last executing test programs: 4m1.090225173s ago: executing program 5 (id=74): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x10, 0x80000000, @vifc_lcl_addr=@multicast1, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) close(0x3) 4m0.041242663s ago: executing program 5 (id=76): r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000800)=ANY=[@ANYBLOB="736563757269747900002000000000000000000000000000000000000000000004"], 0x68) 3m59.959058862s ago: executing program 5 (id=77): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], &(0x7f0000001b80)=""/4090, 0x4a, 0xffa, 0xa}, 0x28) lseek(0xffffffffffffffff, 0x8, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) 3m59.534814555s ago: executing program 5 (id=79): setns(0xc9, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r0, &(0x7f0000002400)=[{0x0}, {&(0x7f00000013c0)}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r2, 0x0, 0x1c, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @dev={0xfe, 0x80, '\x00', 0x21}}, 0x1c) listen(r1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r4, &(0x7f00000002c0)='6', 0x1) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000035c0)={{0x2, 0x4e21, @local}, {0x0, @broadcast}, 0x12, {0x2, 0x0, @private=0xa010102}, 'sit0\x00'}) 3m56.700185986s ago: executing program 5 (id=84): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000140)=0x8) mkdir(&(0x7f0000000000)='dir0\x00', 0x2ba) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0', 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x6, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x2000000000000216, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000007c0)="00214500001400000000400600000a0000010a000002005000500000ffff00000001683003e80000e402010101", 0x2d}], 0x1, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) 3m52.999109384s ago: executing program 5 (id=91): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000880), &(0x7f0000000040), 0xffffff28, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) 3m36.841872625s ago: executing program 32 (id=91): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000880), &(0x7f0000000040), 0xffffff28, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) 3m11.93860589s ago: executing program 2 (id=170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20, 0x300) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x4, 0x101000) setitimer(0x2, 0x0, &(0x7f0000000380)) r3 = socket$inet6(0xa, 0x802, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000040)=0x5, 0x4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) fcntl$setstatus(r5, 0x4, 0x400) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_read_part_table(0x602, &(0x7f0000000680)="$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") ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "2fc7eecad58f368bf3ba45a6f7874bf0f0a2e2d039d23b33645c7a714b200d1ec427e16f2d87c3a7f0a258b1856e10dbfadd1f9f5b294c68af413bb746e6b0803177028065618aa080c2ca8efe18fbb6c85459e9ff5c1aa9c17498a05220b09c2d859832bf5ae846009f6a415023b9a7110bda56f514841bf04e54bf592d28107037e86729ff5789dd40d9180160cf72a92609650dc97d806d75465c3cbabb3e8f59afcd807086dc9a87048f229a1c8b183c2077b18922f8dcade6cbf835b715887e9a20c69f14468fb321e017c8a2361f5300617d2ff15e5e2df6b8fa425461dc9c997020beed571b01b0ae899a7a21fe7f9dce8b2ff0374cde255fe2cd3444fa236242d0a976de3ceed2abb0bcb9e4580db4bf248fa20f27dc7c9a953b420f032e6fe0de2a657b7903f0a3d4d67908255b1ac3274313a683ad8a328816336d20dbfdc9f262073dade576891220dd05e0cb6e97bb433637adb6f42c3a040a0089d9a86b42dffeba614460c184bd405cf3749fad5a47609eeb5c48f0222ea459597a0fa855c9d6d789ed17235c6cbf62757d54c99a03b777b7af6058a33b32aa49973625747e0ff1d3c4898a1ea7e68807d9be2b9ca09de22790441964131b1e6dbf633f06c23ddb02736a741396cb1c3dbe49eabdad6f662ee642be86560e24bf2578bc93119d19b446587a8455b445e1cbcb86848331888a8a8adb0836628a73c9c41f8501ae67caa0165fca251674fcfd5f78415a4497519f0d4a79ba166a55721c4db05be7155ae7bca92f4fff5cdcf2d581d2da972ee240355984210e5927904ee74bd15da96d23e0b5bb07ce1adf2683032e8ae4dd9dd6f5bd841ef30ccdce954426f1cf29f2f35decb485f4faa36caae23e7d136317dbb6ace192dc0484d5e3cc341dee5041430dcd5f320a9f3679196bd2a2348619c4a55e090cecf0da78fdba2b25a3373a813d5e719ef2fbfea38035828e28d1666b64dbabce44140e9f0c7e8685e69d8192d1953c1dba2c2a471658538ade2e295732c4a23ca63b54252673ea15374da608ff431e56c9b74bc88b858511910a8ff6a294354093449e90994cf70a60cb108e19ad7625c27bc7934076a8a8fa8a14b06b0e94813a9ff3961e251856a0d34b728025121cf045be55d3997ca1ba4643509fb7eb84b1dbf97663f63fbf32b32f92eebff4ff420cd8c45fda163c09aa879283c282ef4bc93d416854ada56921cc6f82a67a3d024c1a828eb8d4c901f6066f8df327f694f828124d880da4f98c66087f8a825b9b01609f980a0f48c471fdcb7696e493a02a7b34420ccddae0e26b8f4db77ee712ccbc480fb8fe625d51ee2ead77637b9f7bd4a70fc21581498915c72ce999eb2a3888ad4c66c5e623d2f9c983f4c3e17714a63af06c222a62671b407a8f30619f1cb8a9efc177a18ceefc0760a27f5001124e81eeff04950364cf1881c03c1cc99b1e5dbc36ec94ed875c54a87dc18143303b2ad34738e683fdfe7e257fa5609e785e3c81dcd387bccfba8d31077b2140b06a361167ab1abb6e8c9b6e7b8918c992a7c4fce8797048bc3eba6ef7f65789b6d59ce4e4dcc5a3d44b9ef24de8996347c79cbaaaaef13dbac1dab9fb6090a757be36cf3e15bcde5bddc318bd42265371ebfe941f63a5d2dbcd9c6103ab91b5c292ae86e4dc6df13194dd81319db2ad7f51fe377196b2b87db9614cd1d572f3df9b518d36aacd8c4f454c1a61fd587642e87e8a4d4029e46064cc730e7b75efae0e6b798184b33365160696e327ce80ad8ec0a5c20e57b07b2cc19f849b1c527994b6631ae61bd9c6703966d141714bffb6cfb7708e2c6669cf33f42c8e8130d73a2bdb42bbd3316e1a2deae59b7bbe6e77518326d11714ac543143c8bc4c9cf39d84b06bf10ad463d7b9d14f5d44d98c78f5bc96793c254a652e300065a0e568234110f4f3d93b584b5767e41cb9d2514a16138d8dd650b885b6ac87ce233957dee5c1d2004fc5882d41ffcc1751d565ad92d04ce0cf0221ac7d7a0441f4024ce74ff4d3df9559026ebb5b5602ee9e8d87f189b8f6e61879c417a00321e87ceac1b952e51700d384ed3b07c70fd8be0d61290b6100abc393bfd33f425892509e55350797f139b64b68e357f66a1776504ea67689ca482534308c9c7b76c7f9fbe1d1cc739dee391c0b7a781d6bade90ec2a46f617d436cc7f51eb1c94de092ccf1d7b57c31fc1c8e18b9bab9858792a129dfa62b379d22aec6129065a867bda550337e30edcfc0732a5b69559c8d45270d7df9d06b385c51a05e57280d66f5c02c7ca1f463e6ef6d1d2e3b04c6df77fd88e06197acf4d5287660e90d7b1d5d4b7410d44e36aa3652e86d9b97935fc19459bd1e7f155e497bee58013f9cbef97b669b3d8fbd77a286a50b86aa11e4376e44275297bcdcb252ad8ca4742a6cd66563c4ba6318b765899d853043877b6400d654ba955fa6376857b6307d443168211dde06a156d8908269ab033c9de9546b3cc41583e7cae7038720d909fed58b52f7bc7aba12b1be3a2e23474af919426326556cf37d584c4e905f8d84604fdb192f0993b213107fae21c323d69f3113d2f5d6371a49a40b98030868c824ff0916556044bc32ce80497c46c01e254e2accfd01aeabf18c545b907cd5fd0b00a82c42e644690ad1099dc3ec5e0df8c5d783ec93e6712857137eee4d06762fa12233d1ba4e7bc597d970a434ce615ffe432f6289bd297f7973f29e8460391c44cab29f2e21f639e7aea6c0c7e57a35585573b88ce6a2beed7807278b73a9eb21d82a477f7f9eef24c1cf0b7fddee8b3dfa633cb37c3f1ac53f34acd6dc0e29494d644f9bdce8d65e734fa52d1cdd0f147d48f02000b31fd0dcd2766cf8ea8b92bd340195c6833e4320eaf125ad61fa8772ac380f363fd2b3b5df23aa0e08034cfe5963fada592e851f5b274e6defae6cb1dbc5f29c52855352d8417262780ba7c8040cac21a0fda09a76af7a58b66f9a89d35f7a957548cf49f7117542a2f0f2c1c8bb371eba256aaac009798a97a27a62256fafad3988bb9b577eb00c06d28a91c85aa20f176e44e52b37a8068bfec1434c1277e68619e8459f83359976c81ca49462e1b9abf83fed9d4e08d9fdc6626bd73099ff8c2e95384e0517eff3e02a1882ef5a804989ad5a9536628f3989631f610ba9172c92c44c372ff48d590be9896e741001b3ea511727a1476d706debdea7216e1bf2461fda61a7bc6db99c098fe4f32eafbe2ac15782ddfd1609cec300015b542c835ff195cd779699d8ced1edd571f3734ef6373c526553ee9684674cd5ae1e8f390065ed761257cbb120168dcebacc94f22a15d6bc8444afff61601305c9212f086ae5a322968983568bfaed808fd935a8260709781a58bf3cbc3256e81d272a9c1271b93a1f97feebe77e94912e0361c149076abd1aa186ac38e65d879e92bc58bc7adde9339f712b8a07d798ad573318559a31c1e64354bfc5f3e9a195118cab384d9b7d192305e5fe6e8eaebd7403095e3833fb3a6425e7b8b7ae0515d5cba8a19c2b49e33cd9bedbac96f01c5a24ddc36b35f16cfd55ec584f18ecf7313a812d5d44b6ac02808ab4389e7ed6426454d9f4c69a288d36a211f27c4770cad16daba3c97e0d51a7012ba7ee4881daf21ca720c0a14d54852516c8342989ed328d13366be829416218e0d2cc9c708a06669873b4a7a32e35dbc59d5f7eeebb7fb3c307e84c287c2e3a921e94149a90a56e4c8bcf954844eb7edefea72690c518075cdce72c222961c388ba8cb9e2f881582131cce0898c86ab2f7c1a925301eb6a33bf33baf957f18d648b55e0c613db371343cc7ce89f91423629e644b286bba4d8b4cbb116e30da5f7a4bba8606093fe5d6bad8bc5f98fb1ac476bf8724a8008a725ed3aed86c763f2eac7d77f1ef9a96702e13ec5080bb82606741e08fde37aceb1dd32c11afa92be85ff46ec2010ce17d5cf92e91243ccb1070000002a746ca1f1135b1b0638ffe19c8b31644a08f9f1990685e0f458f096daae910e9f36a83a8ba01dde2b5d0d3097b1cf03be7aee0a8c7c4c8672d45c6310e7d2e5558143ad9e79a9751b8ac54a3e86fdfd9320ef69c7130460e259462be21db94fcbd3181903130f3f982f4c8011bfe62bd5903ad8713281be0fa8de38553ea6c3e566152518bd80fbeb5863f0de7c7cf26606b48b63c89d9f9c798816e7e1e1dbb3946a1048ebf383f117ac9bf565a277086fd9cc0250dd22cf1d2c3cf58fa227f4f2c201be2df79230b6a95333f3a3ded0d11f9b647da9b4cb70fa02631552df57b7a6009b1b36d8f7c9f2fc7ac53912f29e79fdb57acecd431adf2dca1c0e7d31d7ff38ce7b3089416d9ab4f7474f1b68141228d4350ad7541676caf115e6c4eeecc706e0268c2eda740cce7a22e1090fb0216608a13c50316ee056414d0dfce99ab3f9c4619df20d7e0c254c3e9a9717f140b1a4ecdba1ca5ce3bb252083a69bb107338184f55d064c912745aa81588de2299fb9f77201c5ded7cbf572b64c0d6d300344226355d1a4cb8088e43780e01e190e9b877ba14431d115296e31c2cc0266c0df82da2530ac1e094cdfee42fcfdb8ee5d03c251d24d5b0fefafa7b9c2a2e73a814e768d57a5429372dce6266dc547a4c93a05dece1e7601a658d4855843db66ba8ecae9cd1703d66a3aff1be2be77c0ce96772d570c73f88d028eb8716dcb5e49792b39f1a5a4275a4f83d8ae2ea8883bbfaa42050392da86d7a4a22835553cd2fdcd0cca630ad003c4a15ae0b7a7cee875b5a08f0ef70d86187054260001c9698419bf1569b1802439cd3fe320d9272b853e7b34a322a5fbade5cd3ad0e1c4b07d111981494215d3b82c2fe8a7697052a3b7b1ef3fb22d5e33e57c8d422b5e3dc9cf1a5df5401559c56610f44a4e409b12aa82bf661c17a2bb76e469583531f782b55da4eabbb68cb39bf32844398fe0ffb79e4c95e3e3c3ed3e9ac304cf1980b7cde8fcf76966cca196748e4ad7a02debd6ccc4a3e9b8adaa7dc668a76cbd137b2e6fbc673900000100000000009bf5ed16d5f5818535802fa7627a7d352f4216ba3f84481394c0500b7aea67e838d5dd0422eeb940ad42546e1f3c2cd85c53abbaada51b5571323d7ea53d436c2d349befca87909c1dc2a23d2db53ecc272b80896b65fa0cad8854e6b36e052ecbe677024b9614a180fc54c20fac7ed4d16e7ba17a368f0a00a036d23ae4b19ad3d99642ff054850233b60e706a4f575e49234acc76211a5bace9b8417eb6d986dab4bc6b8b510ee0477f6b8738f00709b7f35aac1730017c0037e5c40404d145b527a29500fab1e3c00"}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) 3m11.077932835s ago: executing program 0 (id=175): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000280)='L', 0x1) write$char_usb(r0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 3m6.511140542s ago: executing program 0 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3m5.692510353s ago: executing program 0 (id=185): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0x400]}, &(0x7f0000000180), 0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000001480)=ANY=[], 0xfd, 0x553e, &(0x7f0000006b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3b41, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x4b, 0x4a, "26270000000000000000e253c04105a4b6d6932f"}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") dup(0xffffffffffffffff) dup(0xffffffffffffffff) mlockall(0x7) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) 3m3.220032709s ago: executing program 2 (id=186): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="55000000200009afb72d13b2a4a2719302000000030b43026c26236925000400fe7f00000000000000003942cfd8880f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509a9a1f8baeb1898000000000100005a", 0x55}], 0x1}, 0x4000) 3m1.910322518s ago: executing program 2 (id=187): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="d0a1afbe0200", 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000cc0)="b2d48b8d96910ad86256b71f78c87437badb3f2cee8fe086e7ef2d654c2dfcf557109b30a79ea3b3bf572c9acea39b757b57", 0x32}, {&(0x7f0000000d00)="4baf74d049951b48e7c2ca76896d806c76428aa9b50adeab1f3d3d90970812b97d71b3703a4cd2831e6c1428d2538576c9bd5865c98de59ce3e6f35a7405391e3d70927ee86f7f427cec5a909ab732479117bdc6b98be39b43d5dcdae132a47c4220011ba3d4346fe805cf0befc172a0fc86cf341b9fbb7c48097219b8a36f4e74d627d9bd2970e80a9b", 0x8a}, {&(0x7f0000000dc0)="419d47f088f32c6d6e59673ad586c81e9cd0a19d8bce35bc2a02287234fd8a725a586ccaa1ccc0477f245583018b184f13b86a909de1c3d24185308b23a52446f00834d4c2ebe1018223549c7ed25584a2e440de8c069013a8b52f1c74b20982f544878938d09e5bc26a0c5a1f8e4f21d6a01b7daeadf69fd57aab22c030b40006fdf5aa4c242925ddc2d4cf24eb922325faeaab3e9dae615c2ae45f24", 0x9d}, {&(0x7f0000000e80)="20bce2027a9697a58198ffcf36087714cc5e232877310000680510018c8e75775752bcef", 0x24}, {&(0x7f0000000ec0)="dc3e3fcf40b69ffc538bbefcb17582dc2d32aee15052f99d115bf330659aea8833d2c02534cae484037cd453ae9eff8165f9db161694f5857f6931b711bb9bc191e082081201929c5ed99dc446a33ffd899476594b7b6f3f5ef2a5dbfdc48017698f5205cea88b5649c0cee7ff2842c6c6f1f43ddb2cf177348835111db770ea31d6290dc3f4dff59d3a252a81da955137678dc6fd62922102dbfc228679e88e607dc96d05af809b938075fe9d", 0xad}, {&(0x7f0000000f80)="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", 0x3bf}], 0x6}}], 0x2, 0x48014) 3m1.79119027s ago: executing program 0 (id=188): socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) pipe(0x0) socket$netlink(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 3m1.690437928s ago: executing program 4 (id=189): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}]}, 0x30}}, 0x4004080) 3m1.545547242s ago: executing program 2 (id=190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m1.175399964s ago: executing program 2 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sched_setaffinity(r2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') 3m0.74319023s ago: executing program 4 (id=192): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x3}) 2m59.581024709s ago: executing program 0 (id=193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000800)={'#! ', './tracing'}, 0xd) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(0x0, 0x0, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 2m57.426200293s ago: executing program 0 (id=195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x20024014) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x40811) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x8010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r2], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x80c4) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m56.127704056s ago: executing program 2 (id=198): r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0xef4e, 0x2, 0x1003, 0xb, 0x8, 0x6, 0x1, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x48}}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = io_uring_setup(0x12ec, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r7, 0x24, &(0x7f0000000400)={0x0, 0x1}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) 2m54.042522405s ago: executing program 4 (id=199): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) setresuid(0x0, 0xee01, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) getgroups(0x2, &(0x7f0000000640)=[0xee00, 0xee01]) setresgid(0xffffffffffffffff, r1, 0x0) setresgid(r0, r1, r1) 2m52.387230807s ago: executing program 4 (id=202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@map, r0, 0x37, 0x1c, 0x0, @void, @value=r0}, 0x20) 2m51.726939175s ago: executing program 4 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000800)={'#! ', './tracing'}, 0xd) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(0x0, 0x0, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 2m50.040660928s ago: executing program 4 (id=208): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@empty, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0x6b8f, 0x1ff, 0x4, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}, @sa_dir={0x5, 0x21, 0x1}]}, 0x10c}}, 0x8000) 2m42.112892494s ago: executing program 33 (id=195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x20024014) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x40811) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x8010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r2], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x80c4) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m40.211281256s ago: executing program 34 (id=198): r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0xef4e, 0x2, 0x1003, 0xb, 0x8, 0x6, 0x1, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x48}}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = io_uring_setup(0x12ec, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r7, 0x24, &(0x7f0000000400)={0x0, 0x1}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) 2m33.799564516s ago: executing program 35 (id=208): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@empty, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0x6b8f, 0x1ff, 0x4, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}, @sa_dir={0x5, 0x21, 0x1}]}, 0x10c}}, 0x8000) 1m4.500366103s ago: executing program 1 (id=363): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e00000000000000030000000700000003000000fdffffff0000000000"], 0x0, 0x46, 0x0, 0x1}, 0x28) 1m3.125609677s ago: executing program 1 (id=366): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mp']) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 1m0.536898741s ago: executing program 1 (id=371): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r1, 0x0, 0x8001) 59.596376693s ago: executing program 1 (id=375): dup(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000180)={0x1, 0x3, 0xffffffff}) 55.679687454s ago: executing program 1 (id=380): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, 0x0) 52.857180198s ago: executing program 1 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) syz_open_procfs(r2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x400, 0x3e8}}) 36.68950949s ago: executing program 36 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) syz_open_procfs(r2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x400, 0x3e8}}) 24.265048914s ago: executing program 8 (id=429): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) setns(0xc9, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c"], 0x110}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000011000100"/20, @ANYRES16=r2, @ANYBLOB], 0x60}}, 0x40040) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x10) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000140), 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002640), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc0bc5351, &(0x7f0000002680)={0xffffff7f, 0x2, 'client1\x00', 0x0, "2245941080736c1d", "db7895b88a8cfee74a15e0c3d0a55a5cb7f822ac34a3a29d6da58b5d00001000"}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x6, 0x7, 0x2}, {0xf, 0x5, 0x4, 0x9}, {0xfffd, 0xb, 0x40, 0x2000}]}) 21.606638023s ago: executing program 6 (id=432): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x14, 0x3, 0x1b1c, 0xc10, 0x0, 0x0, "05010900a101150026ff007508951009008102c0"}}, 0x12c) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, {0x10, '\x00'/16}}, 0x16) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500)={0xc, {0x10, '\x00'/16}}, 0x16) nanosleep(0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000700)={0xc, {0x10, '\x00'/16}}, 0x16) 19.862209241s ago: executing program 6 (id=436): syz_usb_connect(0x5, 0x36, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x72, 0xa, 0xff00, 0x6400}, [@call={0x55}, @exit, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0xe, '\x00', 0x0, @cgroup_sock}, 0x94) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 17.851004922s ago: executing program 6 (id=438): syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f00000001c0)='./file1\x00', 0x2000000, &(0x7f00000003c0)=ANY=[], 0x1, 0x184, &(0x7f0000000700)="$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") listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100)=""/38, 0x26) 16.095032911s ago: executing program 6 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) socket$netlink(0x10, 0x3, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) 15.85306466s ago: executing program 7 (id=442): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x7fffffff) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @loopback, 0x8, 0x8}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000084"], 0x18}}], 0x2, 0x40008040) 14.547298851s ago: executing program 6 (id=443): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.', 0x4) symlinkat(&(0x7f0000000480)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0/virtual_scsi_port\x00') 14.179323369s ago: executing program 7 (id=444): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={0x0, 0x80}}, 0x0) 13.130399366s ago: executing program 7 (id=446): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x84, r4}, 0x38) 11.668608262s ago: executing program 7 (id=447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10.356507s ago: executing program 8 (id=450): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 9.975260865s ago: executing program 8 (id=451): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0x9, 0x4) 9.629505589s ago: executing program 3 (id=453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6375fd82}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x110}, 0x0) 9.534949008s ago: executing program 8 (id=454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) socket$netlink(0x10, 0x3, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) 8.118231374s ago: executing program 8 (id=455): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122', 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='fc', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r2, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122', 0x2b) symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0) 7.987301476s ago: executing program 3 (id=456): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, 0x0, 0x0, r4) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, r4) lstat(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000240)=@filename='./file0\x00', r5, 0x0) r6 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0), 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) keyctl$read(0xb, r4, &(0x7f00000009c0)=""/56, 0x38) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x238, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20c, 0x2, [@TCA_BPF_ACT={0x208, 0x1, [@m_xt={0xdc, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xb1, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa22015"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x128, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x238}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) 6.686911078s ago: executing program 9 (id=457): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x80}}, 0x0) 6.616796192s ago: executing program 7 (id=458): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x84, r4}, 0x38) 4.568713464s ago: executing program 7 (id=459): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@broadcast, @remote}, 0xc) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x28642, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000000080)={&(0x7f0000000000)=[{0x785772b1, 0x3, 0x1}], 0x1, 0x10, 0x5, 0x13}) ioctl$TIOCMGET(r3, 0x5415, 0x0) socket$inet6(0xa, 0x3, 0x7) 4.56756372s ago: executing program 9 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$phonet(0x23, 0x2, 0x1) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @remote}, 0x1, 0x2, 0x4, 0x2}}, 0x26) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x34008051) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000380)={0x0, 0xdffffffe, 0x80, 0x6, 0x1a, "8100128a5ae4e800"}) r7 = syz_open_pts(r6, 0x141601) fcntl$setstatus(r7, 0x4, 0x102800) ioctl$TIOCGPTPEER(r6, 0x5441, 0xffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x4050) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000009865cbac298701"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r9 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r2, 0x0, r4, 0x0, 0x2, 0x5) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 1.239222124s ago: executing program 3 (id=464): unshare(0x22020400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 845.823839ms ago: executing program 3 (id=465): r0 = socket(0x2000000000000021, 0x2, 0x2) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={0x0, 0x34}}, 0x4c800) 528.354529ms ago: executing program 3 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) socket$netlink(0x10, 0x3, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) 335.155808ms ago: executing program 9 (id=467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6375fd82}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x110}, 0x0) 92.026502ms ago: executing program 6 (id=468): ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1c0) rmdir(&(0x7f0000000000)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00') read$watch_queue(r4, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='attr/fscreate\x00') 33.125646ms ago: executing program 8 (id=469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 9 (id=470): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): 50][ T5619] Bluetooth: hci5: command tx timeout [ 87.645543][ T5621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.826477][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.944440][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.004132][ T1264] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.004243][ T1264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.076312][ T1264] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.076428][ T1264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.255772][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.755463][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.983978][ T5615] veth0_vlan: entered promiscuous mode [ 89.058253][ T5615] veth1_vlan: entered promiscuous mode [ 89.177997][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.270685][ T5615] veth0_macvtap: entered promiscuous mode [ 89.323774][ T5615] veth1_macvtap: entered promiscuous mode [ 89.420595][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.425634][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.448944][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.451740][ T5625] veth0_vlan: entered promiscuous mode [ 89.455981][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.524918][ T5625] veth1_vlan: entered promiscuous mode [ 89.562630][ T5629] Bluetooth: hci4: command tx timeout [ 89.562664][ T5629] Bluetooth: hci1: command tx timeout [ 89.562693][ T5629] Bluetooth: hci0: command tx timeout [ 89.642493][ T5619] Bluetooth: hci2: command tx timeout [ 89.722348][ T5619] Bluetooth: hci5: command tx timeout [ 89.722379][ T5619] Bluetooth: hci3: command tx timeout [ 89.779975][ T5637] veth0_vlan: entered promiscuous mode [ 89.820981][ T5621] veth0_vlan: entered promiscuous mode [ 89.846151][ T5625] veth0_macvtap: entered promiscuous mode [ 89.847940][ T1254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.847959][ T1254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.876667][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.880106][ T5625] veth1_macvtap: entered promiscuous mode [ 89.893818][ T5621] veth1_vlan: entered promiscuous mode [ 89.903557][ T5637] veth1_vlan: entered promiscuous mode [ 89.941627][ T1260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.941648][ T1260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.975645][ T1264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.978092][ T1254] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.978161][ T1254] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.004817][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.022523][ T1260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.040770][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.078247][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.107339][ T5621] veth0_macvtap: entered promiscuous mode [ 90.141023][ T5621] veth1_macvtap: entered promiscuous mode [ 90.155878][ T5613] veth0_vlan: entered promiscuous mode [ 90.168118][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.187375][ T5614] veth0_vlan: entered promiscuous mode [ 90.198491][ T5637] veth0_macvtap: entered promiscuous mode [ 90.212644][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.213714][ T1008] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.213918][ T1008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.244194][ T5637] veth1_macvtap: entered promiscuous mode [ 90.253040][ T5614] veth1_vlan: entered promiscuous mode [ 90.253847][ T5849] syz.0.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 90.272393][ T5613] veth1_vlan: entered promiscuous mode [ 91.765932][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.771097][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.883453][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.883477][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.930867][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.973405][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.058616][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.058631][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.094192][ T5614] veth0_macvtap: entered promiscuous mode [ 92.126389][ T5613] veth0_macvtap: entered promiscuous mode [ 92.136110][ T5613] veth1_macvtap: entered promiscuous mode [ 92.142308][ T1008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.142377][ T1008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.142438][ T1008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.142503][ T1008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.142570][ T1008] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.142629][ T1008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.142689][ T1008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.142752][ T1008] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.187742][ T5614] veth1_macvtap: entered promiscuous mode [ 92.191144][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.191162][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.241566][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.329833][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.341681][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.408175][ T1260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.408199][ T1260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.410632][ T1254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.410650][ T1254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.443575][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.443624][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.443666][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.443708][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.459804][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.603143][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.603964][ T1260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.604011][ T1260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.604053][ T1260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.621166][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.621185][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.591455][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.591479][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.730206][ T1254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.730229][ T1254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.962118][ T1254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.962142][ T1254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.079106][ T5863] netlink: 'syz.4.8': attribute type 27 has an invalid length. [ 94.090752][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.780112][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.780135][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.395918][ T5896] loop3: detected capacity change from 0 to 512 [ 97.442624][ T5896] ======================================================= [ 97.442624][ T5896] WARNING: The mand mount option has been deprecated and [ 97.442624][ T5896] and is ignored by this kernel. Remove the mand [ 97.442624][ T5896] option from the mount to silence this warning. [ 97.442624][ T5896] ======================================================= [ 97.642473][ T31] audit: type=1800 audit(1791280803.585:2): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.18" name="file1" dev="loop3" ino=1048664 res=0 errno=0 [ 97.928286][ T5911] loop0: detected capacity change from 0 to 512 [ 98.025268][ T5911] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 98.026482][ T5911] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 98.026549][ T5911] loop0: lost filesystem error report for type 5 error -12 [ 98.031983][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 98.032004][ C1] EXT4-fs (loop0): initial error at time 1791280803: ext4_process_orphan:346 [ 98.032031][ C1] EXT4-fs (loop0): last error at time 1791280803: ext4_process_orphan:346 [ 98.034748][ T5911] EXT4-fs (loop0): 1 truncate cleaned up [ 98.041261][ T5911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.151936][ T5913] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 98.299513][ T5913] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 98.368915][ T5918] netlink: 'syz.1.25': attribute type 6 has an invalid length. [ 98.852611][ T5919] loop4: detected capacity change from 0 to 512 [ 98.968787][ T5919] FAT-fs (loop4): error, invalid FAT chain (i_pos 51, last_block 64) [ 99.066717][ T5615] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.332901][ T5925] lo: entered promiscuous mode [ 99.381278][ T5925] tunl0: entered promiscuous mode [ 99.407010][ T5925] gre0: entered promiscuous mode [ 99.446839][ T5746] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.470017][ T5925] gretap0: entered promiscuous mode [ 99.479833][ T5746] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.517961][ T5925] erspan0: entered promiscuous mode [ 99.535296][ T5925] ip_vti0: entered promiscuous mode [ 99.570275][ T5925] ip6_vti0: entered promiscuous mode [ 99.586288][ T5925] sit0: entered promiscuous mode [ 99.618019][ T5925] ip6tnl0: entered promiscuous mode [ 99.655025][ T5925] ip6gre0: entered promiscuous mode [ 99.690015][ T5925] syz_tun: entered promiscuous mode [ 99.725000][ T5925] ip6gretap0: entered promiscuous mode [ 99.755599][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.756225][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.800748][ T5925] bridge0: entered promiscuous mode [ 99.817295][ T5925] vcan0: entered promiscuous mode [ 99.829921][ T5925] bond0: entered promiscuous mode [ 99.829942][ T5925] bond_slave_0: entered promiscuous mode [ 99.830143][ T5925] bond_slave_1: entered promiscuous mode [ 99.839019][ T5925] team0: entered promiscuous mode [ 99.839038][ T5925] team_slave_0: entered promiscuous mode [ 99.839324][ T5925] team_slave_1: entered promiscuous mode [ 99.848249][ T5925] dummy0: entered promiscuous mode [ 99.888282][ T5925] nlmon0: entered promiscuous mode [ 99.902459][ T5925] batadv0: entered promiscuous mode [ 99.925387][ T5925] vxcan0: entered promiscuous mode [ 99.925938][ T5934] fido_id[5934]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.928471][ T5925] vxcan1: entered promiscuous mode [ 99.953998][ T5925] veth0: entered promiscuous mode [ 99.979743][ T5925] veth1: entered promiscuous mode [ 100.029209][ T5925] wg0: entered promiscuous mode [ 100.054718][ T5925] wg1: entered promiscuous mode [ 100.081790][ T5925] wg2: entered promiscuous mode [ 100.109654][ T5925] veth0_to_bridge: entered promiscuous mode [ 100.194755][ T5925] veth1_to_bridge: entered promiscuous mode [ 100.252258][ T5925] veth0_to_bond: entered promiscuous mode [ 100.270848][ T5925] veth1_to_bond: entered promiscuous mode [ 100.306841][ T5925] veth0_to_team: entered promiscuous mode [ 100.344342][ T5925] veth1_to_team: entered promiscuous mode [ 100.384372][ T5925] veth0_to_batadv: entered promiscuous mode [ 100.397612][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.397667][ T5925] batadv_slave_0: entered promiscuous mode [ 100.408314][ T5925] veth1_to_batadv: entered promiscuous mode [ 100.431434][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.431493][ T5925] batadv_slave_1: entered promiscuous mode [ 100.445071][ T5925] xfrm0: entered promiscuous mode [ 100.472071][ T5925] veth0_to_hsr: entered promiscuous mode [ 100.508334][ T5925] veth1_to_hsr: entered promiscuous mode [ 100.555161][ T5925] hsr0: entered promiscuous mode [ 100.566999][ T5925] veth1_virt_wifi: entered promiscuous mode [ 100.609207][ T5925] veth0_virt_wifi: entered promiscuous mode [ 100.623966][ T5925] virt_wifi0: entered promiscuous mode [ 100.686300][ T5925] vlan0: entered promiscuous mode [ 100.710525][ T5925] vlan1: entered promiscuous mode [ 100.746545][ T5925] macvlan0: entered promiscuous mode [ 100.790376][ T5925] macvlan1: entered promiscuous mode [ 100.809791][ T5925] ipvlan0: entered promiscuous mode [ 100.809953][ T5925] ipvlan1: entered promiscuous mode [ 100.878657][ T5925] macvtap0: entered promiscuous mode [ 100.898904][ T5925] macsec0: entered promiscuous mode [ 100.923381][ T5925] geneve0: entered promiscuous mode [ 100.941213][ T5925] geneve1: entered promiscuous mode [ 100.995032][ T5925] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 101.109461][ T5925] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 101.170072][ T5925] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 101.243646][ T5925] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 101.449334][ T5925] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 102.685470][ T5925] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 104.203040][ T1273] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.205492][ T1264] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.205540][ T1264] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.212409][ T1273] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.212733][ T5955] tipc: Started in network mode [ 104.212762][ T5955] tipc: Node identity d62e9385168d, cluster identity 4711 [ 104.213767][ T5955] tipc: Enabled bearer , priority 0 [ 104.229562][ T5956] syzkaller0: entered promiscuous mode [ 104.229585][ T5956] syzkaller0: entered allmulticast mode [ 105.392098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.600386][ T5979] loop3: detected capacity change from 0 to 2048 [ 105.606243][ T5773] tipc: Node number set to 3231945605 [ 106.015575][ T5956] tipc: Resetting bearer [ 106.059640][ T5979] loop3: p1 p3 p4 [ 106.091128][ T5956] tipc: Disabling bearer [ 106.120832][ T5979] loop3: p4 size 589824 extends beyond EOD, truncated [ 106.504890][ T5977] udevd[5977]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 106.604234][ T5989] udevd[5989]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 106.649067][ T5991] udevd[5991]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 106.792263][ T31] audit: type=1800 audit(1791280812.735:3): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.46" name=08 dev="sda1" ino=2052 res=0 errno=0 [ 108.387567][ T6009] loop0: detected capacity change from 0 to 512 [ 108.510781][ T6009] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 108.533082][ T6009] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 108.533104][ T6009] loop0: lost filesystem error report for type 5 error -12 [ 108.537503][ T6009] EXT4-fs (loop0): 1 truncate cleaned up [ 108.562101][ T6009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.571551][ T6015] loop5: detected capacity change from 0 to 128 [ 108.573115][ T6015] vfat: Unknown parameter '0xffffffffffffffffÿ' [ 109.012511][ T6019] warning: `syz.0.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.512481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 110.826241][ T5615] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.883043][ T6024] loop4: detected capacity change from 0 to 16 [ 110.883950][ T6024] erofs: Unknown parameter 'fault_injection' [ 112.126143][ T6038] netlink: 36 bytes leftover after parsing attributes in process `syz.2.47'. [ 113.650719][ T6053] loop4: detected capacity change from 0 to 512 [ 113.734575][ T6053] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 113.737560][ T6053] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 113.737707][ T6053] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #13: comm syz.4.63: iget: bad i_size value: 12154757448730 [ 113.737765][ T6053] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 113.741900][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 113.741926][ C1] EXT4-fs (loop4): initial error at time 1791280819: ext4_orphan_get:1403: inode 13 [ 113.741955][ C1] EXT4-fs (loop4): last error at time 1791280819: ext4_orphan_get:1403: inode 13 [ 113.752761][ T6053] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.63: couldn't read orphan inode 13 (err -117) [ 113.752794][ T6053] loop4: lost filesystem error report for type 5 error -117 [ 113.774805][ T6053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.714923][ T6060] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 114.756127][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.042169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 118.192070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.602144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 119.710176][ T6098] mmap: syz.5.74 (6098) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.990408][ T6096] pimreg: entered allmulticast mode [ 120.005770][ T6096] pimreg: left allmulticast mode [ 120.400729][ T6100] loop3: detected capacity change from 0 to 128 [ 120.528266][ T6104] FAULT_INJECTION: forcing a failure. [ 120.528266][ T6104] name fail_futex, interval 1, probability 0, space 0, times 1 [ 120.528302][ T6104] CPU: 1 UID: 0 PID: 6104 Comm: syz.5.77 Not tainted syzkaller #0 PREEMPT(full) [ 120.528334][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 120.528349][ T6104] Call Trace: [ 120.528358][ T6104] [ 120.528368][ T6104] dump_stack_lvl+0xe8/0x150 [ 120.528409][ T6104] should_fail_ex+0x410/0x560 [ 120.528447][ T6104] get_futex_key+0x1b4/0x1580 [ 120.528479][ T6104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.528522][ T6104] ? __pfx_get_futex_key+0x10/0x10 [ 120.528550][ T6104] ? _copy_from_user+0x75/0xb0 [ 120.528591][ T6104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.528621][ T6104] ? fixup_exception+0x11f8/0x2140 [ 120.528663][ T6104] futex_wake+0x119/0x5f0 [ 120.528704][ T6104] ? __pfx_fixup_exception+0x10/0x10 [ 120.528737][ T6104] ? __pfx_futex_wake+0x10/0x10 [ 120.528779][ T6104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.528808][ T6104] ? do_user_addr_fault+0xef2/0x1340 [ 120.528846][ T6104] do_futex+0x458/0x4e0 [ 120.528878][ T6104] ? trace_irq_disable+0x3b/0x140 [ 120.528919][ T6104] ? __pfx_do_futex+0x10/0x10 [ 120.528964][ T6104] __se_sys_futex+0x3a8/0x450 [ 120.529004][ T6104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.529032][ T6104] ? __se_sys_epoll_ctl+0xd4/0x230 [ 120.529062][ T6104] ? __pfx___se_sys_futex+0x10/0x10 [ 120.529097][ T6104] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 120.529131][ T6104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.529161][ T6104] ? __x64_sys_futex+0x21/0xf0 [ 120.529199][ T6104] do_syscall_64+0x166/0x520 [ 120.529236][ T6104] ? trace_irq_disable+0x3b/0x140 [ 120.529263][ T6104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.529295][ T6104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.529320][ T6104] RIP: 0033:0x7f667279e199 [ 120.529343][ T6104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.529362][ T6104] RSP: 002b:00007f66736b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.529388][ T6104] RAX: ffffffffffffffda RBX: 00007f6672a25fa8 RCX: 00007f667279e199 [ 120.529407][ T6104] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6672a25fac [ 120.529423][ T6104] RBP: 00007f6672a25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 120.529440][ T6104] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 120.529457][ T6104] R13: 00007f6672a26038 R14: 00007fffd224d7b0 R15: 00007fffd224d898 [ 120.529495][ T6104] [ 121.190127][ T6112] FAULT_INJECTION: forcing a failure. [ 121.190127][ T6112] name failslab, interval 1, probability 0, space 0, times 1 [ 121.190226][ T6112] CPU: 1 UID: 0 PID: 6112 Comm: syz.5.79 Not tainted syzkaller #0 PREEMPT(full) [ 121.190246][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 121.190257][ T6112] Call Trace: [ 121.190265][ T6112] [ 121.190273][ T6112] dump_stack_lvl+0xe8/0x150 [ 121.190305][ T6112] should_fail_ex+0x410/0x560 [ 121.190334][ T6112] should_failslab+0xa8/0x100 [ 121.190362][ T6112] __kmalloc_noprof+0xfe/0x720 [ 121.190383][ T6112] ? ___neigh_create+0x6d2/0x22b0 [ 121.190407][ T6112] ? ___neigh_create+0x6d2/0x22b0 [ 121.190440][ T6112] ___neigh_create+0x6d2/0x22b0 [ 121.190470][ T6112] ? neigh_lookup+0xb6/0x610 [ 121.190494][ T6112] ? __pfx_neigh_lookup+0x10/0x10 [ 121.190516][ T6112] ? __mutex_lock+0x30b/0x1550 [ 121.190544][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.190565][ T6112] ? full_name_hash+0x92/0xe0 [ 121.190595][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.190621][ T6112] arp_req_set+0x696/0xce0 [ 121.190642][ T6112] ? arp_ioctl+0x387/0x490 [ 121.190664][ T6112] ? __pfx_arp_req_set+0x10/0x10 [ 121.190691][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.190724][ T6112] arp_ioctl+0x396/0x490 [ 121.190747][ T6112] ? __pfx_arp_ioctl+0x10/0x10 [ 121.190786][ T6112] inet_ioctl+0x3c4/0x560 [ 121.190811][ T6112] ? __pfx_inet_ioctl+0x10/0x10 [ 121.190835][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.190873][ T6112] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 121.190902][ T6112] sock_do_ioctl+0x101/0x320 [ 121.190931][ T6112] ? __pfx_sock_do_ioctl+0x10/0x10 [ 121.190950][ T6112] ? hook_file_ioctl+0x1f2/0x600 [ 121.190990][ T6112] sock_ioctl+0x57a/0x7e0 [ 121.191013][ T6112] ? __pfx_sock_ioctl+0x10/0x10 [ 121.191034][ T6112] ? __fget_files+0x2a/0x420 [ 121.191062][ T6112] ? __fget_files+0x3a2/0x420 [ 121.191089][ T6112] ? __fget_files+0x2a/0x420 [ 121.191120][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.191141][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.191164][ T6112] ? __pfx_sock_ioctl+0x10/0x10 [ 121.191185][ T6112] __se_sys_ioctl+0xfc/0x170 [ 121.191210][ T6112] do_syscall_64+0x166/0x520 [ 121.191237][ T6112] ? trace_irq_disable+0x3b/0x140 [ 121.191258][ T6112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.191281][ T6112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.191300][ T6112] RIP: 0033:0x7f667279e199 [ 121.191317][ T6112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.191332][ T6112] RSP: 002b:00007f6673693028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.191351][ T6112] RAX: ffffffffffffffda RBX: 00007f6672a26090 RCX: 00007f667279e199 [ 121.191365][ T6112] RDX: 00002000000035c0 RSI: 0000000000008955 RDI: 0000000000000007 [ 121.191377][ T6112] RBP: 00007f66728358e0 R08: 0000000000000000 R09: 0000000000000000 [ 121.191389][ T6112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.191400][ T6112] R13: 00007f6672a26128 R14: 00007f6672a26090 R15: 00007fffd224d898 [ 121.191430][ T6112] [ 123.827054][ T6121] loop0: detected capacity change from 0 to 512 [ 124.462169][ T6121] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 124.464529][ T6121] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 124.464552][ T6121] loop0: lost filesystem error report for type 5 error -12 [ 124.466234][ T6121] EXT4-fs (loop0): 1 truncate cleaned up [ 124.473970][ T6121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.595671][ T5615] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.282689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.692387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 128.842194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.992148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 131.834960][ T6174] loop4: detected capacity change from 0 to 512 [ 131.856600][ T6174] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 131.857659][ T6174] EXT4-fs error (device loop4) in ext4_process_orphan:346: Out of memory [ 131.857682][ T6174] loop4: lost filesystem error report for type 5 error -12 [ 131.861878][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 131.861899][ C0] EXT4-fs (loop4): initial error at time 1791280837: ext4_process_orphan:346 [ 131.861931][ C0] EXT4-fs (loop4): last error at time 1791280837: ext4_process_orphan:346 [ 131.864291][ T6174] EXT4-fs (loop4): 1 truncate cleaned up [ 131.870148][ T6174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.994319][ T6179] loop2: detected capacity change from 0 to 512 [ 132.062707][ T6179] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 132.081382][ T6179] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory [ 132.081421][ T6179] loop2: lost filesystem error report for type 5 error -12 [ 132.082031][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 132.082054][ C1] EXT4-fs (loop2): initial error at time 1791280838: ext4_process_orphan:346 [ 132.082083][ C1] EXT4-fs (loop2): last error at time 1791280838: ext4_process_orphan:346 [ 132.127828][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.127913][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.159093][ T6179] EXT4-fs (loop2): 1 truncate cleaned up [ 132.179185][ T6179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.275321][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.278218][ T5637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.788975][ T5738] wiimote 0005:057E:0306.0002: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 133.816914][ T5738] wiimote 0005:057E:0306.0002: New device registered [ 133.832902][ T6192] wiimote 0005:057E:0306.0002: Device removed [ 134.781940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.080721][ T5738] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1) [ 135.116068][ T5738] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input6 [ 135.124156][ T5738] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input7 [ 135.127157][ T5738] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input5 [ 135.387034][ T6198] fido_id[6198]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 136.517566][ T6215] loop2: detected capacity change from 0 to 256 [ 136.535641][ T6215] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.570243][ T6215] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.156739][ T6224] loop2: detected capacity change from 0 to 128 [ 137.164048][ T6224] vfat: Unknown parameter '0xffffffffffffffffÿ' [ 137.947731][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.104'. [ 140.118828][ T6237] loop4: detected capacity change from 0 to 512 [ 140.437114][ T6247] syz_tun: entered allmulticast mode [ 140.454171][ T6243] Zero length message leads to an empty skb [ 140.708283][ T6249] loop0: detected capacity change from 0 to 512 [ 140.773003][ T6249] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 140.774403][ T6249] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 140.774424][ T6249] loop0: lost filesystem error report for type 5 error -12 [ 140.775693][ T6249] EXT4-fs (loop0): 1 truncate cleaned up [ 140.781623][ T6249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.868247][ T6237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.868350][ T6237] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.761660][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.826240][ T5615] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.722384][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.725984][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.727383][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.730166][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.740882][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.034696][ T6295] loop1: detected capacity change from 0 to 512 [ 149.051698][ T6296] netlink: 'syz.2.128': attribute type 39 has an invalid length. [ 149.122246][ T6295] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 149.122749][ T6295] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 149.122770][ T6295] loop1: lost filesystem error report for type 5 error -12 [ 149.125179][ T6295] EXT4-fs (loop1): 1 truncate cleaned up [ 149.130604][ T6295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.775546][ T6300] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 149.843991][ T6300] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 150.130171][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.331361][ T6306] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 151.942486][ T5619] Bluetooth: hci6: command tx timeout [ 152.548629][ T6285] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.548742][ T6285] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.548876][ T6285] bridge_slave_0: entered allmulticast mode [ 152.567192][ T6285] bridge_slave_0: entered promiscuous mode [ 153.062650][ T6285] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.062758][ T6285] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.062925][ T6285] bridge_slave_1: entered allmulticast mode [ 153.066720][ T6285] bridge_slave_1: entered promiscuous mode [ 153.155302][ T6339] loop3: detected capacity change from 0 to 512 [ 153.199226][ T6339] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 153.199275][ T6339] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 153.199357][ T6339] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #13: comm syz.3.127: iget: bad i_size value: 12154757448730 [ 153.199386][ T6339] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 153.200178][ T6339] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.127: couldn't read orphan inode 13 (err -117) [ 153.200209][ T6339] loop3: lost filesystem error report for type 5 error -117 [ 153.215135][ T6339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.480684][ T6344] FAULT_INJECTION: forcing a failure. [ 153.480684][ T6344] name failslab, interval 1, probability 0, space 0, times 0 [ 153.480717][ T6344] CPU: 0 UID: 0 PID: 6344 Comm: syz.1.136 Not tainted syzkaller #0 PREEMPT(full) [ 153.480741][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 153.480755][ T6344] Call Trace: [ 153.480764][ T6344] [ 153.480773][ T6344] dump_stack_lvl+0xe8/0x150 [ 153.480810][ T6344] should_fail_ex+0x410/0x560 [ 153.480844][ T6344] ? alloc_slab_obj_exts+0x5c/0x180 [ 153.480884][ T6344] should_failslab+0xa8/0x100 [ 153.480930][ T6344] ? alloc_slab_obj_exts+0x5c/0x180 [ 153.480968][ T6344] __kmalloc_flags_noprof+0x128/0x7a0 [ 153.481000][ T6344] ? alloc_slab_obj_exts+0x5c/0x180 [ 153.481048][ T6344] alloc_slab_obj_exts+0x5c/0x180 [ 153.481091][ T6344] __memcg_slab_post_alloc_hook+0x60b/0xd90 [ 153.481140][ T6344] ? ep_insert+0x2b1/0x1af0 [ 153.481169][ T6344] kmem_cache_alloc_noprof+0x367/0x600 [ 153.481195][ T6344] ? ep_insert+0x2b1/0x1af0 [ 153.481219][ T6344] ? kmem_cache_alloc_noprof+0x156/0x600 [ 153.481245][ T6344] ? ep_insert+0x2b1/0x1af0 [ 153.481279][ T6344] ep_insert+0x2b1/0x1af0 [ 153.481309][ T6344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.481356][ T6344] ? __pfx_ep_insert+0x10/0x10 [ 153.481384][ T6344] ? __pfx___mutex_lock+0x10/0x10 [ 153.481424][ T6344] ? __pfx_futex_wait+0x10/0x10 [ 153.481458][ T6344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.481496][ T6344] do_epoll_ctl_file+0x8c2/0xee0 [ 153.481535][ T6344] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 153.481567][ T6344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.481596][ T6344] ? __fget_files+0x3a2/0x420 [ 153.481633][ T6344] ? __fget_files+0x2a/0x420 [ 153.481674][ T6344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.481709][ T6344] __se_sys_epoll_ctl+0x162/0x230 [ 153.481743][ T6344] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 153.481780][ T6344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.481815][ T6344] do_syscall_64+0x166/0x520 [ 153.481852][ T6344] ? trace_irq_disable+0x3b/0x140 [ 153.481879][ T6344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.481911][ T6344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.481942][ T6344] RIP: 0033:0x7f8edc99e199 [ 153.481964][ T6344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.481983][ T6344] RSP: 002b:00007f8edd793028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 153.482009][ T6344] RAX: ffffffffffffffda RBX: 00007f8edcc25fa0 RCX: 00007f8edc99e199 [ 153.482027][ T6344] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000005 [ 153.482042][ T6344] RBP: 00007f8edca358e0 R08: 0000000000000000 R09: 0000000000000000 [ 153.482057][ T6344] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 153.482073][ T6344] R13: 00007f8edcc26038 R14: 00007f8edcc25fa0 R15: 00007fff1b146bf8 [ 153.482112][ T6344] [ 153.970164][ T5619] Bluetooth: hci6: command tx timeout [ 154.295735][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.354989][ T6285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.395939][ T6285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.599999][ T6285] team0: Port device team_slave_0 added [ 156.197637][ T5619] Bluetooth: hci6: command tx timeout [ 156.316376][ T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.377736][ T6285] team0: Port device team_slave_1 added [ 156.515219][ T6285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.515239][ T6285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.515269][ T6285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.559404][ T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.605819][ T6285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.605838][ T6285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.605869][ T6285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.719809][ T6360] loop2: detected capacity change from 0 to 512 [ 156.720317][ T6362] loop0: detected capacity change from 0 to 128 [ 156.730958][ T6360] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 156.855275][ T6285] hsr_slave_0: entered promiscuous mode [ 156.856365][ T6285] hsr_slave_1: entered promiscuous mode [ 156.860016][ T6285] debugfs: 'hsr0' already exists in 'hsr' [ 156.860036][ T6285] Cannot create hsr debugfs directory [ 157.446853][ T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.787222][ T5619] Bluetooth: hci6: command tx timeout [ 159.004004][ T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.253230][ T6382] loop0: detected capacity change from 0 to 512 [ 159.295994][ T6382] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 159.296604][ T6382] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 159.296626][ T6382] loop0: lost filesystem error report for type 5 error -12 [ 159.301875][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 159.301897][ C0] EXT4-fs (loop0): initial error at time 1791280865: ext4_process_orphan:346 [ 159.301923][ C0] EXT4-fs (loop0): last error at time 1791280865: ext4_process_orphan:346 [ 159.304622][ T6382] EXT4-fs (loop0): 1 truncate cleaned up [ 159.325179][ T6382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.370452][ T5615] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.796572][ T50] bridge_slave_1: left allmulticast mode [ 161.796611][ T50] bridge_slave_1: left promiscuous mode [ 161.797606][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.894979][ T50] bridge_slave_0: left allmulticast mode [ 161.895002][ T50] bridge_slave_0: left promiscuous mode [ 161.895174][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.070879][ T6381] smpboot: CPU 1 is now offline [ 163.495091][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.649209][ T6422] loop4: detected capacity change from 0 to 512 [ 163.728483][ T6422] EXT4-fs (loop4): 1 truncate cleaned up [ 163.757471][ T6422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.822721][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.826421][ T50] bond0 (unregistering): Released all slaves [ 164.139518][ T6285] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 164.195500][ T6285] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 164.212676][ T6285] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 164.268555][ T6285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 164.268857][ T50] tipc: Left network mode [ 164.293917][ T6285] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 164.337793][ T6433] loop2: detected capacity change from 0 to 512 [ 164.371171][ T6285] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 164.396247][ T6433] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 165.329447][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.488717][ T6285] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 165.536063][ T6285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.078676][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 166.632196][ T6461] loop1: detected capacity change from 0 to 512 [ 166.665524][ T50] hsr_slave_0: left promiscuous mode [ 166.688863][ T6461] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 166.710995][ T6461] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 166.711013][ T6461] loop1: lost filesystem error report for type 5 error -12 [ 166.711853][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 166.711870][ C0] EXT4-fs (loop1): initial error at time 1791280872: ext4_process_orphan:346 [ 166.711889][ C0] EXT4-fs (loop1): last error at time 1791280872: ext4_process_orphan:346 [ 166.772429][ T6461] EXT4-fs (loop1): 1 truncate cleaned up [ 166.792188][ T6461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.833468][ T50] hsr_slave_1: left promiscuous mode [ 167.834268][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.834299][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.396115][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.408627][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.408645][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.639366][ T50] veth1_macvtap: left promiscuous mode [ 168.639410][ T50] veth0_macvtap: left promiscuous mode [ 168.639501][ T50] veth1_vlan: left promiscuous mode [ 168.666825][ T50] veth0_vlan: left promiscuous mode [ 171.092341][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 171.270670][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 171.334134][ T9] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 171.334159][ T9] usb 1-1: config 0 has no interface number 0 [ 171.334194][ T9] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.352426][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.352453][ T9] usb 1-1: Product: syz [ 171.352465][ T9] usb 1-1: Manufacturer: syz [ 171.352477][ T9] usb 1-1: SerialNumber: syz [ 171.589203][ T9] usb 1-1: config 0 descriptor?? [ 171.690125][ T50] team0 (unregistering): Port device team_slave_1 removed [ 171.847858][ T50] team0 (unregistering): Port device team_slave_0 removed [ 171.875220][ T9] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 173.393545][ T9] usb 1-1: USB disconnect, device number 2 [ 173.561159][ T9] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 174.795559][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 175.100532][ T6285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.214523][ T6285] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.257892][ T1283] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.257985][ T1283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.999793][ T6521] loop2: detected capacity change from 0 to 2048 [ 177.049568][ T1283] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.049650][ T1283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.074166][ T6521] loop2: p1 < > [ 177.433872][ T6289] udevd[6289]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 177.633507][ T6526] netlink: 'syz.2.186': attribute type 4 has an invalid length. [ 177.633526][ T6526] netlink: 17 bytes leftover after parsing attributes in process `syz.2.186'. [ 177.754298][ T6526] FAULT_INJECTION: forcing a failure. [ 177.754298][ T6526] name failslab, interval 1, probability 0, space 0, times 0 [ 177.754328][ T6526] CPU: 0 UID: 0 PID: 6526 Comm: syz.2.186 Not tainted syzkaller #0 PREEMPT(full) [ 177.754348][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 177.754359][ T6526] Call Trace: [ 177.754366][ T6526] [ 177.754374][ T6526] dump_stack_lvl+0xe8/0x150 [ 177.754406][ T6526] should_fail_ex+0x410/0x560 [ 177.754435][ T6526] should_failslab+0xa8/0x100 [ 177.754460][ T6526] ? fib_insert_alias+0x300/0x10f0 [ 177.754489][ T6526] kmem_cache_alloc_noprof+0xa1/0x600 [ 177.754511][ T6526] ? rcu_is_watching+0x16/0xb0 [ 177.754533][ T6526] ? fib_insert_alias+0x300/0x10f0 [ 177.754567][ T6526] fib_insert_alias+0x300/0x10f0 [ 177.754595][ T6526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.754617][ T6526] ? lockdep_rtnl_is_held+0x26/0x40 [ 177.754637][ T6526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.754659][ T6526] ? fib_find_node+0x28d/0x2f0 [ 177.754691][ T6526] fib_trie_unmerge+0x312/0xce0 [ 177.754730][ T6526] fib_unmerge+0xc5/0x350 [ 177.754755][ T6526] fib4_rule_configure+0x2c9/0x9d0 [ 177.754790][ T6526] fib_newrule+0x61e/0xf20 [ 177.754814][ T6526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.754836][ T6526] ? __lock_acquire+0x747/0x2de0 [ 177.754860][ T6526] ? __pfx_fib_newrule+0x10/0x10 [ 177.754903][ T6526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.754937][ T6526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.754961][ T6526] ? __pfx_fib_nl_newrule+0x10/0x10 [ 177.754981][ T6526] rtnetlink_rcv_msg+0x802/0xc00 [ 177.755012][ T6526] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 177.755038][ T6526] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.755063][ T6526] ? ref_tracker_free+0x689/0x830 [ 177.755091][ T6526] ? __pfx_ref_tracker_free+0x10/0x10 [ 177.755116][ T6526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.755137][ T6526] ? __asan_memcpy+0x40/0x70 [ 177.755155][ T6526] ? __skb_clone+0x5c/0x6c0 [ 177.755190][ T6526] netlink_rcv_skb+0x226/0x4a0 [ 177.755212][ T6526] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.755240][ T6526] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.755272][ T6526] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.755292][ T6526] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.755321][ T6526] netlink_unicast+0x7bd/0x940 [ 177.755361][ T6526] netlink_sendmsg+0x813/0xb40 [ 177.755390][ T6526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.755418][ T6526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.755439][ T6526] ? apparmor_socket_sendmsg+0x98/0x360 [ 177.755462][ T6526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.755487][ T6526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.755507][ T6526] sock_sendmsg_nosec+0x13a/0x180 [ 177.755533][ T6526] ____sys_sendmsg+0x54e/0x850 [ 177.755567][ T6526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.755598][ T6526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.755625][ T6526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.755646][ T6526] ? import_iovec+0x73/0xa0 [ 177.755676][ T6526] ___sys_sendmsg+0x2a5/0x360 [ 177.755704][ T6526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.755725][ T6526] ? __lock_acquire+0x747/0x2de0 [ 177.755750][ T6526] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.755783][ T6526] ? futex_wait+0x2a2/0x390 [ 177.755827][ T6526] ? __fget_files+0x2a/0x420 [ 177.755854][ T6526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.755876][ T6526] ? __fget_files+0x3a2/0x420 [ 177.755913][ T6526] __x64_sys_sendmsg+0x1b1/0x290 [ 177.755946][ T6526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.755971][ T6526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.756007][ T6526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.756040][ T6526] do_syscall_64+0x166/0x520 [ 177.756067][ T6526] ? trace_irq_disable+0x3b/0x140 [ 177.756088][ T6526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.756112][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.756131][ T6526] RIP: 0033:0x7ffaacf9e199 [ 177.756148][ T6526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.756163][ T6526] RSP: 002b:00007ffaadf02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.756182][ T6526] RAX: ffffffffffffffda RBX: 00007ffaad225fa0 RCX: 00007ffaacf9e199 [ 177.756196][ T6526] RDX: 0000000000004000 RSI: 0000200000000100 RDI: 0000000000000005 [ 177.756208][ T6526] RBP: 00007ffaad0358e0 R08: 0000000000000000 R09: 0000000000000000 [ 177.756219][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.756230][ T6526] R13: 00007ffaad226038 R14: 00007ffaad225fa0 R15: 00007ffd9d8ee298 [ 177.756259][ T6526] [ 180.617680][ T6549] loop1: detected capacity change from 0 to 512 [ 180.706483][ T6549] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 180.711597][ T6549] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 180.711615][ T6549] loop1: lost filesystem error report for type 5 error -12 [ 180.711848][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 180.711865][ C0] EXT4-fs (loop1): initial error at time 1791280886: ext4_process_orphan:346 [ 180.711885][ C0] EXT4-fs (loop1): last error at time 1791280886: ext4_process_orphan:346 [ 180.791069][ T6549] EXT4-fs (loop1): 1 truncate cleaned up [ 180.818808][ T6549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.635969][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.718060][ T6560] loop3: detected capacity change from 0 to 512 [ 183.043463][ T6560] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 183.045798][ T6560] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 183.045815][ T6560] loop3: lost filesystem error report for type 5 error -12 [ 183.048094][ T6560] EXT4-fs (loop3): 1 truncate cleaned up [ 183.104373][ T6560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.990308][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.365674][ T6579] FAULT_INJECTION: forcing a failure. [ 184.365674][ T6579] name failslab, interval 1, probability 0, space 0, times 0 [ 184.365704][ T6579] CPU: 0 UID: 0 PID: 6579 Comm: syz.3.196 Not tainted syzkaller #0 PREEMPT(full) [ 184.365724][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 184.365737][ T6579] Call Trace: [ 184.365745][ T6579] [ 184.365753][ T6579] dump_stack_lvl+0xe8/0x150 [ 184.365786][ T6579] should_fail_ex+0x410/0x560 [ 184.365815][ T6579] should_failslab+0xa8/0x100 [ 184.365841][ T6579] ? vm_area_dup+0x28/0x760 [ 184.365861][ T6579] kmem_cache_alloc_noprof+0xa1/0x600 [ 184.365882][ T6579] ? vm_area_dup+0x28/0x760 [ 184.365904][ T6579] ? lock_acquire+0x115/0x350 [ 184.365928][ T6579] vm_area_dup+0x28/0x760 [ 184.365947][ T6579] ? __split_vma+0x1b7/0xa60 [ 184.365977][ T6579] __split_vma+0x1d7/0xa60 [ 184.366017][ T6579] ? __lock_acquire+0x747/0x2de0 [ 184.366041][ T6579] ? __pfx___split_vma+0x10/0x10 [ 184.366076][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.366098][ T6579] ? kernel_text_address+0xa5/0xe0 [ 184.366120][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.366141][ T6579] ? __kernel_text_address+0xd/0x30 [ 184.366168][ T6579] vms_gather_munmap_vmas+0x322/0x1370 [ 184.366197][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.366223][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.366244][ T6579] ? mtree_range_walk+0x707/0x8b0 [ 184.366270][ T6579] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 184.366300][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.366322][ T6579] ? mas_walk+0x37e/0x490 [ 184.366355][ T6579] mmap_region+0x925/0x25b0 [ 184.366380][ T6579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.366407][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.366428][ T6579] ? __lock_acquire+0x747/0x2de0 [ 184.366451][ T6579] ? __pfx_mmap_region+0x10/0x10 [ 184.366478][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.366500][ T6579] ? __lock_acquire+0x747/0x2de0 [ 184.366526][ T6579] ? __lock_acquire+0x747/0x2de0 [ 184.366551][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.366572][ T6579] ? lock_acquire+0x115/0x350 [ 184.366598][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.366620][ T6579] ? lock_acquire+0x115/0x350 [ 184.366681][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.366714][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.366743][ T6579] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 184.366774][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.366795][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.366817][ T6579] ? cap_mmap_addr+0xaf/0x100 [ 184.366841][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.366862][ T6579] ? security_mmap_addr+0x71/0x240 [ 184.366885][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.366907][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.366929][ T6579] ? shmem_mapping+0xd/0x50 [ 184.366949][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.366971][ T6579] ? memfd_check_seals_mmap+0x16f/0x220 [ 184.367008][ T6579] do_mmap+0xe0a/0x1300 [ 184.367043][ T6579] ? __pfx_do_mmap+0x10/0x10 [ 184.367067][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.367093][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.367121][ T6579] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 184.367143][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.367164][ T6579] ? down_write_killable+0x17e/0x240 [ 184.367187][ T6579] ? __pfx_down_write_killable+0x10/0x10 [ 184.367205][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.367235][ T6579] vm_mmap_pgoff+0x272/0x4e0 [ 184.367266][ T6579] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 184.367295][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.367320][ T6579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.367341][ T6579] ? hugetlb_file_setup+0x42c/0x630 [ 184.367374][ T6579] ksys_mmap_pgoff+0x57d/0x760 [ 184.367407][ T6579] do_syscall_64+0x166/0x520 [ 184.367435][ T6579] ? trace_irq_disable+0x3b/0x140 [ 184.367456][ T6579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.367480][ T6579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.367499][ T6579] RIP: 0033:0x7f5fc259e199 [ 184.367516][ T6579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.367531][ T6579] RSP: 002b:00007f5fc3381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 184.367550][ T6579] RAX: ffffffffffffffda RBX: 00007f5fc2825fa0 RCX: 00007f5fc259e199 [ 184.367564][ T6579] RDX: 0000000002000002 RSI: 0000000000800000 RDI: 0000200000800000 [ 184.367576][ T6579] RBP: 00007f5fc26358e0 R08: ffffffffffffffff R09: 0000000000000000 [ 184.367589][ T6579] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000000 [ 184.367601][ T6579] R13: 00007f5fc2826038 R14: 00007f5fc2825fa0 R15: 00007ffdea30e6b8 [ 184.367630][ T6579] [ 186.146223][ T6582] loop1: detected capacity change from 0 to 2048 [ 186.642171][ T6582] loop1: p1 < > [ 186.702955][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 186.835791][ T6285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.987915][ T6554] udevd[6554]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 187.776866][ T6601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.015524][ T6285] veth0_vlan: entered promiscuous mode [ 189.068683][ T6285] veth1_vlan: entered promiscuous mode [ 190.466998][ T6285] veth0_macvtap: entered promiscuous mode [ 190.504383][ T6285] veth1_macvtap: entered promiscuous mode [ 190.607164][ T6285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.657157][ T6285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.703092][ T1008] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.703128][ T1008] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.703156][ T1008] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.703184][ T1008] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.147916][ T6636] ip6erspan0: entered allmulticast mode [ 193.645072][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.645121][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.717245][ T1260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.717264][ T1260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.592702][ T6645] loop1: detected capacity change from 0 to 2048 [ 197.651053][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.651069][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.678179][ T6645] loop1: p1 < > [ 197.977404][ T6638] udevd[6638]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 198.763576][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4 [ 199.107304][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.109664][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.110743][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.139852][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.140317][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.054075][ T5629] Bluetooth: hci1: command tx timeout [ 202.720842][ T5616] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 202.732448][ T5616] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 202.743238][ T5616] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 202.751350][ T5616] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 202.771008][ T5616] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 203.380386][ T6648] syz_tun (unregistering): left allmulticast mode [ 203.903281][ T6709] capability: warning: `syz.1.223' uses 32-bit capabilities (legacy support in use) [ 203.966418][ T1283] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.121984][ T5616] Bluetooth: hci1: command tx timeout [ 204.122011][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 204.376629][ T1283] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.729399][ T1283] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.844752][ T5619] Bluetooth: hci7: command tx timeout [ 204.951668][ T1283] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.117605][ T6721] loop1: detected capacity change from 0 to 512 [ 206.158167][ T5619] Bluetooth: hci4: command 0x0406 tx timeout [ 206.158203][ T5619] Bluetooth: hci0: command 0x0406 tx timeout [ 206.201927][ T5630] Bluetooth: hci1: command tx timeout [ 206.924557][ T4929] Bluetooth: hci7: command tx timeout [ 208.425538][ T4929] Bluetooth: hci1: command tx timeout [ 208.453362][ T1283] bridge_slave_1: left allmulticast mode [ 208.453382][ T1283] bridge_slave_1: left promiscuous mode [ 208.453608][ T1283] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.862846][ T1283] bridge_slave_0: left allmulticast mode [ 208.862869][ T1283] bridge_slave_0: left promiscuous mode [ 208.863025][ T1283] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.906889][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.908359][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.909016][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.911548][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.952397][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.006136][ T5629] Bluetooth: hci7: command tx timeout [ 209.759027][ T1283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.775025][ T1283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.777978][ T1283] bond0 (unregistering): Released all slaves [ 210.622956][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 210.919361][ T6663] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.919447][ T6663] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.919545][ T6663] bridge_slave_0: entered allmulticast mode [ 210.955681][ T6663] bridge_slave_0: entered promiscuous mode [ 211.002243][ T5629] Bluetooth: hci2: command tx timeout [ 211.010488][ T6663] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.010572][ T6663] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.010672][ T6663] bridge_slave_1: entered allmulticast mode [ 211.049299][ T6663] bridge_slave_1: entered promiscuous mode [ 211.084968][ T5629] Bluetooth: hci7: command tx timeout [ 211.157260][ T1283] hsr_slave_0: left promiscuous mode [ 211.158901][ T1283] hsr_slave_1: left promiscuous mode [ 211.159608][ T1283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.159625][ T1283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.160220][ T1283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.160234][ T1283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.235169][ T1283] veth1_macvtap: left promiscuous mode [ 211.235198][ T1283] veth0_macvtap: left promiscuous mode [ 211.235277][ T1283] veth1_vlan: left promiscuous mode [ 211.235329][ T1283] veth0_vlan: left promiscuous mode [ 212.589868][ T1283] team0 (unregistering): Port device team_slave_1 removed [ 212.661567][ T1283] team0 (unregistering): Port device team_slave_0 removed [ 213.083734][ T5629] Bluetooth: hci2: command tx timeout [ 213.152048][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 213.237169][ T6663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.357934][ T6663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.607907][ T6663] team0: Port device team_slave_0 added [ 213.666274][ T6663] team0: Port device team_slave_1 added [ 213.859529][ T6663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.859545][ T6663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.859566][ T6663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.957768][ T6663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.957780][ T6663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.957802][ T6663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.207452][ T6796] loop3: detected capacity change from 0 to 512 [ 215.217980][ T5629] Bluetooth: hci2: command tx timeout [ 215.895194][ T1283] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.999728][ T6663] hsr_slave_0: entered promiscuous mode [ 216.000557][ T6663] hsr_slave_1: entered promiscuous mode [ 216.018185][ T6663] debugfs: 'hsr0' already exists in 'hsr' [ 216.018201][ T6663] Cannot create hsr debugfs directory [ 216.467509][ T1283] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.637520][ T5629] Bluetooth: hci2: command tx timeout [ 217.976754][ T1283] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.310757][ T6692] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.310845][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.310952][ T6692] bridge_slave_0: entered allmulticast mode [ 218.311551][ T6818] loop6: detected capacity change from 0 to 256 [ 218.350394][ T6692] bridge_slave_0: entered promiscuous mode [ 218.481553][ T1283] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.628162][ T6692] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.628250][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.628350][ T6692] bridge_slave_1: entered allmulticast mode [ 218.663917][ T6692] bridge_slave_1: entered promiscuous mode [ 218.868253][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 219.076859][ T6692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.135423][ T6692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.926769][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 220.000737][ T6692] team0: Port device team_slave_0 added [ 220.019238][ T6692] team0: Port device team_slave_1 added [ 220.449922][ T6692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.449938][ T6692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.449960][ T6692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.624794][ T6692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.624808][ T6692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.624830][ T6692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.201344][ T1283] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.767529][ T6861] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 221.767568][ T6861] Error validating options; rc = [-22] [ 221.958799][ T6692] hsr_slave_0: entered promiscuous mode [ 221.968748][ T6692] hsr_slave_1: entered promiscuous mode [ 221.971518][ T6692] debugfs: 'hsr0' already exists in 'hsr' [ 221.971535][ T6692] Cannot create hsr debugfs directory [ 222.064713][ T6734] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.065722][ T6734] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.065894][ T6734] bridge_slave_0: entered allmulticast mode [ 222.071769][ T6734] bridge_slave_0: entered promiscuous mode [ 222.224259][ T6734] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.224343][ T6734] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.224450][ T6734] bridge_slave_1: entered allmulticast mode [ 223.212021][ T6734] bridge_slave_1: entered promiscuous mode [ 223.587922][ T6663] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 223.614453][ T6663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 223.650918][ T6868] loop1: detected capacity change from 0 to 512 [ 223.995745][ T1283] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.043556][ T6663] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 224.069318][ T6663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 224.071068][ T6663] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 224.101106][ T6663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 224.193970][ T6734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.234616][ T1283] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.271568][ T6663] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 224.335815][ T6663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 224.391228][ T6734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.692807][ T1283] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.847185][ T6734] team0: Port device team_slave_0 added [ 225.861094][ T6734] team0: Port device team_slave_1 added [ 226.179177][ T6734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.179193][ T6734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.179214][ T6734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.274694][ T6734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.274707][ T6734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.274728][ T6734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.087295][ T6734] hsr_slave_0: entered promiscuous mode [ 228.108979][ T6734] hsr_slave_1: entered promiscuous mode [ 228.109567][ T6734] debugfs: 'hsr0' already exists in 'hsr' [ 228.109582][ T6734] Cannot create hsr debugfs directory [ 228.496469][ T1283] bridge_slave_1: left promiscuous mode [ 228.496633][ T1283] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.517051][ T1283] bridge_slave_0: left allmulticast mode [ 228.517068][ T1283] bridge_slave_0: left promiscuous mode [ 228.517955][ T1283] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.581518][ T6894] loop6: detected capacity change from 0 to 512 [ 228.601162][ T6894] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 228.601176][ T6894] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 228.664982][ T6894] EXT4-fs (loop6): 1 truncate cleaned up [ 228.699328][ T1283] bridge_slave_1: left allmulticast mode [ 228.699347][ T1283] bridge_slave_1: left promiscuous mode [ 228.699497][ T1283] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.725546][ T6894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.729241][ T1283] bridge_slave_0: left allmulticast mode [ 228.729258][ T1283] bridge_slave_0: left promiscuous mode [ 228.729396][ T1283] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.373401][ T1283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.378799][ T1283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.381552][ T1283] bond0 (unregistering): Released all slaves [ 229.697054][ T1283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.716370][ T1283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.735080][ T1283] bond0 (unregistering): Released all slaves [ 230.058702][ T6285] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.227160][ T6904] loop3: detected capacity change from 0 to 256 [ 230.629924][ T6692] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 230.674010][ T6692] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.808225][ T6692] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 230.828918][ T6692] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.100554][ T6692] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 231.131450][ T6692] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.182162][ T6692] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 231.214763][ T6692] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 231.315729][ T6924] loop1: detected capacity change from 0 to 512 [ 231.358833][ T6924] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 231.376156][ T6924] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 231.376174][ T6924] loop1: lost filesystem error report for type 5 error -12 [ 231.381844][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 231.381860][ C0] EXT4-fs (loop1): initial error at time 1791280937: ext4_process_orphan:346 [ 231.381880][ C0] EXT4-fs (loop1): last error at time 1791280937: ext4_process_orphan:346 [ 231.414881][ T6924] EXT4-fs (loop1): 1 truncate cleaned up [ 231.467524][ T6924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.534094][ T6663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.928035][ T1283] hsr_slave_0: left promiscuous mode [ 231.942246][ T1283] hsr_slave_1: left promiscuous mode [ 231.942928][ T1283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.942944][ T1283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.981015][ T1283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.981030][ T1283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.024558][ T1283] hsr_slave_0: left promiscuous mode [ 232.027921][ T1283] hsr_slave_1: left promiscuous mode [ 232.028602][ T1283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.028618][ T1283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.030719][ T1283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.030734][ T1283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.138242][ T1283] veth1_macvtap: left promiscuous mode [ 232.138274][ T1283] veth0_macvtap: left promiscuous mode [ 232.138352][ T1283] veth1_vlan: left promiscuous mode [ 232.138403][ T1283] veth0_vlan: left promiscuous mode [ 232.179685][ T1283] veth1_macvtap: left promiscuous mode [ 232.179725][ T1283] veth0_macvtap: left promiscuous mode [ 232.179813][ T1283] veth1_vlan: left promiscuous mode [ 232.179864][ T1283] veth0_vlan: left promiscuous mode [ 232.430362][ T6941] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 232.430389][ T6941] Error validating options; rc = [-22] [ 233.480725][ T6954] loop3: detected capacity change from 0 to 512 [ 233.859143][ T1283] team0 (unregistering): Port device team_slave_1 removed [ 233.890060][ T1283] team0 (unregistering): Port device team_slave_0 removed [ 233.964610][ T6896] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 233.966417][ T6896] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 235.410386][ T1283] team0 (unregistering): Port device team_slave_1 removed [ 235.448357][ T1283] team0 (unregistering): Port device team_slave_0 removed [ 235.870656][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.929868][ T6663] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.126055][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.126137][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.178591][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.178672][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.224333][ T6734] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 236.261668][ T6734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 236.280713][ T6734] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 236.313765][ T6734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.335865][ T6734] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 236.368511][ T6734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 236.443302][ T6734] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 236.472585][ T6734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.686800][ T6972] loop1: detected capacity change from 0 to 256 [ 236.915500][ T6692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.197034][ T6692] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.230021][ T6034] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.230100][ T6034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.270717][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.270816][ T6034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.411255][ T6734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.534636][ T6734] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.617027][ T1264] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.617106][ T1264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.684802][ T1264] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.684879][ T1264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.985904][ T7012] loop1: detected capacity change from 0 to 512 [ 243.757799][ T7017] netlink: 68 bytes leftover after parsing attributes in process `syz.6.269'. [ 245.472072][ T7025] trusted_key: encrypted_key: insufficient parameters specified [ 246.148588][ T6663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.859993][ T6692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.066218][ T7057] loop1: detected capacity change from 0 to 256 [ 247.269553][ T6734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.914950][ T6663] veth0_vlan: entered promiscuous mode [ 247.978876][ T6663] veth1_vlan: entered promiscuous mode [ 248.159713][ T6663] veth0_macvtap: entered promiscuous mode [ 248.191176][ T6663] veth1_macvtap: entered promiscuous mode [ 249.459084][ T6663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.507293][ T6663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.785604][ T164] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.787038][ T1283] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.787272][ T1283] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.842943][ T7086] ip_tables: iptables: counters copy to user failed while replacing table [ 249.889380][ T42] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.072517][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.072534][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.163841][ T1212] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 250.246396][ T5275] 8021q: adding VLAN 0 to HW filter on device eth7 [ 250.252081][ T6692] veth0_vlan: entered promiscuous mode [ 250.314191][ T1212] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 250.316407][ T1212] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.316476][ T1212] usb 4-1: config 1 interface 2 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 250.316494][ T1212] usb 4-1: config 1 interface 2 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 250.316512][ T1212] usb 4-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.316545][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.395177][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.395191][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.453862][ T6692] veth1_vlan: entered promiscuous mode [ 250.577750][ T1212] snd-ua101 4-1:1.0: probe with driver snd-ua101 failed with error -12 [ 250.705258][ T6692] veth0_macvtap: entered promiscuous mode [ 250.720732][ T6734] veth0_vlan: entered promiscuous mode [ 250.738036][ T7086] loop3: detected capacity change from 0 to 256 [ 250.757576][ T7086] exfat: Deprecated parameter 'utf8' [ 250.757638][ T7086] exfat: Deprecated parameter 'utf8' [ 250.786745][ T6692] veth1_macvtap: entered promiscuous mode [ 250.838395][ T6734] veth1_vlan: entered promiscuous mode [ 250.867538][ T7086] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xff6615b4, utbl_chksum : 0xe619d30d) [ 250.994556][ T6692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.115660][ T6692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.158011][ T6734] veth0_macvtap: entered promiscuous mode [ 251.213503][ T6734] veth1_macvtap: entered promiscuous mode [ 251.270620][ T1212] usb 4-1: USB disconnect, device number 2 [ 251.284673][ T6034] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.343746][ T1283] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.343997][ T1283] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.403176][ T6034] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.455171][ T6734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.497401][ T6734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.633059][ T1283] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.634246][ T42] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.634277][ T42] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.634305][ T42] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.718177][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.718192][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.988163][ T6034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.988182][ T6034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.480306][ T1283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.480325][ T1283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.711436][ T7115] loop3: detected capacity change from 0 to 256 [ 253.748763][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.748778][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.081360][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.081407][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.418451][ T7125] loop3: detected capacity change from 0 to 512 [ 257.400348][ T7140] loop9: detected capacity change from 0 to 256 [ 257.536155][ T5275] 8021q: adding VLAN 0 to HW filter on device eth8 [ 257.592593][ T1212] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 257.744482][ T1212] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 257.747435][ T1212] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 257.747470][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.142035][ T1212] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 258.280520][ T1212] wwan wwan0: port wwan0qmi0 attached [ 258.353543][ T7150] loop9: detected capacity change from 0 to 128 [ 258.405883][ T1212] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 86:b1:5f:1f:b0:ac [ 258.434615][ T7150] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.434907][ T7150] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 258.608428][ T1212] usb 2-1: USB disconnect, device number 2 [ 258.664321][ T1212] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 258.796850][ T6734] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 259.013089][ T1212] wwan wwan0: port wwan0qmi0 disconnected [ 263.554359][ T7193] loop9: detected capacity change from 0 to 256 [ 263.849723][ T5778] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 264.003011][ T5778] usb 7-1: Using ep0 maxpacket: 32 [ 264.017692][ T5778] usb 7-1: unable to get BOS descriptor or descriptor too short [ 264.017729][ T5778] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 264.029635][ T5778] usb 7-1: config 14 has an invalid interface number: 228 but max is 0 [ 264.029654][ T5778] usb 7-1: config 14 has no interface number 0 [ 264.029686][ T5778] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 264.029708][ T5778] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 264.029729][ T5778] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 264.029750][ T5778] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 264.029772][ T5778] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.029793][ T5778] usb 7-1: config 14 interface 228 has no altsetting 0 [ 264.158095][ T5778] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.158116][ T5778] usb 7-1: Product: syz [ 264.158129][ T5778] usb 7-1: Manufacturer: syz [ 264.158141][ T5778] usb 7-1: SerialNumber: syz [ 264.355531][ T7206] loop9: detected capacity change from 0 to 512 [ 264.410033][ T7206] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 264.410459][ T7206] EXT4-fs error (device loop9) in ext4_process_orphan:346: Out of memory [ 264.410476][ T7206] loop9: lost filesystem error report for type 5 error -12 [ 264.411820][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 264.411837][ C0] EXT4-fs (loop9): initial error at time 1791280970: ext4_process_orphan:346 [ 264.412594][ C0] EXT4-fs (loop9): last error at time 1791280970: ext4_process_orphan:346 [ 264.441692][ T7206] EXT4-fs (loop9): 1 truncate cleaned up [ 264.505242][ T7206] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.994488][ T5275] 8021q: adding VLAN 0 to HW filter on device eth9 [ 265.013858][ T5778] legousbtower 7-1:14.228: interrupt endpoints not found [ 267.738387][ T7231] loop3: detected capacity change from 0 to 1024 [ 267.810983][ T7231] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 267.995012][ T7231] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 268.027270][ T7231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.047599][ T7210] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 268.049924][ T7210] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 268.140965][ T7231] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 268.232966][ T1212] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 268.257901][ T5778] usb 7-1: USB disconnect, device number 2 [ 268.382119][ T1212] usb 8-1: Using ep0 maxpacket: 16 [ 268.387888][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.423320][ T1212] usb 8-1: unable to get BOS descriptor or descriptor too short [ 268.423361][ T1212] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 268.428567][ T1212] usb 8-1: config 9 has an invalid interface number: 57 but max is 0 [ 268.428587][ T1212] usb 8-1: config 9 has no interface number 0 [ 268.428610][ T1212] usb 8-1: config 9 interface 57 has no altsetting 0 [ 268.488923][ T1212] usb 8-1: string descriptor 0 read error: -22 [ 268.489033][ T1212] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.264343][ T7248] loop6: detected capacity change from 0 to 128 [ 269.265257][ T7248] vfat: Unknown parameter '0xffffffffffffffffÿ' [ 269.775923][ T1212] (null): keene_cmd_main failed (-110) [ 270.844621][ T1212] video4linux radio48: keene_cmd_set failed (-71) [ 270.844645][ T1212] radio-keene 8-1:9.57: V4L2 device registered as radio48 [ 270.884657][ T1212] usb 8-1: USB disconnect, device number 2 [ 271.067339][ T7260] loop3: detected capacity change from 0 to 512 [ 271.145626][ T7260] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 271.150450][ T7260] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 271.181500][ T7260] loop3: lost filesystem error report for type 5 error -12 [ 271.181834][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 271.181852][ C0] EXT4-fs (loop3): initial error at time 1791280977: ext4_process_orphan:346 [ 271.181871][ C0] EXT4-fs (loop3): last error at time 1791280977: ext4_process_orphan:346 [ 271.226789][ T7260] EXT4-fs (loop3): 1 truncate cleaned up [ 271.247885][ T7260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.598461][ T7263] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 271.630773][ T7263] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 271.671201][ T7267] loop6: detected capacity change from 0 to 256 [ 272.275814][ T5275] 8021q: adding VLAN 0 to HW filter on device eth10 [ 272.327264][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.445186][ T4929] Bluetooth: hci6: command 0x0406 tx timeout [ 273.726863][ T7279] loop3: detected capacity change from 0 to 64 [ 276.738659][ T7284] syz.7.321 (7284) used greatest stack depth: 15968 bytes left [ 276.760118][ T6734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.311287][ T7299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.311311][ T7299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.356743][ T7299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.356766][ T7299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.876981][ T7312] loop1: detected capacity change from 0 to 512 [ 280.353886][ T7323] loop7: detected capacity change from 0 to 256 [ 283.480388][ T7335] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 283.480416][ T7335] Error validating options; rc = [-22] [ 285.447422][ T5746] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 285.637395][ T5746] usb 10-1: Using ep0 maxpacket: 32 [ 285.654545][ T5275] 8021q: adding VLAN 0 to HW filter on device eth11 [ 285.697609][ T5746] usb 10-1: unable to get BOS descriptor or descriptor too short [ 285.697652][ T5746] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 285.735442][ T5746] usb 10-1: config 14 has an invalid interface number: 228 but max is 0 [ 285.735467][ T5746] usb 10-1: config 14 has no interface number 0 [ 285.735500][ T5746] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 285.735523][ T5746] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 285.735544][ T5746] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 285.735566][ T5746] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 285.735588][ T5746] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.735610][ T5746] usb 10-1: config 14 interface 228 has no altsetting 0 [ 285.770376][ T5746] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.770399][ T5746] usb 10-1: Product: syz [ 285.770412][ T5746] usb 10-1: Manufacturer: syz [ 285.770424][ T5746] usb 10-1: SerialNumber: syz [ 286.087010][ T7359] loop3: detected capacity change from 0 to 2048 [ 286.140697][ T5629] Bluetooth: min 46938 > max 3 [ 286.204722][ T7359] NILFS (loop3): invalid segment: Magic number mismatch [ 286.204768][ T7359] NILFS (loop3): trying rollback from an earlier position [ 286.318677][ T7359] NILFS (loop3): recovery complete [ 286.370383][ T7366] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.657948][ T5746] legousbtower 10-1:14.228: interrupt endpoints not found [ 287.075097][ T7378] loop8: detected capacity change from 0 to 512 [ 288.009087][ T7385] loop7: detected capacity change from 0 to 1024 [ 288.460830][ T5629] Bluetooth: hci7: command tx timeout [ 289.194767][ T7385] hfsplus: failed to load extents file [ 289.753726][ T5778] usb 10-1: USB disconnect, device number 2 [ 290.245394][ T7391] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 290.245422][ T7391] Error validating options; rc = [-22] [ 291.821941][ T7404] loop7: detected capacity change from 0 to 164 [ 291.860051][ T7404] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 293.781742][ T7421] lo: entered promiscuous mode [ 293.838657][ T7421] tunl0: entered promiscuous mode [ 293.856801][ T7421] gre0: entered promiscuous mode [ 293.908629][ T7421] gretap0: entered promiscuous mode [ 293.942854][ T7421] erspan0: entered promiscuous mode [ 293.967316][ T7421] ip_vti0: entered promiscuous mode [ 293.989220][ T7421] ip6_vti0: entered promiscuous mode [ 294.010513][ T7421] sit0: entered promiscuous mode [ 294.052596][ T7421] ip6tnl0: entered promiscuous mode [ 294.074354][ T7421] ip6gre0: entered promiscuous mode [ 294.127213][ T7421] syz_tun: entered promiscuous mode [ 294.168940][ T7421] ip6gretap0: entered promiscuous mode [ 294.187279][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.187799][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.227462][ T7421] bridge0: entered promiscuous mode [ 294.270741][ T7421] vcan0: entered promiscuous mode [ 294.302537][ T7421] bond0: entered promiscuous mode [ 294.302557][ T7421] bond_slave_0: entered promiscuous mode [ 294.302729][ T7421] bond_slave_1: entered promiscuous mode [ 294.366455][ T7421] team0: entered promiscuous mode [ 294.366476][ T7421] team_slave_0: entered promiscuous mode [ 294.366647][ T7421] team_slave_1: entered promiscuous mode [ 294.449998][ T7421] dummy0: entered promiscuous mode [ 294.481230][ T7421] nlmon0: entered promiscuous mode [ 294.498977][ T7421] vxcan0: entered promiscuous mode [ 294.509464][ T7421] vxcan1: entered promiscuous mode [ 294.510329][ T7421] veth0: entered promiscuous mode [ 294.547997][ T7421] veth1: entered promiscuous mode [ 294.574157][ T7421] wg0: entered promiscuous mode [ 294.598214][ T7433] loop9: detected capacity change from 0 to 4096 [ 294.601664][ T7421] wg1: entered promiscuous mode [ 294.656941][ T7421] wg2: entered promiscuous mode [ 294.691713][ T7421] veth0_to_bridge: entered promiscuous mode [ 294.743364][ T7421] veth1_to_bridge: entered promiscuous mode [ 294.793454][ T7421] veth0_to_bond: entered promiscuous mode [ 294.818040][ T7421] veth1_to_bond: entered promiscuous mode [ 294.847506][ T7421] veth0_to_team: entered promiscuous mode [ 294.878483][ T7421] veth1_to_team: entered promiscuous mode [ 294.924534][ T7421] veth0_to_batadv: entered promiscuous mode [ 294.960627][ T7421] batadv_slave_0: entered promiscuous mode [ 294.983922][ T7421] veth1_to_batadv: entered promiscuous mode [ 294.986553][ T7438] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.025963][ T7421] batadv_slave_1: entered promiscuous mode [ 295.065235][ T7421] xfrm0: entered promiscuous mode [ 295.083875][ T7421] veth0_to_hsr: entered promiscuous mode [ 295.118607][ T7421] veth1_to_hsr: entered promiscuous mode [ 295.176683][ T7421] hsr0: entered promiscuous mode [ 295.195985][ T7421] veth1_virt_wifi: entered promiscuous mode [ 295.221215][ T7421] veth0_virt_wifi: entered promiscuous mode [ 295.256834][ T7421] virt_wifi0: entered promiscuous mode [ 295.309608][ T7421] vlan0: entered promiscuous mode [ 295.339735][ T7421] vlan1: entered promiscuous mode [ 295.382238][ T7421] macvlan0: entered promiscuous mode [ 295.408848][ T7421] macvlan1: entered promiscuous mode [ 295.420747][ T7437] loop1: detected capacity change from 0 to 8192 [ 295.461696][ T7421] ipvlan0: entered promiscuous mode [ 295.471474][ T7421] ipvlan1: entered promiscuous mode [ 295.609096][ T7421] macvtap0: entered promiscuous mode [ 295.633690][ T7421] macsec0: entered promiscuous mode [ 295.659869][ T7421] geneve0: entered promiscuous mode [ 295.686084][ T7421] geneve1: entered promiscuous mode [ 295.737298][ T7421] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 295.794021][ T7421] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 295.840693][ T7421] netdevsim netdevsim7 netdevsim2: entered promiscuous mode [ 295.893127][ T7421] netdevsim netdevsim7 netdevsim3: entered promiscuous mode [ 296.002618][ T7421] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 296.108474][ T7421] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 296.224029][ T5275] 8021q: adding VLAN 0 to HW filter on device eth12 [ 296.254663][ T50] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.257127][ T6034] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.257178][ T6034] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.257209][ T6034] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.258503][ T7436] loop6: detected capacity change from 0 to 32768 [ 296.621125][ T7436] JBD2: Ignoring recovery information on journal [ 297.144555][ T7448] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 297.144585][ T7448] Error validating options; rc = [-22] [ 297.385588][ T7436] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 299.824462][ T6285] ocfs2: Unmounting device (7,6) on (node local) [ 300.842901][ T7478] loop6: detected capacity change from 0 to 512 [ 300.861034][ T7478] EXT4-fs (loop6): Test dummy encryption mode enabled [ 300.861051][ T7478] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 300.908824][ T7478] EXT4-fs (loop6): 1 truncate cleaned up [ 300.911136][ T7478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.021708][ T7478] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 211 vs 220 free clusters [ 301.093551][ T7478] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 301.291882][ T5737] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 301.333706][ T6285] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.442621][ T5737] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 301.716352][ T5737] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.716376][ T5737] usb 10-1: Product: syz [ 301.716389][ T5737] usb 10-1: Manufacturer: syz [ 301.716402][ T5737] usb 10-1: SerialNumber: syz [ 302.104410][ T5737] usb 10-1: config 0 descriptor?? [ 303.174296][ T5737] i2c-tiny-usb 10-1:0.0: version 6d.cc found at bus 010 address 003 [ 303.694611][ T5737] (null): error -EIO: failure setting delay to 10us [ 303.694663][ T5737] i2c-tiny-usb 10-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 303.735798][ T5737] usb 10-1: USB disconnect, device number 3 [ 303.791873][ T5746] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 303.943168][ T7497] lo: entered promiscuous mode [ 303.957164][ T5746] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.971293][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.971317][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.971336][ T5746] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 303.971376][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.028461][ T5746] usb 2-1: config 0 descriptor?? [ 304.040894][ T7497] tunl0: entered promiscuous mode [ 304.051880][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 304.120600][ T7497] gre0: entered promiscuous mode [ 304.291275][ T7497] gretap0: entered promiscuous mode [ 304.356813][ T7497] erspan0: entered promiscuous mode [ 304.397607][ T7497] ip_vti0: entered promiscuous mode [ 304.419620][ T7497] ip6_vti0: entered promiscuous mode [ 304.445644][ T7497] sit0: entered promiscuous mode [ 304.485429][ T7497] ip6tnl0: entered promiscuous mode [ 304.506264][ T7497] ip6gre0: entered promiscuous mode [ 304.578966][ T7497] syz_tun: entered promiscuous mode [ 304.625214][ T5746] usbhid 2-1:0.0: can't add hid device: -71 [ 304.625323][ T5746] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 304.719237][ T7497] ip6gretap0: entered promiscuous mode [ 304.749956][ T7497] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.750451][ T7497] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.768211][ T5746] usb 2-1: USB disconnect, device number 3 [ 304.793959][ T7497] bridge0: entered promiscuous mode [ 304.848017][ T7497] vcan0: entered promiscuous mode [ 304.893753][ T7497] bond0: entered promiscuous mode [ 304.893774][ T7497] bond_slave_0: entered promiscuous mode [ 304.893992][ T7497] bond_slave_1: entered promiscuous mode [ 304.927999][ T7497] team0: entered promiscuous mode [ 304.928018][ T7497] team_slave_0: entered promiscuous mode [ 304.956753][ T7497] team_slave_1: entered promiscuous mode [ 304.997526][ T7497] dummy0: entered promiscuous mode [ 305.138384][ T7497] nlmon0: entered promiscuous mode [ 305.139970][ T7497] batadv0: entered promiscuous mode [ 305.365766][ T7497] vxcan0: entered promiscuous mode [ 305.383463][ T7497] vxcan1: entered promiscuous mode [ 305.728636][ T7497] veth0: entered promiscuous mode [ 305.767377][ T7497] veth1: entered promiscuous mode [ 305.800279][ T7497] wg0: entered promiscuous mode [ 305.830167][ T7497] wg1: entered promiscuous mode [ 305.870727][ T7497] wg2: entered promiscuous mode [ 305.894006][ T7497] veth0_to_bridge: entered promiscuous mode [ 306.055584][ T7497] veth1_to_bridge: entered promiscuous mode [ 307.064466][ T7497] veth0_to_bond: entered promiscuous mode [ 307.660836][ T7497] veth1_to_bond: entered promiscuous mode [ 307.693917][ T7497] veth0_to_team: entered promiscuous mode [ 307.778139][ T7497] veth1_to_team: entered promiscuous mode [ 307.812695][ T7497] veth0_to_batadv: entered promiscuous mode [ 308.816658][ T7497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.816710][ T7497] batadv_slave_0: entered promiscuous mode [ 309.005919][ T7497] veth1_to_batadv: entered promiscuous mode [ 309.042366][ T7497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.042437][ T7497] batadv_slave_1: entered promiscuous mode [ 309.091694][ T7497] xfrm0: entered promiscuous mode [ 309.104374][ T7497] veth0_to_hsr: entered promiscuous mode [ 309.158761][ T7497] veth1_to_hsr: entered promiscuous mode [ 309.171435][ T7497] hsr0: entered promiscuous mode [ 309.210854][ T7497] veth1_virt_wifi: entered promiscuous mode [ 309.221887][ T9] usb 9-1: device descriptor read/64, error -110 [ 309.243507][ T7497] veth0_virt_wifi: entered promiscuous mode [ 309.268664][ T7497] virt_wifi0: entered promiscuous mode [ 309.326444][ T7497] vlan0: entered promiscuous mode [ 309.346281][ T7497] vlan1: entered promiscuous mode [ 309.396356][ T7497] macvlan0: entered promiscuous mode [ 309.423684][ T7497] macvlan1: entered promiscuous mode [ 309.456279][ T7497] ipvlan0: entered promiscuous mode [ 309.456426][ T7497] ipvlan1: entered promiscuous mode [ 309.492896][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 309.535258][ T7497] macvtap0: entered promiscuous mode [ 309.552083][ T7497] macsec0: entered promiscuous mode [ 309.573350][ T7497] geneve0: entered promiscuous mode [ 309.592110][ T7497] geneve1: entered promiscuous mode [ 309.610096][ T7524] loop3: detected capacity change from 0 to 256 [ 309.610954][ T7524] exfat: Invalid uid '0x00000000ffffffff' [ 309.625568][ T9] usb 9-1: device descriptor read/64, error -32 [ 309.667198][ T7497] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 309.732449][ T9] usb usb9-port1: attempt power cycle [ 309.763377][ T7497] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 309.832364][ T7497] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 309.861333][ T7497] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 310.006874][ T7497] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 310.082142][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 310.103024][ T9] usb 9-1: device descriptor read/8, error -32 [ 310.106155][ T7497] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 310.276936][ T9] raw-gadget.2 gadget.8: failed to queue suspend event [ 310.277224][ T9] raw-gadget.2 gadget.8: failed to queue reset event [ 310.310684][ T5275] 8021q: adding VLAN 0 to HW filter on device eth13 [ 310.594996][ T9] raw-gadget.2 gadget.8: failed to queue resume event [ 310.622689][ T6034] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.622728][ T6034] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.653240][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 310.663927][ T6034] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.663966][ T6034] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.692225][ C0] raw-gadget.2 gadget.8: ignoring, device is not running [ 310.693097][ T9] usb 9-1: device descriptor read/8, error -32 [ 310.804730][ T9] raw-gadget.2 gadget.8: failed to queue suspend event [ 310.805555][ T9] usb usb9-port1: unable to enumerate USB device [ 311.192982][ T7540] random: crng reseeded on system resumption [ 311.241342][ T7542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 311.364268][ T7480] raw-gadget.2 gadget.8: failed to queue disconnect event [ 313.582441][ T7553] netlink: 12 bytes leftover after parsing attributes in process `syz.8.391'. [ 314.086727][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 314.641834][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 314.642465][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 314.643952][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 314.646158][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.646178][ T9] usb 7-1: Product: syz [ 314.646190][ T9] usb 7-1: Manufacturer: syz [ 314.646203][ T9] usb 7-1: SerialNumber: syz [ 315.108756][ T9] usb 7-1: config 0 descriptor?? [ 315.148727][ T9] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 315.148753][ T9] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 315.518721][ T5746] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 315.691931][ T5746] usb 4-1: Using ep0 maxpacket: 32 [ 315.709052][ T5746] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 315.722486][ T5746] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 315.722507][ T5746] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 315.722527][ T5746] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.748386][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.748407][ T5746] usb 4-1: Product: syz [ 315.748420][ T5746] usb 4-1: Manufacturer: syz [ 315.748456][ T5746] usb 4-1: SerialNumber: syz [ 315.799606][ T5746] usb 4-1: config 0 descriptor?? [ 315.832598][ T9] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 316.091337][ T7590] loop8: detected capacity change from 0 to 512 [ 316.186129][ T7590] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 316.186566][ T7590] EXT4-fs error (device loop8) in ext4_process_orphan:346: Out of memory [ 316.186584][ T7590] loop8: lost filesystem error report for type 5 error -12 [ 316.189282][ T7590] EXT4-fs (loop8): 1 truncate cleaned up [ 316.261505][ T5746] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 316.270190][ T7590] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.390193][ T9] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 316.410177][ T9] em28xx 7-1:0.0: board has no eeprom [ 316.445267][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.445612][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.543560][ T9] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 316.543585][ T9] em28xx 7-1:0.0: dvb set to bulk mode. [ 316.759546][ T5746] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 316.784068][ T5737] em28xx 7-1:0.0: Binding DVB extension [ 316.831000][ T9] usb 7-1: USB disconnect, device number 3 [ 316.858297][ T9] em28xx 7-1:0.0: Disconnecting em28xx [ 316.955937][ T5746] usb 4-1: USB disconnect, device number 3 [ 317.115217][ T6692] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.348250][ T5737] em28xx 7-1:0.0: Registering input extension [ 317.358197][ T9] em28xx 7-1:0.0: Closing input extension [ 321.375534][ T9] em28xx: Freeing device [ 321.503467][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.406'. [ 323.646279][ T5629] Bluetooth: hci1: command 0x0406 tx timeout [ 324.076351][ T7649] loop3: detected capacity change from 0 to 64 [ 324.620632][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.635495][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.636879][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.640085][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 324.671578][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.762085][ T4929] Bluetooth: hci4: command tx timeout [ 328.312631][ T5275] 8021q: adding VLAN 0 to HW filter on device eth14 [ 328.650138][ T7678] netlink: 52 bytes leftover after parsing attributes in process `syz.8.420'. [ 328.764343][ T4929] Bluetooth: hci7: command 0x0406 tx timeout [ 328.842633][ T5629] Bluetooth: hci4: command tx timeout [ 330.863702][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.8.422'. [ 330.921974][ T5629] Bluetooth: hci4: command tx timeout [ 331.766251][ T7703] netlink: 'syz.9.424': attribute type 10 has an invalid length. [ 332.054088][ T7706] loop7: detected capacity change from 0 to 128 [ 333.389917][ T5630] Bluetooth: hci4: command tx timeout [ 333.451404][ T7706] vfat: Unknown parameter '0xffffffffffffffffÿ' [ 333.488641][ T7703] syz_tun: entered promiscuous mode [ 333.677740][ T7703] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 334.445739][ T7715] Device name cannot be null; rc = [-22] [ 335.609909][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 336.242188][ T7726] loop6: detected capacity change from 0 to 512 [ 336.311026][ T7726] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 336.325150][ T7726] EXT4-fs error (device loop6) in ext4_process_orphan:346: Out of memory [ 336.325169][ T7726] loop6: lost filesystem error report for type 5 error -12 [ 336.328358][ T7726] EXT4-fs (loop6): 1 truncate cleaned up [ 337.325296][ T7726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.305248][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.7.428'. [ 338.688134][ T7732] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 338.710818][ T7732] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 339.050092][ T6285] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.877253][ T5922] corsair-cpro 0003:1B1C:0C10.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 340.303322][ T5922] corsair-cpro 0003:1B1C:0C10.0003: Failed to read bootloader version. [ 340.686168][ T7765] loop7: detected capacity change from 0 to 512 [ 340.740809][ T7765] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 340.741394][ T7765] EXT4-fs error (device loop7) in ext4_process_orphan:346: Out of memory [ 340.741411][ T7765] loop7: lost filesystem error report for type 5 error -12 [ 340.741779][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 340.741796][ C0] EXT4-fs (loop7): initial error at time 1791281046: ext4_process_orphan:346 [ 340.741816][ C0] EXT4-fs (loop7): last error at time 1791281046: ext4_process_orphan:346 [ 340.797067][ T7765] EXT4-fs (loop7): 1 truncate cleaned up [ 340.817124][ T7765] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.894959][ T7653] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.895043][ T7653] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.895144][ T7653] bridge_slave_0: entered allmulticast mode [ 341.106067][ T7653] bridge_slave_0: entered promiscuous mode [ 341.458983][ T7653] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.459070][ T7653] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.459176][ T7653] bridge_slave_1: entered allmulticast mode [ 341.498991][ T7653] bridge_slave_1: entered promiscuous mode [ 341.671055][ T6663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.034885][ T7653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.083229][ T7653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.446493][ T7653] team0: Port device team_slave_0 added [ 342.552497][ T7653] team0: Port device team_slave_1 added [ 342.828535][ T7786] loop6: detected capacity change from 0 to 8 [ 344.228657][ T13] bridge_slave_1: left allmulticast mode [ 344.228827][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.347920][ T13] bridge_slave_0: left allmulticast mode [ 344.348089][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.311017][ T7804] netlink: 64 bytes leftover after parsing attributes in process `syz.8.429'. [ 346.402779][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.406199][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.409961][ T13] bond0 (unregistering): Released all slaves [ 346.623838][ T7653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.623854][ T7653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.623877][ T7653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.177250][ T7811] lo: entered promiscuous mode [ 347.196802][ T7811] tunl0: entered promiscuous mode [ 347.211341][ T7811] gre0: entered promiscuous mode [ 347.351246][ T7811] gretap0: entered promiscuous mode [ 347.375710][ T7811] erspan0: entered promiscuous mode [ 347.388227][ T7811] ip_vti0: entered promiscuous mode [ 347.398780][ T7811] ip6_vti0: entered promiscuous mode [ 347.410440][ T7811] sit0: entered promiscuous mode [ 347.435507][ T7811] ip6tnl0: entered promiscuous mode [ 347.449980][ T7811] ip6gre0: entered promiscuous mode [ 347.477599][ T7811] ip6gretap0: entered promiscuous mode [ 347.491258][ T7811] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.491719][ T7811] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.516999][ T7811] bridge0: entered promiscuous mode [ 348.488003][ T7811] vcan0: entered promiscuous mode [ 348.507504][ T7811] bond0: entered promiscuous mode [ 348.507520][ T7811] bond_slave_0: entered promiscuous mode [ 348.507673][ T7811] bond_slave_1: entered promiscuous mode [ 348.793792][ T7811] team0: entered promiscuous mode [ 348.793811][ T7811] team_slave_0: entered promiscuous mode [ 348.793983][ T7811] team_slave_1: entered promiscuous mode [ 348.828348][ T7811] dummy0: entered promiscuous mode [ 348.860409][ T7811] nlmon0: entered promiscuous mode [ 348.869145][ T7811] batadv0: entered promiscuous mode [ 348.899893][ T7811] vxcan0: entered promiscuous mode [ 348.900942][ T7811] vxcan1: entered promiscuous mode [ 348.920596][ T7811] veth0: entered promiscuous mode [ 348.934693][ T7811] veth1: entered promiscuous mode [ 348.953702][ T7811] wg0: entered promiscuous mode [ 348.956657][ T7811] wg1: entered promiscuous mode [ 348.973391][ T7811] wg2: entered promiscuous mode [ 348.976374][ T7811] veth0_to_bridge: entered promiscuous mode [ 349.010931][ T7811] veth1_to_bridge: entered promiscuous mode [ 349.038546][ T7811] veth0_to_bond: entered promiscuous mode [ 349.059354][ T7811] veth1_to_bond: entered promiscuous mode [ 349.080998][ T7811] veth0_to_team: entered promiscuous mode [ 349.105724][ T7811] veth1_to_team: entered promiscuous mode [ 349.128238][ T7811] veth0_to_batadv: entered promiscuous mode [ 349.144554][ T7811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.144596][ T7811] batadv_slave_0: entered promiscuous mode [ 349.149882][ T7811] veth1_to_batadv: entered promiscuous mode [ 349.178612][ T7811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.178652][ T7811] batadv_slave_1: entered promiscuous mode [ 349.198938][ T7811] xfrm0: entered promiscuous mode [ 349.210839][ T7811] veth0_to_hsr: entered promiscuous mode [ 349.237312][ T7811] veth1_to_hsr: entered promiscuous mode [ 349.262577][ T7811] hsr0: entered promiscuous mode [ 349.268515][ T7811] veth1_virt_wifi: entered promiscuous mode [ 349.290169][ T7811] veth0_virt_wifi: entered promiscuous mode [ 349.305316][ T7811] virt_wifi0: entered promiscuous mode [ 349.332374][ T7811] vlan0: entered promiscuous mode [ 349.338999][ T7811] vlan1: entered promiscuous mode [ 349.360012][ T7811] macvlan0: entered promiscuous mode [ 349.372926][ T7811] macvlan1: entered promiscuous mode [ 349.377518][ T7811] ipvlan0: entered promiscuous mode [ 349.377766][ T7811] ipvlan1: entered promiscuous mode [ 349.413680][ T7811] macvtap0: entered promiscuous mode [ 349.419496][ T7811] macsec0: entered promiscuous mode [ 349.437353][ T7811] geneve0: entered promiscuous mode [ 349.449383][ T7811] geneve1: entered promiscuous mode [ 349.467157][ T7811] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 349.481070][ T7811] netdevsim netdevsim9 netdevsim1: entered promiscuous mode [ 349.496934][ T7811] netdevsim netdevsim9 netdevsim2: entered promiscuous mode [ 349.512193][ T7811] netdevsim netdevsim9 netdevsim3: entered promiscuous mode [ 349.523342][ T7811] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 349.575450][ T7811] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 349.581425][ T7811] bond1: entered promiscuous mode [ 349.582340][ T12] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.594622][ T12] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.594657][ T12] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.594688][ T12] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.685368][ T7653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.685382][ T7653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.685405][ T7653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.824970][ T5275] 8021q: adding VLAN 0 to HW filter on device eth15 [ 349.966283][ T7825] loop9: detected capacity change from 0 to 1024 [ 349.988935][ T7825] ext4: Unknown parameter 'obj_user' [ 350.114867][ T5629] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 350.270360][ T7653] hsr_slave_0: entered promiscuous mode [ 350.271207][ T7653] hsr_slave_1: entered promiscuous mode [ 350.395862][ T7827] loop3: detected capacity change from 0 to 512 [ 350.486936][ T7827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.487010][ T7827] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.525652][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.530252][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.686048][ T7827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.326431][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 352.402044][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 352.556317][ T9] usb 10-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 352.557825][ T9] usb 10-1: config index 0 descriptor too short (expected 123, got 114) [ 352.557845][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.557861][ T9] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 352.557909][ T9] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 352.557931][ T9] usb 10-1: config 1 interface 1 has no altsetting 0 [ 352.628934][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.628955][ T9] usb 10-1: Product: syz [ 352.628968][ T9] usb 10-1: Manufacturer: syz [ 352.628980][ T9] usb 10-1: SerialNumber: syz [ 353.049717][ T9] usb 10-1: selecting invalid altsetting 0 [ 353.074341][ T9] usb 10-1: 1:1 : no or invalid class specific endpoint descriptor [ 353.074361][ T9] usb 10-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 353.074379][ T9] usb 10-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 353.074398][ T9] usb 10-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 353.074436][ T9] usb 10-1: selecting invalid altsetting 0 [ 353.074468][ T9] usb 10-1: 0:2 : does not exist [ 353.269115][ T13] team0 (unregistering): Port device team_slave_1 removed [ 353.431084][ T13] team0 (unregistering): Port device team_slave_0 removed [ 353.746050][ T9] usb 10-1: USB disconnect, device number 4 [ 356.358683][ T7712] udevd[7712]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.901826][ T7876] netlink: 40 bytes leftover after parsing attributes in process `syz.9.460'. [ 358.113384][ T7875] loop9: detected capacity change from 0 to 256 [ 358.114472][ T7875] vfat: Deprecated parameter 'posix' [ 358.114484][ T7875] FAT-fs: "posix" option is obsolete, not supported now [ 359.018454][ T5275] 8021q: adding VLAN 0 to HW filter on device eth16 [ 361.161837][ C0] net_ratelimit: 14 callbacks suppressed [ 361.623839][ T7653] kernfs rx_compressed: removing [ 361.623905][ T7653] kernfs tx_compressed: removing [ 361.623984][ T7653] kernfs rx_nohandler: removing [ 361.624034][ T7653] kernfs statistics: removing [ 361.624090][ T7653] kernfs phys_port_name: removing [ 361.624143][ T7653] kernfs phys_switch_id: removing [ 361.624195][ T7653] kernfs netdev_group: removing [ 361.624248][ T7653] kernfs type: removing [ 361.624282][ T7653] kernfs dev_id: removing [ 361.624333][ T7653] kernfs dev_port: removing [ 361.624385][ T7653] kernfs iflink: removing [ 361.624419][ T7653] kernfs ifindex: removing [ 361.624453][ T7653] kernfs name_assign_type: removing [ 361.624504][ T7653] kernfs addr_assign_type: removing [ 361.624538][ T7653] kernfs addr_len: removing [ 361.624590][ T7653] kernfs link_mode: removing [ 361.624641][ T7653] kernfs address: removing [ 361.624693][ T7653] kernfs broadcast: removing [ 361.624744][ T7653] kernfs speed: removing [ 361.624796][ T7653] kernfs duplex: removing [ 361.624847][ T7653] kernfs dormant: removing [ 361.624904][ T7653] kernfs testing: removing [ 361.624956][ T7653] kernfs operstate: removing [ 361.625008][ T7653] kernfs carrier_changes: removing [ 361.625061][ T7653] kernfs ifalias: removing [ 361.625112][ T7653] kernfs carrier: removing [ 361.625163][ T7653] kernfs mtu: removing [ 361.625215][ T7653] kernfs flags: removing [ 361.625266][ T7653] kernfs tx_queue_len: removing [ 361.626564][ T5756] wireguard: wg1: Receiving keepalive packet from peer 21 ([::1]:20001/0%0) [ 361.626662][ T6931] wireguard: wg1: Receiving keepalive packet from peer 51 ([::1]:20001/0%0) [ 361.794282][ T7905] configfs: configfs xu1: dropping attrs for dir [ 361.794411][ T7905] configfs: o xu1 removing done (2) [ 361.794452][ T7905] [ 361.958064][ T7905] ====================================================== [ 361.965050][ T7905] WARNING: possible circular locking dependency detected [ 361.972050][ T7905] syzkaller #0 Not tainted [ 361.976435][ T7905] ------------------------------------------------------ [ 361.983422][ T7905] syz.6.468/7905 is trying to acquire lock: [ 361.989282][ T7905] ffffffff8fc13ce8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x553/0x950 [ 361.999015][ T7905] [ 361.999015][ T7905] but task is already holding lock: [ 362.006356][ T7905] ffff8880441eb580 (&sb->s_type->i_mutex_key#29){++++}-{4:4}, at: vfs_rmdir+0xf8/0x6a0 [ 362.016009][ T7905] [ 362.016009][ T7905] which lock already depends on the new lock. [ 362.016009][ T7905] [ 362.026383][ T7905] [ 362.026383][ T7905] the existing dependency chain (in reverse order) is: [ 362.035368][ T7905] [ 362.035368][ T7905] -> #3 (&sb->s_type->i_mutex_key#29){++++}-{4:4}: [ 362.044041][ T7905] down_write+0x96/0x200 [ 362.048869][ T7905] configfs_depend_item_unlocked+0x153/0x420 [ 362.055356][ T7905] usbg_make_tpg+0x1e0/0x550 [ 362.060443][ T7905] target_fabric_make_tpg+0xa8/0x6d0 [ 362.066225][ T7905] configfs_mkdir+0x4f6/0x9e0 [ 362.071402][ T7905] vfs_mkdir+0x40c/0x620 [ 362.076142][ T7905] filename_mkdirat+0x285/0x510 [ 362.081492][ T7905] __se_sys_mkdirat+0x35/0x150 [ 362.086752][ T7905] do_syscall_64+0x166/0x520 [ 362.091845][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.098251][ T7905] [ 362.098251][ T7905] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 362.106135][ T7905] __mutex_lock+0x19d/0x1550 [ 362.111232][ T7905] tcm_alloc_inst+0x65/0x1a0 [ 362.116320][ T7905] usb_get_function_instance+0xe3/0x2f0 [ 362.122372][ T7905] function_make+0x127/0x360 [ 362.127461][ T7905] configfs_mkdir+0x4f6/0x9e0 [ 362.132650][ T7905] vfs_mkdir+0x40c/0x620 [ 362.137403][ T7905] filename_mkdirat+0x285/0x510 [ 362.142753][ T7905] __se_sys_mkdirat+0x35/0x150 [ 362.148016][ T7905] do_syscall_64+0x166/0x520 [ 362.153110][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.159500][ T7905] [ 362.159500][ T7905] -> #1 (func_lock){+.+.}-{4:4}: [ 362.166603][ T7905] __mutex_lock+0x19d/0x1550 [ 362.171698][ T7905] usb_get_function_instance+0x2e/0x2f0 [ 362.177750][ T7905] function_make+0x127/0x360 [ 362.182840][ T7905] configfs_mkdir+0x4f6/0x9e0 [ 362.188022][ T7905] vfs_mkdir+0x40c/0x620 [ 362.192762][ T7905] filename_mkdirat+0x285/0x510 [ 362.198112][ T7905] __se_sys_mkdir+0x34/0x150 [ 362.203199][ T7905] do_syscall_64+0x166/0x520 [ 362.208291][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.214679][ T7905] [ 362.214679][ T7905] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 362.222914][ T7905] __lock_acquire+0x164c/0x2de0 [ 362.228261][ T7905] lock_acquire+0x115/0x350 [ 362.233260][ T7905] __mutex_lock+0x19d/0x1550 [ 362.238355][ T7905] configfs_rmdir+0x553/0x950 [ 362.243531][ T7905] vfs_rmdir+0x3e6/0x6a0 [ 362.248273][ T7905] filename_rmdir+0x292/0x520 [ 362.253450][ T7905] __se_sys_rmdir+0x2e/0x140 [ 362.258539][ T7905] do_syscall_64+0x166/0x520 [ 362.263633][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.270022][ T7905] [ 362.270022][ T7905] other info that might help us debug this: [ 362.270022][ T7905] [ 362.280219][ T7905] Chain exists of: [ 362.280219][ T7905] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#29 [ 362.280219][ T7905] [ 362.295166][ T7905] Possible unsafe locking scenario: [ 362.295166][ T7905] [ 362.302596][ T7905] CPU0 CPU1 [ 362.307941][ T7905] ---- ---- [ 362.313278][ T7905] lock(&sb->s_type->i_mutex_key#29); [ 362.318723][ T7905] lock(tpg_instances_lock); [ 362.325898][ T7905] lock(&sb->s_type->i_mutex_key#29); [ 362.333858][ T7905] lock(gadget_subsys.su_mutex); [ 362.338862][ T7905] [ 362.338862][ T7905] *** DEADLOCK *** [ 362.338862][ T7905] [ 362.346978][ T7905] locks held by syz.6.468/7905: 3, last CPU#0: [ 362.353100][ T7905] #0: ffff88801d776460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 362.362316][ T7905] #1: ffff8880349e2c00 (&default_group_class[depth - 1]#7/1){+.+.}-{4:4}, at: filename_rmdir+0x1cd/0x520 [ 362.373623][ T7905] #2: ffff8880441eb580 (&sb->s_type->i_mutex_key#29){++++}-{4:4}, at: vfs_rmdir+0xf8/0x6a0 [ 362.383706][ T7905] [ 362.383706][ T7905] stack backtrace: [ 362.389568][ T7905] CPU: 0 UID: 0 PID: 7905 Comm: syz.6.468 Not tainted syzkaller #0 PREEMPT(full) [ 362.398734][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 362.408763][ T7905] Call Trace: [ 362.412028][ T7905] [ 362.414937][ T7905] dump_stack_lvl+0xe8/0x150 [ 362.419514][ T7905] print_circular_bug+0x2e2/0x300 [ 362.424524][ T7905] check_noncircular+0x12f/0x150 [ 362.429448][ T7905] __lock_acquire+0x164c/0x2de0 [ 362.434280][ T7905] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.439908][ T7905] ? __bfs+0x153/0x290 [ 362.443967][ T7905] ? __pfx_hlock_conflict+0x10/0x10 [ 362.449148][ T7905] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.454760][ T7905] ? check_path+0x21/0x40 [ 362.459071][ T7905] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.464682][ T7905] ? check_noncircular+0xdb/0x150 [ 362.469690][ T7905] lock_acquire+0x115/0x350 [ 362.474172][ T7905] ? configfs_rmdir+0x553/0x950 [ 362.479005][ T7905] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.484620][ T7905] __mutex_lock+0x19d/0x1550 [ 362.489194][ T7905] ? configfs_rmdir+0x553/0x950 [ 362.494029][ T7905] ? reacquire_held_locks+0x117/0x1a0 [ 362.499383][ T7905] ? configfs_rmdir+0x553/0x950 [ 362.504215][ T7905] ? __pfx___mutex_lock+0x10/0x10 [ 362.509231][ T7905] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.514843][ T7905] ? _raw_spin_unlock+0x28/0x50 [ 362.519677][ T7905] ? fast_dput+0x481/0x690 [ 362.524080][ T7905] configfs_rmdir+0x553/0x950 [ 362.528743][ T7905] vfs_rmdir+0x3e6/0x6a0 [ 362.532964][ T7905] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.538587][ T7905] filename_rmdir+0x292/0x520 [ 362.543246][ T7905] ? __pfx_filename_rmdir+0x10/0x10 [ 362.548427][ T7905] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.554037][ T7905] ? do_getname+0x151/0x250 [ 362.558524][ T7905] __se_sys_rmdir+0x2e/0x140 [ 362.563096][ T7905] do_syscall_64+0x166/0x520 [ 362.567669][ T7905] ? trace_irq_disable+0x3b/0x140 [ 362.572671][ T7905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.578716][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.584583][ T7905] RIP: 0033:0x7f7ea519e199 [ 362.588987][ T7905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.608568][ T7905] RSP: 002b:00007f7ea5ff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 362.616957][ T7905] RAX: ffffffffffffffda RBX: 00007f7ea5425fa0 RCX: 00007f7ea519e199 [ 362.624905][ T7905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 362.632851][ T7905] RBP: 00007f7ea52358e0 R08: 0000000000000000 R09: 0000000000000000 [ 362.640800][ T7905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.648746][ T7905] R13: 00007f7ea5426038 R14: 00007f7ea5425fa0 R15: 00007ffd80e458c8 [ 362.656700][ T7905] [ 362.659789][ C0] virtqueue callback for ffff8880275b9000 (ffffffff86bcd940) [ 362.660033][ C0] wireguard: wg1: Sending keepalive packet to peer 52 (127.0.0.1:20003) [ 362.662546][ C0] wireguard: wg0: Sending keepalive packet to peer 20 ([::1]:20003/0%0) [ 362.662594][ C0] wireguard: wg0: Sending keepalive packet to peer 50 ([::1]:20003/0%0) [ 362.664036][ C0] No more buffers in queue [ 362.664064][ C0] Receiving skb proto 0x0800 len 140 type 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 362.664282][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 362.664319][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 362.664377][ C0] Receiving skb proto 0x0800 len 140 type 0 [ 362.664399][ C0] Receiving skb proto 0x0800 len 140 type 0 [ 362.664421][ C0] No more buffers in queue [ 362.664541][ C0] eth0: xmit ffff888074d1d8c0 42:01:0a:80:00:01 [ 362.664562][ C0] Added buffer head 10 to ffff8880275b8e00 [ 362.664608][ C0] virtqueue callback for ffff8880275b8e00 (ffffffff86bcda80) [ 362.664722][ C0] eth0: xmit ffff888074d1d780 42:01:0a:80:00:01 [ 362.664741][ C0] Added buffer head 9 to ffff8880275b8e00 [ 362.664819][ C0] eth0: xmit ffff888074d1d640 42:01:0a:80:00:01 [ 362.664836][ C0] Added buffer head 11 to ffff8880275b8e00 [ 362.664919][ C0] eth0: xmit ffff888074d1d500 42:01:0a:80:00:01 [ 362.664936][ C0] Added buffer head 3 to ffff8880275b8e00 [ 362.665198][ C0] Sent skb ffff888074d1d8c0 [ 362.665223][ C0] Sent skb ffff888074d1d780 [ 362.665245][ C0] Sent skb ffff888074d1d640 [ 362.665267][ C0] Sent skb ffff888074d1d500 [ 362.665288][ C0] No more buffers in queue [ 362.666269][ C0] virtqueue interrupt with no work for ffff8880275b8e00 [ 362.683485][ C0] wireguard: wg0: Sending keepalive packet to peer 49 ([::1]:20002/0%0) [ 362.683529][ C0] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0) [ 362.702327][ T7908] kcov: kcov_task_exit: t = ffff88802e611f40, kcov->t = ffff88802e611f40 [ 362.715650][ T7905] config_item xu1: cleaning up [ 362.718965][ T7905] kcov: kcov_task_exit: t = ffff888028809f40, kcov->t = ffff888028809f40 [ 362.790631][ T5601] eth0: xmit ffff88807c450370 42:01:0a:80:00:01 [ 362.790654][ T5601] Added buffer head 3 to ffff8880275b8e00 [ 362.790698][ C0] virtqueue callback for ffff8880275b8e00 (ffffffff86bcda80) [ 362.790720][ C0] Sent skb ffff88807c450370 [ 362.790733][ C0] No more buffers in queue [ 362.796671][ C0] virtqueue callback for ffff8880275b9000 (ffffffff86bcd940) [ 362.796841][ T7653] kernfs gro_flush_timeout: removing [ 362.796892][ T7653] kernfs napi_defer_hard_irqs: removing [ 362.796919][ T7653] kernfs proto_down: removing [ 362.796945][ T7653] kernfs carrier_up_count: removing [ 362.796970][ T7653] kernfs carrier_down_count: removing [ 362.796995][ T7653] kernfs threaded: removing [ 362.797020][ T7653] PM: Removing info for No Bus:eth2 [ 362.797038][ T7653] kobject: 'eth2' (ffff88804d84c7c0): kobject_uevent_env [ 362.797071][ T7653] kobject: 'eth2' (ffff88804d84c7c0): fill_kobj_path: path = '/devices/netdevsim5/net/eth2' [ 362.797102][ C0] No more buffers in queue [ 362.797457][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 362.797475][ C0] No more buffers in queue [ 362.797647][ T7653] kernfs eth2: removing [ 362.844442][ T5758] wireguard: wg2: Receiving keepalive packet from peer 23 ([::1]:20001/0%0) [ 362.945741][ C0] virtqueue callback for ffff8880275aaa00 (ffffffff86bcd940) [ 362.945816][ C0] No more buffers in queue [ 362.946012][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 362.946029][ C0] No more buffers in queue [ 362.946101][ C0] eth0: xmit ffff888056920780 42:01:0a:80:00:01 [ 362.946119][ C0] Added buffer head 3 to ffff8880275b8e00 [ 362.946157][ C0] virtqueue callback for ffff8880275b8e00 (ffffffff86bcda80) [ 362.946179][ C0] Sent skb ffff888056920780 [ 362.946202][ C0] No more buffers in queue [ 363.160872][ T7897] kcov: kcov_task_exit: t = ffff88802de81f40, kcov->t = ffff88802de81f40 [ 363.174286][ T7909] kcov: kcov_task_exit: t = ffff888012049f40, kcov->t = ffff888012049f40 [ 363.200663][ T7911] kcov: kcov_task_exit: t = ffff888028965dc0, kcov->t = ffff888028965dc0 [ 363.211562][ T7653] kobject: 'eth2' (ffff88804d84c7c0): kobject_cleanup, parent 0000000000000000 [ 363.211581][ T7653] kobject: 'eth2' (ffff88804d84c7c0): calling ktype release [ 363.211612][ T7653] kobject: 'eth2': free name [ 363.242830][ T5602] eth0: xmit ffff88807c451c70 42:01:0a:80:00:01 [ 363.242851][ T5602] Added buffer head 3 to ffff8880275b8e00 [ 363.242889][ C0] virtqueue callback for ffff8880275b8e00 (ffffffff86bcda80) [ 363.242911][ C0] Sent skb ffff88807c451c70 [ 363.242924][ C0] No more buffers in queue [ 363.243676][ C0] virtqueue callback for ffff8880275b9000 (ffffffff86bcd940) [ 363.243698][ C0] No more buffers in queue [ 363.243980][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 363.243998][ C0] No more buffers in queue [ 363.244679][ T5601] eth0: xmit ffff88807765e370 42:01:0a:80:00:01 [ 363.244700][ T5601] Added buffer head 3 to ffff8880275b8e00 [ 363.244737][ C0] virtqueue callback for ffff8880275b8e00 (ffffffff86bcda80) [ 363.244758][ C0] Sent skb ffff88807765e370 [ 363.244770][ C0] No more buffers in queue [ 363.245539][ C0] virtqueue callback for ffff8880275b9000 (ffffffff86bcd940) [ 363.245561][ C0] No more buffers in queue [ 363.245595][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 363.245611][ C0] No more buffers in queue [ 363.251056][ T6726] kcov: kcov_task_exit: t = ffff8880121c1f40, kcov->t = ffff8880121c1f40 [ 363.265541][ T5610] kcov: kcov_task_exit: t = ffff88807de50000, kcov->t = ffff88807de50000 [ 363.284883][ T7645] kcov: kcov_task_exit: t = ffff88802b18ddc0, kcov->t = ffff88802b18ddc0 [ 363.299634][ T5601] eth0: xmit ffff88807765e0f0 42:01:0a:80:00:01 [ 363.299655][ T5601] Added buffer head 3 to ffff8880275b8e00 [ 363.299695][ C0] virtqueue callback for ffff8880275b8e00 (ffffffff86bcda80) [ 363.299716][ C0] Sent skb ffff88807765e0f0 [ 363.299728][ C0] No more buffers in queue [ 363.305590][ C0] virtqueue callback for ffff8880275b9000 (ffffffff86bcd940) [ 363.305649][ C0] No more buffers in queue [ 363.305837][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 363.305867][ C0] Receiving skb proto 0x0800 len 88 type 0 [ 363.305901][ C0] Receiving skb proto 0x0800 len 112 type 0 [ 363.305928][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 363.305943][ C0] No more buffers in queue [ 363.306093][ C0] eth0: xmit ffff888058d13000 42:01:0a:80:00:01 [ 363.306112][ C0] Added buffer head 3 to ffff8880275b8e00 [ 363.306149][ C0] virtqueue callback for ffff8880275b8e00 (ffffffff86bcda80) [ 363.306213][ C0] eth0: xmit ffff888058d13280 42:01:0a:80:00:01 [ 363.306230][ C0] Added buffer head 11 to ffff8880275b8e00 [ 363.306300][ C0] Sent skb ffff888058d13000 [ 363.306325][ C0] Sent skb ffff888058d13280 [ 363.306347][ C0] No more buffers in queue [ 363.306376][ T6655] kcov: kcov_task_exit: t = ffff88802645be80, kcov->t = ffff88802645be80 [ 363.307386][ C0] virtqueue interrupt with no work for ffff8880275b8e00 [ 363.307829][ T6264] kcov: kcov_task_exit: t = ffff8880293e5dc0, kcov->t = ffff8880293e5dc0 [ 363.321166][ T6680] kcov: kcov_task_exit: t = ffff888076ea5dc0, kcov->t = ffff888076ea5dc0 [ 363.355512][ C0] eth0: xmit ffff88807b440500 42:01:0a:80:00:01 [ 363.355533][ C0] Added buffer head 11 to ffff8880275b8e00 [ 363.355576][ C0] virtqueue callback for ffff8880275b8e00 (ffffffff86bcda80) [ 363.355597][ C0] Sent skb ffff88807b440500 [ 363.355627][ C0] No more buffers in queue [ 363.418181][ T7653] netdevsim netdevsim5 eth1: bond_netdev_event received NETDEV_GOING_DOWN [ 363.418210][ T7653] net eth1: siw: event 10 [ 363.689885][ T7653] In tnode_resize ffff88805599c420 inflate_threshold=50 threshold=25 [ 363.689922][ T7653] In tnode_resize ffff88805577a320 inflate_threshold=50 threshold=25 [ 363.689939][ T7653] In tnode_resize ffff88807c8768a0 inflate_threshold=50 threshold=25 [ 363.689955][ T7653] In tnode_resize ffff88802a2810a0 inflate_threshold=50 threshold=25 [ 363.689972][ T7653] In tnode_resize ffff888030d72820 inflate_threshold=50 threshold=25 [ 363.689988][ T7653] In tnode_resize ffff888030d72d20 inflate_threshold=50 threshold=25 [ 363.690003][ T7653] In tnode_resize ffff88802276e420 inflate_threshold=50 threshold=25 [ 363.690019][ T7653] trie_flush found=1 [ 363.690040][ T7653] In tnode_resize ffff88805599c420 inflate_threshold=50 threshold=25 [ 363.690056][ T7653] In tnode_resize ffff88805577a320 inflate_threshold=50 threshold=25 [ 363.690072][ T7653] In tnode_resize ffff88807c8768a0 inflate_threshold=50 threshold=25 [ 363.690088][ T7653] In tnode_resize ffff88802a2810a0 inflate_threshold=50 threshold=25 [ 363.690104][ T7653] In tnode_resize ffff888030d72820 inflate_threshold=50 threshold=25 [ 363.690120][ T7653] In tnode_resize ffff888030d72d20 inflate_threshold=50 threshold=25 [ 363.690135][ T7653] In tnode_resize ffff88802276e420 inflate_threshold=50 threshold=25 [ 363.690169][ T7653] trie_flush found=1 [ 363.690195][ T7653] netdevsim netdevsim5 eth1: bond_netdev_event received NETDEV_DOWN [ 363.690218][ T7653] net eth1: siw: event 2 [ 363.690287][ T7653] IPv6: walker ffffc900067af100 adjusted by delroute [ 363.690349][ T7653] IPv6: walker ffffc900067af100 adjusted by delroute [ 363.690361][ T7653] IPv6: fixing tree: plen=128 iter=0 [ 363.690374][ T7653] IPv6: W ffffc900067af100 adjusted by delnode 1, s=4/2 [ 363.690389][ T7653] IPv6: fixing tree: plen=66 iter=1 [ 363.690401][ T7653] IPv6: W ffffc900067af100 adjusted by delnode 2, s=2 [ 363.690415][ T7653] IPv6: fixing tree: plen=65 iter=2 [ 363.690619][ T7653] IPv6: walker ffffc900067af100 adjusted by delroute [ 363.960527][ T7653] Deleting a9feffff/32 dsfield=0x00 t=ffff88801e6befb0 [ 363.960553][ T7653] Deleting a9feffff/32 dsfield=0x00 t=ffff88801e6befb0 [ 363.960572][ T7653] Deleting a9fe8d75/32 dsfield=0x00 t=ffff88801e6befb0 [ 363.961301][ T6734] ffff88804e114000 name hci2 bus 0 [ 363.992929][ T6734] hci2: Updating devcoredump state from IDLE to IDLE. [ 363.992946][ T6734] hci2: err 0x13 [ 363.992963][ T6734] hci2 ffff88804e114000 [ 363.992975][ T6734] hci2: [ 363.997627][ T7653] In tnode_resize ffff88805599c420 inflate_threshold=50 threshold=25 [ 363.997658][ T7653] In tnode_resize ffff88805577a320 inflate_threshold=50 threshold=25 [ 363.997674][ T7653] In tnode_resize ffff88802276e420 inflate_threshold=50 threshold=25 [ 363.997923][ T7653] netdevsim netdevsim5 eth1 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 363.997950][ T7653] net eth1: siw: event 6 [ 363.998565][ T7653] netdevsim netdevsim5 eth1 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 363.998588][ T7653] net eth1: siw: event 18 [ 364.000169][ T7653] kernfs rps_cpus: removing [ 364.000203][ T7653] kernfs rps_flow_cnt: removing [ 364.000228][ T7653] kobject: 'rx-0' (ffff888077f82050): kobject_cleanup, parent ffff88807c5de050 [ 364.000245][ T7653] kobject: 'rx-0' (ffff888077f82050): auto cleanup kobject_del [ 364.000259][ T7653] kobject: 'rx-0' (ffff888077f82050): auto cleanup 'remove' event [ 364.000272][ T7653] kobject: 'rx-0' (ffff888077f82050): kobject_uevent_env [ 364.000305][ T7653] kobject: 'rx-0' (ffff888077f82050): fill_kobj_path: path = '/devices/netdevsim5/net/eth1/queues/rx-0' [ 364.000416][ T7653] kernfs rx-0: removing [ 364.000432][ T7653] kobject: 'rx-0' (ffff888077f82050): calling ktype release [ 364.000451][ T7653] kobject: 'rx-0': free name [ 364.000473][ T7653] kernfs limit: removing [ 364.000498][ T7653] kernfs limit_max: removing [ 364.000523][ T7653] kernfs limit_min: removing [ 364.000548][ T7653] kernfs hold_time: removing [ 364.000572][ T7653] kernfs inflight: removing [ 364.126085][ T5599] eth0: xmit ffff88807765ed70 42:01:0a:80:00:01 [ 364.126107][ T5599] Added buffer head 11 to ffff8880275b8e00 [ 364.126158][ C0] virtqueue callback for ffff8880275b8e00 (ffffffff86bcda80) [ 364.126182][ C0] Sent skb ffff88807765ed70 [ 364.126196][ C0] No more buffers in queue [ 364.126929][ C0] virtqueue callback for ffff8880275b9000 (ffffffff86bcd940) [ 364.126951][ C0] No more buffers in queue [ 364.127276][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 364.127295][ C0] No more buffers in queue [ 364.139178][ T7653] kernfs stall_thrs: removing [ 364.139210][ T7653] kernfs stall_cnt: removing [ 364.139234][ T7653] kernfs stall_max: removing [ 364.139259][ T7653] kernfs byte_queue_limits: removing [ 364.139284][ T7653] kernfs tx_timeout: removing [ 364.139309][ T7653] kernfs traffic_class: removing [ 364.139334][ T7653] kernfs xps_cpus: removing [ 364.139358][ T7653] kernfs xps_rxqs: removing [ 364.139383][ T7653] kernfs tx_maxrate: removing [ 364.139406][ T7653] kobject: 'tx-0' (ffff88804e6ec820): kobject_cleanup, parent ffff88807c5de050 [ 364.139424][ T7653] kobject: 'tx-0' (ffff88804e6ec820): auto cleanup kobject_del [ 364.139437][ T7653] kobject: 'tx-0' (ffff88804e6ec820): auto cleanup 'remove' event [ 364.139450][ T7653] kobject: 'tx-0' (ffff88804e6ec820): kobject_uevent_env [ 364.139484][ T7653] kobject: 'tx-0' (ffff88804e6ec820): fill_kobj_path: path = '/devices/netdevsim5/net/eth1/queues/tx-0' [ 364.139560][ T7653] kernfs tx-0: removing [ 364.139574][ T7653] kobject: 'tx-0' (ffff88804e6ec820): calling ktype release [ 364.139594][ T7653] kobject: 'tx-0': free name [ 364.139613][ T7653] kernfs queues: removing [ 364.139628][ T7653] kobject: 'queues' (ffff88807c5de050): kobject_cleanup, parent 0000000000000000 [ 364.139644][ T7653] kobject: 'queues' (ffff88807c5de050): calling ktype release [ 364.139656][ T7653] kobject: 'queues' (ffff88807c5de050): kset_release [ 364.139677][ T7653] kobject: 'queues': free name [ 364.139705][ T7653] kernfs runtime_status: removing [ 364.139731][ T7653] kernfs control: removing [ 364.139756][ T7653] kernfs runtime_suspended_time: removing [ 364.139781][ T7653] kernfs runtime_active_time: removing [ 364.139806][ T7653] kernfs autosuspend_delay_ms: removing [ 364.139843][ T7653] kernfs power: removing [ 364.139875][ T7653] kernfs device: removing [ 364.139897][ T7653] kernfs subsystem: removing [ 364.139914][ T7653] kernfs eth1: removing [ 364.139932][ T7653] kernfs uevent: removing [ 364.139953][ T7653] kernfs rx_packets: removing [ 364.139980][ T7653] kernfs tx_packets: removing [ 364.140005][ T7653] kernfs rx_bytes: removing [ 364.140030][ T7653] kernfs tx_bytes: removing [ 364.140055][ T7653] kernfs rx_errors: removing [ 364.140079][ T7653] kernfs tx_errors: removing [ 364.140103][ T7653] kernfs rx_dropped: removing [ 364.140128][ T7653] kernfs tx_dropped: removing [ 364.140153][ T7653] kernfs multicast: removing [ 364.140177][ T7653] kernfs collisions: removing [ 364.140202][ T7653] kernfs rx_length_errors: removing [ 364.140227][ T7653] kernfs rx_over_errors: removing [ 364.140252][ T7653] kernfs rx_crc_errors: removing [ 364.140281][ T7653] kernfs rx_frame_errors: removing [ 364.140306][ T7653] kernfs rx_fifo_errors: removing [ 364.140331][ T7653] kernfs rx_missed_errors: removing [ 364.140357][ T7653] kernfs tx_aborted_errors: removing [ 364.140382][ T7653] kernfs tx_carrier_errors: removing [ 364.140406][ T7653] kernfs tx_fifo_errors: removing [ 364.140431][ T7653] kernfs tx_heartbeat_errors: removing [ 364.140457][ T7653] kernfs tx_window_errors: removing [ 364.140481][ T7653] kernfs rx_compressed: removing [ 364.140506][ T7653] kernfs tx_compressed: removing [ 364.140531][ T7653] kernfs rx_nohandler: removing [ 364.140555][ T7653] kernfs statistics: removing [ 364.140593][ T7653] kernfs phys_port_name: removing [ 364.226510][ T6734] hci2: err 0x13 [ 364.226523][ T6734] hci2: cancelling interleave scan [ 364.226546][ T6734] All LE pending actions cleared [ 364.226554][ T6734] hdev hci2 [ 364.226564][ T6734] hcon ffff888076850000 reason 22 [ 364.226577][ T6734] hcon ffff888076850000 conn ffff888079b55000, err 103 [ 364.226599][ T6734] hci2 hcon ffff888076850000 chan ffff88807c962d00 [ 364.293294][ T7653] kernfs phys_switch_id: removing [ 364.303957][ T7653] kernfs netdev_group: removing [ 364.303989][ T7653] kernfs type: removing [ 364.304005][ T7653] kernfs dev_id: removing [ 364.304031][ T7653] kernfs dev_port: removing [ 364.304056][ T7653] kernfs iflink: removing [ 364.304072][ T7653] kernfs ifindex: removing [ 364.304087][ T7653] kernfs name_assign_type: removing [ 364.304112][ T7653] kernfs addr_assign_type: removing [ 364.304128][ T7653] kernfs addr_len: removing [ 364.304153][ T7653] kernfs link_mode: removing [ 364.304178][ T7653] kernfs address: removing [ 364.304202][ T7653] kernfs broadcast: removing [ 364.304227][ T7653] kernfs speed: removing [ 364.304251][ T7653] kernfs duplex: removing [ 364.304276][ T7653] kernfs dormant: removing [ 364.304300][ T7653] kernfs testing: removing [ 364.304325][ T7653] kernfs operstate: removing [ 364.304350][ T7653] kernfs carrier_changes: removing [ 364.304374][ T7653] kernfs ifalias: removing [ 364.304399][ T7653] kernfs carrier: removing [ 364.304423][ T7653] kernfs mtu: removing [ 364.304448][ T7653] kernfs flags: removing [ 364.304472][ T7653] kernfs tx_queue_len: removing [ 364.304497][ T7653] kernfs gro_flush_timeout: removing [ 364.304522][ T7653] kernfs napi_defer_hard_irqs: removing [ 364.304548][ T7653] kernfs proto_down: removing [ 364.304572][ T7653] kernfs carrier_up_count: removing [ 364.304597][ T7653] kernfs carrier_down_count: removing [ 364.304622][ T7653] kernfs threaded: removing [ 364.304646][ T7653] PM: Removing info for No Bus:eth1 [ 364.304663][ T7653] kobject: 'eth1' (ffff8880362707c0): kobject_uevent_env [ 364.304694][ T7653] kobject: 'eth1' (ffff8880362707c0): fill_kobj_path: path = '/devices/netdevsim5/net/eth1' [ 364.304762][ T7653] kernfs eth1: removing [ 364.304783][ T7653] kernfs net: removing [ 364.304797][ T7653] kobject: 'net' (ffff88802b097680): kobject_cleanup, parent 0000000000000000 [ 364.304813][ T7653] kobject: 'net' (ffff88802b097680): calling ktype release [ 364.304835][ T7653] kobject: 'net': free name [ 364.395135][ T6734] hci2 hcon ffff888076850000 handle 201 [ 364.395153][ T6734] hci2: hcon ffff888076850000 [ 364.668814][ T6734] hcon ffff888076850000 [ 364.668830][ T6734] hci2: conn ffff888076850000 [ 364.668844][ T6734] device: 'hci2:201': device_unregister [ 364.668872][ T6734] kernfs runtime_status: removing [ 364.668912][ T6734] kernfs control: removing [ 364.668937][ T6734] kernfs runtime_suspended_time: removing [ 364.668963][ T6734] kernfs runtime_active_time: removing [ 364.668988][ T6734] kernfs autosuspend_delay_ms: removing [ 364.669025][ T6734] kernfs power: removing [ 364.669057][ T6734] kernfs device: removing [ 364.669082][ T6734] kernfs subsystem: removing [ 364.669107][ T6734] kernfs hci2:201: removing [ 364.669133][ T6734] kernfs uevent: removing [ 364.669152][ T6734] PM: Removing info for No Bus:hci2:201 [ 364.669169][ T6734] kobject: 'hci2:201' (ffff888076850cf0): kobject_uevent_env [ 364.669203][ T6734] kobject: 'hci2:201' (ffff888076850cf0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/hci2:201' [ 364.669310][ T6734] kernfs hci2:201: removing [ 364.669327][ T6734] kobject: 'hci2:201' (ffff888076850cf0): kobject_cleanup, parent 0000000000000000 [ 364.669343][ T6734] kobject: 'hci2:201' (ffff888076850cf0): calling ktype release [ 364.669374][ T6734] kobject: 'hci2:201': free name [ 364.669391][ T6734] hci2 orig refcnt 9 [ 364.669405][ T6734] hci2 hcon ffff888076c44000 handle 3840 [ 364.669419][ T6734] hci2: hcon ffff888076c44000 [ 364.811152][ T6734] hcon ffff888076c44000 [ 364.811189][ T6734] hci2: conn ffff888076c44000 [ 364.811202][ T6734] kobject: '(null)' (ffff888076c44cf0): kobject_cleanup, parent 0000000000000000 [ 364.811218][ T6734] kobject: '(null)' (ffff888076c44cf0): calling ktype release [ 364.811243][ T6734] hci2 orig refcnt 7 [ 364.811255][ T6734] hdev hci2 event 4 [ 364.811281][ T6734] hdev 0000000000000000 len 8 [ 364.811308][ T6734] hci2: Cleanup of MSFT extension [ 364.811447][ T6734] hdev hci2 event 8 [ 364.811459][ T6734] hci2 orig refcnt 6 [ 364.811486][ T6734] channel 3 len 6 [ 364.811563][ T6734] channel 3 len 8 [ 364.811588][ T6734] hdev hci2 event 2 [ 364.811614][ T6734] hdev 0000000000000000 len 8 [ 364.811658][ T6734] kernfs runtime_status: removing [ 364.811687][ T6734] kernfs control: removing [ 364.811711][ T6734] kernfs runtime_suspended_time: removing [ 364.841544][ T6734] kernfs runtime_active_time: removing [ 364.841571][ T6734] kernfs autosuspend_delay_ms: removing [ 364.841607][ T6734] kernfs power: removing [ 364.841637][ T6734] kernfs device: removing [ 364.841661][ T6734] kernfs subsystem: removing [ 364.841686][ T6734] kernfs rfkill28: removing [ 364.841712][ T6734] kernfs uevent: removing [ 364.842053][ T6734] kernfs name: removing [ 364.842080][ T6734] kernfs type: removing [ 364.842104][ T6734] kernfs index: removing [ 364.842127][ T6734] kernfs persistent: removing [ 364.842150][ T6734] kernfs state: removing [ 364.842173][ T6734] kernfs soft: removing [ 364.842196][ T6734] kernfs hard: removing [ 364.842220][ T6734] kernfs hard_block_reasons: removing [ 364.842243][ T6734] PM: Removing info for No Bus:rfkill28 [ 364.842259][ T6734] kobject: 'rfkill28' (ffff888051aec110): kobject_uevent_env [ 364.842291][ T6734] kobject: 'rfkill28' (ffff888051aec110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/rfkill28' [ 364.889835][ T6734] kernfs rfkill28: removing [ 364.889870][ T6734] kobject: 'rfkill28' (ffff888051aec110): kobject_cleanup, parent 0000000000000000 [ 364.889893][ T6734] kobject: 'rfkill28' (ffff888051aec110): calling ktype release [ 364.889921][ T6734] kobject: 'rfkill28': free name [ 364.889950][ T6734] kernfs runtime_status: removing [ 364.889976][ T6734] kernfs control: removing [ 364.890000][ T6734] kernfs runtime_suspended_time: removing [ 364.890023][ T6734] kernfs runtime_active_time: removing [ 364.966394][ T7653] kobject: 'eth1' (ffff8880362707c0): kobject_cleanup, parent 0000000000000000 [ 364.966414][ T7653] kobject: 'eth1' (ffff8880362707c0): calling ktype release [ 364.966445][ T7653] kobject: 'eth1': free name [ 364.972400][ T6734] kernfs autosuspend_delay_ms: removing [ 364.972442][ T6734] kernfs power: removing [ 364.972468][ T6734] kernfs subsystem: removing [ 364.972493][ T6734] kernfs hci2: removing [ 364.972518][ T6734] kernfs uevent: removing [ 364.972538][ T6734] kernfs reset: removing [ 364.972561][ T6734] PM: Removing info for No Bus:hci2 [ 364.972600][ T6734] kobject: 'hci2' (ffff88804e115538): kobject_uevent_env [ 364.972628][ T6734] kobject: 'hci2' (ffff88804e115538): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2' [ 364.972722][ T6734] kernfs hci2: removing [ 364.972739][ T6734] hci2 orig refcnt 2 [ 364.972750][ T6734] kobject: 'hci2' (ffff88804e115538): kobject_cleanup, parent 0000000000000000 [ 364.972766][ T6734] kobject: 'hci2' (ffff88804e115538): calling ktype release [ 364.972847][ T6734] All LE connection parameters were removed [ 364.972858][ T6734] hci2: Unregister MSFT extension [ 364.972924][ T6734] kobject: 'hci2': free name [ 365.450111][ T6734] Deleting ac1414aa/32 dsfield=0x00 t=ffff88802b8767b0 [ 365.450224][ T6734] In tnode_resize ffff888034d6e320 inflate_threshold=50 threshold=25 [ 365.450241][ T6734] In tnode_resize ffff88807448f6a0 inflate_threshold=50 threshold=25 [ 365.450396][ T6734] syz_tun (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 365.450412][ T6734] bond0: (slave syz_tun): bond_slave_netdev_event called [ 365.450457][ T6734] syz_tun (unregistering): bond_netdev_event received NETDEV_CHANGELOWERSTATE [ 365.450470][ T6734] bond0: (slave syz_tun): bond_slave_netdev_event called [ 365.450492][ T6734] net syz_tun: siw: event 28 [ 365.450550][ T6734] kernfs state: removing [ 365.450580][ T6734] kernfs mii_status: removing [ 365.450605][ T6734] kernfs link_failure_count: removing [ 365.450629][ T6734] kernfs perm_hwaddr: removing [ 365.450653][ T6734] kernfs queue_id: removing [ 365.450677][ T6734] kernfs ad_aggregator_id: removing [ 365.450701][ T6734] kernfs ad_actor_oper_port_state: removing [ 365.450726][ T6734] kernfs ad_partner_oper_port_state: removing [ 365.570984][ T6734] syz_tun (unregistering): bond_netdev_event received NETDEV_PRECHANGEUPPER [ 365.571002][ T6734] syz_tun (unregistering): bond_slave_netdev_event called on NULL slave [ 365.571022][ T6734] net syz_tun: siw: event 27 [ 365.571055][ T6734] Remove adjacency: dev syz_tun adj_dev bond0 ref_nr 1 [ 365.571072][ T6734] kernfs master: removing [ 365.571105][ T6734] kernfs upper_bond0: removing [ 365.571128][ T6734] adjacency: dev_put for bond0, because link removed from syz_tun to bond0 [ 365.571148][ T6734] Remove adjacency: dev bond0 adj_dev syz_tun ref_nr 1 [ 365.571164][ T6734] kernfs lower_syz_tun: removing [ 365.571188][ T6734] adjacency: dev_put for syz_tun, because link removed from bond0 to syz_tun [ 365.571248][ T6734] syz_tun (unregistering): bond_netdev_event received NETDEV_CHANGEUPPER [ 365.571262][ T6734] syz_tun (unregistering): bond_slave_netdev_event called on NULL slave [ 365.571278][ T6734] net syz_tun: siw: event 22 [ 365.571306][ T6734] bond0: (slave syz_tun): Releasing backup interface [ 365.687566][ T6734] bond0: bond_netdev_event received NETDEV_FEAT_CHANGE [ 365.687583][ T6734] bond0: bond_master_netdev_event called [ 365.687600][ T6734] net bond0: siw: event 12 [ 365.687641][ T6734] syz_tun (unregistering): bond_netdev_event received NETDEV_PRE_CHANGEADDR [ 365.687659][ T6734] net syz_tun: siw: event 9 [ 365.687723][ T6734] syz_tun (unregistering): bond_netdev_event received NETDEV_CHANGEADDR [ 365.687742][ T6734] net syz_tun: siw: event 8 [ 365.687788][ T6734] bond0: bond_netdev_event received NETDEV_XDP_FEAT_CHANGE [ 365.687800][ T6734] bond0: bond_master_netdev_event called [ 365.687815][ T6734] net bond0: siw: event 40 [ 365.687838][ T6734] kobject: 'bonding_slave' (ffff88802bbd41a8): kobject_cleanup, parent ffff8880360ec7c0 [ 365.687856][ T6734] kobject: 'bonding_slave' (ffff88802bbd41a8): auto cleanup kobject_del [ 365.687872][ T6734] kernfs bonding_slave: removing [ 365.687906][ T6734] kobject: 'bonding_slave' (ffff88802bbd41a8): calling ktype release [ 365.687933][ T6734] kobject: 'bonding_slave': free name [ 365.687947][ T6734] net syz_tun: siw: event 6 [ 365.688488][ T6734] syz_tun (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 365.688508][ T6734] net syz_tun: siw: event 18 [ 365.826239][ T6734] kernfs rps_cpus: removing [ 365.826274][ T6734] kernfs rps_flow_cnt: removing [ 365.826297][ T6734] kobject: 'rx-0' (ffff888031af9a50): kobject_cleanup, parent ffff88807632dc50 [ 365.826315][ T6734] kobject: 'rx-0' (ffff888031af9a50): auto cleanup kobject_del [ 365.826328][ T6734] kobject: 'rx-0' (ffff888031af9a50): auto cleanup 'remove' event [ 365.826342][ T6734] kobject: 'rx-0' (ffff888031af9a50): kobject_uevent_env [ 365.826374][ T6734] kobject: 'rx-0' (ffff888031af9a50): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' [ 365.826458][ T6734] kernfs rx-0: removing [ 365.826481][ T6734] kobject: 'rx-0' (ffff888031af9a50): calling ktype release [ 365.826501][ T6734] kobject: 'rx-0': free name [ 365.826521][ T6734] kernfs tx_timeout: removing [ 365.826547][ T6734] kernfs traffic_class: removing [ 365.826571][ T6734] kernfs xps_cpus: removing [ 365.826595][ T6734] kernfs xps_rxqs: removing [ 365.826619][ T6734] kernfs tx_maxrate: removing [ 365.826641][ T6734] kobject: 'tx-0' (ffff88805593e020): kobject_cleanup, parent ffff88807632dc50 [ 365.826658][ T6734] kobject: 'tx-0' (ffff88805593e020): auto cleanup kobject_del [ 365.826671][ T6734] kobject: 'tx-0' (ffff88805593e020): auto cleanup 'remove' event [ 365.826683][ T6734] kobject: 'tx-0' (ffff88805593e020): kobject_uevent_env [ 365.826713][ T6734] kobject: 'tx-0' (ffff88805593e020): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' [ 365.826791][ T6734] kernfs tx-0: removing [ 365.826814][ T6734] kobject: 'tx-0' (ffff88805593e020): calling ktype release [ 365.826833][ T6734] kobject: 'tx-0': free name [ 365.826851][ T6734] kernfs queues: removing [ 365.826875][ T6734] kobject: 'queues' (ffff88807632dc50): kobject_cleanup, parent 0000000000000000 [ 365.826897][ T6734] kobject: 'queues' (ffff88807632dc50): calling ktype release [ 365.826910][ T6734] kobject: 'queues' (ffff88807632dc50): kset_release [ 365.826931][ T6734] kobject: 'queues': free name [ 365.826957][ T6734] kernfs runtime_status: removing [ 365.826985][ T6734] kernfs control: removing [ 365.827011][ T6734] kernfs runtime_suspended_time: removing [ 365.827035][ T6734] kernfs runtime_active_time: removing [ 365.827059][ T6734] kernfs autosuspend_delay_ms: removing [ 365.827095][ T6734] kernfs power: removing [ 365.827127][ T6734] kernfs subsystem: removing [ 365.827153][ T6734] kernfs syz_tun: removing [ 365.827180][ T6734] kernfs uevent: removing [ 365.827210][ T6734] kernfs tun_flags: removing [ 365.827235][ T6734] kernfs owner: removing [ 365.827259][ T6734] kernfs group: removing [ 365.827284][ T6734] kernfs rx_packets: removing [ 365.827308][ T6734] kernfs tx_packets: removing [ 365.827333][ T6734] kernfs rx_bytes: removing [ 365.827356][ T6734] kernfs tx_bytes: removing [ 365.827381][ T6734] kernfs rx_errors: removing [ 365.827404][ T6734] kernfs tx_errors: removing [ 365.827428][ T6734] kernfs rx_dropped: removing [ 365.827452][ T6734] kernfs tx_dropped: removing [ 365.827476][ T6734] kernfs multicast: removing [ 365.827499][ T6734] kernfs collisions: removing [ 365.827523][ T6734] kernfs rx_length_errors: removing [ 365.827547][ T6734] kernfs rx_over_errors: removing [ 365.827571][ T6734] kernfs rx_crc_errors: removing [ 365.827595][ T6734] kernfs rx_frame_errors: removing [ 365.827619][ T6734] kernfs rx_fifo_errors: removing [ 365.827643][ T6734] kernfs rx_missed_errors: removing [ 365.827667][ T6734] kernfs tx_aborted_errors: removing [ 365.903991][ T6734] kernfs tx_carrier_errors: removing [ 365.904020][ T6734] kernfs tx_fifo_errors: removing [ 365.904044][ T6734] kernfs tx_heartbeat_errors: removing [ 365.904068][ T6734] kernfs tx_window_errors: removing [ 365.904093][ T6734] kernfs rx_compressed: removing [ 365.904117][ T6734] kernfs tx_compressed: removing [ 365.904141][ T6734] kernfs rx_nohandler: removing [ 365.904164][ T6734] kernfs statistics: removing [ 365.904194][ T6734] kernfs netdev_group: removing [ 365.904219][ T6734] kernfs type: removing [ 365.904245][ T6734] kernfs dev_id: removing [ 365.904269][ T6734] kernfs dev_port: removing [ 365.904293][ T6734] kernfs iflink: removing [ 365.904317][ T6734] kernfs ifindex: removing [ 365.904341][ T6734] kernfs name_assign_type: removing [ 365.904364][ T6734] kernfs addr_assign_type: removing [ 365.904388][ T6734] kernfs addr_len: removing [ 365.904412][ T6734] kernfs link_mode: removing [ 365.904436][ T6734] kernfs address: removing [ 365.904459][ T6734] kernfs broadcast: removing [ 365.904483][ T6734] kernfs speed: removing [ 365.904507][ T6734] kernfs duplex: removing [ 365.904530][ T6734] kernfs dormant: removing [ 365.904554][ T6734] kernfs testing: removing [ 365.904578][ T6734] kernfs operstate: removing [ 365.904601][ T6734] kernfs carrier_changes: removing [ 365.904625][ T6734] kernfs ifalias: removing [ 365.904649][ T6734] kernfs carrier: removing [ 365.904672][ T6734] kernfs mtu: removing [ 365.904696][ T6734] kernfs flags: removing [ 365.904719][ T6734] kernfs tx_queue_len: removing [ 365.904743][ T6734] kernfs gro_flush_timeout: removing [ 365.904767][ T6734] kernfs napi_defer_hard_irqs: removing [ 365.904791][ T6734] kernfs proto_down: removing [ 365.904814][ T6734] kernfs carrier_up_count: removing [ 365.904838][ T6734] kernfs carrier_down_count: removing [ 365.904862][ T6734] kernfs threaded: removing [ 365.904899][ T6734] PM: Removing info for No Bus:syz_tun [ 365.904917][ T6734] kobject: 'syz_tun' (ffff8880360ec7c0): kobject_uevent_env [ 365.904948][ T6734] kobject: 'syz_tun' (ffff8880360ec7c0): fill_kobj_path: path = '/devices/virtual/net/syz_tun' [ 365.905027][ T6734] kernfs syz_tun: removing [ 366.148578][ T7653] kobject: 'netdevsim5' (ffff88805509d000): kobject_uevent_env [ 366.204734][ C0] net_ratelimit: 24 callbacks suppressed [ 366.204747][ C0] wireguard: wg0: Sending keepalive packet to peer 49 ([::1]:20002/0%0) [ 366.204790][ C0] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0) [ 366.212357][ T6734] kobject: 'syz_tun' (ffff8880360ec7c0): kobject_cleanup, parent 0000000000000000 [ 366.212378][ T6734] kobject: 'syz_tun' (ffff8880360ec7c0): calling ktype release [ 366.212414][ T6734] kobject: 'syz_tun': free name [ 366.214523][ T7558] kernfs bonding_masters: removing [ 366.230803][ T7653] kobject: 'netdevsim5' (ffff88805509d000): fill_kobj_path: path = '/devices/netdevsim5' [ 366.230928][ T7653] PM: Removing info for netdevsim:netdevsim5 [ 366.230947][ T7653] kobject: 'netdevsim5' (ffff88805509d000): kobject_uevent_env [ 366.230979][ T7653] kobject: 'netdevsim5' (ffff88805509d000): fill_kobj_path: path = '/devices/netdevsim5' [ 366.231059][ T7653] kernfs netdevsim5: removing [ 366.374764][ T4942] sd 0:0:1:0: cmd ffff88802bddd6d0 CDB: 0x2a [ 366.374791][ T4942] Added buffer head 472 to ffff888027584a00 [ 366.376091][ C0] virtqueue callback for ffff888027584a00 (ffffffff866b7c00) [ 366.376114][ C0] sd 0:0:1:0: cmd ffff88802bddd6d0 response 0 status 0x0 sense_len 0 [ 366.376134][ C0] No more buffers in queue [ 366.399847][ T2065] sd 0:0:1:0: cmd ffff8880253b2910 CDB: 0x35 [ 366.399868][ T2065] Added buffer head 472 to ffff888027584a00 [ 366.404399][ C0] virtqueue callback for ffff888027584a00 (ffffffff866b7c00) [ 366.404420][ C0] sd 0:0:1:0: cmd ffff8880253b2910 response 0 status 0x0 sense_len 0 [ 366.404439][ C0] No more buffers in queue [ 366.410369][ T2065] sd 0:0:1:0: cmd ffff88802bddda90 CDB: 0x2a [ 366.410391][ T2065] Added buffer head 472 to ffff888027584a00 [ 366.437915][ C0] virtqueue callback for ffff888027584a00 (ffffffff866b7c00) [ 366.437937][ C0] sd 0:0:1:0: cmd ffff88802bddda90 response 0 status 0x0 sense_len 0 [ 366.437956][ C0] No more buffers in queue [ 366.734861][ T5756] wireguard: wg1: Receiving keepalive packet from peer 21 ([::1]:20001/0%0) [ 366.734930][ T5758] wireguard: wg2: Receiving keepalive packet from peer 23 ([::1]:20001/0%0) [ 366.734976][ T6931] wireguard: wg1: Receiving keepalive packet from peer 51 ([::1]:20001/0%0) [ 366.735020][ T6933] wireguard: wg2: Receiving keepalive packet from peer 53 ([::1]:20001/0%0) [ 366.802436][ T7558] netdevsim netdevsim9 netdevsim3 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 366.802465][ T7558] net netdevsim3: siw: event 6 [ 366.802937][ T7558] netdevsim netdevsim9 netdevsim3 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 366.802959][ T7558] net netdevsim3: siw: event 18 [ 366.803008][ T7558] kernfs rps_cpus: removing [ 366.803040][ T7558] kernfs rps_flow_cnt: removing [ 366.803063][ T7558] kobject: 'rx-0' (ffff888077556c50): kobject_cleanup, parent ffff888033ae9750 [ 366.803081][ T7558] kobject: 'rx-0' (ffff888077556c50): auto cleanup kobject_del [ 366.803094][ T7558] kobject: 'rx-0' (ffff888077556c50): auto cleanup 'remove' event [ 366.803108][ T7558] kobject: 'rx-0' (ffff888077556c50): kobject_uevent_env [ 366.803122][ T7558] kobject: 'rx-0' (ffff888077556c50): kobject_uevent_env: uevent_suppress caused the event to drop! [ 366.803139][ T7558] kernfs rx-0: removing [ 366.803163][ T7558] kobject: 'rx-0' (ffff888077556c50): calling ktype release [ 366.803182][ T7558] kobject: 'rx-0': free name [ 366.803203][ T7558] kernfs limit: removing [ 366.803227][ T7558] kernfs limit_max: removing [ 366.803251][ T7558] kernfs limit_min: removing [ 366.803275][ T7558] kernfs hold_time: removing [ 366.803299][ T7558] kernfs inflight: removing [ 366.803323][ T7558] kernfs stall_thrs: removing [ 366.803347][ T7558] kernfs stall_cnt: removing [ 366.803370][ T7558] kernfs stall_max: removing [ 366.803403][ T7558] kernfs byte_queue_limits: removing [ 366.803427][ T7558] kernfs tx_timeout: removing [ 366.803452][ T7558] kernfs traffic_class: removing [ 366.803476][ T7558] kernfs xps_cpus: removing [ 366.803500][ T7558] kernfs xps_rxqs: removing [ 366.803524][ T7558] kernfs tx_maxrate: removing [ 366.803546][ T7558] kobject: 'tx-0' (ffff88807be01020): kobject_cleanup, parent ffff888033ae9750 [ 366.803563][ T7558] kobject: 'tx-0' (ffff88807be01020): auto cleanup kobject_del [ 366.803576][ T7558] kobject: 'tx-0' (ffff88807be01020): auto cleanup 'remove' event [ 366.803588][ T7558] kobject: 'tx-0' (ffff88807be01020): kobject_uevent_env [ 366.803602][ T7558] kobject: 'tx-0' (ffff88807be01020): kobject_uevent_env: uevent_suppress caused the event to drop! [ 366.803618][ T7558] kernfs tx-0: removing [ 366.803726][ T7558] kobject: 'tx-0' (ffff88807be01020): calling ktype release [ 366.803746][ T7558] kobject: 'tx-0': free name [ 366.803765][ T7558] kernfs queues: removing [ 366.803789][ T7558] kobject: 'queues' (ffff888033ae9750): kobject_cleanup, parent 0000000000000000 [ 366.803805][ T7558] kobject: 'queues' (ffff888033ae9750): calling ktype release [ 366.803818][ T7558] kobject: 'queues' (ffff888033ae9750): kset_release [ 366.803838][ T7558] kobject: 'queues': free name [ 366.803867][ T7558] kernfs runtime_status: removing [ 366.803900][ T7558] kernfs control: removing [ 366.803924][ T7558] kernfs runtime_suspended_time: removing [ 366.803949][ T7558] kernfs runtime_active_time: removing [ 366.803973][ T7558] kernfs autosuspend_delay_ms: removing [ 366.804009][ T7558] kernfs power: removing [ 366.804042][ T7558] kernfs device: removing [ 366.804067][ T7558] kernfs subsystem: removing [ 366.804093][ T7558] kernfs netdevsim3: removing [ 366.804120][ T7558] kernfs uevent: removing [ 366.804150][ T7558] kernfs rx_packets: removing [ 366.804175][ T7558] kernfs tx_packets: removing [ 366.804199][ T7558] kernfs rx_bytes: removing [ 366.804223][ T7558] kernfs tx_bytes: removing [ 366.804248][ T7558] kernfs rx_errors: removing [ 366.804272][ T7558] kernfs tx_errors: removing [ 366.804296][ T7558] kernfs rx_dropped: removing [ 366.804320][ T7558] kernfs tx_dropped: removing [ 366.804344][ T7558] kernfs multicast: removing [ 366.804368][ T7558] kernfs collisions: removing [ 366.804392][ T7558] kernfs rx_length_errors: removing [ 366.804416][ T7558] kernfs rx_over_errors: removing [ 366.804441][ T7558] kernfs rx_crc_errors: removing [ 366.804465][ T7558] kernfs rx_frame_errors: removing [ 366.804490][ T7558] kernfs rx_fifo_errors: removing [ 366.804514][ T7558] kernfs rx_missed_errors: removing [ 366.804538][ T7558] kernfs tx_aborted_errors: removing [ 366.804562][ T7558] kernfs tx_carrier_errors: removing [ 366.804587][ T7558] kernfs tx_fifo_errors: removing [ 366.804611][ T7558] kernfs tx_heartbeat_errors: removing [ 366.804636][ T7558] kernfs tx_window_errors: removing [ 366.804660][ T7558] kernfs rx_compressed: removing [ 366.804684][ T7558] kernfs tx_compressed: removing [ 366.804709][ T7558] kernfs rx_nohandler: removing [ 366.804732][ T7558] kernfs statistics: removing [ 366.804758][ T7558] kernfs phys_port_name: removing [ 366.804782][ T7558] kernfs phys_switch_id: removing [ 366.804807][ T7558] kernfs netdev_group: removing [ 366.804831][ T7558] kernfs type: removing [ 366.804855][ T7558] kernfs dev_id: removing [ 366.804879][ T7558] kernfs dev_port: removing [ 366.804907][ T7558] kernfs iflink: removing [ 366.804931][ T7558] kernfs ifindex: removing [ 366.804955][ T7558] kernfs name_assign_type: removing [ 366.804980][ T7558] kernfs addr_assign_type: removing [ 366.805005][ T7558] kernfs addr_len: removing [ 366.805029][ T7558] kernfs link_mode: removing [ 366.805053][ T7558] kernfs address: removing [ 366.805077][ T7558] kernfs broadcast: removing [ 366.805113][ T7558] kernfs speed: removing [ 366.805137][ T7558] kernfs duplex: removing [ 366.805178][ T7558] kernfs dormant: removing [ 366.805202][ T7558] kernfs testing: removing [ 366.805226][ T7558] kernfs operstate: removing [ 366.805250][ T7558] kernfs carrier_changes: removing [ 366.805275][ T7558] kernfs ifalias: removing [ 366.805299][ T7558] kernfs carrier: removing [ 366.805323][ T7558] kernfs mtu: removing [ 366.805347][ T7558] kernfs flags: removing [ 366.805371][ T7558] kernfs tx_queue_len: removing [ 366.805396][ T7558] kernfs gro_flush_timeout: removing [ 366.805420][ T7558] kernfs napi_defer_hard_irqs: removing [ 366.805445][ T7558] kernfs proto_down: removing [ 366.805469][ T7558] kernfs carrier_up_count: removing [ 366.805494][ T7558] kernfs carrier_down_count: removing [ 366.805518][ T7558] kernfs threaded: removing [ 366.805550][ T7558] PM: Removing info for No Bus:netdevsim3 [ 366.805567][ T7558] kobject: 'netdevsim3' (ffff88802befc7c0): kobject_uevent_env [ 366.805581][ T7558] kobject: 'netdevsim3' (ffff88802befc7c0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 366.805599][ T7558] kernfs netdevsim3: removing [ 366.854509][ T5922] kobject: 'netdevsim5' (ffff88805509d000): kobject_cleanup, parent 0000000000000000 [ 366.854529][ T5922] kobject: 'netdevsim5' (ffff88805509d000): calling ktype release [ 366.854558][ T5922] kobject: 'netdevsim5': free name [ 367.242260][ T7558] kobject: 'netdevsim3' (ffff88802befc7c0): kobject_cleanup, parent 0000000000000000 [ 367.242283][ T7558] kobject: 'netdevsim3' (ffff88802befc7c0): calling ktype release [ 367.242312][ T7558] kobject: 'netdevsim3': free name [ 367.682037][ T7558] netdevsim netdevsim9 netdevsim2 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 367.682070][ T7558] net netdevsim2: siw: event 6 [ 367.682543][ T7558] netdevsim netdevsim9 netdevsim2 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 367.682566][ T7558] net netdevsim2: siw: event 18 [ 367.682614][ T7558] kernfs rps_cpus: removing [ 367.682645][ T7558] kernfs rps_flow_cnt: removing [ 367.682668][ T7558] kobject: 'rx-0' (ffff888077557050): kobject_cleanup, parent ffff88802b270950 [ 367.682686][ T7558] kobject: 'rx-0' (ffff888077557050): auto cleanup kobject_del [ 367.682700][ T7558] kobject: 'rx-0' (ffff888077557050): auto cleanup 'remove' event [ 367.682713][ T7558] kobject: 'rx-0' (ffff888077557050): kobject_uevent_env [ 367.682727][ T7558] kobject: 'rx-0' (ffff888077557050): kobject_uevent_env: uevent_suppress caused the event to drop! [ 367.682744][ T7558] kernfs rx-0: removing [ 367.682768][ T7558] kobject: 'rx-0' (ffff888077557050): calling ktype release [ 367.682787][ T7558] kobject: 'rx-0': free name [ 367.682808][ T7558] kernfs limit: removing [ 367.682832][ T7558] kernfs limit_max: removing [ 367.682856][ T7558] kernfs limit_min: removing [ 367.682887][ T7558] kernfs hold_time: removing [ 367.682912][ T7558] kernfs inflight: removing [ 367.682935][ T7558] kernfs stall_thrs: removing [ 367.682959][ T7558] kernfs stall_cnt: removing [ 367.682983][ T7558] kernfs stall_max: removing [ 367.683006][ T7558] kernfs byte_queue_limits: removing [ 367.683030][ T7558] kernfs tx_timeout: removing [ 367.683055][ T7558] kernfs traffic_class: removing [ 367.683080][ T7558] kernfs xps_cpus: removing [ 367.683104][ T7558] kernfs xps_rxqs: removing [ 367.683127][ T7558] kernfs tx_maxrate: removing [ 367.683150][ T7558] kobject: 'tx-0' (ffff88807f3c6820): kobject_cleanup, parent ffff88802b270950 [ 367.683167][ T7558] kobject: 'tx-0' (ffff88807f3c6820): auto cleanup kobject_del [ 367.683180][ T7558] kobject: 'tx-0' (ffff88807f3c6820): auto cleanup 'remove' event [ 367.683193][ T7558] kobject: 'tx-0' (ffff88807f3c6820): kobject_uevent_env [ 367.683206][ T7558] kobject: 'tx-0' (ffff88807f3c6820): kobject_uevent_env: uevent_suppress caused the event to drop! [ 367.683224][ T7558] kernfs tx-0: removing [ 367.683246][ T7558] kobject: 'tx-0' (ffff88807f3c6820): calling ktype release [ 367.683264][ T7558] kobject: 'tx-0': free name [ 367.683283][ T7558] kernfs queues: removing [ 367.683368][ T7558] kobject: 'queues' (ffff88802b270950): kobject_cleanup, parent 0000000000000000 [ 367.683385][ T7558] kobject: 'queues' (ffff88802b270950): calling ktype release [ 367.683398][ T7558] kobject: 'queues' (ffff88802b270950): kset_release [ 367.683418][ T7558] kobject: 'queues': free name [ 367.683446][ T7558] kernfs runtime_status: removing [ 367.683472][ T7558] kernfs control: removing [ 367.683495][ T7558] kernfs runtime_suspended_time: removing [ 367.683520][ T7558] kernfs runtime_active_time: removing [ 367.683545][ T7558] kernfs autosuspend_delay_ms: removing [ 367.683581][ T7558] kernfs power: removing [ 367.683613][ T7558] kernfs device: removing [ 367.683637][ T7558] kernfs subsystem: removing [ 367.683663][ T7558] kernfs netdevsim2: removing [ 367.683689][ T7558] kernfs uevent: removing [ 367.683720][ T7558] kernfs rx_packets: removing [ 367.683744][ T7558] kernfs tx_packets: removing [ 367.683769][ T7558] kernfs rx_bytes: removing [ 367.683793][ T7558] kernfs tx_bytes: removing [ 367.683817][ T7558] kernfs rx_errors: removing [ 367.683841][ T7558] kernfs tx_errors: removing [ 367.683865][ T7558] kernfs rx_dropped: removing [ 367.683894][ T7558] kernfs tx_dropped: removing [ 367.683918][ T7558] kernfs multicast: removing [ 367.683942][ T7558] kernfs collisions: removing [ 367.683967][ T7558] kernfs rx_length_errors: removing [ 367.683991][ T7558] kernfs rx_over_errors: removing [ 367.684015][ T7558] kernfs rx_crc_errors: removing [ 367.684039][ T7558] kernfs rx_frame_errors: removing [ 367.684064][ T7558] kernfs rx_fifo_errors: removing [ 367.684088][ T7558] kernfs rx_missed_errors: removing [ 367.684112][ T7558] kernfs tx_aborted_errors: removing [ 367.684136][ T7558] kernfs tx_carrier_errors: removing [ 367.684161][ T7558] kernfs tx_fifo_errors: removing [ 367.684185][ T7558] kernfs tx_heartbeat_errors: removing [ 367.684209][ T7558] kernfs tx_window_errors: removing [ 367.684233][ T7558] kernfs rx_compressed: removing [ 367.684257][ T7558] kernfs tx_compressed: removing [ 367.684281][ T7558] kernfs rx_nohandler: removing [ 367.684305][ T7558] kernfs statistics: removing [ 367.684330][ T7558] kernfs phys_port_name: removing [ 367.684355][ T7558] kernfs phys_switch_id: removing [ 367.684390][ T7558] kernfs netdev_group: removing [ 367.684414][ T7558] kernfs type: removing [ 367.684438][ T7558] kernfs dev_id: removing [ 367.684462][ T7558] kernfs dev_port: removing [ 367.684486][ T7558] kernfs iflink: removing [ 367.684510][ T7558] kernfs ifindex: removing [ 367.684534][ T7558] kernfs name_assign_type: removing [ 367.684559][ T7558] kernfs addr_assign_type: removing [ 367.684583][ T7558] kernfs addr_len: removing [ 367.684607][ T7558] kernfs link_mode: removing [ 367.684631][ T7558] kernfs address: removing [ 367.684655][ T7558] kernfs broadcast: removing [ 367.684679][ T7558] kernfs speed: removing [ 367.684703][ T7558] kernfs duplex: removing [ 367.684727][ T7558] kernfs dormant: removing [ 367.684751][ T7558] kernfs testing: removing [ 367.684775][ T7558] kernfs operstate: removing [ 367.684811][ T7558] kernfs carrier_changes: removing [ 367.689911][ T7558] kernfs ifalias: removing [ 367.689937][ T7558] kernfs carrier: removing [ 367.689962][ T7558] kernfs mtu: removing [ 367.689987][ T7558] kernfs flags: removing [ 367.690014][ T7558] kernfs tx_queue_len: removing [ 367.690038][ T7558] kernfs gro_flush_timeout: removing [ 367.690063][ T7558] kernfs napi_defer_hard_irqs: removing [ 367.690087][ T7558] kernfs proto_down: removing [ 367.690112][ T7558] kernfs carrier_up_count: removing [ 367.690137][ T7558] kernfs carrier_down_count: removing [ 367.690161][ T7558] kernfs threaded: removing [ 367.690184][ T7558] PM: Removing info for No Bus:netdevsim2 [ 367.690202][ T7558] kobject: 'netdevsim2' (ffff88807d8e87c0): kobject_uevent_env [ 367.690216][ T7558] kobject: 'netdevsim2' (ffff88807d8e87c0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 367.690234][ T7558] kernfs netdevsim2: removing [ 367.804014][ C0] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0) [ 367.804063][ C0] wireguard: wg0: Sending keepalive packet to peer 49 ([::1]:20002/0%0) [ 367.862653][ T6931] wireguard: wg1: Receiving keepalive packet from peer 51 ([::1]:20001/0%0) [ 367.890598][ T5756] wireguard: wg1: Receiving keepalive packet from peer 21 ([::1]:20001/0%0) [ 368.196137][ T7558] kobject: 'netdevsim2' (ffff88807d8e87c0): kobject_cleanup, parent 0000000000000000 [ 368.196161][ T7558] kobject: 'netdevsim2' (ffff88807d8e87c0): calling ktype release [ 368.196190][ T7558] kobject: 'netdevsim2': free name [ 368.197886][ T1260] sd 0:0:1:0: cmd ffff88802bddde50 CDB: 0x2a [ 368.197911][ T1260] Added buffer head 472 to ffff888027584a00 [ 368.197983][ T1260] sd 0:0:1:0: cmd ffff88802bdde210 CDB: 0x2a [ 368.198019][ T1260] Added buffer head 111 to ffff888027584a00 [ 368.203559][ C0] virtqueue callback for ffff888027584a00 (ffffffff866b7c00) [ 368.203581][ C0] sd 0:0:1:0: cmd ffff88802bddde50 response 0 status 0x0 sense_len 0 [ 368.203602][ C0] No more buffers in queue [ 368.220998][ C0] virtqueue callback for ffff888027584a00 (ffffffff866b7c00) [ 368.221021][ C0] sd 0:0:1:0: cmd ffff88802bdde210 response 0 status 0x0 sense_len 0 [ 368.221040][ C0] No more buffers in queue [ 368.642631][ T6692] ffff888055174000 name hci7 bus 0 [ 368.658180][ T6692] hci7: Updating devcoredump state from IDLE to IDLE. [ 368.658198][ T6692] hci7: err 0x13 [ 368.658215][ T6692] hci7 ffff888055174000 [ 368.658228][ T6692] hci7: [ 368.688625][ T6692] hci7: err 0x13 [ 368.688639][ T6692] hci7: cancelling interleave scan [ 368.688661][ T6692] All LE pending actions cleared [ 368.688670][ T6692] hdev hci7 [ 368.688680][ T6692] hcon ffff88801d7d4000 reason 22 [ 368.688694][ T6692] hcon ffff88801d7d4000 conn ffff88802b206800, err 103 [ 368.688717][ T6692] hci7 hcon ffff88801d7d4000 chan ffff888022718800 [ 368.734310][ T6692] hci7 hcon ffff88801d7d4000 handle 201 [ 368.734328][ T6692] hci7: hcon ffff88801d7d4000 [ 368.738754][ T6692] hcon ffff88801d7d4000 [ 368.738767][ T6692] hci7: conn ffff88801d7d4000 [ 368.738781][ T6692] device: 'hci7:201': device_unregister [ 368.738810][ T6692] kernfs runtime_status: removing [ 368.738843][ T6692] kernfs control: removing [ 368.738868][ T6692] kernfs runtime_suspended_time: removing [ 368.738894][ T6692] kernfs runtime_active_time: removing [ 368.738919][ T6692] kernfs autosuspend_delay_ms: removing [ 368.738963][ T6692] kernfs power: removing [ 368.738995][ T6692] kernfs device: removing [ 368.739021][ T6692] kernfs subsystem: removing [ 368.739046][ T6692] kernfs hci7:201: removing [ 368.739072][ T6692] kernfs uevent: removing [ 368.739092][ T6692] PM: Removing info for No Bus:hci7:201 [ 368.739109][ T6692] kobject: 'hci7:201' (ffff88801d7d4cf0): kobject_uevent_env [ 368.739142][ T6692] kobject: 'hci7:201' (ffff88801d7d4cf0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci7/hci7:201' [ 368.739249][ T6692] kernfs hci7:201: removing [ 368.739266][ T6692] kobject: 'hci7:201' (ffff88801d7d4cf0): kobject_cleanup, parent 0000000000000000 [ 368.739283][ T6692] kobject: 'hci7:201' (ffff88801d7d4cf0): calling ktype release [ 368.739314][ T6692] kobject: 'hci7:201': free name [ 368.739331][ T6692] hci7 orig refcnt 7 [ 368.739343][ T6692] hdev hci7 event 4 [ 368.739367][ T6692] hdev 0000000000000000 len 8 [ 368.739394][ T6692] hci7: Cleanup of MSFT extension [ 368.739529][ T6692] hdev hci7 event 8 [ 368.739541][ T6692] hci7 orig refcnt 6 [ 368.739568][ T6692] channel 3 len 6 [ 368.739606][ T6692] channel 3 len 8 [ 368.739631][ T6692] hdev hci7 event 2 [ 368.739654][ T6692] hdev 0000000000000000 len 8 [ 368.739695][ T6692] kernfs runtime_status: removing [ 368.739722][ T6692] kernfs control: removing [ 368.739746][ T6692] kernfs runtime_suspended_time: removing [ 368.739770][ T6692] kernfs runtime_active_time: removing [ 368.739795][ T6692] kernfs autosuspend_delay_ms: removing [ 368.739831][ T6692] kernfs power: removing [ 368.739856][ T6692] kernfs device: removing [ 368.739880][ T6692] kernfs subsystem: removing [ 368.739904][ T6692] kernfs rfkill27: removing [ 368.739935][ T6692] kernfs uevent: removing [ 368.739956][ T6692] kernfs name: removing [ 368.739981][ T6692] kernfs type: removing [ 368.740004][ T6692] kernfs index: removing [ 368.740028][ T6692] kernfs persistent: removing [ 368.740052][ T6692] kernfs state: removing [ 368.740076][ T6692] kernfs soft: removing [ 368.740100][ T6692] kernfs hard: removing [ 368.740134][ T6692] kernfs hard_block_reasons: removing [ 368.740158][ T6692] PM: Removing info for No Bus:rfkill27 [ 368.740190][ T6692] kobject: 'rfkill27' (ffff8880542fa110): kobject_uevent_env [ 368.740219][ T6692] kobject: 'rfkill27' (ffff8880542fa110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci7/rfkill27' [ 368.740308][ T6692] kernfs rfkill27: removing [ 368.740368][ T6692] kobject: 'rfkill27' (ffff8880542fa110): kobject_cleanup, parent 0000000000000000 [ 368.740385][ T6692] kobject: 'rfkill27' (ffff8880542fa110): calling ktype release [ 368.740413][ T6692] kobject: 'rfkill27': free name [ 368.740441][ T6692] kernfs runtime_status: removing [ 368.740466][ T6692] kernfs control: removing [ 368.740490][ T6692] kernfs runtime_suspended_time: removing [ 368.740514][ T6692] kernfs runtime_active_time: removing [ 368.740537][ T6692] kernfs autosuspend_delay_ms: removing [ 368.740572][ T6692] kernfs power: removing [ 368.740597][ T6692] kernfs subsystem: removing [ 368.740621][ T6692] kernfs hci7: removing [ 368.740645][ T6692] kernfs uevent: removing [ 368.740665][ T6692] kernfs reset: removing [ 368.740687][ T6692] PM: Removing info for No Bus:hci7 [ 368.740725][ T6692] kobject: 'hci7' (ffff888055175538): kobject_uevent_env [ 368.740753][ T6692] kobject: 'hci7' (ffff888055175538): fill_kobj_path: path = '/devices/virtual/bluetooth/hci7' [ 368.740836][ T6692] kernfs hci7: removing [ 368.740853][ T6692] hci7 orig refcnt 2 [ 368.740863][ T6692] kobject: 'hci7' (ffff888055175538): kobject_cleanup, parent 0000000000000000 [ 368.740879][ T6692] kobject: 'hci7' (ffff888055175538): calling ktype release [ 368.740968][ T6692] All LE connection parameters were removed [ 368.740979][ T6692] hci7: Unregister MSFT extension [ 368.741034][ T6692] kobject: 'hci7': free name [ 368.884259][ T7558] netdevsim netdevsim9 netdevsim1 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 368.884288][ T7558] net netdevsim1: siw: event 6 [ 368.884764][ T7558] netdevsim netdevsim9 netdevsim1 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 368.884786][ T7558] net netdevsim1: siw: event 18 [ 368.884833][ T7558] kernfs rps_cpus: removing [ 368.884863][ T7558] kernfs rps_flow_cnt: removing [ 368.884886][ T7558] kobject: 'rx-0' (ffff888077557650): kobject_cleanup, parent ffff88802b51ca50 [ 368.884903][ T7558] kobject: 'rx-0' (ffff888077557650): auto cleanup kobject_del [ 368.884916][ T7558] kobject: 'rx-0' (ffff888077557650): auto cleanup 'remove' event [ 368.884936][ T7558] kobject: 'rx-0' (ffff888077557650): kobject_uevent_env [ 368.884949][ T7558] kobject: 'rx-0' (ffff888077557650): kobject_uevent_env: uevent_suppress caused the event to drop! [ 368.884966][ T7558] kernfs rx-0: removing [ 368.884990][ T7558] kobject: 'rx-0' (ffff888077557650): calling ktype release [ 368.885009][ T7558] kobject: 'rx-0': free name [ 368.885029][ T7558] kernfs limit: removing [ 368.885054][ T7558] kernfs limit_max: removing [ 368.885079][ T7558] kernfs limit_min: removing [ 368.885102][ T7558] kernfs hold_time: removing [ 368.885126][ T7558] kernfs inflight: removing [ 368.885150][ T7558] kernfs stall_thrs: removing [ 368.885174][ T7558] kernfs stall_cnt: removing [ 368.885197][ T7558] kernfs stall_max: removing [ 368.885220][ T7558] kernfs byte_queue_limits: removing [ 368.885245][ T7558] kernfs tx_timeout: removing [ 368.885269][ T7558] kernfs traffic_class: removing [ 368.885294][ T7558] kernfs xps_cpus: removing [ 368.885318][ T7558] kernfs xps_rxqs: removing [ 368.885342][ T7558] kernfs tx_maxrate: removing [ 368.885365][ T7558] kobject: 'tx-0' (ffff88802f26a420): kobject_cleanup, parent ffff88802b51ca50 [ 368.885381][ T7558] kobject: 'tx-0' (ffff88802f26a420): auto cleanup kobject_del [ 368.885394][ T7558] kobject: 'tx-0' (ffff88802f26a420): auto cleanup 'remove' event [ 368.885407][ T7558] kobject: 'tx-0' (ffff88802f26a420): kobject_uevent_env [ 368.885420][ T7558] kobject: 'tx-0' (ffff88802f26a420): kobject_uevent_env: uevent_suppress caused the event to drop! [ 368.885437][ T7558] kernfs tx-0: removing [ 368.885459][ T7558] kobject: 'tx-0' (ffff88802f26a420): calling ktype release [ 368.944463][ C0] virtqueue callback for ffff8880275aaa00 (ffffffff86bcd940) [ 368.944513][ C0] No more buffers in queue [ 368.944726][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 368.944743][ C0] No more buffers in queue [ 368.944844][ C0] eth0: xmit ffff888033904500 42:01:0a:80:00:01 [ 368.944864][ C0] Added buffer head 11 to ffff8880275b8e00 [ 368.944917][ C0] virtqueue callback for ffff8880275b8e00 (ffffffff86bcda80) [ 368.944944][ C0] Sent skb ffff888033904500 [ 368.944977][ C0] No more buffers in queue [ 368.989575][ T7558] kobject: 'tx-0': free name [ 368.989604][ T7558] kernfs queues: removing [ 368.989635][ T7558] kobject: 'queues' (ffff88802b51ca50): kobject_cleanup, parent 0000000000000000 [ 368.989653][ T7558] kobject: 'queues' (ffff88802b51ca50): calling ktype release [ 368.989666][ T7558] kobject: 'queues' (ffff88802b51ca50): kset_release [ 368.989687][ T7558] kobject: 'queues': free name [ 368.989718][ T7558] kernfs runtime_status: removing [ 368.989744][ T7558] kernfs control: removing [ 368.989770][ T7558] kernfs runtime_suspended_time: removing [ 368.989794][ T7558] kernfs runtime_active_time: removing [ 368.989818][ T7558] kernfs autosuspend_delay_ms: removing [ 368.989855][ T7558] kernfs power: removing [ 368.989892][ T7558] kernfs device: removing [ 368.989918][ T7558] kernfs subsystem: removing [ 368.989944][ T7558] kernfs netdevsim1: removing [ 368.989971][ T7558] kernfs uevent: removing [ 368.990003][ T7558] kernfs rx_packets: removing [ 368.990028][ T7558] kernfs tx_packets: removing [ 368.990053][ T7558] kernfs rx_bytes: removing [ 368.990077][ T7558] kernfs tx_bytes: removing [ 368.990102][ T7558] kernfs rx_errors: removing [ 368.990126][ T7558] kernfs tx_errors: removing [ 368.990150][ T7558] kernfs rx_dropped: removing [ 368.990174][ T7558] kernfs tx_dropped: removing [ 368.990199][ T7558] kernfs multicast: removing [ 368.990223][ T7558] kernfs collisions: removing [ 368.990247][ T7558] kernfs rx_length_errors: removing [ 368.990272][ T7558] kernfs rx_over_errors: removing [ 368.990296][ T7558] kernfs rx_crc_errors: removing [ 368.990321][ T7558] kernfs rx_frame_errors: removing [ 368.990345][ T7558] kernfs rx_fifo_errors: removing [ 368.990369][ T7558] kernfs rx_missed_errors: removing [ 368.990394][ T7558] kernfs tx_aborted_errors: removing [ 368.990418][ T7558] kernfs tx_carrier_errors: removing [ 368.990443][ T7558] kernfs tx_fifo_errors: removing [ 368.990467][ T7558] kernfs tx_heartbeat_errors: removing [ 368.990492][ T7558] kernfs tx_window_errors: removing [ 368.990520][ T7558] kernfs rx_compressed: removing [ 368.990544][ T7558] kernfs tx_compressed: removing [ 368.990568][ T7558] kernfs rx_nohandler: removing [ 368.990591][ T7558] kernfs statistics: removing [ 368.990617][ T7558] kernfs phys_port_name: removing [ 368.990642][ T7558] kernfs phys_switch_id: removing [ 368.990678][ T7558] kernfs netdev_group: removing [ 368.990703][ T7558] kernfs type: removing [ 368.990727][ T7558] kernfs dev_id: removing [ 368.990751][ T7558] kernfs dev_port: removing [ 368.990774][ T7558] kernfs iflink: removing [ 368.990799][ T7558] kernfs ifindex: removing [ 368.990823][ T7558] kernfs name_assign_type: removing [ 368.990848][ T7558] kernfs addr_assign_type: removing [ 368.990872][ T7558] kernfs addr_len: removing [ 368.990900][ T7558] kernfs link_mode: removing [ 368.990928][ T7558] kernfs address: removing [ 368.990952][ T7558] kernfs broadcast: removing [ 368.990975][ T7558] kernfs speed: removing [ 369.134105][ T7558] kernfs duplex: removing [ 369.134142][ T7558] kernfs dormant: removing [ 369.134167][ T7558] kernfs testing: removing [ 369.134193][ T7558] kernfs operstate: removing [ 369.134217][ T7558] kernfs carrier_changes: removing [ 369.134242][ T7558] kernfs ifalias: removing [ 369.134266][ T7558] kernfs carrier: removing [ 369.134289][ T7558] kernfs mtu: removing [ 369.134313][ T7558] kernfs flags: removing [ 369.134337][ T7558] kernfs tx_queue_len: removing [ 369.134361][ T7558] kernfs gro_flush_timeout: removing [ 369.134386][ T7558] kernfs napi_defer_hard_irqs: removing [ 369.134410][ T7558] kernfs proto_down: removing [ 369.134434][ T7558] kernfs carrier_up_count: removing [ 369.134459][ T7558] kernfs carrier_down_count: removing [ 369.134483][ T7558] kernfs threaded: removing [ 369.134506][ T7558] PM: Removing info for No Bus:netdevsim1 [ 369.134526][ T7558] kobject: 'netdevsim1' (ffff88807d8ec7c0): kobject_uevent_env [ 369.134540][ T7558] kobject: 'netdevsim1' (ffff88807d8ec7c0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 369.134558][ T7558] kernfs netdevsim1: removing [ 369.512754][ T5621] ffff888068250000 name hci3 bus 0 [ 369.977413][ T7558] kobject: 'netdevsim1' (ffff88807d8ec7c0): kobject_cleanup, parent 0000000000000000 [ 369.977437][ T7558] kobject: 'netdevsim1' (ffff88807d8ec7c0): calling ktype release [ 369.977468][ T7558] kobject: 'netdevsim1': free name [ 370.007549][ T5621] hci3: Updating devcoredump state from IDLE to IDLE. [ 370.007567][ T5621] hci3: err 0x13 [ 370.007584][ T5621] hci3 ffff888068250000 [ 370.007596][ T5621] hci3: [ 370.007869][ T5621] hci3: err 0x13 [ 370.007887][ T5621] hci3: cancelling interleave scan [ 370.007908][ T5621] All LE pending actions cleared [ 370.007917][ T5621] hdev hci3 [ 370.007927][ T5621] hcon ffff888024c34000 reason 22 [ 370.007940][ T5621] hcon ffff888024c34000 conn ffff888076eac800, err 103 [ 370.007963][ T5621] hci3 hcon ffff888024c34000 chan ffff88807ae75500 [ 370.008991][ T5621] hci3 hcon ffff888024c34000 handle 201 [ 370.009022][ T5621] hci3: hcon ffff888024c34000 [ 370.009066][ T5621] hcon ffff888024c34000 [ 370.009077][ T5621] hci3: conn ffff888024c34000 [ 370.009090][ T5621] device: 'hci3:201': device_unregister [ 370.009119][ T5621] kernfs runtime_status: removing [ 370.011551][ T6663] ffff888056508000 name hci1 bus 0 [ 370.104099][ T6663] hci1: Updating devcoredump state from IDLE to IDLE. [ 370.104116][ T6663] hci1: err 0x13 [ 370.104133][ T6663] hci1 ffff888056508000 [ 370.104145][ T6663] hci1: [ 370.105643][ T6663] hci1: err 0x13 [ 370.105655][ T6663] hci1: cancelling interleave scan [ 370.105674][ T6663] All LE pending actions cleared [ 370.105683][ T6663] hdev hci1 [ 370.105692][ T6663] hcon ffff88807e064000 reason 22 [ 370.105706][ T6663] hcon ffff88807e064000 conn ffff88803428b800, err 103 [ 370.105729][ T6663] hci1 hcon ffff88807e064000 chan ffff88807a54b100 [ 370.107287][ T5621] kernfs control: removing [ 370.107321][ T5621] kernfs runtime_suspended_time: removing [ 370.107348][ T5621] kernfs runtime_active_time: removing [ 370.107373][ T5621] kernfs autosuspend_delay_ms: removing [ 370.107412][ T5621] kernfs power: removing [ 370.107445][ T5621] kernfs device: removing [ 370.107471][ T5621] kernfs subsystem: removing [ 370.107496][ T5621] kernfs hci3:201: removing [ 370.107524][ T5621] kernfs uevent: removing [ 370.107543][ T5621] PM: Removing info for No Bus:hci3:201 [ 370.107561][ T5621] kobject: 'hci3:201' (ffff888024c34cf0): kobject_uevent_env [ 370.107596][ T5621] kobject: 'hci3:201' (ffff888024c34cf0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/hci3:201' [ 370.107704][ T5621] kernfs hci3:201: removing [ 370.107722][ T5621] kobject: 'hci3:201' (ffff888024c34cf0): kobject_cleanup, parent 0000000000000000 [ 370.107739][ T5621] kobject: 'hci3:201' (ffff888024c34cf0): calling ktype release [ 370.107772][ T5621] kobject: 'hci3:201': free name [ 370.107790][ T5621] hci3 orig refcnt 7 [ 370.107803][ T5621] hdev hci3 event 4 [ 370.107827][ T5621] hdev 0000000000000000 len 8 [ 370.107853][ T5621] hci3: Cleanup of MSFT extension [ 370.107981][ T5621] hdev hci3 event 8 [ 370.107992][ T5621] hci3 orig refcnt 6 [ 370.108019][ T5621] channel 3 len 6 [ 370.108062][ T5621] channel 3 len 8 [ 370.108087][ T5621] hdev hci3 event 2 [ 370.108109][ T5621] hdev 0000000000000000 len 8 [ 370.108153][ T5621] kernfs runtime_status: removing [ 370.108179][ T5621] kernfs control: removing [ 370.108203][ T5621] kernfs runtime_suspended_time: removing [ 370.108228][ T5621] kernfs runtime_active_time: removing [ 370.108252][ T5621] kernfs autosuspend_delay_ms: removing [ 370.108288][ T5621] kernfs power: removing [ 370.108314][ T5621] kernfs device: removing [ 370.108338][ T5621] kernfs subsystem: removing [ 370.108363][ T5621] kernfs rfkill8: removing [ 370.108388][ T5621] kernfs uevent: removing [ 370.108408][ T5621] kernfs name: removing [ 370.108432][ T5621] kernfs type: removing [ 370.108456][ T5621] kernfs index: removing [ 370.108480][ T5621] kernfs persistent: removing [ 370.108504][ T5621] kernfs state: removing [ 370.108527][ T5621] kernfs soft: removing [ 370.108550][ T5621] kernfs hard: removing [ 370.108574][ T5621] kernfs hard_block_reasons: removing [ 370.108597][ T5621] PM: Removing info for No Bus:rfkill8 [ 370.108611][ T5621] kobject: 'rfkill8' (ffff888021ea1110): kobject_uevent_env [ 370.108640][ T5621] kobject: 'rfkill8' (ffff888021ea1110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/rfkill8' [ 370.109761][ T5621] kernfs rfkill8: removing [ 370.109794][ T5621] kobject: 'rfkill8' (ffff888021ea1110): kobject_cleanup, parent 0000000000000000 [ 370.109811][ T5621] kobject: 'rfkill8' (ffff888021ea1110): calling ktype release [ 370.109840][ T5621] kobject: 'rfkill8': free name [ 370.109870][ T5621] kernfs runtime_status: removing [ 370.109903][ T5621] kernfs control: removing [ 370.109927][ T5621] kernfs runtime_suspended_time: removing [ 370.109951][ T5621] kernfs runtime_active_time: removing [ 370.109975][ T5621] kernfs autosuspend_delay_ms: removing [ 370.110011][ T5621] kernfs power: removing [ 370.110035][ T5621] kernfs subsystem: removing [ 370.110060][ T5621] kernfs hci3: removing [ 370.110085][ T5621] kernfs uevent: removing [ 370.110105][ T5621] kernfs reset: removing [ 370.110128][ T5621] PM: Removing info for No Bus:hci3 [ 370.110179][ T5621] kobject: 'hci3' (ffff888068251538): kobject_uevent_env [ 370.110207][ T5621] kobject: 'hci3' (ffff888068251538): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3' [ 370.110297][ T5621] kernfs hci3: removing [ 370.110316][ T5621] hci3 orig refcnt 2 [ 370.110326][ T5621] kobject: 'hci3' (ffff888068251538): kobject_cleanup, parent 0000000000000000 [ 370.110342][ T5621] kobject: 'hci3' (ffff888068251538): calling ktype release [ 370.170481][ T5621] All LE connection parameters were removed [ 370.170494][ T5621] hci3: Unregister MSFT extension [ 370.170554][ T5621] kobject: 'hci3': free name [ 370.182738][ T6663] hci1 hcon ffff88807e064000 handle 201 [ 370.182755][ T6663] hci1: hcon ffff88807e064000 [ 370.234818][ T6663] hcon ffff88807e064000 [ 370.234833][ T6663] hci1: conn ffff88807e064000 [ 370.234847][ T6663] device: 'hci1:201': device_unregister [ 370.234873][ T6663] kernfs runtime_status: removing [ 370.234908][ T6663] kernfs control: removing [ 370.234933][ T6663] kernfs runtime_suspended_time: removing [ 370.234959][ T6663] kernfs runtime_active_time: removing [ 370.234984][ T6663] kernfs autosuspend_delay_ms: removing [ 370.235020][ T6663] kernfs power: removing [ 370.235047][ T6663] kernfs device: removing [ 370.235072][ T6663] kernfs subsystem: removing [ 370.235096][ T6663] kernfs hci1:201: removing [ 370.235122][ T6663] kernfs uevent: removing [ 370.235140][ T6663] PM: Removing info for No Bus:hci1:201 [ 370.235155][ T6663] kobject: 'hci1:201' (ffff88807e064cf0): kobject_uevent_env [ 370.235186][ T6663] kobject: 'hci1:201' (ffff88807e064cf0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/hci1:201' [ 370.235284][ T6663] kernfs hci1:201: removing [ 370.235301][ T6663] kobject: 'hci1:201' (ffff88807e064cf0): kobject_cleanup, parent 0000000000000000 [ 370.235318][ T6663] kobject: 'hci1:201' (ffff88807e064cf0): calling ktype release [ 370.235347][ T6663] kobject: 'hci1:201': free name [ 370.235364][ T6663] hci1 orig refcnt 7 [ 370.235376][ T6663] hdev hci1 event 4 [ 370.235400][ T6663] hdev 0000000000000000 len 8 [ 370.235426][ T6663] hci1: Cleanup of MSFT extension [ 370.235550][ T6663] hdev hci1 event 8 [ 370.235561][ T6663] hci1 orig refcnt 6 [ 370.235620][ T6663] channel 3 len 6 [ 370.235659][ T6663] channel 3 len 8 [ 370.235684][ T6663] hdev hci1 event 2 [ 370.235706][ T6663] hdev 0000000000000000 len 8 [ 370.235748][ T6663] kernfs runtime_status: removing [ 370.235774][ T6663] kernfs control: removing [ 370.235798][ T6663] kernfs runtime_suspended_time: removing [ 370.235822][ T6663] kernfs runtime_active_time: removing [ 370.235846][ T6663] kernfs autosuspend_delay_ms: removing [ 370.235882][ T6663] kernfs power: removing [ 370.235931][ T6663] kernfs device: removing [ 370.235955][ T6663] kernfs subsystem: removing [ 370.235980][ T6663] kernfs rfkill26: removing [ 370.236005][ T6663] kernfs uevent: removing [ 370.236025][ T6663] kernfs name: removing [ 370.236050][ T6663] kernfs type: removing [ 370.236074][ T6663] kernfs index: removing [ 370.236098][ T6663] kernfs persistent: removing [ 370.236122][ T6663] kernfs state: removing [ 370.236145][ T6663] kernfs soft: removing [ 370.236169][ T6663] kernfs hard: removing [ 370.236204][ T6663] kernfs hard_block_reasons: removing [ 370.236228][ T6663] PM: Removing info for No Bus:rfkill26 [ 370.248619][ T7558] netdevsim netdevsim9 netdevsim0 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 370.248647][ T7558] net netdevsim0: siw: event 6 [ 370.249124][ T7558] netdevsim netdevsim9 netdevsim0 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 370.249148][ T7558] net netdevsim0: siw: event 18 [ 370.249196][ T7558] kernfs rps_cpus: removing [ 370.249224][ T7558] kernfs rps_flow_cnt: removing [ 370.249247][ T7558] kobject: 'rx-0' (ffff888077ac2050): kobject_cleanup, parent ffff888029b8f550 [ 370.249264][ T7558] kobject: 'rx-0' (ffff888077ac2050): auto cleanup kobject_del [ 370.249278][ T7558] kobject: 'rx-0' (ffff888077ac2050): auto cleanup 'remove' event [ 370.249291][ T7558] kobject: 'rx-0' (ffff888077ac2050): kobject_uevent_env [ 370.249304][ T7558] kobject: 'rx-0' (ffff888077ac2050): kobject_uevent_env: uevent_suppress caused the event to drop! [ 370.249321][ T7558] kernfs rx-0: removing [ 370.249344][ T7558] kobject: 'rx-0' (ffff888077ac2050): calling ktype release [ 370.249363][ T7558] kobject: 'rx-0': free name [ 370.249384][ T7558] kernfs limit: removing [ 370.249408][ T7558] kernfs limit_max: removing [ 370.249432][ T7558] kernfs limit_min: removing [ 370.249456][ T7558] kernfs hold_time: removing [ 370.249479][ T7558] kernfs inflight: removing [ 370.249503][ T7558] kernfs stall_thrs: removing [ 370.249527][ T7558] kernfs stall_cnt: removing [ 370.249550][ T7558] kernfs stall_max: removing [ 370.307564][ T6663] kobject: 'rfkill26' (ffff88802f054110): kobject_uevent_env [ 370.307615][ T6663] kobject: 'rfkill26' (ffff88802f054110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/rfkill26' [ 370.307714][ T6663] kernfs rfkill26: removing [ 370.307745][ T6663] kobject: 'rfkill26' (ffff88802f054110): kobject_cleanup, parent 0000000000000000 [ 370.307762][ T6663] kobject: 'rfkill26' (ffff88802f054110): calling ktype release [ 370.307791][ T6663] kobject: 'rfkill26': free name [ 370.307819][ T6663] kernfs runtime_status: removing [ 370.307845][ T6663] kernfs control: removing [ 370.307869][ T6663] kernfs runtime_suspended_time: removing [ 370.307899][ T6663] kernfs runtime_active_time: removing [ 370.307923][ T6663] kernfs autosuspend_delay_ms: removing [ 370.307959][ T6663] kernfs power: removing [ 370.307984][ T6663] kernfs subsystem: removing [ 370.308008][ T6663] kernfs hci1: removing [ 370.308033][ T6663] kernfs uevent: removing [ 370.308053][ T6663] kernfs reset: removing [ 370.308076][ T6663] PM: Removing info for No Bus:hci1 [ 370.308116][ T6663] kobject: 'hci1' (ffff888056509538): kobject_uevent_env [ 370.308143][ T6663] kobject: 'hci1' (ffff888056509538): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1' [ 370.308226][ T6663] kernfs hci1: removing [ 370.308243][ T6663] hci1 orig refcnt 2 [ 370.308254][ T6663] kobject: 'hci1' (ffff888056509538): kobject_cleanup, parent 0000000000000000 [ 370.308269][ T6663] kobject: 'hci1' (ffff888056509538): calling ktype release [ 370.308345][ T6663] All LE connection parameters were removed [ 370.308355][ T6663] hci1: Unregister MSFT extension [ 370.308412][ T6663] kobject: 'hci1': free name [ 370.331173][ T7558] kernfs byte_queue_limits: removing [ 370.331208][ T7558] kernfs tx_timeout: removing [ 370.331234][ T7558] kernfs traffic_class: removing [ 370.331261][ T7558] kernfs xps_cpus: removing [ 370.331286][ T7558] kernfs xps_rxqs: removing [ 370.331314][ T7558] kernfs tx_maxrate: removing [ 370.331337][ T7558] kobject: 'tx-0' (ffff88807a994020): kobject_cleanup, parent ffff888029b8f550 [ 370.331354][ T7558] kobject: 'tx-0' (ffff88807a994020): auto cleanup kobject_del [ 370.331367][ T7558] kobject: 'tx-0' (ffff88807a994020): auto cleanup 'remove' event [ 370.331380][ T7558] kobject: 'tx-0' (ffff88807a994020): kobject_uevent_env [ 370.331394][ T7558] kobject: 'tx-0' (ffff88807a994020): kobject_uevent_env: uevent_suppress caused the event to drop! [ 370.331411][ T7558] kernfs tx-0: removing [ 370.331434][ T7558] kobject: 'tx-0' (ffff88807a994020): calling ktype release [ 370.331453][ T7558] kobject: 'tx-0': free name [ 370.331473][ T7558] kernfs queues: removing [ 370.331495][ T7558] kobject: 'queues' (ffff888029b8f550): kobject_cleanup, parent 0000000000000000 [ 370.331513][ T7558] kobject: 'queues' (ffff888029b8f550): calling ktype release [ 370.331526][ T7558] kobject: 'queues' (ffff888029b8f550): kset_release [ 370.331546][ T7558] kobject: 'queues': free name [ 370.331573][ T7558] kernfs runtime_status: removing [ 370.331598][ T7558] kernfs control: removing [ 370.331622][ T7558] kernfs runtime_suspended_time: removing [ 370.331646][ T7558] kernfs runtime_active_time: removing [ 370.331671][ T7558] kernfs autosuspend_delay_ms: removing [ 370.331707][ T7558] kernfs power: removing [ 370.359926][ T7558] kernfs device: removing [ 370.359954][ T7558] kernfs subsystem: removing [ 370.359981][ T7558] kernfs netdevsim0: removing [ 370.360007][ T7558] kernfs uevent: removing [ 370.360038][ T7558] kernfs rx_packets: removing [ 370.360062][ T7558] kernfs tx_packets: removing [ 370.360087][ T7558] kernfs rx_bytes: removing [ 370.360111][ T7558] kernfs tx_bytes: removing [ 370.360135][ T7558] kernfs rx_errors: removing [ 370.360159][ T7558] kernfs tx_errors: removing [ 370.360183][ T7558] kernfs rx_dropped: removing [ 370.360207][ T7558] kernfs tx_dropped: removing [ 370.360235][ T7558] kernfs multicast: removing [ 370.360269][ T7558] kernfs collisions: removing [ 370.360293][ T7558] kernfs rx_length_errors: removing [ 370.360317][ T7558] kernfs rx_over_errors: removing [ 370.360342][ T7558] kernfs rx_crc_errors: removing [ 370.360366][ T7558] kernfs rx_frame_errors: removing [ 370.360391][ T7558] kernfs rx_fifo_errors: removing [ 370.360415][ T7558] kernfs rx_missed_errors: removing [ 370.360439][ T7558] kernfs tx_aborted_errors: removing [ 370.360464][ T7558] kernfs tx_carrier_errors: removing [ 370.360488][ T7558] kernfs tx_fifo_errors: removing [ 370.360512][ T7558] kernfs tx_heartbeat_errors: removing [ 370.360537][ T7558] kernfs tx_window_errors: removing [ 370.360561][ T7558] kernfs rx_compressed: removing [ 370.360585][ T7558] kernfs tx_compressed: removing [ 370.360614][ T7558] kernfs rx_nohandler: removing [ 370.360638][ T7558] kernfs statistics: removing [ 370.360663][ T7558] kernfs phys_port_name: removing [ 370.360688][ T7558] kernfs phys_switch_id: removing [ 370.360713][ T7558] kernfs netdev_group: removing [ 370.543369][ T7558] kernfs type: removing [ 370.543398][ T7558] kernfs dev_id: removing [ 370.543423][ T7558] kernfs dev_port: removing [ 370.543448][ T7558] kernfs iflink: removing [ 370.543473][ T7558] kernfs ifindex: removing [ 370.543497][ T7558] kernfs name_assign_type: removing [ 370.543521][ T7558] kernfs addr_assign_type: removing [ 370.543546][ T7558] kernfs addr_len: removing [ 370.543570][ T7558] kernfs link_mode: removing [ 370.543594][ T7558] kernfs address: removing [ 370.543618][ T7558] kernfs broadcast: removing [ 370.543643][ T7558] kernfs speed: removing [ 370.543666][ T7558] kernfs duplex: removing [ 370.543690][ T7558] kernfs dormant: removing [ 370.543713][ T7558] kernfs testing: removing [ 370.543738][ T7558] kernfs operstate: removing [ 370.543762][ T7558] kernfs carrier_changes: removing [ 370.543786][ T7558] kernfs ifalias: removing [ 370.543810][ T7558] kernfs carrier: removing [ 370.543834][ T7558] kernfs mtu: removing [ 370.543857][ T7558] kernfs flags: removing [ 370.543881][ T7558] kernfs tx_queue_len: removing [ 370.543910][ T7558] kernfs gro_flush_timeout: removing [ 370.543935][ T7558] kernfs napi_defer_hard_irqs: removing [ 370.543959][ T7558] kernfs proto_down: removing [ 370.543984][ T7558] kernfs carrier_up_count: removing [ 370.544008][ T7558] kernfs carrier_down_count: removing [ 370.544032][ T7558] kernfs threaded: removing [ 370.544065][ T7558] PM: Removing info for No Bus:netdevsim0 [ 370.544083][ T7558] kobject: 'netdevsim0' (ffff8880250947c0): kobject_uevent_env [ 370.544097][ T7558] kobject: 'netdevsim0' (ffff8880250947c0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 370.544115][ T7558] kernfs netdevsim0: removing [ 370.544144][ T7558] kernfs net: removing [ 370.544177][ T7558] kobject: 'net' (ffff88823bef2fa0): kobject_cleanup, parent 0000000000000000 [ 370.544193][ T7558] kobject: 'net' (ffff88823bef2fa0): calling ktype release [ 370.544224][ T7558] kobject: 'net': free name [ 370.766039][ T6692] syz_tun: bond_netdev_event received NETDEV_GOING_DOWN [ 370.766070][ T6692] net syz_tun: siw: event 10 [ 370.840401][ T7653] ffff888025818000 name hci4 bus 0 [ 370.840669][ T6692] In tnode_resize ffff888056616320 inflate_threshold=50 threshold=25 [ 370.840709][ T6692] In tnode_resize ffff888056072820 inflate_threshold=50 threshold=25 [ 370.840765][ T6692] In tnode_resize ffff88807f283c20 inflate_threshold=50 threshold=25 [ 370.840780][ T6692] In tnode_resize ffff888074586120 inflate_threshold=50 threshold=25 [ 370.840797][ T6692] In tnode_resize ffff888055bdc8a0 inflate_threshold=50 threshold=25 [ 370.840812][ T6692] In tnode_resize ffff88801fbc1ea0 inflate_threshold=50 threshold=25 [ 370.840828][ T6692] In tnode_resize ffff88801fbc1ca0 inflate_threshold=50 threshold=25 [ 370.840843][ T6692] trie_flush found=1 [ 370.840869][ T6692] In tnode_resize ffff888056616320 inflate_threshold=50 threshold=25 [ 370.840893][ T6692] In tnode_resize ffff888056072820 inflate_threshold=50 threshold=25 [ 370.840914][ T6692] In tnode_resize ffff88807f283c20 inflate_threshold=50 threshold=25 [ 370.840929][ T6692] In tnode_resize ffff888074586120 inflate_threshold=50 threshold=25 [ 370.840946][ T6692] In tnode_resize ffff888055bdc8a0 inflate_threshold=50 threshold=25 [ 370.840961][ T6692] In tnode_resize ffff88801fbc1ea0 inflate_threshold=50 threshold=25 [ 370.840976][ T6692] In tnode_resize ffff88801fbc1ca0 inflate_threshold=50 threshold=25 [ 370.840992][ T6692] trie_flush found=1 [ 370.841008][ T6692] syz_tun: bond_netdev_event received NETDEV_DOWN [ 370.841028][ T6692] net syz_tun: siw: event 2 [ 370.841090][ T6692] IPv6: walker ffffc9000592f1a0 adjusted by delroute [ 370.841181][ T6692] IPv6: walker ffffc9000592f1a0 adjusted by delroute [ 370.841311][ T6692] IPv6: walker ffffc9000592f1a0 adjusted by delroute [ 370.841323][ T6692] IPv6: fixing tree: plen=128 iter=0 [ 370.841335][ T6692] IPv6: W ffffc9000592f1a0 adjusted by delnode 1, s=4/2 [ 370.841351][ T6692] IPv6: fixing tree: plen=120 iter=1 [ 370.841363][ T6692] IPv6: W ffffc9000592f1a0 adjusted by delnode 2, s=2 [ 370.841376][ T6692] IPv6: fixing tree: plen=97 iter=2 [ 370.841491][ T6692] IPv6: walker ffffc9000592f1a0 adjusted by delroute [ 370.841503][ T6692] IPv6: fixing tree: plen=128 iter=0 [ 370.841515][ T6692] IPv6: W ffffc9000592f1a0 adjusted by delnode 1, s=4/2