last executing test programs: 1m1.613291504s ago: executing program 1 (id=57): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r6, &(0x7f0000000140)=""/117, 0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 55.030096758s ago: executing program 1 (id=65): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002200)={'wlan1\x00'}) io_uring_setup(0x66a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) eventfd2(0x50, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000140), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) 53.699466561s ago: executing program 1 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_io_uring_setup(0x34b8, 0x0, 0x0, 0x0, &(0x7f0000000400)=0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) syz_io_uring_submit(0x0, 0x0, r1, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) 51.035893586s ago: executing program 1 (id=70): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc4c85513, &(0x7f0000000040)={0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 50.622896567s ago: executing program 1 (id=72): kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_WOL_GET(r0, 0x0, 0xc080) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil) 49.024479846s ago: executing program 1 (id=73): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r6, &(0x7f0000000140)=""/117, 0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 32.485260926s ago: executing program 32 (id=73): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r6, &(0x7f0000000140)=""/117, 0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 24.530514333s ago: executing program 2 (id=100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000e2) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000680)={0xaf76, 0x3, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5455a3247e500f61669905db88235f8a5447dd2a2ed6e91626f158881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb7bc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a825782f14eee686be0e358e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39e1aefe363590d1f600"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x8, 0x1) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare(0x64000400) 21.214314895s ago: executing program 0 (id=103): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x12, 0x11, 0xa, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x2000000003, 0x20000, 0x82a, 0x0, 0xc1, 0x80}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44004) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) write$P9_RSTATu(r4, 0x0, 0x21e) openat$sequencer(0xffffff9c, 0x0, 0x8ec02, 0x0) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) r5 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) 19.564178536s ago: executing program 0 (id=104): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000000440)=""/102392, 0x18ff8) r4 = memfd_create(0x0, 0x2) lseek(r4, 0xffffffffbffffffe, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000019840), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000019880)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000198c0)={0x0, 0x0, &(0x7f0000019900)={&(0x7f0000019940)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084) 17.142025515s ago: executing program 3 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019500)=0x80000000000003) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0xc, 0x24}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 17.007995169s ago: executing program 0 (id=106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) r4 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/165, 0xa5, 0x1, 0x0}, &(0x7f0000000180)=0x22) 15.513546536s ago: executing program 3 (id=107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1,timeo=1']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/nfs/clnt0/gssd\x00', 0x2, 0x0) read(r3, 0x0, 0x0) write(r3, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0) syz_open_dev$loop(0x0, 0x5, 0x101000) 14.300286456s ago: executing program 2 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) 12.573479209s ago: executing program 2 (id=109): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, 0x0}, 0x20) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000000640)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000019640), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000019680)={0x10, 0x1, 0x1, "add00dc81345c4b935bab32cecd875596364ab192cb8b80200", 0x38415262}) 11.164666353s ago: executing program 0 (id=110): socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x11, 0x13, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000001640)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x1) fcntl$addseals(0xffffffffffffffff, 0x409, 0xa) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x11, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) connect$pppoe(r2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20542, 0x15) 11.086601095s ago: executing program 3 (id=111): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r6, &(0x7f0000000140)=""/117, 0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 8.498221389s ago: executing program 2 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10040, 0x70) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x28100, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xe) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 6.284560664s ago: executing program 2 (id=113): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @private=0xa010101, 0x803, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) 5.754865287s ago: executing program 3 (id=114): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001200)=[{&(0x7f0000001040)="e42e2e4c7cf2a2673b016b67398748b6ab8f7a5014d614d198f5cac9868b78d378749a76719dca4d8320533b640950ba72751ba4314709082f53f6344d72bf0508bfb4a8d5539e60197472dc4c964059d33142d4d5514eac4e3de589c0d4c9c362cc565ca28a79c4bb4739e1552d81b0498ecdf992314186622011437565b2925d354ebfdf", 0x85}], 0x1) recvfrom(r0, &(0x7f00000015c0)=""/4059, 0xfdb, 0x17, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12, r2, 0x7a656000) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50006fcb5d15966b46ca64f7e76268cd64007095adfef77465b69ec03139854d6f07d5f9bd01000046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0x7c5}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3.905622233s ago: executing program 2 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r3, 0x29, 0x3c, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7) 3.422549075s ago: executing program 0 (id=116): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000440)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r3, &(0x7f00000028c0)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f000001b980)=@base={0x5, 0x8, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f000001ba00)={0x0, 0x0, &(0x7f000001ba40), &(0x7f000001ba80), 0x1003, r4}, 0x38) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.729360197s ago: executing program 0 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x9, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10004004, &(0x7f0000000140)={0xa, 0x4e21, 0x765, @empty, 0x905e3b80}, 0x1c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x82) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xdb2a}], 0x1, 0x40022063, 0x0) 1.502312663s ago: executing program 3 (id=118): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0xf, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000340)='./file1\x00', 0x200802, &(0x7f0000000380)=ANY=[], 0x9, 0x20e, &(0x7f00000003c0)="$eJzsVU9rE0EU/81mkm00SMGbV4PtRW22IJ692Lt+AEO61mLin05EEwpGL70oiF+i4JfQg6B3DyKCFz0o6KHiKSIjb+bNZDdZ7KbSnuYH4f3e/zc7mZkb6q6KAfzZ2+5gEQYCDXwUAhLAkrC2cc3Knyw146u0eovtL1h+YakGw3dPLB3ebHe76ZYa/JvEEMA+MXkya7r08unJ8vlT5O3jvEWgTJaQB+n1f6RfsV921vUsZ4mLYjgX05VbV+aeR7s5jnDtROozwzvyqwFkLd9yMWOt9YGbnqjSSqsojBFirv96AaEChgDe9bsxu03T5MNz27kwpsLpdeQ/y76ETvHR7mkxobvIkGiudAXeD3X5UYQfAqji/d52h6zX+BYj97r9uSNhskh5nYk5JYERICrQpijVkRy7BIx1v3fnvBoMz2722hvpRnorSVYvrLw5zkdDPwQ2u+mKMGPY9IiIhAed03rGT/+0TxP/CBmIzGigdU3MvqS7nJdPZ0LqQGQChb/I83Vf+f4x2+6pHq7iDBYA3B+RO+EP1ARVk7hOS1uDQIWVlswOhDEiLBjHuc7t7vqOac9pu5C+Ruszql5JWKFG6epFv/wdlk2Wayx3J/0M3Nvl3iRpKnxnbXkE1PCg3e9vmcfLMrLVfAVjSxZ954i7utfQNWvGKIljZQMDAgICAgICAg4JfwMAAP//2Sk6fA==") tgkill(r1, r1, 0xc) syz_mount_image$vfat(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x2800010, &(0x7f0000000680)=ANY=[@ANYRESHEX=r0, @ANYRES8, @ANYRES32=r3, @ANYBLOB="ecc3d143f38e5089bb46440d7cecc06241098d0d33c579dbed485b93da00a1cc46d1572edb73005e819ebb4b611c6ab1005284c145c7e7e9e506f1a0865033cc45f0a3e925bd472f8d4f75661042aea035f583b06376f2998165e1e519f20ce36faa936693869b39da5d72d222ac430319680cceb2383f2b42420ada5ced4c9fb11d056b0686c19c8d6877289f92067ccef6cb15885eb5a1a0c4c84728f2929a031fcb0fe5e00b23a42e132cb52b4eabf65079c8743f0325fdce0fe8bbef415b98701043f91758a6189b337790e34e1fec86e2a3d107d7d09ebd74ef693e57fcf9a82586def90302eb15d8c3498f7ef734486b42422f759421"], 0x6, 0x22c, &(0x7f00000007c0)="$eJzs2r+LHGUYB/BnLgmJFy674i8SEF+0UJshu7VFDklAXFA0K0RBMvFmddlx99hZDlbEXKWtf4K1WNoJktLmGv8CC7trrkwhjiR7mlxchaBmg/l8mnngne/M+/IOL08x+698+fFoUOeDYhZrWRZrF2I3bmbRjrX43W68/OKVH559+8q7r2/2ehffSunS5uVON6V05rnv3/v0m+dvzE6/8+2Z707GXvv9/YPuz3tP753d//XyR8M6Des0nsxSka5NJrPiWlWmrWE9ylN6syqLukzDcV1Oj4wPqsn29jwV462N9e1pWdepGM/TqJyn2STNpvNUfFgMxynP87SxHvwT/a9vNk0cNCeuRtM0j30Vp2/Exk/RiuzxlD1xIXvqavbMbnb2oGlaq54q/wn7/2i761A/FVF9sdPf6S+ui/HNQQyjijLORyt+iVufyaFFfem13sXz6bZ2fF5dP8xf3+kfO5rvRCvay/OdRT4dzZ+M9YgTEYf5brTiyeX57tL8qXjphbven0crfvwgJlHFVtzK3sl/1knp1Td69+TP3b4PAOD/Jk9/WNq/5flfjS/y99Ef3tNfHY9zx1e7diLq+SejoqrKqeLPxbF4KKahUPxtsRYR//qTV30y8SDc2fRVzwQAAAAAAAAAAID78SD+T1z1GgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfbbwEAAP//QaDSog==") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x7, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="850000009e0000006a0a00ff000000006900c00e00000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000500a801000000009500000000000000"], &(0x7f0000001100)='GPL\x00', 0x2, 0xffa0, &(0x7f0000001140)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 0s ago: executing program 3 (id=119): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x281c4c4, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb420004b97bf4563c4511958b8fe8d9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000021c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002240)=0x6) r3 = add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000002340)='asymmetric\x00', &(0x7f0000002380)=@secondary) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000280)=0xc) fchmodat(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x12c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. [ 78.518626][ T5765] cgroup: Unknown subsys name 'net' [ 78.649807][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.489636][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.180260][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.188995][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.199242][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.207531][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.216184][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.223946][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.232684][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.240753][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.248600][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.253141][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.255917][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.282032][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.290901][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.298934][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.299359][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.306528][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.328123][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.328482][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.342649][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.343458][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.357695][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.362248][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.372963][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.381819][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.469200][ T5776] (null): rxe_set_mtu: Set mtu to 1024 [ 82.477080][ T5777] (null): rxe_set_mtu: Set mtu to 1024 [ 82.488689][ T5776] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.497390][ T5777] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 82.507302][ T5779] (null): rxe_set_mtu: Set mtu to 1024 [ 82.517048][ T5776] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.523846][ T5779] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 82.535162][ T5776] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.572609][ T5778] (null): rxe_set_mtu: Set mtu to 1024 [ 82.578441][ T5778] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 82.841573][ T5776] infiniband rxe0: set active [ 82.847183][ T34] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.857373][ T5776] infiniband rxe0: added rxe_eth0 [ 82.921210][ T5776] RDS/IB: rxe0: added [ 82.931101][ T5776] smc: adding ib device rxe0 with port count 1 [ 82.937911][ T5776] smc: ib device rxe0 port 1 has pnetid [ 82.953272][ T34] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.969406][ T5776] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.048753][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 83.179396][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 83.341094][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 83.368226][ T5776] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.584671][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.592755][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.600350][ T5777] bridge_slave_0: entered allmulticast mode [ 83.609316][ T5777] bridge_slave_0: entered promiscuous mode [ 83.644549][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.651835][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.662567][ T5777] bridge_slave_1: entered allmulticast mode [ 83.670197][ T5777] bridge_slave_1: entered promiscuous mode [ 83.702727][ T5776] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.712196][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.719528][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.742278][ T5778] bridge_slave_0: entered allmulticast mode [ 83.749919][ T5778] bridge_slave_0: entered promiscuous mode [ 83.777573][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.792260][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.799625][ T5778] bridge_slave_1: entered allmulticast mode [ 83.828402][ T5778] bridge_slave_1: entered promiscuous mode [ 83.974617][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.985172][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.993061][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.000368][ T5779] bridge_slave_0: entered allmulticast mode [ 84.007713][ T5779] bridge_slave_0: entered promiscuous mode [ 84.017237][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.024898][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.032268][ T5779] bridge_slave_1: entered allmulticast mode [ 84.039478][ T5779] bridge_slave_1: entered promiscuous mode [ 84.057273][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.070865][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.083620][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.111628][ T5776] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.178765][ T5777] team0: Port device team_slave_0 added [ 84.188179][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.206149][ T5778] team0: Port device team_slave_0 added [ 84.216286][ T5777] team0: Port device team_slave_1 added [ 84.238566][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.250200][ T5778] team0: Port device team_slave_1 added [ 84.310606][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.318883][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.345359][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.374333][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.381464][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.408426][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.420177][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.427716][ T5788] Bluetooth: hci0: command tx timeout [ 84.427733][ T5087] Bluetooth: hci2: command tx timeout [ 84.433478][ T5788] Bluetooth: hci1: command tx timeout [ 84.439239][ T5790] Bluetooth: hci3: command tx timeout [ 84.452667][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.479437][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.516159][ T5779] team0: Port device team_slave_0 added [ 84.525593][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.532810][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.558959][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.585399][ T5779] team0: Port device team_slave_1 added [ 84.660290][ T5778] hsr_slave_0: entered promiscuous mode [ 84.666998][ T5778] hsr_slave_1: entered promiscuous mode [ 84.685379][ T5777] hsr_slave_0: entered promiscuous mode [ 84.692765][ T5777] hsr_slave_1: entered promiscuous mode [ 84.699401][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.707331][ T5777] Cannot create hsr debugfs directory [ 84.726016][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.742073][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.768967][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.847395][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.854849][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.882048][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.068494][ T5779] hsr_slave_0: entered promiscuous mode [ 85.075817][ T5779] hsr_slave_1: entered promiscuous mode [ 85.082989][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.090690][ T5779] Cannot create hsr debugfs directory [ 85.418560][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 85.443619][ T34] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.672356][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.688840][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.700457][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.719107][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.726980][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.740420][ T5776] bridge_slave_0: entered allmulticast mode [ 85.749039][ T5776] bridge_slave_0: entered promiscuous mode [ 85.765719][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.781294][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.791300][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.799210][ T5776] bridge_slave_1: entered allmulticast mode [ 85.807124][ T5776] bridge_slave_1: entered promiscuous mode [ 85.885118][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.920470][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.019006][ T5776] team0: Port device team_slave_0 added [ 86.034677][ T5776] team0: Port device team_slave_1 added [ 86.070582][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.100127][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.130880][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.138152][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.164814][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.195566][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.207657][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.218895][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.226590][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.253292][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.296402][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.328651][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.347256][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.388314][ T5436] infiniband rxe0: set active [ 86.395064][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.443931][ T5776] hsr_slave_0: entered promiscuous mode [ 86.450961][ T5776] hsr_slave_1: entered promiscuous mode [ 86.460322][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.469604][ T5776] Cannot create hsr debugfs directory [ 86.475514][ T788] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.502522][ T5087] Bluetooth: hci1: command tx timeout [ 86.508014][ T5087] Bluetooth: hci2: command tx timeout [ 86.513736][ T5790] Bluetooth: hci0: command tx timeout [ 86.519190][ T5790] Bluetooth: hci3: command tx timeout [ 86.678727][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.786291][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.808745][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.816374][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.875400][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.882875][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.937864][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.957120][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.969535][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.979932][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.014579][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.056562][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.114546][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.125904][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.150202][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.157471][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.211728][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.219077][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.255051][ T4086] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.262356][ T4086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.331465][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.338868][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.500859][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.617274][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.656792][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.664067][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.747600][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.768555][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.775841][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.038685][ T5778] veth0_vlan: entered promiscuous mode [ 88.095373][ T5778] veth1_vlan: entered promiscuous mode [ 88.237043][ T5778] veth0_macvtap: entered promiscuous mode [ 88.260325][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.295715][ T5778] veth1_macvtap: entered promiscuous mode [ 88.336965][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.376481][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.416511][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.446411][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.462543][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.471356][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.485795][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.583347][ T5087] Bluetooth: hci0: command tx timeout [ 88.583338][ T5790] Bluetooth: hci1: command tx timeout [ 88.594407][ T5087] Bluetooth: hci3: command tx timeout [ 88.594444][ T5087] Bluetooth: hci2: command tx timeout [ 88.696405][ T5779] veth0_vlan: entered promiscuous mode [ 88.728869][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.741849][ T5777] veth0_vlan: entered promiscuous mode [ 88.756237][ T5779] veth1_vlan: entered promiscuous mode [ 88.801647][ T5777] veth1_vlan: entered promiscuous mode [ 88.887097][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.896401][ T5777] veth0_macvtap: entered promiscuous mode [ 88.906300][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.926974][ T5777] veth1_macvtap: entered promiscuous mode [ 88.970919][ T5779] veth0_macvtap: entered promiscuous mode [ 89.015860][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.024947][ T5779] veth1_macvtap: entered promiscuous mode [ 89.032820][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.050255][ T5776] veth0_vlan: entered promiscuous mode [ 89.079695][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.094888][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.108855][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.124225][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.140395][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.153376][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.166016][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.179182][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.196089][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.208094][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.219737][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.235804][ T5776] veth1_vlan: entered promiscuous mode [ 89.249564][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.266934][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.277794][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.294207][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.321854][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.343839][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.354457][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.367872][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.380209][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.508082][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.524487][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.540019][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.567610][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.228749][ T5776] veth0_macvtap: entered promiscuous mode [ 90.315968][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.331130][ T5776] veth1_macvtap: entered promiscuous mode [ 90.337856][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.408791][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.426994][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.451467][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.466005][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.476968][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.487901][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.499856][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.577404][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.600440][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.611784][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.625512][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.636156][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.646857][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.658415][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.666202][ T5790] Bluetooth: hci1: command tx timeout [ 90.675066][ T5790] Bluetooth: hci2: command tx timeout [ 90.675137][ T5087] Bluetooth: hci0: command tx timeout [ 90.690260][ T4086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.692325][ T5788] Bluetooth: hci3: command tx timeout [ 90.710878][ T4086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.723928][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.732954][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.743052][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.751799][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.770517][ T4086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.778953][ T4086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.826707][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.848432][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.950512][ T4605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.980144][ T4605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.077396][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.101372][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.303178][ T5908] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 92.312054][ T5908] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 92.321325][ T5908] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 92.331320][ T5908] Error parsing options; rc = [-22] [ 92.926264][ T23] cfg80211: failed to load regulatory.db [ 95.064636][ T5930] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.618638][ T5937] syz.3.10[5937]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.659247][ T5937] loop3: detected capacity change from 0 to 512 [ 95.688027][ T5937] ======================================================= [ 95.688027][ T5937] WARNING: The mand mount option has been deprecated and [ 95.688027][ T5937] and is ignored by this kernel. Remove the mand [ 95.688027][ T5937] option from the mount to silence this warning. [ 95.688027][ T5937] ======================================================= [ 95.780246][ T5937] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.833733][ T5937] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 95.864124][ T5937] EXT4-fs (loop3): orphan cleanup on readonly fs [ 95.882181][ T5937] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.10: bad orphan inode 15 [ 95.944741][ T5937] ext4_test_bit(bit=14, block=5) = 0 [ 95.972321][ T5937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 96.937964][ T5949] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 97.268297][ T5953] syz.1.11 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 97.330983][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.352410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 98.762001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.284579][ T5864] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.912515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 108.822334][ T788] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 109.063363][ T788] usb 3-1: unable to get BOS descriptor or descriptor too short [ 109.082091][ T788] usb 3-1: not running at top speed; connect to a high speed hub [ 109.120746][ T788] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 109.135785][ T788] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 109.145332][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.183469][ T788] usb 3-1: Product: syz [ 109.187831][ T788] usb 3-1: Manufacturer: syz [ 109.211983][ T788] usb 3-1: SerialNumber: syz [ 109.911916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 109.941916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.021926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.001919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.011921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.152419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 111.281921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.596516][ T788] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 111.638500][ T788] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 111.687377][ T788] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 111.717097][ T788] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 111.889547][ T788] usb 3-1: USB disconnect, device number 2 [ 112.825774][ T6035] udevd[6035]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.156089][ T6104] bond0: (slave bond_slave_0): Releasing backup interface [ 118.424255][ T6107] sctp: [Deprecated]: syz.3.36 (pid 6107) Use of int in max_burst socket option. [ 118.424255][ T6107] Use struct sctp_assoc_value instead [ 120.644435][ T6120] loop3: detected capacity change from 0 to 2048 [ 120.713167][ T6120] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 123.165585][ T6129] sctp: failed to load transform for md5: -2 [ 126.198487][ T27] audit: type=1800 audit(1792213456.293:2): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.42" name="p_chmask" dev="configfs" ino=7808 res=0 errno=0 [ 127.252302][ T6137] syz.3.41 (6137): drop_caches: 2 [ 133.493548][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.509805][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.126634][ T6176] Zero length message leads to an empty skb [ 134.201004][ T5087] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 135.081756][ T6181] syzkaller0: entered promiscuous mode [ 135.088618][ T6181] syzkaller0: entered allmulticast mode [ 136.872130][ T5788] Bluetooth: hci2: command tx timeout [ 141.566365][ T8] IPVS: starting estimator thread 0... [ 141.581747][ T6222] IPVS: dh: FWM 3 0x00000003 - no destination available [ 141.702211][ T6223] IPVS: using max 17 ests per chain, 40800 per kthread [ 146.857523][ T6240] jffs2: notice: (6240) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 148.222464][ T6248] warning: `syz.1.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 148.291684][ T6246] loop2: detected capacity change from 0 to 8192 [ 151.273778][ T6262] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 154.490405][ T6280] sched: RT throttling activated [ 154.667894][ T6281] sctp: failed to load transform for md5: -2 [ 158.287027][ T27] audit: type=1326 audit(1792213488.303:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.79" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f860fb9e559 code=0x0 [ 168.744577][ T6344] vlan0: entered promiscuous mode [ 168.760078][ T6344] team0: Port device vlan0 added [ 168.880995][ T6344] syz.2.89 (6344) used greatest stack depth: 20904 bytes left [ 170.801290][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.814016][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.822822][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.862346][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.872144][ T5788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 170.879623][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.104417][ T6358] rxe_eth0 speed is unknown, defaulting to 1000 [ 172.111705][ T6066] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.199549][ T6367] bridge_slave_0: left allmulticast mode [ 172.243288][ T6367] bridge_slave_0: left promiscuous mode [ 172.250746][ T6367] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.269465][ T6370] ip_tables: iptables: counters copy to user failed while replacing table [ 172.296729][ T6367] bridge_slave_1: left allmulticast mode [ 172.312058][ T6367] bridge_slave_1: left promiscuous mode [ 172.319124][ T6370] ip_tables: iptables: counters copy to user failed while replacing table [ 172.330994][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.400278][ T6367] bond0: (slave bond_slave_0): Releasing backup interface [ 172.436475][ T6367] bond0: (slave bond_slave_1): Releasing backup interface [ 172.558243][ T6367] team0: Port device team_slave_0 removed [ 172.646013][ T6367] team0: Port device team_slave_1 removed [ 172.673634][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.703269][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.784449][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.792202][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.819252][ T6368] netlink: 'syz.3.96': attribute type 10 has an invalid length. [ 172.890268][ T6374] process 'syz.0.97' launched './file1' with NULL argv: empty string added [ 172.980469][ T6374] loop0: detected capacity change from 0 to 512 [ 173.006100][ T5788] Bluetooth: hci4: command tx timeout [ 173.083768][ T6374] EXT4-fs error (device loop0): ext4_quota_enable:7144: inode #4: comm syz.0.97: iget: checksum invalid [ 173.098395][ T6374] EXT4-fs error (device loop0): ext4_quota_enable:7147: comm syz.0.97: Bad quota inode: 4, type: 1 [ 173.119843][ T6374] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 173.150081][ T6374] EXT4-fs (loop0): mount failed [ 173.565699][ T6368] team0: Port device dummy0 added [ 173.763554][ T6066] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.991019][ T6066] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.091469][ T6066] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.121501][ T6358] chnl_net:caif_netlink_parms(): no params data found [ 174.286285][ T6358] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.295536][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.303188][ T6358] bridge_slave_0: entered allmulticast mode [ 174.311102][ T6358] bridge_slave_0: entered promiscuous mode [ 174.323281][ T6358] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.343391][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.350801][ T6358] bridge_slave_1: entered allmulticast mode [ 174.371420][ T6358] bridge_slave_1: entered promiscuous mode [ 174.525591][ T6358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.045474][ T5087] Bluetooth: hci4: command tx timeout [ 176.204593][ T6358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.554211][ T6399] loop2: detected capacity change from 0 to 256 [ 176.729265][ T6399] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 177.081568][ T6399] rxe_eth0 speed is unknown, defaulting to 1000 [ 178.039781][ T6358] team0: Port device team_slave_0 added [ 178.102364][ T5087] Bluetooth: hci4: command tx timeout [ 178.149429][ T6358] team0: Port device team_slave_1 added [ 178.587555][ T6358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.614453][ T6358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.669811][ T6358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.770521][ T6358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.811980][ T6358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.856466][ T6358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.126153][ T5087] Bluetooth: Wrong link type (-71) [ 180.216254][ T5087] Bluetooth: hci4: command tx timeout [ 181.828254][ T6358] hsr_slave_0: entered promiscuous mode [ 181.838981][ T6358] hsr_slave_1: entered promiscuous mode [ 181.851070][ T6358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.859185][ T6358] Cannot create hsr debugfs directory [ 186.497033][ T6358] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 186.609108][ T6066] hsr_slave_0: left promiscuous mode [ 186.629600][ T6066] hsr_slave_1: left promiscuous mode [ 186.636144][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.652057][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.668286][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.680860][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.807958][ T6066] bridge_slave_1: left allmulticast mode [ 186.828758][ T6066] bridge_slave_1: left promiscuous mode [ 186.853775][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.990281][ T6066] bridge_slave_0: left allmulticast mode [ 187.874551][ T6066] bridge_slave_0: left promiscuous mode [ 187.904293][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.990105][ T6066] veth1_macvtap: left promiscuous mode [ 188.002301][ T6066] veth0_macvtap: left promiscuous mode [ 188.013772][ T6066] veth1_vlan: left promiscuous mode [ 188.030444][ T6066] veth0_vlan: left promiscuous mode [ 191.087649][ T6066] team0 (unregistering): Port device team_slave_1 removed [ 192.702416][ T6066] team0 (unregistering): Port device team_slave_0 removed [ 192.781668][ T6066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.952796][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.959537][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.959594][ T8] IPVS: starting estimator thread 0... [ 195.064708][ T6066] bond0 (unregistering): Released all slaves [ 195.091990][ T6482] IPVS: using max 18 ests per chain, 43200 per kthread [ 195.238381][ T6358] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 195.260152][ T6358] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 195.368494][ T6460] bond0: entered promiscuous mode [ 195.388572][ T6460] bond_slave_0: entered promiscuous mode [ 195.413597][ T6460] bond_slave_1: entered promiscuous mode [ 195.487352][ T6358] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 197.537658][ T6358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.655854][ T6358] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.732125][ T6358] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.743046][ T6358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.789163][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.796896][ T6088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.884066][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.891296][ T6088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.997738][ T6500] loop3: detected capacity change from 0 to 8 [ 198.880640][ T6358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.158366][ T5087] [ 199.160774][ T5087] ====================================================== [ 199.167902][ T5087] WARNING: possible circular locking dependency detected [ 199.174939][ T5087] syzkaller #0 Not tainted [ 199.179373][ T5087] ------------------------------------------------------ [ 199.186408][ T5087] kworker/u5:1/5087 is trying to acquire lock: [ 199.192620][ T5087] ffffffff8f364ac8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x41/0x550 [ 199.201912][ T5087] [ 199.201912][ T5087] but task is already holding lock: [ 199.209295][ T5087] ffffffff8f341368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 199.218735][ T5087] [ 199.218735][ T5087] which lock already depends on the new lock. [ 199.218735][ T5087] [ 199.229159][ T5087] [ 199.229159][ T5087] the existing dependency chain (in reverse order) is: [ 199.238193][ T5087] [ 199.238193][ T5087] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 199.245986][ T5087] __mutex_lock+0x135/0xc80 [ 199.251216][ T5087] hci_remote_features_evt+0x535/0x900 [ 199.257258][ T5087] hci_event_packet+0x807/0x1280 [ 199.262749][ T5087] hci_rx_work+0x43a/0xd60 [ 199.267750][ T5087] process_scheduled_works+0xa60/0x1600 [ 199.273869][ T5087] worker_thread+0xa5e/0xfe0 [ 199.279012][ T5087] kthread+0x2fa/0x390 [ 199.283624][ T5087] ret_from_fork+0x48/0x80 [ 199.288595][ T5087] ret_from_fork_asm+0x11/0x20 [ 199.293954][ T5087] [ 199.293954][ T5087] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 199.301287][ T5087] __mutex_lock+0x135/0xc80 [ 199.306430][ T5087] l2cap_chan_connect+0xfc/0xe30 [ 199.311921][ T5087] l2cap_sock_connect+0x586/0x760 [ 199.317582][ T5087] kernel_connect+0x142/0x1c0 [ 199.322823][ T5087] rfcomm_dlc_open+0xa1f/0xec0 [ 199.328133][ T5087] rfcomm_sock_connect+0x2ed/0x600 [ 199.333796][ T5087] __sys_connect+0x3da/0x470 [ 199.339029][ T5087] __x64_sys_connect+0x7a/0x90 [ 199.344342][ T5087] do_syscall_64+0x55/0xb0 [ 199.349307][ T5087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.355764][ T5087] [ 199.355764][ T5087] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 199.364446][ T5087] __lock_acquire+0x3a07/0x7eb0 [ 199.370062][ T5087] lock_acquire+0x19e/0x420 [ 199.375261][ T5087] __mutex_lock+0x135/0xc80 [ 199.380412][ T5087] rfcomm_security_cfm+0x41/0x550 [ 199.386436][ T5087] hci_encrypt_cfm+0x363/0x4d0 [ 199.391960][ T5087] hci_encrypt_change_evt+0x5c3/0xe30 [ 199.398167][ T5087] hci_event_packet+0x807/0x1280 [ 199.404468][ T5087] hci_rx_work+0x43a/0xd60 [ 199.409458][ T5087] process_scheduled_works+0xa60/0x1600 [ 199.415651][ T5087] worker_thread+0xa5e/0xfe0 [ 199.420820][ T5087] kthread+0x2fa/0x390 [ 199.425451][ T5087] ret_from_fork+0x48/0x80 [ 199.430453][ T5087] ret_from_fork_asm+0x11/0x20 [ 199.435779][ T5087] [ 199.435779][ T5087] other info that might help us debug this: [ 199.435779][ T5087] [ 199.446046][ T5087] Chain exists of: [ 199.446046][ T5087] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 199.446046][ T5087] [ 199.458687][ T5087] Possible unsafe locking scenario: [ 199.458687][ T5087] [ 199.466154][ T5087] CPU0 CPU1 [ 199.471706][ T5087] ---- ---- [ 199.477082][ T5087] lock(hci_cb_list_lock); [ 199.481783][ T5087] lock(&hdev->lock); [ 199.489016][ T5087] lock(hci_cb_list_lock); [ 199.496326][ T5087] lock(rfcomm_mutex); [ 199.500667][ T5087] [ 199.500667][ T5087] *** DEADLOCK *** [ 199.500667][ T5087] [ 199.508814][ T5087] 4 locks held by kworker/u5:1/5087: [ 199.514120][ T5087] #0: ffff88801bfb2138 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 199.525375][ T5087] #1: ffffc9001033fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 199.537408][ T5087] #2: ffff88801df180b8 (&hdev->lock){+.+.}-{3:3}, at: hci_encrypt_change_evt+0x93/0xe30 [ 199.547268][ T5087] #3: ffffffff8f341368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 199.557062][ T5087] [ 199.557062][ T5087] stack backtrace: [ 199.563047][ T5087] CPU: 0 PID: 5087 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 199.570600][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 199.580663][ T5087] Workqueue: hci3 hci_rx_work [ 199.585364][ T5087] Call Trace: [ 199.588662][ T5087] [ 199.591603][ T5087] dump_stack_lvl+0x18c/0x250 [ 199.596429][ T5087] ? load_image+0x420/0x420 [ 199.601102][ T5087] ? show_regs_print_info+0x20/0x20 [ 199.606511][ T5087] ? print_circular_bug+0x12b/0x1a0 [ 199.611742][ T5087] check_noncircular+0x2fc/0x400 [ 199.616707][ T5087] ? print_deadlock_bug+0x5d0/0x5d0 [ 199.622010][ T5087] ? lockdep_lock+0xf5/0x230 [ 199.626628][ T5087] ? _find_first_zero_bit+0xd6/0x100 [ 199.631925][ T5087] __lock_acquire+0x3a07/0x7eb0 [ 199.636809][ T5087] ? lock_chain_count+0x20/0x20 [ 199.641675][ T5087] ? verify_lock_unused+0x140/0x140 [ 199.646887][ T5087] ? finish_task_switch+0x262/0x8f0 [ 199.652183][ T5087] ? lockdep_hardirqs_on+0x98/0x150 [ 199.657393][ T5087] ? finish_task_switch+0x262/0x8f0 [ 199.662600][ T5087] ? __schedule+0x15b6/0x4660 [ 199.667376][ T5087] lock_acquire+0x19e/0x420 [ 199.671893][ T5087] ? rfcomm_security_cfm+0x41/0x550 [ 199.677105][ T5087] ? __might_sleep+0xe0/0xe0 [ 199.681711][ T5087] ? read_lock_is_recursive+0x20/0x20 [ 199.687092][ T5087] ? mark_lock+0x94/0x320 [ 199.691431][ T5087] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 199.697422][ T5087] __mutex_lock+0x135/0xc80 [ 199.701936][ T5087] ? rfcomm_security_cfm+0x41/0x550 [ 199.707151][ T5087] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 199.713139][ T5087] ? trace_irq_disable+0x37/0xe0 [ 199.718105][ T5087] ? rfcomm_security_cfm+0x41/0x550 [ 199.723312][ T5087] ? lock_chain_count+0x20/0x20 [ 199.728172][ T5087] ? mutex_lock_nested+0x20/0x20 [ 199.733211][ T5087] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 199.738854][ T5087] ? lockdep_hardirqs_on+0x98/0x150 [ 199.744063][ T5087] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 199.749704][ T5087] rfcomm_security_cfm+0x41/0x550 [ 199.754745][ T5087] ? rfcomm_send_msc+0x360/0x360 [ 199.759697][ T5087] hci_encrypt_cfm+0x363/0x4d0 [ 199.764472][ T5087] hci_encrypt_change_evt+0x5c3/0xe30 [ 199.769856][ T5087] ? hci_remote_name_evt+0x610/0x610 [ 199.775148][ T5087] ? skb_pull+0xb9/0x1c0 [ 199.779580][ T5087] ? skb_pull_data+0xf0/0x1f0 [ 199.784358][ T5087] ? hci_remote_name_evt+0x610/0x610 [ 199.789686][ T5087] hci_event_packet+0x807/0x1280 [ 199.794663][ T5087] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 199.800322][ T5087] ? bis_list+0x290/0x290 [ 199.804756][ T5087] ? kcov_remote_start+0x1b7/0x810 [ 199.809982][ T5087] ? hci_send_to_monitor+0xd7/0x4f0 [ 199.815282][ T5087] hci_rx_work+0x43a/0xd60 [ 199.819724][ T5087] ? process_scheduled_works+0x975/0x1600 [ 199.825633][ T5087] process_scheduled_works+0xa60/0x1600 [ 199.831227][ T5087] ? worker_attach_to_pool+0x370/0x370 [ 199.836730][ T5087] ? assign_work+0x3cc/0x5d0 [ 199.841386][ T5087] worker_thread+0xa5e/0xfe0 [ 199.846011][ T5087] ? _raw_spin_unlock+0x40/0x40 [ 199.850879][ T5087] ? __kthread_parkme+0x71/0x1c0 [ 199.856180][ T5087] kthread+0x2fa/0x390 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 199.860274][ T5087] ? pr_cont_work+0x550/0x550 [ 199.864985][ T5087] ? kthread_blkcg+0xd0/0xd0 [ 199.869587][ T5087] ret_from_fork+0x48/0x80 [ 199.874027][ T5087] ? kthread_blkcg+0xd0/0xd0 [ 199.878626][ T5087] ret_from_fork_asm+0x11/0x20 [ 199.883411][ T5087] [ 199.968068][ T6522] loop3: detected capacity change from 0 to 128 [ 200.039632][ T6522] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 200.217549][ T6522] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 201.204372][ T6056] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.358476][ T6056] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.430115][ T6056] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.509115][ T6056] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.521937][ T5778] syz-executor (5778) used greatest stack depth: 20688 bytes left [ 201.687280][ T6056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.748685][ T6056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.802149][ T6056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.862353][ T6056] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.022917][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 203.401722][ T6056] hsr_slave_0: left promiscuous mode [ 203.407978][ T6056] hsr_slave_1: left promiscuous mode [ 203.418643][ T6056] hsr_slave_0: left promiscuous mode [ 203.425087][ T6056] hsr_slave_1: left promiscuous mode [ 203.431342][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.438916][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.449064][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.458208][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.466648][ T6056] bridge_slave_1: left allmulticast mode [ 203.472621][ T6056] bridge_slave_1: left promiscuous mode [ 203.478318][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.486920][ T6056] bridge_slave_0: left allmulticast mode [ 203.492761][ T6056] bridge_slave_0: left promiscuous mode [ 203.498453][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.509896][ T6056] veth1_macvtap: left promiscuous mode [ 203.516109][ T6056] veth0_macvtap: left promiscuous mode [ 203.522451][ T6056] veth1_vlan: left promiscuous mode [ 203.527850][ T6056] veth0_vlan: left promiscuous mode [ 203.534892][ T6056] veth1_macvtap: left promiscuous mode [ 203.540424][ T6056] veth0_macvtap: left promiscuous mode [ 203.546152][ T6056] veth1_vlan: left promiscuous mode [ 203.551512][ T6056] veth0_vlan: left promiscuous mode [ 203.948474][ T6056] team0 (unregistering): Port device dummy0 removed [ 203.988140][ T6056] bond0 (unregistering): Released all slaves [ 204.133203][ T6056] team0 (unregistering): Port device team_slave_1 removed [ 204.158181][ T6056] team0 (unregistering): Port device team_slave_0 removed [ 204.191358][ T6056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.207734][ T6056] bond_slave_1 (unregistering): left promiscuous mode [ 204.232467][ T6056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.241674][ T6056] bond_slave_0 (unregistering): left promiscuous mode [ 204.340017][ T6056] bond0 (unregistering): Released all slaves [ 204.850946][ T6056] IPVS: stop unused estimator thread 0... [ 205.273433][ T6056] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.311781][ T6056] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.379997][ T6056] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.442408][ T6056] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.596186][ T6056] hsr_slave_0: left promiscuous mode [ 206.603478][ T6056] hsr_slave_1: left promiscuous mode [ 206.610050][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.618076][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.627280][ T6056] bridge_slave_1: left allmulticast mode [ 206.633212][ T6056] bridge_slave_1: left promiscuous mode [ 206.638978][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.648768][ T6056] bridge_slave_0: left allmulticast mode [ 206.654870][ T6056] bridge_slave_0: left promiscuous mode [ 206.660718][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.674472][ T6056] hsr_slave_0: left promiscuous mode [ 206.680536][ T6056] hsr_slave_1: left promiscuous mode [ 206.687550][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.695455][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.704823][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.713077][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.720878][ T6056] bridge_slave_1: left allmulticast mode [ 206.727071][ T6056] bridge_slave_1: left promiscuous mode [ 206.733188][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.743447][ T6056] bridge_slave_0: left allmulticast mode [ 206.749112][ T6056] bridge_slave_0: left promiscuous mode [ 206.755503][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.777819][ T6056] veth1_macvtap: left promiscuous mode [ 206.783569][ T6056] veth0_macvtap: left promiscuous mode [ 206.789235][ T6056] veth1_vlan: left promiscuous mode [ 207.030840][ T6056] team0 (unregistering): Port device team_slave_1 removed [ 207.045240][ T6056] team0 (unregistering): Port device team_slave_0 removed [ 207.063139][ T6056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.093246][ T6056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.150218][ T6056] bond0 (unregistering): Released all slaves [ 207.221427][ T6056] team0 (unregistering): Port device vlan0 removed [ 207.319306][ T6056] team0 (unregistering): Port device team_slave_1 removed [ 207.349322][ T6056] team0 (unregistering): Port device team_slave_0 removed [ 207.364183][ T6056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.390151][ T6056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.456673][ T6056] bond0 (unregistering): Released all slaves [ 207.985767][ T6056] IPVS: stop unused estimator thread 0...