788] check_noncircular+0x2fc/0x400 [ 146.597353][ T6887] bond1: (slave bridge3): Enslaving as a backup interface with a down link [ 146.605350][ T5788] ? print_deadlock_bug+0x5d0/0x5d0 [ 146.605383][ T5788] ? lockdep_lock+0xf5/0x230 [ 146.605386][ C0] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 146.605407][ T5788] ? _find_first_zero_bit+0xd6/0x100 [ 146.605410][ C0] kcov: kcov_start: t = ffff888024cb3c00, size = 262144, area = ffffc900022b2000 [ 146.605430][ T5788] __lock_acquire+0x37ef/0x7d80 [ 146.605450][ C0] kcov: kcov_start: t = ffff888024cb3c00, size = 524288, area = ffffc9000bde1000 [ 146.605460][ T5788] ? irq_work_queue+0xc3/0x140 [ 146.605472][ C0] kcov: kcov_move_area: ffffc90015d7d000 1048576 <= ffffc900022b2000 14 [ 146.605483][ T5788] ? verify_lock_unused+0x140/0x140 [ 146.605503][ T5788] ? vprintk_emit+0x53d/0x610 [ 146.610622][ T6887] kcov: kcov_task_exit: t = ffff888024cb3c00, kcov->t = ffff888024cb3c00 [ 146.616994][ T5788] ? printk_sprint+0x460/0x460 [ 146.647391][ T5438] Insert table=254 a9fe0000/16 [ 146.650016][ T5788] ? l2cap_security_cfm+0x1277/0x1300 [ 146.650043][ T5788] ? __lock_acquire+0x7d80/0x7d80 [ 146.650064][ T5788] ? rcu_is_watching+0x15/0xb0 [ 146.650089][ T5788] lock_acquire+0x19e/0x420 [ 146.650109][ T5788] ? rfcomm_security_cfm+0x41/0x550 [ 146.650131][ T5788] ? load_image+0x420/0x420 [ 146.650160][ T5788] ? __might_sleep+0xe0/0xe0 [ 146.650184][ T5788] ? read_lock_is_recursive+0x20/0x20 [ 146.683484][ T5761] No more buffers in queue [ 146.685018][ T5788] ? __dynamic_pr_debug+0x1a3/0x260 [ 146.687601][ T5761] eth0: xmit ffff88803053bc70 42:01:0a:80:00:01 [ 146.694700][ T5788] __mutex_lock+0x135/0xc80 [ 146.694721][ T5788] ? rfcomm_security_cfm+0x41/0x550 [ 146.694741][ T5788] ? __mutex_lock+0x30d/0xc80 [ 146.694757][ T5788] ? rfcomm_security_cfm+0x41/0x550 [ 146.694775][ T5788] ? mutex_lock_nested+0x20/0x20 [ 146.694796][ T5788] ? rfcomm_send_msc+0x360/0x360 [ 146.702272][ T5761] Added buffer head 9 to ffff888023e00200 [ 146.706382][ C0] virtqueue callback for ffff888023e00200 (ffffffff85c746c0) [ 146.706378][ T5788] rfcomm_security_cfm+0x41/0x550 [ 146.706406][ T5788] ? hci_conn_hash_lookup_handle+0x22e/0x240 [ 146.714737][ C0] Sent skb ffff88803053bc70 [ 146.719812][ T5788] ? rfcomm_send_msc+0x360/0x360 [ 146.722595][ C0] No more buffers in queue [ 146.730695][ T5788] hci_key_refresh_complete_evt+0x405/0x810 [ 146.730719][ T5788] ? hci_extended_inquiry_result_evt+0x790/0x790 [ 146.735028][ T6082] dummy_hcd dummy_hcd.2: port status 0x00100503 has changes [ 146.743509][ T5788] hci_event_packet+0x807/0x1280 [ 146.758476][ C0] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 146.759604][ T5788] ? __lock_acquire+0x7d80/0x7d80 [ 146.764015][ C0] kcov: kcov_start: t = ffff88801a27da00, size = 262144, area = ffffc900022b2000 [ 146.769970][ T5788] ? bis_list+0x290/0x290 [ 146.782006][ C0] kcov: kcov_move_area: ffffc90015d7d000 1048576 <= ffffc900022b2000 26 [ 146.792231][ T5788] ? hci_send_to_monitor+0xd7/0x4f0 [ 146.803278][ C0] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 146.809800][ T5788] hci_rx_work+0x43a/0xd60 SYZFAIL: failed to send rpc fd=3 want=48 sent=0 n=-1 (errno 32: Broken pipe) [ 146.817319][ C0] kcov: kcov_start: t = ffff88801a27da00, size = 262144, area = ffffc900022b2000 [ 146.824500][ T5788] ? process_scheduled_works+0x975/0x1600 [ 146.834675][ C0] kcov: kcov_move_area: ffffc90015d7d000 1048576 <= ffffc900022b2000 14 [ 146.839277][ T5788] process_scheduled_works+0xa60/0x1600 [ 146.853357][ C0] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 146.854637][ T5788] ? worker_attach_to_pool+0x370/0x370 [ 146.859810][ C0] kcov: kcov_start: t = ffff888023de0000, size = 262144, area = ffffc900022b2000 [ 146.865038][ T5788] ? assign_work+0x3cc/0x5d0 [ 146.870023][ C0] kcov: kcov_move_area: ffffc90015d7d000 1048576 <= ffffc900022b2000 14 [ 146.878516][ T5788] worker_thread+0xa5e/0xfe0 [ 146.906591][ T5761] No more buffers in queue [ 146.910802][ T5788] ? _raw_spin_unlock+0x40/0x40 [ 146.915639][ T5761] eth0: xmit ffff88803053b9f0 42:01:0a:80:00:01 [ 146.924811][ T5788] ? __kthread_parkme+0x71/0x1c0 [ 146.924837][ T5788] kthread+0x2fa/0x390 [ 146.924853][ T5788] ? pr_cont_work+0x550/0x550 [ 146.924873][ T5788] ? kthread_blkcg+0xd0/0xd0 [ 146.924892][ T5788] ret_from_fork+0x48/0x80 [ 146.929741][ T5761] Added buffer head 9 to ffff888023e00200 [ 146.938025][ T5788] ? kthread_blkcg+0xd0/0xd0 [ 146.938048][ T5788] ret_from_fork_asm+0x11/0x20 [ 146.938053][ C0] virtqueue callback for ffff888023e00200 (ffffffff85c746c0) [ 146.938077][ T5788] [ 146.938123][ C1] virtqueue callback for ffff888023e00400 (ffffffff85c745d0) [ 146.943304][ C0] Sent skb ffff88803053b9f0 [ 146.948968][ C1] No more buffers in queue [ 146.956327][ C0] No more buffers in queue [ 146.961104][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 146.991109][ C0] dummy_udc dummy_udc.2: set_address = 3 [ 146.995315][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 146.999877][ C0] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 147.005230][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 147.009614][ C0] kcov: kcov_start: t = ffff88802290da00, size = 262144, area = ffffc900022b2000 [ 147.009648][ C0] kcov: kcov_move_area: ffffc90015d7d000 1048576 <= ffffc900022b2000 14 [ 147.014821][ C1] Receiving skb proto 0x0800 len 40 type 0 [ 147.029693][ C0] nf_nat: Already setup manip DST for ct ffff888024a08600 (status bits 0x188) [ 147.030773][ C1] Receiving skb proto 0x0800 len 40 type 0 [ 147.035441][ C0] nf_nat: Already setup manip SRC for ct ffff888024a08600 (status bits 0x188) [ 147.040612][ C1] No more buffers in queue [ 147.048419][ C0] virtqueue callback for ffff88801ba68a00 (ffffffff84a02460) [ 147.102378][ T5788] hcon ffff888077e96000 orig refcnt 0 [ 147.107720][ C0] virtqueue interrupt with no work for ffff88801ba68800 [ 147.112672][ T5788] hcon ffff888077e96000 orig refcnt 1 [ 147.120835][ C0] virtqueue interrupt with no work for ffff88801ba68600 [ 147.126204][ T5788] kcov: kcov_move_area: ffffc9001557c000 1048576 <= ffffc90017d81000 1048575 [ 147.137036][ T5572] nf_nat: Already setup manip DST for ct ffff888024a08180 (status bits 0x188) [ 147.161551][ T5760] No more buffers in queue [ 147.165489][ T5572] nf_nat: Already setup manip SRC for ct ffff888024a08180 (status bits 0x188) [ 147.174590][ T5760] eth0: xmit ffff8880261cc870 42:01:0a:80:00:01 [ 147.174612][ T5760] Added buffer head 9 to ffff888023e00600 [ 147.180317][ C1] virtqueue callback for ffff888023e00600 (ffffffff85c746c0) [ 147.180609][ C0] virtqueue callback for ffff888023e00000 (ffffffff85c745d0) [ 147.189057][ C1] Sent skb ffff8880261cc870 [ 147.194477][ C0] No more buffers in queue [ 147.202422][ C1] No more buffers in queue [ 147.207897][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 147.235656][ T5768] kcov: kcov_task_exit: t = ffff8880236b9e00, kcov->t = ffff8880236b9e00 [ 147.238949][ C0] No more buffers in queue [ 147.247487][ T5771] kcov: kcov_task_exit: t = ffff88802e020000, kcov->t = ffff88802e020000 [ 147.290502][ T6897] kcov: kcov_task_exit: t = ffff8880270dda00, kcov->t = ffff8880270dda00 [ 147.295718][ T5769] kcov: kcov_task_exit: t = ffff88802973da00, kcov->t = ffff88802973da00 [ 147.298529][ T5572] Added buffer head 0 to ffff88801ba68a00 [ 147.305751][ T5770] kcov: kcov_task_exit: t = ffff88802e021e00, kcov->t = ffff88802e021e00 [ 147.318095][ T6082] usb 3-1: Using ep0 maxpacket: 8 [ 147.351309][ T5760] No more buffers in queue [ 147.360266][ T6898] kcov: kcov_task_exit: t = ffff888024605a00, kcov->t = ffff888024605a00 [ 147.368274][ T5760] eth0: xmit ffff8880261cc5f0 42:01:0a:80:00:01 [ 147.500755][ T6082] usb 3-1: udev 3, busnum 3, minor = 258 [ 147.500858][ T5760] Added buffer head 9 to ffff888023e00600 [ 147.505289][ C1] virtqueue callback for ffff888023e00600 (ffffffff85c746c0) [ 147.505289][ C0] virtqueue callback for ffff888023e00000 (ffffffff85c745d0) [ 147.505432][ T6082] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 147.511135][ C0] No more buffers in queue [ 147.511158][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 147.511181][ C0] No more buffers in queue [ 147.511376][ C1] session ffff88802d2b6200 state 3 [ 147.530176][ T6082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.532622][ C1] Sent skb ffff8880261cc5f0 [ 147.532640][ C1] No more buffers in queue [ 147.639559][ T3365] ffff88802d2b6200 dlci 0 [ 147.666816][ T3365] ffff88802d2b6200 cmd 83 [ 147.671485][ T3365] session ffff88802d2b6200 len 4 [ 147.676456][ T3365] sock ffff8880771f1800, sk ffff888058c73000 [ 147.683454][ T6895] raw-gadget.0 gadget.2: event fetching interrupted [ 147.690883][ T5760] No more buffers in queue [ 147.695308][ T5760] eth0: xmit ffff88803053b770 42:01:0a:80:00:01 [ 147.701630][ T5760] Added buffer head 9 to ffff888023e00200 [ 147.707362][ C0] virtqueue callback for ffff888023e00000 (ffffffff85c745d0) [ 147.707394][ C0] virtqueue callback for ffff888023e00200 (ffffffff85c746c0) [ 147.722450][ C0] Sent skb ffff88803053b770 [ 147.727048][ C0] No more buffers in queue [ 147.731595][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 147.737530][ C0] Receiving skb proto 0x0800 len 88 type 0 [ 147.743424][ C0] virtqueue callback for ffff888023e00000 (ffffffff85c745d0) [ 147.750895][ C0] Receiving skb proto 0x0800 len 112 type 0 [ 147.757012][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 147.762912][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 147.768742][ C0] No more buffers in queue [ 147.776135][ C0] No more buffers in queue [ 147.780610][ C0] No more buffers in queue [ 147.781418][ C1] wireguard: wg0: Handshake for peer 8 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 6) [ 147.785153][ C0] No more buffers in queue [ 147.797233][ T1009] nf_nat: Already setup manip DST for ct ffff888024a09b00 (status bits 0x188) [ 147.809910][ T1009] nf_nat: Already setup manip SRC for ct ffff888024a09b00 (status bits 0x188) [ 147.815018][ T6895] kcov: kcov_task_exit: t = ffff8880270d9e00, kcov->t = ffff8880270d9e00 [ 147.830331][ T23] nf_nat: Already setup manip DST for ct ffff888024924300 (status bits 0x188) [ 147.833018][ T42] bridge2: bond_netdev_event received NETDEV_CHANGE [ 147.839249][ T23] nf_nat: Already setup manip SRC for ct ffff888024924300 (status bits 0x188) [ 147.869917][ T5760] No more buffers in queue [ 147.874440][ T5760] eth0: xmit ffff88802d0e2780 42:01:0a:80:00:01 [ 147.880705][ T5760] Added buffer head 9 to ffff888023e00600 [ 147.886784][ C1] virtqueue callback for ffff888023e00600 (ffffffff85c746c0) [ 147.887406][ T5772] ffff88802f1dc000 name hci0 bus 0 [ 147.894339][ C1] Sent skb ffff88802d0e2780 [ 147.899334][ T42] bond1: (slave bridge2): bond_slave_netdev_event called [ 147.903793][ C1] No more buffers in queue [ 147.935111][ T42] bond1: (slave bridge2): Port 2 Received link speed 0 update from adapter [ 147.943933][ T5772] hci0 ffff88802f1dc000 [ 147.966527][ T5772] hci0: [ 147.969443][ T5772] hci0: err 0x13 [ 147.973007][ T5772] hci0: cancelling interleave scan [ 147.987793][ T42] bond1: (slave bridge2): Port 2 changed speed/duplex [ 147.996109][ T42] bond1: (slave bridge1): Adding slave to tx hash array[0] [ 148.021144][ T42] net bridge2: siw: event 4 [ 148.028247][ T5772] hci0 state 0 -> 0 [ 148.032166][ T5772] channel 3 len 10 [ 148.035930][ T5772] All LE pending actions cleared [ 148.041372][ T42] bridge3: bond_netdev_event received NETDEV_CHANGE [ 148.047996][ T42] bond1: (slave bridge3): bond_slave_netdev_event called [ 148.048341][ C0] virtqueue callback for ffff88801ba68a00 (ffffffff84a02460) [ 148.062461][ C0] virtqueue interrupt with no work for ffff88801ba68800 [ 148.069388][ C0] virtqueue interrupt with no work for ffff88801ba68600 [ 148.077960][ T5758] No more buffers in queue [ 148.082452][ T5758] eth0: xmit ffff8880261cc370 42:01:0a:80:00:01 [ 148.088816][ T5758] Added buffer head 9 to ffff888023e00600 [ 148.088980][ C0] virtqueue callback for ffff888023e00000 (ffffffff85c745d0) [ 148.094615][ C1] virtqueue callback for ffff888023e00600 (ffffffff85c746c0) [ 148.102213][ C0] No more buffers in queue [ 148.110354][ C1] Sent skb ffff8880261cc370 [ 148.113968][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 148.118445][ C1] No more buffers in queue [ 148.124252][ C0] No more buffers in queue [ 148.151711][ T5850] Added buffer head 0 to ffff88801ba68a00 [ 148.151725][ T42] bond1: (slave bridge3): Port 3 Received link speed 0 update from adapter [ 148.151768][ T42] bond1: (slave bridge3): Port 3 changed speed/duplex [ 148.182481][ C0] net_ratelimit: 17 callbacks suppressed [ 148.182500][ C0] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 148.196561][ T5772] hdev hci0 [ 148.199704][ T5772] hcon ffff8880301a0000 reason 22 [ 148.204884][ T5850] nf_nat: Already setup manip DST for ct ffff888024a08180 (status bits 0x188) [ 148.213801][ T5850] nf_nat: Already setup manip SRC for ct ffff888024a08180 (status bits 0x188) [ 148.227141][ T42] bond1: (slave bridge1): Adding slave to tx hash array[0] [ 148.244143][ T5772] hcon ffff8880301a0000 conn ffff8880209d2800, err 103 [ 148.251064][ T5772] hci0 hcon ffff8880301a0000 chan ffff888030fce000 [ 148.254464][ T42] net bridge3: siw: event 4 [ 148.266419][ T3537] bond1: (slave bridge1): Send learning packet: mac 72:79:b4:ef:8b:62 vlan 0 [ 148.295985][ T1146] bridge2: bond_netdev_event received NETDEV_BONDING_INFO [ 148.305686][ T1146] bond1: (slave bridge2): bond_slave_netdev_event called [ 148.316158][ T6082] device: '3-1': device_add [ 148.316172][ T3537] bond1: (slave bridge1): Send learning packet: mac 72:79:b4:ef:8b:62 vlan 1 [ 148.320686][ T6082] kobject: '3-1' (ffff88801bbf70a8): kobject_add_internal: parent: 'usb3', set: 'devices' [ 148.320689][ C1] virtqueue callback for ffff888023e00400 (ffffffff85c745d0) [ 148.320716][ C1] No more buffers in queue [ 148.320757][ T6082] usb 3-1: ACPI companion not found [ 148.320758][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 148.320773][ T6082] usb 3-1: No ACPI support [ 148.320781][ C1] No more buffers in queue [ 148.320936][ C1] No more buffers in queue [ 148.320946][ C1] eth0: xmit ffff88801e71a3c0 42:01:0a:80:00:01 [ 148.320967][ C1] Added buffer head 9 to ffff888023e00600 [ 148.321008][ C1] virtqueue callback for ffff888023e00600 (ffffffff85c746c0) [ 148.321033][ C1] Sent skb ffff88801e71a3c0 [ 148.321057][ C1] No more buffers in queue [ 148.321331][ T6082] bus: 'usb': add device 3-1 [ 148.336692][ T1146] net bridge2: siw: event 26 [ 148.347008][ C0] wireguard: wg0: Sending keepalive packet to peer 19 (127.0.0.1:20002) [ 148.388225][ T1146] bridge3: bond_netdev_event received NETDEV_BONDING_INFO [ 148.429961][ T5772] hci0 hcon ffff8880301a0000 handle 200 [ 148.435592][ T5772] hci0: hcon ffff8880301a0000 [ 148.446961][ C1] wireguard: wg1: Receiving keepalive packet from peer 21 (127.0.0.1:20001) [ 148.449872][ T758] Added buffer head 0 to ffff888140051800 [ 148.476807][ T5772] hcon ffff8880301a0000 [ 148.482149][ T6082] PM: Adding info for usb:3-1 [ 148.487340][ T5776] ffff888026c60000 name hci3 bus 0 [ 148.491089][ T1146] bond1: (slave bridge3): bond_slave_netdev_event called [ 148.492491][ C0] virtqueue callback for ffff888140051800 (ffffffff84b746b0) [ 148.499454][ T1146] net bridge3: siw: event 26 [ 148.509251][ T5772] hci0: conn ffff8880301a0000 [ 148.512791][ T1146] bond1: (slave bridge1): Adding slave to tx hash array[0] [ 148.516663][ T5772] device: 'hci0:200': device_unregister [ 148.524364][ T1146] bridge1: bond_netdev_event received NETDEV_BONDING_INFO [ 148.547704][ T1146] bond1: (slave bridge1): bond_slave_netdev_event called [ 148.554013][ T6082] kobject: '3-1' (ffff88801bbf70a8): kobject_uevent_env [ 148.556113][ T1146] net bridge1: siw: event 26 [ 148.561703][ T6082] kobject: '3-1' (ffff88801bbf70a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.2/usb3/3-1' [ 148.567689][ T1146] bridge1: bond_netdev_event received NETDEV_CHANGELOWERSTATE [ 148.583559][ T5772] kernfs runtime_status: removing [ 148.587839][ T1146] bond1: (slave bridge1): bond_slave_netdev_event called [ 148.590303][ T5772] kernfs control: removing [ 148.601895][ T1146] net bridge1: siw: event 28 [ 148.614573][ T5776] hci3 ffff888026c60000 [ 148.618839][ T5776] hci3: [ 148.621682][ T5776] hci3: err 0x13 [ 148.645225][ T5772] kernfs runtime_suspended_time: removing [ 148.651000][ T5772] kernfs runtime_active_time: removing [ 148.665794][ T5776] hci3: cancelling interleave scan [ 148.670961][ T5776] hci3 state 0 -> 0 [ 148.674756][ T5776] All LE pending actions cleared [ 148.686492][ T6082] bus: 'usb': __driver_probe_device: matched device 3-1 with driver usb [ 148.695212][ T6082] bus: 'usb': really_probe: probing driver usb with device 3-1 [ 148.727558][ T5776] hdev hci3 [ 148.730717][ T5776] hcon ffff88805e542000 reason 22 [ 148.735772][ T5776] hcon ffff88805e542000 conn ffff8880241b3800, err 103 [ 148.742731][ T5772] kernfs autosuspend_delay_ms: removing [ 148.748467][ T5772] kernfs power: removing [ 148.752720][ T5772] kernfs device: removing [ 148.757046][ T5772] kernfs subsystem: removing [ 148.762489][ T6895] ffff88802c434000 name hci2 bus 0 [ 148.789096][ T5772] kernfs hci0:200: removing [ 148.793667][ T5772] kernfs uevent: removing [ 148.798358][ T5772] PM: Removing info for No Bus:hci0:200 [ 148.804214][ T6082] usb 3-1: usb_probe_device [ 148.808745][ T6082] usb 3-1: configuration #252 chosen from 1 choice [ 148.815791][ T6895] hci2 ffff88802c434000 [ 148.820617][ T5776] chan ffff888058c74000 orig refcnt 3 [ 148.826025][ T5776] chan ffff888058c74000 orig refcnt 4 [ 148.831477][ T6895] hci2: [ 148.834347][ T6895] hci2: err 0x13 [ 148.837982][ T6895] hci2: cancelling interleave scan [ 148.843273][ C0] No more buffers in queue [ 148.843288][ C0] eth0: xmit ffff88805baa4a00 ff:ff:ff:ff:ff:ff [ 148.843307][ C0] Added buffer head 9 to ffff888023e00200 [ 148.843326][ C0] virtqueue callback for ffff888023e00200 (ffffffff85c746c0) [ 148.854143][ C0] Sent skb ffff88805baa4a00 [ 148.854199][ C0] No more buffers in queue [ 148.881389][ T5776] chan ffff888058c74000, err 103, state BT_CONNECT [ 148.887953][ T5776] chan ffff888058c74000 state BT_CONNECT [ 148.901884][ T5772] kobject: 'hci0:200' (ffff8880301a05f0): kobject_uevent_env [ 148.909347][ T5772] kobject: 'hci0:200' (ffff8880301a05f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/hci0:200' [ 148.932711][ T5776] ffff888058c73000 state 9 [ 148.937197][ T5776] chan ffff888058c74000 orig refcnt 3 [ 148.937241][ T3365] session ffff88802d2b6200 state 8 qlen 0 [ 148.942575][ T5776] hcon ffff88805e542000 orig refcnt 1 [ 148.948678][ T3365] session ffff88802d2b6200 state 9 err 103 [ 148.961811][ T3365] session ffff88802d2b6200 state 9 [ 148.963666][ T5772] kernfs hci0:200: removing [ 148.968537][ T3365] session ffff88802d2b6200 state 9 [ 148.971511][ T5772] kobject: 'hci0:200' (ffff8880301a05f0): kobject_cleanup, parent 0000000000000000 [ 148.985887][ T3365] session ffff88802d2b6200 state 9 [ 148.985908][ T3365] sock ffff8880771f1800, sk ffff888058c73000 [ 148.985921][ T3365] parent ffff888058c73000 state BT_CLOSED [ 148.985933][ T3365] parent ffff888058c73000 [ 148.985945][ T3365] sock ffff8880771f1800, sk ffff888058c73000, how 2 [ 148.985958][ T3365] Handling sock shutdown [ 148.985973][ T3365] chan ffff888058c74000 orig refcnt 2 [ 148.985985][ T3365] chan ffff888058c74000 state BT_CLOSED [ 149.035376][ T6895] hci2 state 0 -> 0 [ 149.039234][ T6895] All LE pending actions cleared [ 149.044263][ T6895] hdev hci2 [ 149.047555][ T5776] chan ffff888058c74000 orig refcnt 3 [ 149.047557][ T5788] hcon ffff88805e542000 state BT_CLOSED [ 149.047579][ T5776] hci3 hcon ffff88805e542000 chan ffff8880247a8300 [ 149.052930][ T5788] hcon ffff88805e542000 [ 149.052944][ T5788] hci3: handle 0xc8 reason 0x13 [ 149.052959][ C0] virtqueue callback for ffff88801ba68a00 (ffffffff84a02460) [ 149.052979][ T3365] conn ffff8880241b3800 orig refcnt 2 [ 149.053018][ C0] virtqueue interrupt with no work for ffff88801ba68800 [ 149.053035][ C0] virtqueue interrupt with no work for ffff88801ba68600 [ 149.086756][ T3537] bond1: (slave bridge1): Mux Machine: Port=1, Last State=2, Curr State=3 [ 149.087040][ C0] wireguard: wg1: Sending keepalive packet to peer 10 (127.0.0.1:20003) [ 149.117745][ C0] wireguard: wg0: Retrying handshake with peer 8 ([::1]:20003/0%0) because we stopped hearing back after 15 seconds [ 149.137739][ C0] nf_nat: Already setup manip DST for ct ffff888024a08780 (status bits 0x188) [ 149.155118][ T5572] Added buffer head 0 to ffff88801ba68a00 [ 149.169138][ T5572] wireguard: wg1: No route to 127.0.0.1:20003, error -101 [ 149.192557][ T6843] sctp: sctp_close: sk:ffff88802d54d100, timeout:0 [ 149.199205][ T6843] sctp: sctp_destroy_sock: sk:ffff88802d54d100 [ 149.207762][ T1146] tipc: TX(): has been stopped [ 149.212850][ T3365] chan ffff888058c74000 state BT_CLOSED [ 149.212852][ T5776] hci3 hcon ffff88805e542000 handle 200 [ 149.212868][ T5776] hci3: hcon ffff88805e542000 [ 149.218391][ T3365] chan ffff888058c74000 state BT_CLOSED [ 149.218408][ T3365] chan ffff888058c74000 orig refcnt 2 [ 149.218420][ T3365] Sock shutdown complete err: -103 [ 149.218430][ T3365] chan ffff888058c74000 orig refcnt 1 [ 149.218443][ T3365] sk ffff888058c73000 state BT_CLOSED [ 149.218456][ T3365] chan ffff888058c74000 orig refcnt 2 [ 149.218468][ T3365] sk ffff888058c73000 [ 149.218572][ T3365] chan ffff888058c74000 orig refcnt 1 [ 149.218585][ T3365] chan ffff888058c74000 [ 149.250973][ C0] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 149.283856][ T6895] hcon ffff88802fef4000 reason 22 [ 149.288977][ T6895] hcon ffff88802fef4000 conn ffff888023708800, err 103 [ 149.295978][ T5572] nf_nat: Already setup manip DST for ct ffff888024a08180 (status bits 0x188) [ 149.304883][ T5572] nf_nat: Already setup manip SRC for ct ffff888024a08180 (status bits 0x188) [ 149.313947][ T6895] hci2 hcon ffff88802fef4000 chan ffff888030fce800 [ 149.333083][ T5772] kobject: 'hci0:200' (ffff8880301a05f0): calling ktype release [ 149.340847][ T5772] kobject: 'hci0:200': free name [ 149.353669][ T6895] hci2 hcon ffff88802fef4000 handle 200 [ 149.359298][ T6895] hci2: hcon ffff88802fef4000 [ 149.364085][ T5772] hci0 orig refcnt 10 [ 149.368108][ T5772] hcon ffff888077e96000 reason 22 [ 149.373136][ T5772] hcon ffff888077e96000 conn ffff8880209d7000, err 103 [ 149.394928][ T1146] ip6gre0 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 149.395329][ T6895] hcon ffff88802fef4000 [ 149.403336][ T1146] net ip6gre0: siw: event 6 [ 149.404118][ T1146] ip6gre0 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 149.415137][ T5772] hci0 hcon ffff888077e96000 chan ffff888030fce200 [ 149.430327][ T1146] net ip6gre0: siw: event 18 [ 149.435069][ T1146] kobject: 'rx-0' (ffff888058dba250): kobject_cleanup, parent ffff88814dfba850 [ 149.437086][ T6895] hci2: conn ffff88802fef4000 [ 149.444239][ T42] bond1: (slave bridge2): Mux Machine: Port=2, Last State=2, Curr State=3 [ 149.456196][ T6895] device: 'hci2:200': device_unregister [ 149.459344][ T1146] kobject: 'rx-0' (ffff888058dba250): auto cleanup kobject_del [ 149.462780][ T6895] kernfs runtime_status: removing [ 149.475568][ T5772] hci0 hcon ffff888077e96000 handle 201 [ 149.497221][ C0] wireguard: wg0: Sending keepalive packet to peer 19 (127.0.0.1:20002) [ 149.505975][ C0] wireguard: wg1: Receiving keepalive packet from peer 21 (127.0.0.1:20001) [ 149.514818][ T5772] hci0: hcon ffff888077e96000 [ 149.519585][ T5772] hcon ffff888077e96000 [ 149.523814][ T5772] hci0: conn ffff888077e96000 [ 149.528561][ T5772] device: 'hci0:201': device_unregister [ 149.534480][ T5776] hcon ffff88805e542000 [ 149.538923][ T5776] hci3: conn ffff88805e542000 [ 149.543642][ T5776] device: 'hci3:200': device_unregister [ 149.549314][ T6895] kernfs control: removing [ 149.553800][ T1146] kernfs rps_cpus: removing [ 149.558435][ T42] bond1: (slave bridge1): Send learning packet: mac 72:79:b4:ef:8b:62 vlan 0 [ 149.569102][ T5772] kernfs runtime_status: removing [ 149.574213][ T5772] kernfs control: removing [ 149.574223][ T42] bond1: (slave bridge1): Send learning packet: mac 72:79:b4:ef:8b:62 vlan 1 [ 149.578655][ T5772] kernfs runtime_suspended_time: removing [ 149.612884][ T5773] ffff88802bf4c000 name hci1 bus 0 [ 149.630672][ T6895] kernfs runtime_suspended_time: removing [ 149.636507][ T6895] kernfs runtime_active_time: removing [ 149.642756][ T1146] kernfs rps_flow_cnt: removing [ 149.647659][ T6895] kernfs autosuspend_delay_ms: removing [ 149.647659][ T1146] kobject: 'rx-0' (ffff888058dba250): auto cleanup 'remove' event [ 149.647674][ T1146] kobject: 'rx-0' (ffff888058dba250): kobject_uevent_env [ 149.653352][ T5776] kernfs runtime_status: removing [ 149.663064][ T1146] kobject: 'rx-0' (ffff888058dba250): kobject_uevent_env: uevent_suppress caused the event to drop! [ 149.671361][ T5772] kernfs runtime_active_time: removing [ 149.689935][ T5773] hci1 ffff88802bf4c000 [ 149.694171][ T3537] bond1: (slave bridge3): Mux Machine: Port=3, Last State=2, Curr State=3 [ 149.703029][ T6895] kernfs power: removing [ 149.707350][ T1146] kernfs rx-0: removing [ 149.711531][ T6895] kernfs device: removing [ 149.711568][ T5773] hci1: [ 149.711565][ T1146] kobject: 'rx-0' (ffff888058dba250): calling ktype release [ 149.711617][ T1146] kobject: 'rx-0': free name [ 149.716000][ T5773] hci1: err 0x13 [ 149.716011][ T5773] hci1: cancelling interleave scan [ 149.716043][ T5773] hci1 state 0 -> 0 [ 149.716055][ T5773] All LE pending actions cleared [ 149.716067][ T5773] hdev hci1 [ 149.716077][ T5773] hcon ffff88802fa28000 reason 22 [ 149.716089][ T5773] hcon ffff88802fa28000 conn ffff888141bf6000, err 103 [ 149.774301][ T5776] kernfs control: removing [ 149.778815][ T5776] kernfs runtime_suspended_time: removing [ 149.784678][ T5776] kernfs runtime_active_time: removing [ 149.790211][ T5776] kernfs autosuspend_delay_ms: removing [ 149.796030][ T5772] kernfs autosuspend_delay_ms: removing [ 149.801928][ T1146] kernfs limit: removing [ 149.805104][ T5773] hci1 hcon ffff88802fa28000 chan ffff88801e332700 [ 149.813127][ T6895] kernfs subsystem: removing [ 149.818004][ T1146] kernfs limit_max: removing [ 149.822746][ T1146] kernfs limit_min: removing [ 149.827649][ T5773] hci1 hcon ffff88802fa28000 handle 200 [ 149.833267][ T5773] hci1: hcon ffff88802fa28000 [ 149.833314][ T1146] kernfs hold_time: removing [ 149.842741][ T5773] hcon ffff88802fa28000 [ 149.847497][ T5776] kernfs power: removing [ 149.851830][ T5776] kernfs device: removing [ 149.856398][ T5772] kernfs power: removing [ 149.860819][ T5772] kernfs device: removing [ 149.865190][ T5772] kernfs subsystem: removing [ 149.870046][ T6895] kernfs hci2:200: removing [ 149.874651][ T6895] kernfs uevent: removing [ 149.879151][ T5773] hci1: conn ffff88802fa28000 [ 149.883862][ T5773] device: 'hci1:200': device_unregister [ 149.889671][ T1146] kernfs inflight: removing [ 149.894257][ T1146] kernfs byte_queue_limits: removing [ 149.901511][ T1146] kobject: 'tx-0' (ffff88802cffb420): kobject_cleanup, parent ffff88814dfba850 [ 149.901543][ T5776] kernfs subsystem: removing [ 149.911609][ T1146] kobject: 'tx-0' (ffff88802cffb420): auto cleanup kobject_del [ 149.915749][ T5772] kernfs hci0:201: removing [ 149.927843][ T5773] kernfs runtime_status: removing [ 149.933019][ T6895] PM: Removing info for No Bus:hci2:200 [ 149.933043][ T1146] kernfs tx_timeout: removing [ 149.943407][ T6895] kobject: 'hci2:200' (ffff88802fef45f0): kobject_uevent_env [ 149.944730][ T1146] kernfs traffic_class: removing [ 149.955903][ T6895] kobject: 'hci2:200' (ffff88802fef45f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/hci2:200' [ 149.967545][ T5776] kernfs hci3:200: removing [ 149.972279][ T5776] kernfs uevent: removing [ 149.976633][ T5776] PM: Removing info for No Bus:hci3:200 [ 149.982252][ T5772] kernfs uevent: removing [ 149.986663][ T5776] kobject: 'hci3:200' (ffff88805e5425f0): kobject_uevent_env [ 149.994159][ T5772] PM: Removing info for No Bus:hci0:201 [ 149.999792][ T5773] kernfs control: removing [ 150.004363][ T5773] kernfs runtime_suspended_time: removing [ 150.010316][ T5776] kobject: 'hci3:200' (ffff88805e5425f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/hci3:200' [ 150.022020][ T5772] kobject: 'hci0:201' (ffff888077e965f0): kobject_uevent_env [ 150.029419][ T5772] kobject: 'hci0:201' (ffff888077e965f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/hci0:201' [ 150.043893][ T1146] kernfs xps_cpus: removing [ 150.048168][ C0] virtqueue callback for ffff88801ba68a00 (ffffffff84a02460) [ 150.055821][ C0] virtqueue interrupt with no work for ffff88801ba68800 [ 150.062616][ T1146] kernfs xps_rxqs: removing [ 150.062745][ C0] virtqueue interrupt with no work for ffff88801ba68600 [ 150.071660][ T1146] kernfs tx_maxrate: removing [ 150.078979][ T5850] Added buffer head 0 to ffff88801ba68a00 [ 150.079199][ T1146] kobject: 'tx-0' (ffff88802cffb420): auto cleanup 'remove' event [ 150.084773][ T6895] kernfs hci2:200: removing [ 150.084806][ T6895] kobject: 'hci2:200' (ffff88802fef45f0): kobject_cleanup, parent 0000000000000000 [ 150.084824][ T6895] kobject: 'hci2:200' (ffff88802fef45f0): calling ktype release [ 150.084903][ T6895] kobject: 'hci2:200': free name [ 150.106539][ T1146] kobject: 'tx-0' (ffff88802cffb420): kobject_uevent_env [ 150.106560][ T1146] kobject: 'tx-0' (ffff88802cffb420): kobject_uevent_env: uevent_suppress caused the event to drop! [ 150.106578][ T1146] kernfs tx-0: removing [ 150.106613][ T1146] kobject: 'tx-0' (ffff88802cffb420): calling ktype release [ 150.114498][ T5776] kernfs hci3:200: removing [ 150.137832][ T1146] kobject: 'tx-0': free name [ 150.141761][ T5773] kernfs runtime_active_time: removing [ 150.164336][ T5776] kobject: 'hci3:200' (ffff88805e5425f0): kobject_cleanup, parent 0000000000000000 [ 150.173750][ T5776] kobject: 'hci3:200' (ffff88805e5425f0): calling ktype release [ 150.181504][ T6895] hci2 orig refcnt 12 [ 150.185525][ T6895] hcon ffff888079fb0000 reason 22 [ 150.190557][ T6895] hcon ffff888079fb0000 conn ffff888023709000, err 103 [ 150.197556][ T5773] kernfs autosuspend_delay_ms: removing [ 150.203218][ T5773] kernfs power: removing [ 150.207560][ T6895] chan ffff88807a2e4000 orig refcnt 2 [ 150.212962][ T6895] chan ffff88807a2e4000, err 103, state BT_DISCONN [ 150.219578][ T5776] kobject: 'hci3:200': free name [ 150.224574][ T5776] hci3 orig refcnt 10 [ 150.235485][ T5772] kernfs hci0:201: removing [ 150.240043][ T5772] kobject: 'hci0:201' (ffff888077e965f0): kobject_cleanup, parent 0000000000000000 [ 150.240079][ T1146] kernfs queues: removing [ 150.249626][ T5772] kobject: 'hci0:201' (ffff888077e965f0): calling ktype release [ 150.253901][ T1146] kobject: 'queues' (ffff88814dfba850): kobject_cleanup, parent 0000000000000000 [ 150.261606][ T6895] chan ffff88807a2e4000 orig refcnt 3 [ 150.261621][ T6895] hcon ffff888079fb0000 orig refcnt 1 [ 150.261668][ T6895] chan ffff88807a2e4000 conn ffff888023709000 [ 150.278451][ T5788] hcon ffff888079fb0000 state BT_CLOSED [ 150.282126][ T5773] kernfs device: removing [ 150.288608][ T5788] hcon ffff888079fb0000 [ 150.293781][ T5772] kobject: 'hci0:201': free name [ 150.299329][ T5788] hci2: handle 0xc9 reason 0x13 [ 150.302273][ T6895] last peer [ 150.315187][ T1146] kobject: 'queues' (ffff88814dfba850): calling ktype release [ 150.315206][ T1146] kobject: 'queues' (ffff88814dfba850): kset_release [ 150.322730][ T6895] dev ffff88807e7bcf58 removing last peer ffff88807663a380 [ 150.322748][ T6895] chan ffff88807a2e4000 orig refcnt 2 [ 150.322760][ T6895] chan ffff88807a2e4000 orig refcnt 2 [ 150.322804][ T5772] hci0 orig refcnt 7 [ 150.322817][ T5772] hdev hci0 event 4 [ 150.322873][ T5772] hdev 0000000000000000 len 8 [ 150.322918][ T5772] hci0: Cleanup of MSFT extension [ 150.323186][ T5772] hdev hci0 event 8 [ 150.332572][ T1146] kobject: 'queues': free name [ 150.336945][ T5773] kernfs subsystem: removing [ 150.379400][ T5772] hci0 orig refcnt 6 [ 150.384139][ T5772] channel 3 len 6 [ 150.387835][ T5772] channel 3 len 8 [ 150.391628][ T5772] hdev hci0 event 2 [ 150.395495][ T5772] hdev 0000000000000000 len 8 [ 150.400289][ C0] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 150.408716][ T5850] nf_nat: Already setup manip DST for ct ffff888024a08180 (status bits 0x188) [ 150.417610][ T5850] nf_nat: Already setup manip SRC for ct ffff888024a08180 (status bits 0x188) [ 150.426919][ T5773] kernfs hci1:200: removing [ 150.431636][ T5773] kernfs uevent: removing [ 150.436005][ T5773] PM: Removing info for No Bus:hci1:200 [ 150.436082][ T1146] kernfs runtime_status: removing [ 150.446768][ T5773] kobject: 'hci1:200' (ffff88802fa285f0): kobject_uevent_env [ 150.454290][ T1146] kernfs control: removing [ 150.458763][ T5772] kernfs runtime_status: removing [ 150.464094][ T1146] kernfs runtime_suspended_time: removing [ 150.469839][ T5772] kernfs control: removing [ 150.474485][ T5772] kernfs runtime_suspended_time: removing [ 150.480977][ T5772] kernfs runtime_active_time: removing [ 150.486742][ T5773] kobject: 'hci1:200' (ffff88802fa285f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/hci1:200' [ 150.498372][ T5772] kernfs autosuspend_delay_ms: removing [ 150.505866][ T1146] kernfs runtime_active_time: removing [ 150.511384][ T5773] kernfs hci1:200: removing [ 150.516023][ T5772] kernfs power: removing [ 150.520515][ T1146] kernfs autosuspend_delay_ms: removing [ 150.522423][ T5773] kobject: 'hci1:200' (ffff88802fa285f0): kobject_cleanup, parent 0000000000000000 [ 150.527698][ T1146] kernfs power: removing [ 150.535406][ T5773] kobject: 'hci1:200' (ffff88802fa285f0): calling ktype release [ 150.540011][ T1146] kernfs subsystem: removing [ 150.552316][ T5773] kobject: 'hci1:200': free name [ 150.557531][ T5772] kernfs device: removing [ 150.561923][ T5772] kernfs subsystem: removing [ 150.566614][ C0] wireguard: wg0: Sending keepalive packet to peer 19 (127.0.0.1:20002) [ 150.575336][ T5773] hci1 orig refcnt 14 [ 150.579455][ T5772] kernfs rfkill5: removing [ 150.584682][ T1146] kernfs ip6gre0: removing [ 150.589155][ T1146] kernfs uevent: removing [ 150.593603][ T5772] kernfs uevent: removing [ 150.598042][ T5772] kernfs name: removing [ 150.602253][ T5772] kernfs type: removing [ 150.606506][ T5772] kernfs index: removing [ 150.610800][ T5772] kernfs persistent: removing [ 150.615698][ T5772] kernfs state: removing [ 150.620072][ T5772] kernfs soft: removing [ 150.624264][ T5772] kernfs hard: removing [ 150.628553][ T5772] kernfs hard_block_reasons: removing [ 150.633977][ T5772] PM: Removing info for No Bus:rfkill5 [ 150.633981][ T1146] kernfs rx_packets: removing [ 150.634012][ T1146] kernfs tx_packets: removing [ 150.639520][ T5772] kobject: 'rfkill5' (ffff888140721110): kobject_uevent_env [ 150.639570][ T5772] kobject: 'rfkill5' (ffff888140721110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/rfkill5' [ 150.667734][ T1146] kernfs rx_bytes: removing [ 150.672290][ T1146] kernfs tx_bytes: removing [ 150.677032][ T1146] kernfs rx_errors: removing [ 150.681850][ T5772] kernfs rfkill5: removing [ 150.687024][ T5772] kobject: 'rfkill5' (ffff888140721110): kobject_cleanup, parent 0000000000000000 [ 150.696290][ T5772] kobject: 'rfkill5' (ffff888140721110): calling ktype release [ 150.704172][ T1146] kernfs tx_errors: removing [ 150.704448][ T5772] kobject: 'rfkill5': free name [ 150.713846][ T1146] kernfs rx_dropped: removing [ 150.718963][ T5772] kernfs runtime_status: removing [ 150.724081][ T5772] kernfs control: removing [ 150.730828][ T5772] kernfs runtime_suspended_time: removing [ 150.736713][ T5772] kernfs runtime_active_time: removing [ 150.742470][ T5772] kernfs autosuspend_delay_ms: removing [ 150.748251][ T1146] kernfs tx_dropped: removing [ 150.753068][ T5772] kernfs power: removing [ 150.757375][ T5772] kernfs subsystem: removing [ 150.762191][ T5772] kernfs hci0: removing [ 150.766397][ T5772] kernfs uevent: removing [ 150.771043][ T5772] PM: Removing info for No Bus:hci0 [ 150.771066][ T1146] kernfs multicast: removing [ 150.776320][ T5772] kobject: 'hci0' (ffff88802f1dd490): kobject_uevent_env [ 150.781581][ T49] bond1: (slave bridge1): Send learning packet: mac 72:79:b4:ef:8b:62 vlan 0 [ 150.788990][ T5772] kobject: 'hci0' (ffff88802f1dd490): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0' [ 150.797234][ T1146] kernfs collisions: removing [ 150.797272][ T1146] kernfs rx_length_errors: removing [ 150.817795][ T49] bond1: (slave bridge1): Send learning packet: mac 72:79:b4:ef:8b:62 vlan 1 [ 150.819457][ T1146] kernfs rx_over_errors: removing [ 150.831825][ T1146] kernfs rx_crc_errors: removing [ 150.836794][ T5772] kernfs hci0: removing [ 150.841242][ T5772] hci0 orig refcnt 2 [ 150.841266][ T1146] kernfs rx_frame_errors: removing [ 150.845141][ T5772] kobject: 'hci0' (ffff88802f1dd490): kobject_cleanup, parent 0000000000000000 [ 150.851788][ T1146] kernfs rx_fifo_errors: removing [ 150.860662][ T5772] kobject: 'hci0' (ffff88802f1dd490): calling ktype release [ 150.864336][ T1146] kernfs rx_missed_errors: removing [ 150.873213][ T5772] All LE connection parameters were removed [ 150.883881][ T5772] hci0: Unregister MSFT extension [ 150.886144][ T1146] kernfs tx_aborted_errors: removing [ 150.889093][ T5772] kobject: 'hci0': free name [ 150.899569][ T5572] nf_nat: Already setup manip DST for ct ffff888024a09b00 (status bits 0x188) [ 150.903358][ T1146] kernfs tx_carrier_errors: removing [ 150.908476][ T5572] nf_nat: Already setup manip SRC for ct ffff888024a09b00 (status bits 0x188) [ 150.913904][ T1146] kernfs tx_fifo_errors: removing [ 150.928093][ T1146] kernfs tx_heartbeat_errors: removing [ 150.933817][ T1146] kernfs tx_window_errors: removing [ 150.939155][ T1146] kernfs rx_compressed: removing [ 150.944214][ T1146] kernfs tx_compressed: removing [ 150.949204][ T1146] kernfs rx_nohandler: removing [ 150.954406][ T1146] kernfs statistics: removing [ 150.959135][ T1146] kernfs netdev_group: removing [ 150.964231][ T1146] kernfs type: removing [ 150.968419][ T1146] kernfs dev_id: removing [ 150.972958][ T1146] kernfs dev_port: removing [ 150.977513][ T1146] kernfs iflink: removing [ 150.981857][ T1146] kernfs ifindex: removing [ 150.986561][ T1146] kernfs name_assign_type: removing [ 150.991819][ T1146] kernfs addr_assign_type: removing [ 150.997129][ T1146] kernfs addr_len: removing [ 151.001709][ T1146] kernfs link_mode: removing [ 151.006403][ T1146] kernfs address: removing [ 151.010862][ T1146] kernfs broadcast: removing [ 151.015529][ T1146] kernfs speed: removing [ 151.019800][ T1146] kernfs duplex: removing [ 151.024206][ T1146] kernfs dormant: removing [ 151.028659][ T1146] kernfs testing: removing [ 151.033111][ T1146] kernfs operstate: removing [ 151.037797][ T1146] kernfs carrier_changes: removing [ 151.042989][ T1146] kernfs ifalias: removing [ 151.047480][ T1146] kernfs carrier: removing [ 151.048077][ C0] virtqueue callback for ffff88801ba68a00 (ffffffff84a02460) [ 151.051935][ T1146] kernfs mtu: removing [ 151.059304][ C0] virtqueue interrupt with no work for ffff88801ba68800 [ 151.063381][ T1146] kernfs flags: removing [ 151.070440][ C0] virtqueue interrupt with no work for ffff88801ba68600 [ 151.081683][ C1] wireguard: wg2: Handshake for peer 12 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 6) [ 151.093588][ T1146] kernfs tx_queue_len: removing [ 151.093591][ T5572] Added buffer head 0 to ffff88801ba68a00 [ 151.098493][ T1146] kernfs gro_flush_timeout: removing [ 151.110046][ T1146] kernfs napi_defer_hard_irqs: removing [ 151.115636][ T1146] kernfs phys_port_id: removing [ 151.120680][ T1146] kernfs phys_port_name: removing [ 151.125752][ T1146] kernfs phys_switch_id: removing [ 151.131118][ T1146] kernfs proto_down: removing [ 151.135817][ T1146] kernfs carrier_up_count: removing [ 151.141154][ T1146] kernfs carrier_down_count: removing [ 151.146562][ T1146] kernfs threaded: removing [ 151.151176][ T1146] PM: Removing info for No Bus:ip6gre0 [ 151.156658][ T1146] kobject: 'ip6gre0' (ffff88807da2c6a8): kobject_uevent_env [ 151.164080][ T1146] kobject: 'ip6gre0' (ffff88807da2c6a8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 151.175238][ T1146] kernfs ip6gre0: removing [ 151.179971][ T6895] bluetooth hci2 bt0: bond_netdev_event received NETDEV_GOING_DOWN [ 151.188954][ T6895] net bt0: siw: event 10 [ 151.193584][ T6895] bluetooth hci2 bt0: bond_netdev_event received NETDEV_DOWN [ 151.202201][ T6895] net bt0: siw: event 2 [ 151.214952][ T6895] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::aaaa:aaff:feaa:aaaa in wq:ffffffff976bb4d8 [ 151.218622][ T1146] kobject: 'ip6gre0' (ffff88807da2c6a8): kobject_cleanup, parent 0000000000000000 [ 151.228056][ T5850] hci2 orig refcnt 11 [ 151.235951][ T1146] kobject: 'ip6gre0' (ffff88807da2c6a8): calling ktype release [ 151.239703][ T6895] chan ffff88807a2e4000 orig refcnt 1 [ 151.248522][ T1146] kobject: 'ip6gre0': free name [ 151.252896][ T6895] chan ffff88807a2e4000 [ 151.269846][ T5772] Deleting ac1414aa/32 dsfield=0x00 t=ffff888018eb8930 [ 151.276931][ T6895] hci2 hcon ffff888079fb0000 chan ffff888030fcea00 [ 151.283662][ T5772] In tnode_resize ffff88802f07ed20 inflate_threshold=50 threshold=25 [ 151.292157][ T6895] hci2 hcon ffff888079fb0000 handle 201 [ 151.297735][ T6895] hci2: hcon ffff888079fb0000 [ 151.302736][ T5776] hcon ffff88805e546000 reason 22 [ 151.307798][ T5776] hcon ffff88805e546000 conn ffff8880241b6000, err 103 [ 151.314751][ T5772] In tnode_resize ffff88802bea6320 inflate_threshold=50 threshold=25 [ 151.323848][ T5776] hci3 hcon ffff88805e546000 chan ffff8880247a8100 [ 151.330469][ T6895] hcon ffff888079fb0000 [ 151.334763][ T5773] hcon ffff88802fa2c000 reason 22 [ 151.339814][ T5773] hcon ffff88802fa2c000 conn ffff888023e9e000, err 103 [ 151.346752][ T5776] hci3 hcon ffff88805e546000 handle 201 [ 151.352419][ T6895] hci2: conn ffff888079fb0000 [ 151.357114][ T6895] device: 'hci2:201': device_unregister [ 151.362980][ T5772] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:172.20.20.170 in wq:ffff888079ea8fd8 [ 151.373298][ T5776] hci3: hcon ffff88805e546000 [ 151.378005][ T5776] hcon ffff88805e546000 [ 151.382240][ T5773] hci1 hcon ffff88802fa2c000 chan ffff88801e332200 [ 151.388831][ T6895] kernfs runtime_status: removing [ 151.394206][ T5772] syz_tun (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 151.402783][ T5773] hci1 hcon ffff88802fa2c000 handle 201 [ 151.408352][ T5773] hci1: hcon ffff88802fa2c000 [ 151.413171][ T5776] hci3: conn ffff88805e546000 [ 151.417935][ T5776] device: 'hci3:201': device_unregister [ 151.424124][ T6895] kernfs control: removing [ 151.428651][ T6895] kernfs runtime_suspended_time: removing [ 151.434713][ T5772] net syz_tun: siw: event 6 [ 151.439974][ T5772] syz_tun (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 151.448402][ T5773] hcon ffff88802fa2c000 [ 151.452788][ T5776] kernfs runtime_status: removing [ 151.457942][ T5773] hci1: conn ffff88802fa2c000 [ 151.462665][ T5773] device: 'hci1:201': device_unregister [ 151.468471][ T5572] nf_nat: Already setup manip DST for ct ffff888024a08180 (status bits 0x188) [ 151.477389][ T5572] nf_nat: Already setup manip SRC for ct ffff888024a08180 (status bits 0x188) [ 151.486503][ T5776] kernfs control: removing [ 151.491078][ T5776] kernfs runtime_suspended_time: removing [ 151.497409][ T5772] net syz_tun: siw: event 18 [ 151.502196][ T5772] kobject: 'rx-0' (ffff88805e603450): kobject_cleanup, parent ffff88801cf48a50 [ 151.515187][ T6895] kernfs runtime_active_time: removing [ 151.520787][ T5773] kernfs runtime_status: removing [ 151.526552][ T5773] kernfs control: removing [ 151.531051][ T5773] kernfs runtime_suspended_time: removing [ 151.537049][ T5772] kobject: 'rx-0' (ffff88805e603450): auto cleanup kobject_del [ 151.544821][ T5776] kernfs runtime_active_time: removing [ 151.550572][ T5776] kernfs autosuspend_delay_ms: removing [ 151.556326][ T6895] kernfs autosuspend_delay_ms: removing [ 151.561951][ T6895] kernfs power: removing [ 151.566408][ T5776] kernfs power: removing [ 151.570727][ T5776] kernfs device: removing [ 151.575594][ T5776] kernfs subsystem: removing [ 151.580383][ T5772] kernfs rps_cpus: removing [ 151.584955][ T5772] kernfs rps_flow_cnt: removing [ 151.590030][ T5773] kernfs runtime_active_time: removing [ 151.595567][ T6895] kernfs device: removing [ 151.600023][ T6895] kernfs subsystem: removing [ 151.604680][ T6895] kernfs hci2:201: removing [ 151.609397][ T5772] kobject: 'rx-0' (ffff88805e603450): auto cleanup 'remove' event [ 151.617234][ T5772] kobject: 'rx-0' (ffff88805e603450): kobject_uevent_env [ 151.628178][ T5776] kernfs hci3:201: removing [ 151.633116][ T5773] kernfs autosuspend_delay_ms: removing [ 151.638806][ T5773] kernfs power: removing [ 151.643130][ T5773] kernfs device: removing [ 151.647482][ T5773] kernfs subsystem: removing [ 151.652426][ T5772] kobject: 'rx-0' (ffff88805e603450): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' [ 151.668744][ T6895] kernfs uevent: removing [ 151.673161][ T5776] kernfs uevent: removing [ 151.677513][ T5776] PM: Removing info for No Bus:hci3:201 [ 151.683243][ T6895] PM: Removing info for No Bus:hci2:201 [ 151.688837][ T6895] kobject: 'hci2:201' (ffff888079fb05f0): kobject_uevent_env [ 151.696546][ T5772] kernfs rx-0: removing [ 151.700802][ T5776] kobject: 'hci3:201' (ffff88805e5465f0): kobject_uevent_env [ 151.708253][ T5776] kobject: 'hci3:201' (ffff88805e5465f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/hci3:201' [ 151.720189][ T5105] sd 0:0:1:0: cmd ffff8880249a7190 CDB: 0x2a [ 151.720202][ T5772] kobject: 'rx-0' (ffff88805e603450): calling ktype release [ 151.720240][ T5772] kobject: 'rx-0': free name [ 151.726288][ T5105] Added buffer head 48 to ffff888021148400 [ 151.733639][ C0] virtqueue callback for ffff888021148400 (ffffffff857f2980) [ 151.733664][ C0] sd 0:0:1:0: cmd ffff8880249a7190 response 0 status 0x0 sense_len 0 [ 151.733678][ C0] No more buffers in queue [ 151.738682][ T24] sd 0:0:1:0: cmd ffff888022206910 CDB: 0x35 [ 151.738712][ T24] Added buffer head 48 to ffff888021148400 [ 151.738820][ C0] virtqueue callback for ffff888021148400 (ffffffff857f2980) [ 151.738834][ C0] sd 0:0:1:0: cmd ffff888022206910 response 0 status 0x0 sense_len 0 [ 151.738846][ C0] No more buffers in queue [ 151.744861][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff976bb4d8 is addr:fe80::aaaa:aaff:feaa:aaaa for cmd:2 at entry:ffff88801b77d580 [ 151.814453][ T5773] kernfs hci1:201: removing [ 151.819056][ T5773] kernfs uevent: removing [ 151.823550][ T97] sd 0:0:1:0: cmd ffff8880249a7550 CDB: 0x2a [ 151.829692][ T97] Added buffer head 48 to ffff888021148400 [ 151.835682][ T6895] kobject: 'hci2:201' (ffff888079fb05f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/hci2:201' [ 151.847757][ T5773] PM: Removing info for No Bus:hci1:201 [ 151.853399][ C0] virtqueue callback for ffff888021148400 (ffffffff857f2980) [ 151.853429][ C0] sd 0:0:1:0: cmd ffff8880249a7550 response 0 status 0x0 sense_len 0 [ 151.853451][ C0] No more buffers in queue [ 151.873834][ T5776] kernfs hci3:201: removing [ 151.878381][ T5776] kobject: 'hci3:201' (ffff88805e5465f0): kobject_cleanup, parent 0000000000000000 [ 151.887992][ T6895] kernfs hci2:201: removing [ 151.892541][ T6895] kobject: 'hci2:201' (ffff888079fb05f0): kobject_cleanup, parent 0000000000000000 [ 151.901873][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888079ea8fd8 is addr:172.20.20.170 for cmd:2 at entry:ffff888030170580 [ 151.915739][ T5776] kobject: 'hci3:201' (ffff88805e5465f0): calling ktype release [ 151.923615][ T5776] kobject: 'hci3:201': free name [ 151.928986][ T97] sd 0:0:1:0: cmd ffff888022206910 CDB: 0x35 [ 151.935074][ T97] Added buffer head 48 to ffff888021148400 [ 151.940938][ T5773] kobject: 'hci1:201' (ffff88802fa2c5f0): kobject_uevent_env [ 151.948348][ C0] virtqueue callback for ffff888021148400 (ffffffff857f2980) [ 151.948376][ C0] sd 0:0:1:0: cmd ffff888022206910 response 0 status 0x0 sense_len 0 [ 151.948394][ C0] No more buffers in queue [ 151.954953][ T3537] bond1: (slave bridge1): Send learning packet: mac 72:79:b4:ef:8b:62 vlan 0 [ 151.956618][ T5776] hci3 orig refcnt 7 [ 151.964680][ T3537] bond1: (slave bridge1): Send learning packet: mac 72:79:b4:ef:8b:62 vlan 1 [ 151.969073][ T6895] kobject: 'hci2:201' (ffff888079fb05f0): calling ktype release [ 151.969129][ T6895] kobject: 'hci2:201': free name [ 152.004043][ T5773] kobject: 'hci1:201' (ffff88802fa2c5f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/hci1:201' [ 152.015583][ T5776] hdev hci3 event 4 [ 152.019479][ T5776] hdev 0000000000000000 len 8 [ 152.024189][ T5776] hci3: Cleanup of MSFT extension [ 152.029436][ T5773] kernfs hci1:201: removing [ 152.034002][ T5773] kobject: 'hci1:201' (ffff88802fa2c5f0): kobject_cleanup, parent 0000000000000000 [ 152.043818][ T5776] hdev hci3 event 8 [ 152.047706][ T5776] hci3 orig refcnt 6 [ 152.051627][ C0] virtqueue callback for ffff88801ba68a00 (ffffffff84a02460) [ 152.051697][ C0] virtqueue interrupt with no work for ffff88801ba68800 [ 152.051704][ C0] virtqueue interrupt with no work for ffff88801ba68600 [ 152.073563][ T8] Added buffer head 0 to ffff88801ba68a00 [ 152.079412][ T5773] kobject: 'hci1:201' (ffff88802fa2c5f0): calling ktype release [ 152.087257][ T5773] kobject: 'hci1:201': free name [ 152.092339][ T6895] hci2 orig refcnt 10 [ 152.096367][ T6895] hdev hci2 event 4 [ 152.100291][ T6895] hdev 0000000000000000 len 8 [ 152.105337][ T6895] hci2: Cleanup of MSFT extension [ 152.110443][ T5773] hci1 orig refcnt 11 [ 152.114545][ T5773] hci1 hcon ffff88807c37c000 handle 64 [ 152.120368][ T5772] kernfs limit: removing [ 152.124700][ T5772] kernfs limit_max: removing [ 152.129704][ T6895] hdev hci2 event 8 [ 152.133525][ T6895] hci2 orig refcnt 9 [ 152.137441][ T6895] channel 3 len 6 [ 152.141177][ T5776] channel 3 len 6 [ 152.144877][ T5776] channel 3 len 8 [ 152.148542][ T5776] hdev hci3 event 2 [ 152.152558][ T5773] hci1: hcon ffff88807c37c000 [ 152.158128][ T5773] hcon ffff88807c37c000 [ 152.162436][ T5772] kernfs limit_min: removing [ 152.167078][ T5772] kernfs hold_time: removing [ 152.171801][ T5773] hci1: conn ffff88807c37c000 [ 152.176499][ T5773] hci1: big 0x00 sync_handle 0xffff [ 152.181816][ T6895] channel 3 len 8 [ 152.185585][ T6895] hdev hci2 event 2 [ 152.189414][ T6895] hdev 0000000000000000 len 8 [ 152.194187][ T5776] hdev 0000000000000000 len 8 [ 152.199021][ T5776] kernfs runtime_status: removing [ 152.204344][ T5773] hci1: conn ffff88807c37c000 [ 152.209131][ T5773] device: 'hci1:64': device_unregister [ 152.214708][ T5776] kernfs control: removing [ 152.219190][ T5776] kernfs runtime_suspended_time: removing [ 152.225173][ T5772] kernfs inflight: removing [ 152.229796][ T5773] kernfs runtime_status: removing [ 152.235005][ T5772] kernfs byte_queue_limits: removing [ 152.240399][ T6895] kernfs runtime_status: removing [ 152.245578][ T6895] kernfs control: removing [ 152.250095][ T6895] kernfs runtime_suspended_time: removing [ 152.255967][ T5772] kobject: 'tx-0' (ffff88805e47b420): kobject_cleanup, parent ffff88801cf48a50 [ 152.265461][ T5772] kobject: 'tx-0' (ffff88805e47b420): auto cleanup kobject_del [ 152.273268][ T6895] kernfs runtime_active_time: removing [ 152.279173][ T6895] kernfs autosuspend_delay_ms: removing [ 152.284973][ T5773] kernfs control: removing [ 152.289496][ T5773] kernfs runtime_suspended_time: removing [ 152.302219][ T5776] kernfs runtime_active_time: removing [ 152.307831][ T5772] kernfs tx_timeout: removing [ 152.312763][ T5772] kernfs traffic_class: removing [ 152.317827][ T5772] kernfs xps_cpus: removing [ 152.322358][ T5772] kernfs xps_rxqs: removing [ 152.327045][ T5773] kernfs runtime_active_time: removing [ 152.332575][ T5773] kernfs autosuspend_delay_ms: removing [ 152.338392][ T5776] kernfs autosuspend_delay_ms: removing [ 152.344181][ T5773] kernfs power: removing [ 152.348540][ T5773] kernfs device: removing [ 152.353105][ T5773] kernfs subsystem: removing [ 152.357957][ T5772] kernfs tx_maxrate: removing [ 152.363167][ T5776] kernfs power: removing [ 152.367712][ T5776] kernfs device: removing [ 152.372260][ T5776] kernfs subsystem: removing [ 152.377360][ T5772] kobject: 'tx-0' (ffff88805e47b420): auto cleanup 'remove' event [ 152.385369][ T6895] kernfs power: removing [ 152.389690][ T6895] kernfs device: removing [ 152.394051][ T6895] kernfs subsystem: removing [ 152.398944][ T5773] kernfs hci1:64: removing [ 152.403401][ T5773] kernfs uevent: removing [ 152.407894][ T5772] kobject: 'tx-0' (ffff88805e47b420): kobject_uevent_env [ 152.415455][ T5773] PM: Removing info for No Bus:hci1:64 [ 152.421017][ T5773] kobject: 'hci1:64' (ffff88807c37c5f0): kobject_uevent_env [ 152.428390][ T6895] kernfs rfkill7: removing [ 152.432972][ T5772] kobject: 'tx-0' (ffff88805e47b420): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' [ 152.444352][ T6895] kernfs uevent: removing [ 152.455484][ T5776] kernfs rfkill8: removing [ 152.460044][ T5776] kernfs uevent: removing [ 152.464443][ T5776] kernfs name: removing [ 152.469284][ T5773] kobject: 'hci1:64' (ffff88807c37c5f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/hci1:64' [ 152.486277][ T6895] kernfs name: removing [ 152.490550][ T6895] kernfs type: removing [ 152.494739][ T6895] kernfs index: removing [ 152.499326][ T5772] kernfs tx-0: removing [ 152.503571][ T5772] kobject: 'tx-0' (ffff88805e47b420): calling ktype release [ 152.510964][ T5772] kobject: 'tx-0': free name [ 152.515600][ T5772] kernfs queues: removing [ 152.520059][ T5776] kernfs type: removing [ 152.524295][ T5773] kernfs hci1:64: removing [ 152.528908][ T5772] kobject: 'queues' (ffff88801cf48a50): kobject_cleanup, parent 0000000000000000 [ 152.538273][ T5572] nf_nat: Already setup manip DST for ct ffff888024a08180 (status bits 0x188) [ 152.547391][ T5572] nf_nat: Already setup manip SRC for ct ffff888024a08180 (status bits 0x188) [ 152.556430][ T5773] kobject: 'hci1:64' (ffff88807c37c5f0): kobject_cleanup, parent 0000000000000000 [ 152.565786][ T6895] kernfs persistent: removing [ 152.570620][ T6895] kernfs state: removing [ 152.575414][ T6895] kernfs soft: removing [ 152.579750][ T5772] kobject: 'queues' (ffff88801cf48a50): calling ktype release [ 152.587296][ T5772] kobject: 'queues' (ffff88801cf48a50): kset_release [ 152.594104][ T5773] kobject: 'hci1:64' (ffff88807c37c5f0): calling ktype release [ 152.601925][ T6895] kernfs hard: removing [ 152.606101][ T6895] kernfs hard_block_reasons: removing [ 152.611654][ T5773] kobject: 'hci1:64': free name [ 152.616585][ T5773] hci1 orig refcnt 8 [ 152.620548][ T5772] kobject: 'queues': free name [ 152.625398][ T5776] kernfs index: removing [ 152.629801][ T5776] kernfs persistent: removing [ 152.634551][ T5776] kernfs state: removing [ 152.638897][ T5776] kernfs soft: removing [ 152.643190][ T6895] PM: Removing info for No Bus:rfkill7 [ 152.648720][ T6895] kobject: 'rfkill7' (ffff88814075a110): kobject_uevent_env [ 152.656121][ T5773] hcon ffff88801ff40000 reason 22 [ 152.661262][ T5776] kernfs hard: removing [ 152.665466][ T5776] kernfs hard_block_reasons: removing [ 152.670939][ T5773] hcon ffff88801ff40000 conn ffff88802c758600, err 103 [ 152.678154][ T5773] sock ffff88801abd2000 state 8 [ 152.683212][ T6895] kobject: 'rfkill7' (ffff88814075a110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/rfkill7' [ 152.694897][ T5776] PM: Removing info for No Bus:rfkill8 [ 152.700388][ T5776] kobject: 'rfkill8' (ffff888142b77110): kobject_uevent_env [ 152.707817][ T5772] kernfs runtime_status: removing [ 152.713153][ T5772] kernfs control: removing [ 152.717764][ T5772] kernfs runtime_suspended_time: removing [ 152.723590][ T5773] sk ffff88801abd2000, conn ffff88802c758600, err 103 [ 152.730600][ T5773] hci1 hcon ffff88801ff40000 handle 200 [ 152.736480][ T5776] kobject: 'rfkill8' (ffff888142b77110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/rfkill8' [ 152.747947][ T5772] kernfs runtime_active_time: removing [ 152.753815][ T5773] hci1: hcon ffff88801ff40000 [ 152.758707][ T5773] hcon ffff88801ff40000 [ 152.772188][ T6895] kernfs rfkill7: removing [ 152.776876][ T6895] kobject: 'rfkill7' (ffff88814075a110): kobject_cleanup, parent 0000000000000000 [ 152.786810][ T5776] kernfs rfkill8: removing [ 152.791386][ T5773] hci1: conn ffff88801ff40000 [ 152.796181][ T5772] kernfs autosuspend_delay_ms: removing [ 152.801942][ T5776] kobject: 'rfkill8' (ffff888142b77110): kobject_cleanup, parent 0000000000000000 [ 152.811394][ T6895] kobject: 'rfkill7' (ffff88814075a110): calling ktype release [ 152.819040][ T5773] kobject: 'hci1:200' (ffff88801ff405f0): kobject_cleanup, parent 0000000000000000 [ 152.828546][ T5772] kernfs power: removing [ 152.832878][ T5772] kernfs subsystem: removing [ 152.837590][ T5776] kobject: 'rfkill8' (ffff888142b77110): calling ktype release [ 152.845289][ T6895] kobject: 'rfkill7': free name [ 152.850237][ T5773] kobject: 'hci1:200' (ffff88801ff405f0): calling ktype release [ 152.859626][ T5776] kobject: 'rfkill8': free name [ 152.864729][ T6895] kernfs runtime_status: removing [ 152.869987][ T6895] kernfs control: removing [ 152.874512][ T5773] kobject: 'hci1:200': free name [ 152.879487][ T5773] hci1 orig refcnt 7 [ 152.883386][ T5773] hdev hci1 event 4 [ 152.887774][ T5772] kernfs syz_tun: removing [ 152.892286][ T5776] kernfs runtime_status: removing [ 152.897465][ T5776] kernfs control: removing [ 152.901953][ T5776] kernfs runtime_suspended_time: removing [ 152.907799][ T5773] hdev 0000000000000000 len 8 [ 152.912530][ T5773] hci1: Cleanup of MSFT extension [ 152.917784][ T5776] kernfs runtime_active_time: removing [ 152.923288][ T5776] kernfs autosuspend_delay_ms: removing [ 152.929205][ T5773] hdev hci1 event 8 [ 152.933062][ T5773] hci1 orig refcnt 6 [ 152.937301][ T5772] kernfs uevent: removing [ 152.941685][ T6895] kernfs runtime_suspended_time: removing [ 152.947617][ T6895] kernfs runtime_active_time: removing [ 152.953125][ T6895] kernfs autosuspend_delay_ms: removing [ 152.958935][ T5773] channel 3 len 6 [ 152.962654][ T5773] channel 3 len 8 [ 152.966526][ T5776] kernfs power: removing [ 152.970895][ T5776] kernfs subsystem: removing [ 152.975506][ T5776] kernfs hci3: removing [ 152.979866][ T5773] hdev hci1 event 2 [ 152.983737][ T5773] hdev 0000000000000000 len 8 [ 152.988780][ T6895] kernfs power: removing [ 152.993434][ T6895] kernfs subsystem: removing [ 152.998317][ T5772] kernfs tun_flags: removing [ 153.002949][ T5772] kernfs owner: removing [ 153.007301][ T5772] kernfs group: removing [ 153.011586][ T5772] kernfs rx_packets: removing [ 153.016304][ T5772] kernfs tx_packets: removing [ 153.021267][ T5776] kernfs uevent: removing [ 153.025655][ T5776] PM: Removing info for No Bus:hci3 [ 153.030959][ T6895] kernfs hci2: removing [ 153.035250][ T5773] kernfs runtime_status: removing [ 153.041135][ T5776] kobject: 'hci3' (ffff888026c61490): kobject_uevent_env [ 153.048201][ C0] virtqueue callback for ffff88801ba68a00 (ffffffff84a02460) [ 153.048257][ C0] virtqueue interrupt with no work for ffff88801ba68800 [ 153.048268][ C0] virtqueue interrupt with no work for ffff88801ba68600 [ 153.069844][ T8] Added buffer head 0 to ffff88801ba68a00 [ 153.075749][ T5773] kernfs control: removing [ 153.080418][ T5773] kernfs runtime_suspended_time: removing [ 153.086196][ T5773] kernfs runtime_active_time: removing [ 153.091843][ T6895] kernfs uevent: removing [ 153.096567][ T5772] kernfs rx_bytes: removing [ 153.101352][ T5772] kernfs tx_bytes: removing [ 153.105940][ T5772] kernfs rx_errors: removing [ 153.110796][ T6895] PM: Removing info for No Bus:hci2 [ 153.116050][ T6895] kobject: 'hci2' (ffff88802c435490): kobject_uevent_env [ 153.123168][ T5773] kernfs autosuspend_delay_ms: removing [ 153.128859][ T5773] kernfs power: removing [ 153.133305][ T5773] kernfs device: removing [ 153.137672][ T5773] kernfs subsystem: removing [ 153.142395][ T6895] kobject: 'hci2' (ffff88802c435490): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2' [ 153.150080][ T1000] bond1: (slave bridge1): Send learning packet: mac 72:79:b4:ef:8b:62 vlan 0 [ 153.152940][ T5776] kobject: 'hci3' (ffff888026c61490): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3' [ 153.162926][ T1000] bond1: (slave bridge1): Send learning packet: mac 72:79:b4:ef:8b:62 vlan 1 [ 153.172023][ T5773] kernfs rfkill6: removing [ 153.185688][ T5772] kernfs tx_errors: removing [ 153.190433][ T6895] kernfs hci2: removing [ 153.195438][ T6895] hci2 orig refcnt 5 [ 153.199719][ T5772] kernfs rx_dropped: removing [ 153.204609][ T5773] kernfs uevent: removing [ 153.208975][ T5773] kernfs name: removing [ 153.213438][ T5772] kernfs tx_dropped: removing [ 153.218279][ T5776] kernfs hci3: removing [ 153.222548][ T5776] hci3 orig refcnt 2 [ 153.226482][ T5776] kobject: 'hci3' (ffff888026c61490): kobject_cleanup, parent 0000000000000000 [ 153.236252][ T5773] kernfs type: removing [ 153.240481][ T5773] kernfs index: removing [ 153.244874][ T5772] kernfs multicast: removing [ 153.249525][ T5772] kernfs collisions: removing [ 153.254331][ T5772] kernfs rx_length_errors: removing [ 153.259572][ T5772] kernfs rx_over_errors: removing [ 153.264850][ T5776] kobject: 'hci3' (ffff888026c61490): calling ktype release [ 153.272383][ T5776] All LE connection parameters were removed [ 153.278445][ T5776] hci3: Unregister MSFT extension [ 153.283649][ T5772] kernfs rx_crc_errors: removing [ 153.288678][ T5772] kernfs rx_frame_errors: removing [ 153.294204][ T5773] kernfs persistent: removing [ 153.298940][ T5773] kernfs state: removing [ 153.303982][ T5773] kernfs soft: removing [ 153.308198][ T5773] kernfs hard: removing [ 153.312371][ T5773] kernfs hard_block_reasons: removing [ 153.317930][ T5776] kobject: 'hci3': free name [ 153.322640][ T5772] kernfs rx_fifo_errors: removing [ 153.327954][ T5772] kernfs rx_missed_errors: removing [ 153.333227][ T5772] kernfs tx_aborted_errors: removing [ 153.338610][ T5773] PM: Removing info for No Bus:rfkill6 [ 153.344250][ T5773] kobject: 'rfkill6' (ffff88814075f110): kobject_uevent_env [ 153.351633][ T5773] kobject: 'rfkill6' (ffff88814075f110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/rfkill6' [ 153.363047][ T5772] kernfs tx_carrier_errors: removing [ 153.368437][ T5772] kernfs tx_fifo_errors: removing [ 153.373556][ T5772] kernfs tx_heartbeat_errors: removing [ 153.379448][ T5773] kernfs rfkill6: removing [ 153.383947][ T5772] kernfs tx_window_errors: removing [ 153.389265][ T5773] kobject: 'rfkill6' (ffff88814075f110): kobject_cleanup, parent 0000000000000000 [ 153.398608][ T5773] kobject: 'rfkill6' (ffff88814075f110): calling ktype release [ 153.398654][ T5772] kernfs rx_compressed: removing [ 153.411862][ T5773] kobject: 'rfkill6': free name [ 153.416980][ T5772] kernfs tx_compressed: removing [ 153.422083][ T5772] kernfs rx_nohandler: removing [ 153.427238][ T5772] kernfs statistics: removing [ 153.432055][ T5772] kernfs netdev_group: removing [ 153.437136][ T5773] kernfs runtime_status: removing [ 153.442486][ T5773] kernfs control: removing [ 153.447077][ T5772] kernfs type: removing [ 153.451391][ T5772] kernfs dev_id: removing [ 153.455945][ T5773] kernfs runtime_suspended_time: removing [ 153.461714][ T5773] kernfs runtime_active_time: removing [ 153.467416][ T5772] kernfs dev_port: removing [ 153.471964][ T5772] kernfs iflink: removing [ 153.476397][ T5773] kernfs autosuspend_delay_ms: removing [ 153.482001][ T5773] kernfs power: removing [ 153.486257][ T5773] kernfs subsystem: removing [ 153.491065][ T5772] kernfs ifindex: removing [ 153.495543][ T5772] kernfs name_assign_type: removing [ 153.500884][ T5773] kernfs hci1: removing [ 153.505084][ T5773] kernfs uevent: removing [ 153.509636][ T5772] kernfs addr_assign_type: removing [ 153.515171][ T5772] kernfs addr_len: removing [ 153.519952][ T5773] PM: Removing info for No Bus:hci1 [ 153.525229][ T5773] kobject: 'hci1' (ffff88802bf4d490): kobject_uevent_env [ 153.532436][ T5772] kernfs link_mode: removing [ 153.537070][ T5772] kernfs address: removing [ 153.541568][ T5772] kernfs broadcast: removing [ 153.546198][ T5772] kernfs speed: removing [ 153.550688][ T5773] kobject: 'hci1' (ffff88802bf4d490): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1' [ 153.561155][ T5772] kernfs duplex: removing [ 153.565574][ T5772] kernfs dormant: removing [ 153.571009][ T5773] kernfs hci1: removing [ 153.575775][ T5773] kernfs bluetooth: removing [ 153.580482][ T5772] kernfs testing: removing [ 153.584994][ T5772] kernfs operstate: removing [ 153.589697][ C0] net_ratelimit: 16 callbacks suppressed [ 153.589709][ C0] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 153.604051][ T8] nf_nat: Already setup manip DST for ct ffff888024a08180 (status bits 0x188) [ 153.612962][ T8] nf_nat: Already setup manip SRC for ct ffff888024a08180 (status bits 0x188) [ 153.622390][ T5773] kobject: 'bluetooth' (ffff888025281600): kobject_cleanup, parent 0000000000000000 [ 153.631961][ T5773] kobject: 'bluetooth' (ffff888025281600): calling ktype release [ 153.639765][ T5773] kobject: 'bluetooth': free name [ 153.644808][ T5773] hci1 orig refcnt 2 [ 153.648698][ T5773] kobject: 'hci1' (ffff88802bf4d490): kobject_cleanup, parent 0000000000000000 [ 153.657848][ T5772] kernfs carrier_changes: removing [ 153.663083][ T5772] kernfs ifalias: removing [ 153.667531][ T5772] kernfs carrier: removing [ 153.672127][ T5773] kobject: 'hci1' (ffff88802bf4d490): calling ktype release [ 153.679544][ T5773] All LE connection parameters were removed [ 153.685654][ T5772] kernfs mtu: removing [ 153.688216][ C1] wireguard: wg0: Handshake for peer 8 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 153.689806][ T5772] kernfs flags: removing [ 153.701933][ T3537] wireguard: wg0: Sending handshake initiation to peer 8 ([::1]:20003/0%0) [ 153.705608][ T5773] hci1: Unregister MSFT extension [ 153.719246][ T3537] nf_nat: Already setup manip DST for ct ffff888024a09b00 (status bits 0x188) [ 153.719359][ T5772] kernfs tx_queue_len: removing [ 153.728144][ T3537] nf_nat: Already setup manip SRC for ct ffff888024a09b00 (status bits 0x188) [ 153.742999][ T5773] kobject: 'hci1': free name [ 153.747847][ T5772] kernfs gro_flush_timeout: removing [ 153.753208][ C0] wireguard: wg0: Sending keepalive packet to peer 19 (127.0.0.1:20002) [ 153.762183][ T5772] kernfs napi_defer_hard_irqs: removing [ 153.763273][ C1] wireguard: wg1: Receiving keepalive packet from peer 21 (127.0.0.1:20001) [ 153.767781][ T5772] kernfs phys_port_id: removing [ 153.781369][ T5772] kernfs phys_port_name: removing [ 153.786587][ T5772] kernfs phys_switch_id: removing [ 153.791647][ T5772] kernfs proto_down: removing [ 153.796447][ T5772] kernfs carrier_up_count: removing [ 153.801750][ T5772] kernfs carrier_down_count: removing [ 153.807272][ T5772] kernfs threaded: removing [ 153.811856][ T5772] PM: Removing info for No Bus:syz_tun [ 153.817392][ T5772] kobject: 'syz_tun' (ffff88805e64c6a8): kobject_uevent_env [ 153.824761][ T5772] kobject: 'syz_tun' (ffff88805e64c6a8): fill_kobj_path: path = '/devices/virtual/net/syz_tun' [ 153.836021][ T5772] kernfs syz_tun: removing [ 153.841475][ T5850] bluetooth hci2 bt0 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 153.850899][ T5850] net bt0: siw: event 6 [ 153.855577][ T5850] Unregistered netdev bt0 ffff88807e7bc000 [ 153.861627][ T5850] bluetooth hci2 bt0 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 153.871074][ T5850] net bt0: siw: event 18 [ 153.875484][ T5850] kobject: 'rx-0' (ffff88805ac8ff50): kobject_cleanup, parent ffff88805afa0c50 [ 153.884580][ T5850] kobject: 'rx-0' (ffff88805ac8ff50): auto cleanup kobject_del [ 153.892172][ T5850] kobject: 'rx-0' (ffff88805ac8ff50): auto cleanup 'remove' event [ 153.900024][ T5850] kobject: 'rx-0' (ffff88805ac8ff50): kobject_uevent_env [ 153.907132][ T5850] kobject: 'rx-0' (ffff88805ac8ff50): fill_kobj_path: path = '/hci2/net/bt0/queues/rx-0' [ 153.917137][ C0] wireguard: wg0: Sending keepalive packet to peer 20 ([::1]:20003/0%0) [ 153.927050][ C0] wireguard: wg2: Receiving keepalive packet from peer 23 ([::1]:20001/0%0) [ 153.936391][ T5850] kobject: 'rx-0' (ffff88805ac8ff50): calling ktype release [ 153.943797][ T5850] kobject: 'rx-0': free name [ 153.950455][ T5772] kobject: 'syz_tun' (ffff88805e64c6a8): kobject_cleanup, parent 0000000000000000 [ 153.959857][ T5850] ------------[ cut here ]------------ [ 153.965357][ T5850] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 153.973005][ T5772] kobject: 'syz_tun' (ffff88805e64c6a8): calling ktype release [ 153.981156][ T5772] kobject: 'syz_tun': free name [ 153.987466][ T5850] WARNING: CPU: 0 PID: 5850 at fs/sysfs/group.c:284 sysfs_remove_group+0x17b/0x290 [ 153.997043][ T5850] Modules linked in: [ 154.001065][ T5850] CPU: 0 PID: 5850 Comm: kworker/0:6 Not tainted syzkaller #0 [ 154.008656][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.018771][ T5850] Workqueue: events delete_netdev [ 154.023892][ T5850] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 154.029791][ T5850] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 97 21 c9 ff 49 8b 17 48 c7 c7 00 c0 da 8a 48 89 de e8 65 59 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4f 95 70 ff [ 154.049431][ C0] virtqueue callback for ffff88801ba68a00 (ffffffff84a02460) [ 154.049493][ C0] virtqueue interrupt with no work for ffff88801ba68800 [ 154.049501][ C0] virtqueue interrupt with no work for ffff88801ba68600 [ 154.071222][ T5850] RSP: 0018:ffffc90004977840 EFLAGS: 00010246 [ 154.077300][ T5850] RAX: efd4f92ade719600 RBX: ffffffff8bc599a0 RCX: ffff8880286e0000 [ 154.085360][ T5850] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 154.093448][ T5850] RBP: 000000000000004d R08: ffffc90004977447 R09: 1ffff9200092ee88 [ 154.101476][ T5850] R10: dffffc0000000000 R11: fffff5200092ee89 R12: 1ffffffff178b230 [ 154.110112][ T5850] R13: dffffc0000000000 R14: ffff8880766772e8 R15: ffff88802fe9f820 [ 154.118091][ T5850] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 154.127095][ T5850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.133775][ T5850] CR2: 00007ff740e0a0f0 CR3: 000000001928f000 CR4: 00000000003506f0 [ 154.142186][ T5850] Call Trace: [ 154.145480][ T5850] [ 154.148437][ T5850] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 154.154630][ T5850] netdev_queue_update_kobjects+0x3e1/0x480 [ 154.160730][ T5850] netdev_unregister_kobject+0x108/0x250 [ 154.166513][ T5850] unregister_netdevice_many_notify+0x1449/0x1910 [ 154.173003][ T5850] ? __rwlock_init+0x150/0x150 [ 154.177820][ T5850] ? unregister_netdevice_many+0x20/0x20 [ 154.183588][ T5850] ? do_raw_spin_unlock+0x121/0x230 [ 154.188821][ T5850] ? __mutex_lock+0x923/0xc80 [ 154.193580][ T5850] ? __mutex_lock+0x4d2/0xc80 [ 154.198277][ T5850] unregister_netdevice_queue+0x2e9/0x330 [ 154.204053][ T5850] ? list_netdevice+0x730/0x730 [ 154.208925][ T5850] ? read_lock_is_recursive+0x20/0x20 [ 154.214387][ T5850] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 154.220310][ T5850] lowpan_unregister_netdev+0x1c/0x30 [ 154.225760][ T5850] unregister_dev+0x70/0x1a0 [ 154.230378][ T5850] ? process_scheduled_works+0x975/0x1600 [ 154.236168][ T5850] process_scheduled_works+0xa60/0x1600 [ 154.241835][ T5850] ? worker_attach_to_pool+0x370/0x370 [ 154.247575][ T5850] ? assign_work+0x3cc/0x5d0 [ 154.252286][ T5850] worker_thread+0xa5e/0xfe0 [ 154.256944][ T5850] ? _raw_spin_unlock+0x40/0x40 [ 154.261870][ T5850] ? __kthread_parkme+0x71/0x1c0 [ 154.266817][ T5850] kthread+0x2fa/0x390 [ 154.270881][ T5850] ? pr_cont_work+0x550/0x550 [ 154.275605][ T5850] ? kthread_blkcg+0xd0/0xd0 [ 154.280215][ T5850] ret_from_fork+0x48/0x80 [ 154.284729][ T5850] ? kthread_blkcg+0xd0/0xd0 [ 154.289347][ T5850] ret_from_fork_asm+0x11/0x20 [ 154.294170][ T5850] [ 154.297209][ T5850] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 154.304510][ T5850] CPU: 0 PID: 5850 Comm: kworker/0:6 Not tainted syzkaller #0 [ 154.311945][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.317432][ C1] virtqueue callback for ffff888023e00400 (ffffffff85c745d0) [ 154.317472][ C1] No more buffers in queue [ 154.317493][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 154.317513][ C1] No more buffers in queue [ 154.317737][ C1] No more buffers in queue [ 154.317747][ C1] eth0: xmit ffff8880248733c0 42:01:0a:80:00:01 [ 154.317767][ C1] Added buffer head 9 to ffff888023e00600 [ 154.317810][ C1] virtqueue callback for ffff888023e00600 (ffffffff85c746c0) [ 154.317828][ C1] Sent skb ffff8880248733c0 [ 154.317855][ C1] No more buffers in queue [ 154.353247][ T3537] bond1: (slave bridge1): Send learning packet: mac 72:79:b4:ef:8b:62 vlan 0 [ 154.353343][ T3537] bond1: (slave bridge1): Send learning packet: mac 72:79:b4:ef:8b:62 vlan 1 [ 154.394319][ T5850] Workqueue: events delete_netdev [ 154.399357][ T5850] Call Trace: [ 154.402623][ T5850] [ 154.405546][ T5850] dump_stack_lvl+0x18c/0x250 [ 154.410226][ T5850] ? show_regs_print_info+0x20/0x20 [ 154.415415][ T5850] ? load_image+0x420/0x420 [ 154.419934][ T5850] panic+0x2ca/0x720 [ 154.423883][ T5850] ? bpf_jit_dump+0xd0/0xd0 [ 154.428387][ T5850] ? ret_from_fork_asm+0x11/0x20 [ 154.433326][ T5850] __warn+0x2e0/0x470 [ 154.437297][ T5850] ? sysfs_remove_group+0x17b/0x290 [ 154.442490][ T5850] ? sysfs_remove_group+0x17b/0x290 [ 154.447676][ T5850] report_bug+0x2be/0x4f0 [ 154.452000][ T5850] ? sysfs_remove_group+0x17b/0x290 [ 154.457275][ T5850] ? sysfs_remove_group+0x17b/0x290 [ 154.462466][ T5850] ? sysfs_remove_group+0x17d/0x290 [ 154.467653][ T5850] handle_bug+0xcf/0x120 [ 154.471893][ T5850] exc_invalid_op+0x1a/0x50 [ 154.476391][ T5850] asm_exc_invalid_op+0x1a/0x20 [ 154.481238][ T5850] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 154.487045][ T5850] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 97 21 c9 ff 49 8b 17 48 c7 c7 00 c0 da 8a 48 89 de e8 65 59 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4f 95 70 ff [ 154.506650][ T5850] RSP: 0018:ffffc90004977840 EFLAGS: 00010246 [ 154.512709][ T5850] RAX: efd4f92ade719600 RBX: ffffffff8bc599a0 RCX: ffff8880286e0000 [ 154.520690][ T5850] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 154.528650][ T5850] RBP: 000000000000004d R08: ffffc90004977447 R09: 1ffff9200092ee88 [ 154.536611][ T5850] R10: dffffc0000000000 R11: fffff5200092ee89 R12: 1ffffffff178b230 [ 154.544573][ T5850] R13: dffffc0000000000 R14: ffff8880766772e8 R15: ffff88802fe9f820 [ 154.552561][ T5850] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 154.558637][ T5850] netdev_queue_update_kobjects+0x3e1/0x480 [ 154.564529][ T5850] netdev_unregister_kobject+0x108/0x250 [ 154.570159][ T5850] unregister_netdevice_many_notify+0x1449/0x1910 [ 154.576579][ T5850] ? __rwlock_init+0x150/0x150 [ 154.581374][ T5850] ? unregister_netdevice_many+0x20/0x20 [ 154.587004][ T5850] ? do_raw_spin_unlock+0x121/0x230 [ 154.592205][ T5850] ? __mutex_lock+0x923/0xc80 [ 154.596873][ T5850] ? __mutex_lock+0x4d2/0xc80 [ 154.601644][ T5850] unregister_netdevice_queue+0x2e9/0x330 [ 154.607361][ T5850] ? list_netdevice+0x730/0x730 [ 154.612226][ T5850] ? read_lock_is_recursive+0x20/0x20 [ 154.617604][ T5850] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 154.623500][ T5850] lowpan_unregister_netdev+0x1c/0x30 [ 154.628873][ T5850] unregister_dev+0x70/0x1a0 [ 154.633484][ T5850] ? process_scheduled_works+0x975/0x1600 [ 154.639223][ T5850] process_scheduled_works+0xa60/0x1600 [ 154.644869][ T5850] ? worker_attach_to_pool+0x370/0x370 [ 154.650322][ T5850] ? assign_work+0x3cc/0x5d0 [ 154.654914][ T5850] worker_thread+0xa5e/0xfe0 [ 154.659506][ T5850] ? _raw_spin_unlock+0x40/0x40 [ 154.664433][ T5850] ? __kthread_parkme+0x71/0x1c0 [ 154.669367][ T5850] kthread+0x2fa/0x390 [ 154.673433][ T5850] ? pr_cont_work+0x550/0x550 [ 154.678103][ T5850] ? kthread_blkcg+0xd0/0xd0 [ 154.682690][ T5850] ret_from_fork+0x48/0x80 [ 154.687098][ T5850] ? kthread_blkcg+0xd0/0xd0 [ 154.691683][ T5850] ret_from_fork_asm+0x11/0x20 [ 154.696446][ T5850] [ 154.699582][ T5850] Kernel Offset: disabled [ 154.703900][ T5850] Rebooting in 86400 seconds..