last executing test programs: 21.333642283s ago: executing program 3 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/bluetooth/6lowpan_enable\x00', 0x2, 0x10c) write(r0, &(0x7f0000000140)='1', 0x1) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a0023004000000500"], 0x17) clock_gettime(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='connect 11:aa:aa:aa:aa:aa 1\n', 0x1c) 19.323136315s ago: executing program 3 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x2, 0x2, 0x158}, 0x0, 0x0, 0x0) 18.857558976s ago: executing program 3 (id=195): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 18.681699111s ago: executing program 3 (id=199): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000900)={[{@noinit_itable}, {@jqfmt_vfsv1}]}, 0xc1, 0x7eb, &(0x7f0000001fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x121) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write$cgroup_int(r1, &(0x7f00000000c0)=0x8, 0x12) connect$pppoe(r1, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='\"', 0x1, 0xe7c) 17.253584757s ago: executing program 3 (id=205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x2, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000900), 0x56) sendmsg$kcm(r8, &(0x7f0000000940)={&(0x7f0000000980)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000a40)="27030200000214000e00002f74214b34586d47423cddcb0000008000008276000000000000006e81a357601e3876", 0x2e}], 0x1}, 0x5) 16.691555302s ago: executing program 3 (id=207): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 16.306932012s ago: executing program 32 (id=207): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 5.593659867s ago: executing program 2 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)="306663353a313232373a6169399b", 0xe) 5.530523729s ago: executing program 2 (id=259): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000004c0)={0xc, @multicast1, 0x4e21, 0x1, 'sed\x00', 0xb, 0x5, 0x38}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000500)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000580)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000680)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) write(r6, &(0x7f0000000a80)="aa", 0x1) symlinkat(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') openat(0xffffffffffffff9c, &(0x7f0000000b40)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4400000010004b0426bd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="40180000042c0400240012800b0001006272696467650000140002800800040001000000050017f400000000"], 0x44}}, 0x24) getpid() 4.258329491s ago: executing program 2 (id=261): timer_create(0x3, 0x0, &(0x7f0000000640)=0x0) timer_settime(r0, 0x0, &(0x7f0000000700)={{}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000740)={{}, {0x77359400}}, &(0x7f0000000780)) 4.072586546s ago: executing program 1 (id=263): get_mempolicy(0x0, &(0x7f0000000540), 0xbe2e, &(0x7f0000ff9000/0x1000)=nil, 0x4) 3.981667498s ago: executing program 2 (id=264): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x100) setxattr$trusted_overlay_opaque(&(0x7f0000000dc0)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', &(0x7f0000000e00), &(0x7f0000000e40), 0x2, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000cc0)="1a00000002000000", 0x8) socket$kcm(0x2b, 0x1, 0x0) io_uring_setup(0x664b, &(0x7f0000001240)) syz_mount_image$ext4(&(0x7f00000012c0)='ext4\x00', &(0x7f0000001300)='./file1\x00', 0x0, &(0x7f0000001340), 0x1, 0x50f, &(0x7f0000001380)="$eJzs3UFsI1cZAODfTpw42bRJSw8FQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZELN849ceeC4MalHJAWiEAbJA5GM54k3qy9sTaJncbfJ41m3ryx//9tMu+tX2y/AEbWzYjYj4iJiPggImaz87lsi3fbW3Ldo4MHK4cHD1Zy0Wq9/89cWp+ci47HJG5kz1mMiB9+N+InuSfjNnb3Npar1cp2Vp5v1rbmG7t7d9Zry2uVtcpmuby0uLTw9t23yhfW1ldrE9nRVz774/43f5akNZOd6WzHRWo3vXAcJzEeEd+/jGBDMJa1Z2LYifBM8hHxYkS8lt7/szGW/jQBgOus1ZqN1mxnGQC47vLpHFguX8rmAmYiny+V2nN4L8V0vlpvNG/fr+9srrbnyuaikL+/Xq0sZHOFc1HIJeXF9PikXD5VvhsRL0TELyan0nJppV5dHeZ/fABghN04Nf7/Z7I9/gMA11xx2AkAAANn/AeA0WP8B4DRY/wHgNHTHv+nhp0GADBAXv8DwOgx/gPASPnBe+8lW+sw+/7r1Q93dzbqH95ZrTQ2SrWdldJKfXurtFavr6Xf2VM76/mq9frW4pux89Hct7YazfnG7t69Wn1ns3kv/V7ve5VCetX+AFoGAPTywquf/iWXjMjvTKVbdKzlUBhqZsBlyw87AWBoxoadADA0VvuC0XWO1/imB+DzrsvavN0Uu31AqNVqtS4hJWAwbn3R/D+Mqo75f+8ChhFj/h9Gl/l/GF2tVq7fNf+j3wsBgKvNHD/Q420AL2b732Z/HPjx6ukrPrnMrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO1r/t5StBT4T+XypFPFcRMxFIXd/vVpZiIjnI+LPk4XJpLw45JwBgPPK/z2Xrf91a/aNmceqXrlxfDgRET/91fu//Gi52dz+U8RE7l+TR+ebn2Tny4PPHgA429E4ne47Xsg/OniwcrQNMp+H34mIYjv+4cFEHB7HH4/xdF+MQkRM/zuXldtyHXMX57H/cUS83K39uZhJ50DaK5+ejp/Efm6g8fOPxc+nde198m/xhQvIBUbNp0n/8263+y8fN9N95/1/slp6Me2hzi/r/5KnWjlM+8CT+Ef931iP/u9mvzHe/MP32kdT2YNPVnt++HHEl8YjjmIfdvQ/R/FzPeK/0Wf8v375ldd61bV+HXErusfvjDXfrG3NN3b37qzXltcqa5XNcnlpcWnh7btvlefTOer53qPBP965/XyvuqT90z3iF89o/9f6bP9v/vfBj776lPjfeL1b/Hy89JT4yW/i1/uMvzz9+2KvuiT+ao/2n/Xzv91n/M/+tvfEsuEAwPA0dvc2lqvVyvaIHvzuaqQxYgfj8YwPT35lh518r4Nv93/xy+eKNRHdq37+evuePlXVaj1TrF49xkXMugFXwfFNHxH/HXYyAAAAAAAAAAAAAABAV4P4dNSw2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD19f8AAAD//+7Mzkc=") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000019c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001a40), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001a80), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r5, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) keyctl$instantiate(0xc, 0x0, &(0x7f00000011c0)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'l\xf0F\xfeo\xb3\x04\x19\xb7\xbd\x8a\xfcP\r\xb6\x1d\xc7v\x06]\xe9\xdd\xa2W\x8b\fFsj\xc9\xd8\x1f\"\xd8\x1e]\xcc\xff]\x12\x85\xc8\xa8\x84K\xb3\x1e\x19\f.@\xc7\x19Iqv;C\xcf=tN\xb3\xf9\xbb@\x8f\x9d\xfc\x9e\x19\xdeq\xa90\x03&'}, 0xffffff67, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000d00)=ANY=[@ANYBLOB="030000000100030003"], 0xa) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000d40)={0x3, [0x7, 0xd, 0x7]}, &(0x7f0000000d80)=0xa) sendmmsg$unix(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000c40)=@file={0x1, './file1/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}, 0xa4}], 0x2, 0x20000080) 3.9055721s ago: executing program 1 (id=266): mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)="306663353a313232373a6169399b", 0xe) 2.869381257s ago: executing program 2 (id=269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x3}, {0x41, 0x10000, 0x5, 0x4, 0x3, 0x108000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0x7fffffff, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffffa00, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x6, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x8, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x1, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x707c0912, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x0, 0xb}, {0x4, 0x4b, 0x0, 0x3a, 0x7f, 0x7ff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0xcce, 0x6, 0x6, 0x8, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0x3}, {0x1, 0x2d73, 0x400, 0xe408, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x102, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ee, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0xfe, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x9, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0x2}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001540)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000001580), 0x56) sendmsg$kcm(r6, &(0x7f00000015c0)={&(0x7f0000001600)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000001680)=[{&(0x7f00000016c0)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.805754338s ago: executing program 1 (id=270): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100), 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracefs\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000200)='./tracefs\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs/uprobe_events\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracefs/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='1\n', 0x2) 2.639854183s ago: executing program 1 (id=271): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x6, 0x16, 0x10000002, 0x4, 0xffefffff, 0x2}) ioctl$VT_OPENQRY(r0, 0x5600, 0x0) 2.455721677s ago: executing program 1 (id=272): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020600) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='\x00', 0x89901) move_mount(r0, &(0x7f0000000640)='.\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x0) 2.409617878s ago: executing program 0 (id=273): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000001280)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r0, 0x5, 0x14, 0x0, &(0x7f0000001340)="259a53f271a76d2608004c6588a8e85e88642f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.34415151s ago: executing program 1 (id=274): socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='dctcp', 0x12d) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f00000005c0)="89", 0x1, 0x6044800, 0x0, 0x0) 2.190495834s ago: executing program 0 (id=275): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000006c0)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000780)={0xa, 0x4002, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) 2.069528407s ago: executing program 0 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x100) setxattr$trusted_overlay_opaque(&(0x7f0000000dc0)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', &(0x7f0000000e00), &(0x7f0000000e40), 0x2, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000cc0)="1a00000002000000", 0x8) socket$kcm(0x2b, 0x1, 0x0) io_uring_setup(0x664b, &(0x7f0000001240)) syz_mount_image$ext4(&(0x7f00000012c0)='ext4\x00', &(0x7f0000001300)='./file1\x00', 0x0, &(0x7f0000001340), 0x1, 0x50f, &(0x7f0000001380)="$eJzs3UFsI1cZAODfTpw42bRJSw8FQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZELN849ceeC4MalHJAWiEAbJA5GM54k3qy9sTaJncbfJ41m3ryx//9tMu+tX2y/AEbWzYjYj4iJiPggImaz87lsi3fbW3Ldo4MHK4cHD1Zy0Wq9/89cWp+ci47HJG5kz1mMiB9+N+InuSfjNnb3Npar1cp2Vp5v1rbmG7t7d9Zry2uVtcpmuby0uLTw9t23yhfW1ldrE9nRVz774/43f5akNZOd6WzHRWo3vXAcJzEeEd+/jGBDMJa1Z2LYifBM8hHxYkS8lt7/szGW/jQBgOus1ZqN1mxnGQC47vLpHFguX8rmAmYiny+V2nN4L8V0vlpvNG/fr+9srrbnyuaikL+/Xq0sZHOFc1HIJeXF9PikXD5VvhsRL0TELyan0nJppV5dHeZ/fABghN04Nf7/Z7I9/gMA11xx2AkAAANn/AeA0WP8B4DRY/wHgNHTHv+nhp0GADBAXv8DwOgx/gPASPnBe+8lW+sw+/7r1Q93dzbqH95ZrTQ2SrWdldJKfXurtFavr6Xf2VM76/mq9frW4pux89Hct7YazfnG7t69Wn1ns3kv/V7ve5VCetX+AFoGAPTywquf/iWXjMjvTKVbdKzlUBhqZsBlyw87AWBoxoadADA0VvuC0XWO1/imB+DzrsvavN0Uu31AqNVqtS4hJWAwbn3R/D+Mqo75f+8ChhFj/h9Gl/l/GF2tVq7fNf+j3wsBgKvNHD/Q420AL2b732Z/HPjx6ukrPrnMrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO1r/t5StBT4T+XypFPFcRMxFIXd/vVpZiIjnI+LPk4XJpLw45JwBgPPK/z2Xrf91a/aNmceqXrlxfDgRET/91fu//Gi52dz+U8RE7l+TR+ebn2Tny4PPHgA429E4ne47Xsg/OniwcrQNMp+H34mIYjv+4cFEHB7HH4/xdF+MQkRM/zuXldtyHXMX57H/cUS83K39uZhJ50DaK5+ejp/Efm6g8fOPxc+nde198m/xhQvIBUbNp0n/8263+y8fN9N95/1/slp6Me2hzi/r/5KnWjlM+8CT+Ef931iP/u9mvzHe/MP32kdT2YNPVnt++HHEl8YjjmIfdvQ/R/FzPeK/0Wf8v375ldd61bV+HXErusfvjDXfrG3NN3b37qzXltcqa5XNcnlpcWnh7btvlefTOer53qPBP965/XyvuqT90z3iF89o/9f6bP9v/vfBj776lPjfeL1b/Hy89JT4yW/i1/uMvzz9+2KvuiT+ao/2n/Xzv91n/M/+tvfEsuEAwPA0dvc2lqvVyvaIHvzuaqQxYgfj8YwPT35lh518r4Nv93/xy+eKNRHdq37+evuePlXVaj1TrF49xkXMugFXwfFNHxH/HXYyAAAAAAAAAAAAAABAV4P4dNSw2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD19f8AAAD//+7Mzkc=") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000019c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001a40), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001a80), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r5, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) keyctl$instantiate(0xc, 0x0, &(0x7f00000011c0)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'l\xf0F\xfeo\xb3\x04\x19\xb7\xbd\x8a\xfcP\r\xb6\x1d\xc7v\x06]\xe9\xdd\xa2W\x8b\fFsj\xc9\xd8\x1f\"\xd8\x1e]\xcc\xff]\x12\x85\xc8\xa8\x84K\xb3\x1e\x19\f.@\xc7\x19Iqv;C\xcf=tN\xb3\xf9\xbb@\x8f\x9d\xfc\x9e\x19\xdeq\xa90\x03&'}, 0xffffff67, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000d00)=ANY=[@ANYBLOB="030000000100030003"], 0xa) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000d40)={0x3, [0x7, 0xd, 0x7]}, &(0x7f0000000d80)=0xa) sendmmsg$unix(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000c40)=@file={0x1, './file1/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}, 0xa4}], 0x2, 0x20000080) 1.105476482s ago: executing program 0 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)="306663353a313232373a6169399b", 0xe) 992.393995ms ago: executing program 0 (id=278): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100), 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracefs\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000200)='./tracefs\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)='p:p1 ./file0:0', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracefs/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='1\n', 0x2) 857.435788ms ago: executing program 0 (id=279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x46f0}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000005c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000640)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000680)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 2 (id=280): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/bluetooth/6lowpan_enable\x00', 0x2, 0x10c) write(r0, &(0x7f0000000140)='1', 0x1) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a002300400000050005"], 0x17) clock_gettime(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts. [ 74.938390][ T5758] cgroup: Unknown subsys name 'net' [ 75.073207][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.434945][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.996403][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.999634][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.012628][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.020469][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.025219][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.029231][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.035458][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.042575][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.050755][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.056306][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.064081][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.071489][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.077668][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.084191][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.098446][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.099083][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.113428][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.114982][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.129734][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.137659][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.139173][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.155022][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.164319][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.172248][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.529327][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 78.650064][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 78.688096][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 78.798402][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.806058][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.813813][ T5772] bridge_slave_0: entered allmulticast mode [ 78.821773][ T5772] bridge_slave_0: entered promiscuous mode [ 78.862573][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.870304][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.877800][ T5772] bridge_slave_1: entered allmulticast mode [ 78.884489][ T5772] bridge_slave_1: entered promiscuous mode [ 78.905768][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.914753][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.922398][ T5771] bridge_slave_0: entered allmulticast mode [ 78.930038][ T5771] bridge_slave_0: entered promiscuous mode [ 78.956474][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 78.973366][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.980547][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.989881][ T5771] bridge_slave_1: entered allmulticast mode [ 78.997104][ T5771] bridge_slave_1: entered promiscuous mode [ 79.011557][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.018800][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.025933][ T5773] bridge_slave_0: entered allmulticast mode [ 79.033305][ T5773] bridge_slave_0: entered promiscuous mode [ 79.043037][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.058183][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.103113][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.110342][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.118387][ T5773] bridge_slave_1: entered allmulticast mode [ 79.125617][ T5773] bridge_slave_1: entered promiscuous mode [ 79.155407][ T5772] team0: Port device team_slave_0 added [ 79.163845][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.184394][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.200643][ T5772] team0: Port device team_slave_1 added [ 79.208752][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.230748][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.278617][ T5771] team0: Port device team_slave_0 added [ 79.299166][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.306148][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.332254][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.354586][ T5771] team0: Port device team_slave_1 added [ 79.380853][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.387904][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.414324][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.430109][ T5773] team0: Port device team_slave_0 added [ 79.448278][ T5773] team0: Port device team_slave_1 added [ 79.454744][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.461795][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.490380][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.518408][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.525561][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.533445][ T5770] bridge_slave_0: entered allmulticast mode [ 79.541009][ T5770] bridge_slave_0: entered promiscuous mode [ 79.568382][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.575353][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.601631][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.630905][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.638318][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.645465][ T5770] bridge_slave_1: entered allmulticast mode [ 79.657524][ T5770] bridge_slave_1: entered promiscuous mode [ 79.688104][ T5771] hsr_slave_0: entered promiscuous mode [ 79.694311][ T5771] hsr_slave_1: entered promiscuous mode [ 79.719480][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.726456][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.752996][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.775407][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.782441][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.808417][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.861206][ T5772] hsr_slave_0: entered promiscuous mode [ 79.867720][ T5772] hsr_slave_1: entered promiscuous mode [ 79.873729][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.881738][ T5772] Cannot create hsr debugfs directory [ 79.905151][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.917736][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.002462][ T5770] team0: Port device team_slave_0 added [ 80.023724][ T5773] hsr_slave_0: entered promiscuous mode [ 80.030654][ T5773] hsr_slave_1: entered promiscuous mode [ 80.037680][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.045414][ T5773] Cannot create hsr debugfs directory [ 80.084662][ T5770] team0: Port device team_slave_1 added [ 80.127620][ T51] Bluetooth: hci3: command tx timeout [ 80.170015][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.177211][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.203413][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.214298][ T51] Bluetooth: hci2: command tx timeout [ 80.214315][ T5774] Bluetooth: hci0: command tx timeout [ 80.219954][ T5774] Bluetooth: hci1: command tx timeout [ 80.255345][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.262750][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.289468][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.361798][ T5770] hsr_slave_0: entered promiscuous mode [ 80.368582][ T5770] hsr_slave_1: entered promiscuous mode [ 80.374661][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.382324][ T5770] Cannot create hsr debugfs directory [ 80.477132][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.508774][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.520207][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.529840][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.651956][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.661249][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.677159][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.693727][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.801376][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.814583][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.835306][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.848191][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.946194][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.966586][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.988651][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.998974][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.016561][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.069991][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.122086][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.132089][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.149231][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.156453][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.181908][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.189090][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.217995][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.225166][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.242334][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.274965][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.282093][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.314404][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.359594][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.373467][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.380605][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.410677][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.417807][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.451000][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.507848][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.515053][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.540285][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.547482][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.805658][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.943127][ T5771] veth0_vlan: entered promiscuous mode [ 81.973335][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.989117][ T5771] veth1_vlan: entered promiscuous mode [ 82.111593][ T5771] veth0_macvtap: entered promiscuous mode [ 82.131557][ T5772] veth0_vlan: entered promiscuous mode [ 82.159794][ T5771] veth1_macvtap: entered promiscuous mode [ 82.188831][ T5772] veth1_vlan: entered promiscuous mode [ 82.211775][ T51] Bluetooth: hci3: command tx timeout [ 82.238692][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.258880][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.287333][ T51] Bluetooth: hci1: command tx timeout [ 82.292975][ T51] Bluetooth: hci0: command tx timeout [ 82.300068][ T51] Bluetooth: hci2: command tx timeout [ 82.321164][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.334800][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.348006][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.358342][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.369621][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.379273][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.405247][ T5772] veth0_macvtap: entered promiscuous mode [ 82.472096][ T5772] veth1_macvtap: entered promiscuous mode [ 82.652401][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.672606][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.687759][ T5770] veth0_vlan: entered promiscuous mode [ 82.723323][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.742813][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.762730][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.792648][ T5773] veth0_vlan: entered promiscuous mode [ 82.801908][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.813204][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.824580][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.837613][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.846304][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.856889][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.865608][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.881743][ T5770] veth1_vlan: entered promiscuous mode [ 82.895592][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.905580][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.933934][ T5773] veth1_vlan: entered promiscuous mode [ 82.953776][ T5770] veth0_macvtap: entered promiscuous mode [ 82.990631][ T5770] veth1_macvtap: entered promiscuous mode [ 83.055450][ T5773] veth0_macvtap: entered promiscuous mode [ 83.101401][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.112690][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.124475][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.141253][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.144028][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.153184][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.177374][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.193698][ T5773] veth1_macvtap: entered promiscuous mode [ 83.211154][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.228134][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.238410][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.250144][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.261833][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.330893][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.331982][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.346649][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.349911][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.364254][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.379164][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.392366][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.403975][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.415986][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.434319][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.445372][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.461285][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.473590][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.535797][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.547209][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.558569][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.570535][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.580769][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.591708][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.603511][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.632242][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.641328][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.654664][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.663797][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.827776][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.835773][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.855050][ T5845] syz.1.7[5845]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.883017][ T5845] loop1: detected capacity change from 0 to 512 [ 84.296813][ T5774] Bluetooth: hci3: command tx timeout [ 84.326240][ T5845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.379593][ T5774] Bluetooth: hci2: command tx timeout [ 84.385353][ T5774] Bluetooth: hci0: command tx timeout [ 84.391064][ T5774] Bluetooth: hci1: command tx timeout [ 84.438711][ T5845] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.570574][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.695667][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.754226][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.770348][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.090477][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.154461][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.383580][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.429691][ T5862] loop2: detected capacity change from 0 to 512 [ 85.532884][ T5862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.546345][ T5862] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.750830][ T5868] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1'. [ 85.934075][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 86.419872][ T51] Bluetooth: hci3: command tx timeout [ 86.447576][ T51] Bluetooth: hci1: command tx timeout [ 86.453098][ T5774] Bluetooth: hci0: command tx timeout [ 86.458843][ T5087] Bluetooth: hci2: command tx timeout [ 86.494514][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.649605][ T5883] loop1: detected capacity change from 0 to 256 [ 86.684313][ T5883] ======================================================= [ 86.684313][ T5883] WARNING: The mand mount option has been deprecated and [ 86.684313][ T5883] and is ignored by this kernel. Remove the mand [ 86.684313][ T5883] option from the mount to silence this warning. [ 86.684313][ T5883] ======================================================= [ 86.774629][ T5887] loop3: detected capacity change from 0 to 512 [ 86.845655][ T5883] FAT-fs (loop1): Directory bread(block 64) failed [ 86.859241][ T23] cfg80211: failed to load regulatory.db [ 86.873692][ T5883] FAT-fs (loop1): Directory bread(block 65) failed [ 86.901032][ T5887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.903856][ T5883] FAT-fs (loop1): Directory bread(block 66) failed [ 86.929820][ T5883] FAT-fs (loop1): Directory bread(block 67) failed [ 86.936497][ T5883] FAT-fs (loop1): Directory bread(block 68) failed [ 86.973027][ T5887] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.985002][ T5883] FAT-fs (loop1): Directory bread(block 69) failed [ 87.022417][ T5883] FAT-fs (loop1): Directory bread(block 70) failed [ 87.037473][ T5883] FAT-fs (loop1): Directory bread(block 71) failed [ 87.097239][ T5883] FAT-fs (loop1): Directory bread(block 72) failed [ 87.117345][ T5883] FAT-fs (loop1): Directory bread(block 73) failed [ 87.275531][ T5883] syz.1.16: attempt to access beyond end of device [ 87.275531][ T5883] loop1: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 87.409942][ T5883] syz.1.16: attempt to access beyond end of device [ 87.409942][ T5883] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 87.660964][ T28] audit: type=1800 audit(1791905859.188:2): pid=5883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.16" name="file1" dev="loop1" ino=1048620 res=0 errno=0 [ 87.895347][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.035661][ T5906] loop0: detected capacity change from 0 to 512 [ 88.147930][ T5906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.192633][ T5906] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.424368][ T5923] loop1: detected capacity change from 0 to 512 [ 88.545168][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 88.775823][ T5923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.969888][ T5923] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.180872][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.291369][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 89.472540][ T5935] loop3: detected capacity change from 0 to 512 [ 89.552389][ T5935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.615834][ T5935] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.694345][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.551324][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.645681][ T5952] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 90.781304][ T5959] loop2: detected capacity change from 0 to 512 [ 90.839718][ T5959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.904110][ T5959] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.027968][ T5967] loop3: detected capacity change from 0 to 512 [ 91.074395][ T5967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.092374][ T5967] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.336681][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'. [ 92.117530][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 92.755678][ T5959] sched: RT throttling activated [ 93.323855][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.335828][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.489835][ T28] audit: type=1326 audit(1791905865.028:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b0b9e2d9 code=0x7ffc0000 [ 93.538423][ T28] audit: type=1326 audit(1791905865.028:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b0b9e2d9 code=0x7ffc0000 [ 93.563208][ T28] audit: type=1326 audit(1791905865.068:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b0b9e2d9 code=0x7ffc0000 [ 93.588709][ T28] audit: type=1326 audit(1791905865.068:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b0b9e2d9 code=0x7ffc0000 [ 93.642890][ T5991] FAULT_INJECTION: forcing a failure. [ 93.642890][ T5991] name failslab, interval 1, probability 0, space 0, times 1 [ 93.667833][ T28] audit: type=1326 audit(1791905865.108:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fb1b0b9e2d9 code=0x7ffc0000 [ 93.692584][ T5991] CPU: 0 PID: 5991 Comm: syz.2.52 Not tainted syzkaller #0 [ 93.699833][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.700843][ T28] audit: type=1326 audit(1791905865.108:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b0b9e2d9 code=0x7ffc0000 [ 93.709910][ T5991] Call Trace: [ 93.709963][ T5991] [ 93.709973][ T5991] dump_stack_lvl+0x18c/0x250 [ 93.744487][ T5991] ? show_regs_print_info+0x20/0x20 [ 93.749694][ T5991] ? load_image+0x420/0x420 [ 93.754204][ T5991] ? __might_sleep+0xe0/0xe0 [ 93.758811][ T5991] ? __lock_acquire+0x7eb0/0x7eb0 [ 93.763840][ T5991] should_fail_ex+0x394/0x4c0 [ 93.768536][ T5991] should_failslab+0x9/0x20 [ 93.773046][ T5991] slab_pre_alloc_hook+0x59/0x300 [ 93.778068][ T5991] ? percpu_ref_put+0x12/0x100 [ 93.782831][ T5991] kmem_cache_alloc+0x5a/0x2c0 [ 93.787599][ T5991] ? fib_insert_alias+0x300/0x1280 [ 93.792711][ T5991] fib_insert_alias+0x300/0x1280 [ 93.797650][ T5991] ? lockdep_rtnl_is_held+0x26/0x30 [ 93.802852][ T5991] ? fib_find_node+0x294/0x2f0 [ 93.807619][ T5991] fib_trie_unmerge+0x30c/0xcf0 [ 93.812478][ T5991] fib_unmerge+0xc0/0x350 [ 93.816817][ T5991] fib4_rule_configure+0x118/0xaf0 [ 93.821935][ T5991] ? __nla_parse+0x40/0x50 [ 93.826349][ T5991] fib_nl_newrule+0x135e/0x1e40 [ 93.831208][ T5991] ? verify_lock_unused+0x140/0x140 [ 93.836416][ T5991] ? fib_rules_seq_read+0xf0/0xf0 [ 93.841446][ T5991] ? rcu_is_watching+0x15/0xb0 [ 93.846312][ T5991] ? trace_contention_end+0x39/0xe0 [ 93.851532][ T5991] ? fib_rules_seq_read+0xf0/0xf0 [ 93.856556][ T5991] rtnetlink_rcv_msg+0x843/0xf90 [ 93.861506][ T5991] ? rtnetlink_rcv_msg+0x220/0xf90 [ 93.866629][ T5991] ? rtnetlink_bind+0x80/0x80 [ 93.871323][ T5991] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 93.877308][ T5991] ? lock_chain_count+0x20/0x20 [ 93.882163][ T5991] ? __local_bh_enable_ip+0x13a/0x1c0 [ 93.887545][ T5991] ? lockdep_hardirqs_on+0x98/0x150 [ 93.892767][ T5991] ? __local_bh_enable_ip+0x13a/0x1c0 [ 93.898147][ T5991] ? _local_bh_enable+0xa0/0xa0 [ 93.903005][ T5991] ? __dev_queue_xmit+0x272/0x37e0 [ 93.908121][ T5991] ? __dev_queue_xmit+0x1329/0x37e0 [ 93.913326][ T5991] ? __dev_queue_xmit+0x272/0x37e0 [ 93.918456][ T5991] ? ref_tracker_free+0x686/0x830 [ 93.923490][ T5991] netlink_rcv_skb+0x235/0x4c0 [ 93.928261][ T5991] ? rtnetlink_bind+0x80/0x80 [ 93.932944][ T5991] ? netlink_ack+0x1160/0x1160 [ 93.937715][ T5991] ? __lock_acquire+0x7eb0/0x7eb0 [ 93.942746][ T5991] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.947953][ T5991] netlink_unicast+0x7b1/0x930 [ 93.952727][ T5991] netlink_sendmsg+0x8d0/0xbf0 [ 93.957501][ T5991] ? netlink_getsockopt+0x590/0x590 [ 93.962711][ T5991] ? apparmor_socket_sendmsg+0x8e/0x330 [ 93.968270][ T5991] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 93.973562][ T5991] ? security_socket_sendmsg+0x80/0xa0 [ 93.979023][ T5991] ? netlink_getsockopt+0x590/0x590 [ 93.984228][ T5991] ____sys_sendmsg+0x61b/0x980 [ 93.989005][ T5991] ? __asan_memset+0x22/0x40 [ 93.993597][ T5991] ? __sys_sendmsg_sock+0x30/0x30 [ 93.998622][ T5991] ? __import_iovec+0x5f2/0x850 [ 94.003484][ T5991] ? import_iovec+0x73/0xa0 [ 94.007996][ T5991] ___sys_sendmsg+0x2a6/0x360 [ 94.012678][ T5991] ? __sys_sendmsg+0x2b0/0x2b0 [ 94.017480][ T5991] __se_sys_sendmsg+0x1d0/0x2c0 [ 94.022339][ T5991] ? __x64_sys_sendmsg+0x80/0x80 [ 94.027303][ T5991] ? lockdep_hardirqs_on+0x98/0x150 [ 94.032528][ T5991] do_syscall_64+0x55/0xb0 [ 94.036942][ T5991] ? clear_bhb_loop+0x40/0x90 [ 94.041615][ T5991] ? clear_bhb_loop+0x40/0x90 [ 94.046294][ T5991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.052210][ T5991] RIP: 0033:0x7f2aadf9e2d9 [ 94.056631][ T5991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.076245][ T5991] RSP: 002b:00007f2aaedd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.084664][ T5991] RAX: ffffffffffffffda RBX: 00007f2aae225fa0 RCX: 00007f2aadf9e2d9 [ 94.092636][ T5991] RDX: 8c755b2713612558 RSI: 00002000000001c0 RDI: 0000000000000004 [ 94.100610][ T5991] RBP: 00007f2aae035888 R08: 0000000000000000 R09: 0000000000000000 [ 94.108582][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.116550][ T5991] R13: 00007f2aae226038 R14: 00007f2aae225fa0 R15: 00007ffdd39b5b68 [ 94.124533][ T5991] [ 94.153557][ T28] audit: type=1326 audit(1791905865.108:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b0b9e2d9 code=0x7ffc0000 [ 94.192000][ T5994] loop1: detected capacity change from 0 to 1024 [ 94.216808][ T28] audit: type=1326 audit(1791905865.128:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb1b0b9e2d9 code=0x7ffc0000 [ 94.217815][ T5994] EXT4-fs: Ignoring removed orlov option [ 94.289722][ T5994] ext4: Unknown parameter 'noacl' [ 94.290242][ T28] audit: type=1326 audit(1791905865.128:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb1b0b9e2d9 code=0x7ffc0000 [ 94.373277][ T28] audit: type=1326 audit(1791905865.908:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.0.55" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff284f9e2d9 code=0x0 [ 94.435564][ T6002] loop2: detected capacity change from 0 to 512 [ 94.488900][ T6002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.502767][ T6002] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.777521][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 95.386289][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.636555][ T6031] loop3: detected capacity change from 0 to 1024 [ 95.650074][ T6031] EXT4-fs: Ignoring removed orlov option [ 95.655947][ T6031] ext4: Unknown parameter 'noacl' [ 95.946181][ T6041] loop1: detected capacity change from 0 to 512 [ 96.033776][ T6041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.048695][ T6041] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.411190][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 96.988107][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.002670][ T6060] loop2: detected capacity change from 0 to 512 [ 97.067007][ T6060] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.78: iget: bad i_size value: 38620345925642 [ 97.106161][ T6060] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.78: couldn't read orphan inode 15 (err -117) [ 97.153742][ T6060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.219420][ T6067] loop0: detected capacity change from 0 to 256 [ 97.267187][ T6067] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.277596][ T6070] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.78: bg 0: block 5: invalid block bitmap [ 97.282217][ T6070] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 468 with error 28 [ 97.305327][ T6070] EXT4-fs (loop2): This should not happen!! Data will be lost [ 97.305327][ T6070] [ 97.315748][ T6070] EXT4-fs (loop2): Total free blocks count 0 [ 97.322061][ T6070] EXT4-fs (loop2): Free/Dirty block details [ 97.349439][ T6070] EXT4-fs (loop2): free_blocks=0 [ 97.355091][ T6070] EXT4-fs (loop2): dirty_blocks=468 [ 97.366174][ T6070] EXT4-fs (loop2): Block reservation details [ 97.375515][ T6070] EXT4-fs (loop2): i_reserved_data_blocks=468 [ 97.494334][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.736248][ T6085] loop0: detected capacity change from 0 to 512 [ 97.769301][ T6085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.798075][ T6085] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.866022][ T6091] loop2: detected capacity change from 0 to 2048 [ 97.949475][ T5760] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.975695][ T6091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.199239][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 100.252647][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.347439][ T5760] usb 4-1: Using ep0 maxpacket: 8 [ 100.365256][ T5760] usb 4-1: unable to get BOS descriptor or descriptor too short [ 100.392563][ T5760] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.418689][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.429058][ T5760] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 100.460079][ T5760] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.513547][ T5760] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=33.40 [ 100.544750][ T5760] usb 4-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127 [ 100.564574][ T6107] loop1: detected capacity change from 0 to 512 [ 100.576896][ T5760] usb 4-1: Product: syz [ 100.581123][ T5760] usb 4-1: Manufacturer: syz [ 100.604810][ T5760] usb 4-1: SerialNumber: syz [ 100.623672][ T6107] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.652390][ T6107] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.669483][ T5760] usb 4-1: can't set config #1, error -71 [ 100.685311][ T6107] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.96: invalid indirect mapped block 83886080 (level 1) [ 100.700684][ T5760] usb 4-1: USB disconnect, device number 2 [ 100.753522][ T6107] EXT4-fs (loop1): Remounting filesystem read-only [ 100.771462][ T6107] EXT4-fs (loop1): 1 orphan inode deleted [ 100.777774][ T6107] EXT4-fs (loop1): 1 truncate cleaned up [ 100.786158][ T6107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.878653][ T6116] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 100.894413][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.021298][ T6122] loop3: detected capacity change from 0 to 2048 [ 101.098448][ T6126] loop1: detected capacity change from 0 to 512 [ 101.108109][ T6122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.109877][ T6128] netlink: 14 bytes leftover after parsing attributes in process `syz.2.104'. [ 101.151112][ T6132] loop0: detected capacity change from 0 to 512 [ 101.202001][ T6126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.223716][ T6128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.236560][ T6126] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.469467][ T6128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.488637][ T6132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.490700][ T6128] bond0 (unregistering): Released all slaves [ 102.229134][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 102.757284][ T6047] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 102.767058][ T6132] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.653776][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.672130][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.865732][ T6144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.960747][ T6144] bridge_slave_0: left allmulticast mode [ 103.966876][ T6144] bridge_slave_0: left promiscuous mode [ 103.978365][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.001756][ T6144] bridge_slave_1: left allmulticast mode [ 104.020945][ T6144] bridge_slave_1: left promiscuous mode [ 104.028070][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.051343][ T6144] bond0: (slave bond_slave_0): Releasing backup interface [ 104.081860][ T6144] bond0: (slave bond_slave_1): Releasing backup interface [ 104.195605][ T6161] capability: warning: `syz.1.112' uses 32-bit capabilities (legacy support in use) [ 104.197720][ T6144] team0: Port device team_slave_0 removed [ 104.232877][ T6144] team0: Port device team_slave_1 removed [ 104.241401][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.252825][ T6144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.280125][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.306735][ T6144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.324300][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 104.414247][ T6144] syz.3.106 (6144) used greatest stack depth: 20552 bytes left [ 104.507525][ T6171] loop3: detected capacity change from 0 to 2048 [ 104.534035][ T6171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.555236][ T6169] loop1: detected capacity change from 0 to 512 [ 104.610234][ T6169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.681224][ T6169] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.696846][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 105.757750][ T6174] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 106.234089][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.246556][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.382881][ T6184] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.607012][ T51] Bluetooth: Wrong link type (-71) [ 106.629327][ T6192] loop1: detected capacity change from 0 to 512 [ 106.655928][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.668233][ T6192] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 106.677673][ T6192] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 106.697092][ T6192] EXT4-fs (loop1): orphan cleanup on readonly fs [ 106.710629][ T6192] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #13: comm syz.1.122: iget: bad i_size value: 12154761577498 [ 106.726336][ T6192] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.122: couldn't read orphan inode 13 (err -117) [ 106.740458][ T6192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 106.766285][ T6192] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.122: dx entry: limit 65535 != root limit 120 [ 106.780591][ T6192] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.122: Corrupt directory, running e2fsck is recommended [ 106.833944][ T6195] loop0: detected capacity change from 0 to 512 [ 106.845494][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.899691][ T6195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.927604][ T6195] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.123855][ T6203] loop1: detected capacity change from 0 to 512 [ 107.133985][ T6155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.542560][ T6203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.756297][ T6209] loop3: detected capacity change from 0 to 2048 [ 107.773842][ T6203] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.970588][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.080111][ T6209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.179412][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 108.708076][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.307409][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.165533][ T51] Bluetooth: Wrong link type (-71) [ 112.173172][ T5760] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.203672][ T5760] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.142390][ T6263] fido_id[6263]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 113.379980][ T51] Bluetooth: Wrong link type (-71) [ 114.181596][ T6282] gtp0: entered promiscuous mode [ 114.217997][ T6282] gtp0: entered allmulticast mode [ 114.500638][ T6291] capability: warning: `syz.3.153' uses deprecated v2 capabilities in a way that may be insecure [ 115.020537][ T6291] loop3: detected capacity change from 0 to 512 [ 115.308362][ T6291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.346886][ T6291] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.405395][ T51] Bluetooth: Wrong link type (-71) [ 115.491619][ T6291] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 115.514735][ T6291] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 28 [ 115.538909][ T6291] EXT4-fs (loop3): This should not happen!! Data will be lost [ 115.538909][ T6291] [ 115.552032][ T6291] EXT4-fs (loop3): Total free blocks count 0 [ 115.560523][ T6291] EXT4-fs (loop3): Free/Dirty block details [ 115.596871][ T6291] EXT4-fs (loop3): free_blocks=65281 [ 115.616189][ T6291] EXT4-fs (loop3): dirty_blocks=5 [ 115.623009][ T6291] EXT4-fs (loop3): Block reservation details [ 115.640908][ T6291] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 115.658016][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 115.658029][ T28] audit: type=1800 audit(1791905887.198:14): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.153" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 116.372544][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.424640][ T6326] loop2: detected capacity change from 0 to 4096 [ 117.489085][ T6326] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.524875][ T6326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.815305][ T51] Bluetooth: Wrong link type (-71) [ 117.827215][ T6326] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 117.937637][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 118.665174][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.733476][ T6345] kernel read not supported for file /file0 (pid: 6345 comm: syz.3.174) [ 118.777909][ T28] audit: type=1800 audit(1791905890.318:15): pid=6345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.174" name="file0" dev="mqueue" ino=9318 res=0 errno=0 [ 118.782504][ T6347] loop2: detected capacity change from 0 to 512 [ 118.892430][ T6347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.954873][ T6347] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.060314][ T6347] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 119.086142][ T6347] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 28 [ 119.096181][ T6357] loop3: detected capacity change from 0 to 512 [ 119.098693][ T6347] EXT4-fs (loop2): This should not happen!! Data will be lost [ 119.098693][ T6347] [ 119.114463][ T6347] EXT4-fs (loop2): Total free blocks count 0 [ 119.120559][ T6347] EXT4-fs (loop2): Free/Dirty block details [ 119.127131][ T6347] EXT4-fs (loop2): free_blocks=65281 [ 119.134579][ T6347] EXT4-fs (loop2): dirty_blocks=5 [ 119.141811][ T6347] EXT4-fs (loop2): Block reservation details [ 119.149067][ T6347] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 119.517120][ T6357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.753171][ T6357] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.943610][ T6356] event trace: Could not enable event p1 [ 120.018401][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.924854][ T6374] Zero length message leads to an empty skb [ 121.127982][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.183523][ T5846] kernel write not supported for file bpf-prog (pid: 5846 comm: kworker/0:5) [ 121.547227][ T51] Bluetooth: Wrong link type (-71) [ 121.668303][ T6388] kernel read not supported for file /file0 (pid: 6388 comm: syz.1.185) [ 121.684975][ T28] audit: type=1800 audit(1791905893.218:16): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.185" name="file0" dev="mqueue" ino=9380 res=0 errno=0 [ 123.134785][ T6392] FAULT_INJECTION: forcing a failure. [ 123.134785][ T6392] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 123.196880][ T6392] CPU: 0 PID: 6392 Comm: syz.3.190 Not tainted syzkaller #0 [ 123.204242][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.214327][ T6392] Call Trace: [ 123.217634][ T6392] [ 123.220594][ T6392] dump_stack_lvl+0x18c/0x250 [ 123.225323][ T6392] ? show_regs_print_info+0x20/0x20 [ 123.230551][ T6392] ? load_image+0x420/0x420 [ 123.235101][ T6392] ? __lock_acquire+0x7eb0/0x7eb0 [ 123.240174][ T6392] should_fail_ex+0x394/0x4c0 [ 123.244899][ T6392] _copy_to_user+0x2f/0xa0 [ 123.249357][ T6392] io_uring_create+0xb30/0x1330 [ 123.254250][ T6392] __se_sys_io_uring_setup+0x29f/0x2b0 [ 123.259754][ T6392] ? __x64_sys_io_uring_setup+0x60/0x60 [ 123.265349][ T6392] ? lockdep_hardirqs_on+0x98/0x150 [ 123.270588][ T6392] do_syscall_64+0x55/0xb0 [ 123.275037][ T6392] ? clear_bhb_loop+0x40/0x90 [ 123.279752][ T6392] ? clear_bhb_loop+0x40/0x90 [ 123.284461][ T6392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.290394][ T6392] RIP: 0033:0x7fd0caf9e2d9 [ 123.294854][ T6392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.314491][ T6392] RSP: 002b:00007fd0cbd9efb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 123.322912][ T6392] RAX: ffffffffffffffda RBX: 0000200000000a80 RCX: 00007fd0caf9e2d9 [ 123.330884][ T6392] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 000000000000001d [ 123.338855][ T6392] RBP: 00007fd0cb035888 R08: 0000000000000000 R09: 0000000000000000 [ 123.346821][ T6392] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 123.354787][ T6392] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd20fb7c88 [ 123.362778][ T6392] [ 123.674281][ T51] Bluetooth: Wrong link type (-71) [ 123.698235][ T6413] event trace: Could not enable event p1 [ 123.841871][ T6419] loop3: detected capacity change from 0 to 2048 [ 123.891505][ T6419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 123.964971][ T6428] kernel read not supported for file /file0 (pid: 6428 comm: syz.2.197) [ 124.028832][ T28] audit: type=1800 audit(1791905895.518:17): pid=6428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.197" name="file0" dev="mqueue" ino=9440 res=0 errno=0 [ 124.543351][ T6426] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.574745][ T6419] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 124.596906][ T6419] EXT4-fs (loop3): This should not happen!! Data will be lost [ 124.596906][ T6419] [ 124.637622][ T6419] EXT4-fs (loop3): Total free blocks count 0 [ 124.653698][ T6419] EXT4-fs (loop3): Free/Dirty block details [ 124.667089][ T6419] EXT4-fs (loop3): free_blocks=2415919104 [ 124.712562][ T6419] EXT4-fs (loop3): dirty_blocks=16 [ 124.726962][ T6419] EXT4-fs (loop3): Block reservation details [ 124.733141][ T6419] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 124.783480][ T6436] FAULT_INJECTION: forcing a failure. [ 124.783480][ T6436] name failslab, interval 1, probability 0, space 0, times 0 [ 124.797907][ T6436] CPU: 0 PID: 6436 Comm: syz.0.203 Not tainted syzkaller #0 [ 124.805235][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.815313][ T6436] Call Trace: [ 124.818616][ T6436] [ 124.821558][ T6436] dump_stack_lvl+0x18c/0x250 [ 124.826266][ T6436] ? show_regs_print_info+0x20/0x20 [ 124.831486][ T6436] ? load_image+0x420/0x420 [ 124.836020][ T6436] ? __might_sleep+0xe0/0xe0 [ 124.840633][ T6436] ? __lock_acquire+0x7eb0/0x7eb0 [ 124.845684][ T6436] ? trace_contention_end+0x39/0xe0 [ 124.850913][ T6436] should_fail_ex+0x394/0x4c0 [ 124.855626][ T6436] should_failslab+0x9/0x20 [ 124.860161][ T6436] slab_pre_alloc_hook+0x59/0x300 [ 124.865202][ T6436] ? mutex_lock_nested+0x20/0x20 [ 124.870164][ T6436] ? io_uring_alloc_task_context+0x18e/0x5c0 [ 124.876169][ T6436] __kmem_cache_alloc_node+0x53/0x250 [ 124.881574][ T6436] ? io_uring_alloc_task_context+0x18e/0x5c0 [ 124.887591][ T6436] kmalloc_trace+0x2a/0xe0 [ 124.892035][ T6436] io_uring_alloc_task_context+0x18e/0x5c0 [ 124.897863][ T6436] ? cpu_online+0x60/0x60 [ 124.902223][ T6436] ? io_uring_show_cred+0x4d0/0x4d0 [ 124.907463][ T6436] io_sq_offload_create+0xc93/0x11e0 [ 124.912785][ T6436] ? io_kill_timeouts+0x220/0x220 [ 124.917841][ T6436] ? io_allocate_scq_urings+0x3bd/0x620 [ 124.923419][ T6436] io_uring_create+0x730/0x1330 [ 124.928305][ T6436] __se_sys_io_uring_setup+0x29f/0x2b0 [ 124.932883][ T5773] EXT4-fs error (device loop3): ext4_lookup:1864: inode #2: comm syz-executor: deleted inode referenced: 11 [ 124.933773][ T6436] ? __x64_sys_io_uring_setup+0x60/0x60 [ 124.951091][ T6436] ? lockdep_hardirqs_on+0x98/0x150 [ 124.956333][ T6436] do_syscall_64+0x55/0xb0 [ 124.960772][ T6436] ? clear_bhb_loop+0x40/0x90 [ 124.965466][ T6436] ? clear_bhb_loop+0x40/0x90 [ 124.970167][ T6436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.976073][ T6436] RIP: 0033:0x7ff284f9e2d9 [ 124.980489][ T6436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.000099][ T6436] RSP: 002b:00007ff2831f5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 125.008518][ T6436] RAX: ffffffffffffffda RBX: 0000200000000a80 RCX: 00007ff284f9e2d9 [ 125.016489][ T6436] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 000000000000001d [ 125.024456][ T6436] RBP: 00007ff285035888 R08: 0000000000000000 R09: 0000000000000000 [ 125.032425][ T6436] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 125.040391][ T6436] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe569ae2d8 [ 125.048375][ T6436] [ 125.075083][ T5773] EXT4-fs error (device loop3): ext4_lookup:1864: inode #2: comm syz-executor: deleted inode referenced: 11 [ 125.277776][ T6439] hub 5-0:1.0: USB hub found [ 125.301616][ T6439] hub 5-0:1.0: 1 port detected [ 125.566134][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 125.704417][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.795015][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.910047][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.019258][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.303641][ T51] Bluetooth: Wrong link type (-71) [ 126.309115][ T51] Bluetooth: hci2: link tx timeout [ 126.314633][ T51] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 127.638350][ T6468] kernel read not supported for file /file0 (pid: 6468 comm: syz.0.212) [ 127.655488][ T28] audit: type=1800 audit(1791905899.188:18): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.212" name="file0" dev="mqueue" ino=9610 res=0 errno=0 [ 127.893859][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.905203][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.936757][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.959338][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.979790][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 127.988897][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.370597][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 129.214851][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 129.231571][ T6500] netlink: 60 bytes leftover after parsing attributes in process `syz.2.220'. [ 129.472151][ T6467] chnl_net:caif_netlink_parms(): no params data found [ 129.976521][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 130.285495][ T51] Bluetooth: hci3: command tx timeout [ 131.025710][ T6467] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.076867][ T6467] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.118605][ T6467] bridge_slave_0: entered allmulticast mode [ 131.125937][ T6467] bridge_slave_0: entered promiscuous mode [ 131.184042][ T6467] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.206760][ T6467] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.214059][ T6467] bridge_slave_1: entered allmulticast mode [ 131.265053][ T6467] bridge_slave_1: entered promiscuous mode [ 131.472503][ T49] hsr_slave_0: left promiscuous mode [ 131.520094][ T49] hsr_slave_1: left promiscuous mode [ 131.586045][ T49] veth1_macvtap: left promiscuous mode [ 131.598833][ T49] veth0_macvtap: left promiscuous mode [ 131.611268][ T49] veth1_vlan: left promiscuous mode [ 131.618328][ T49] veth0_vlan: left promiscuous mode [ 131.984833][ T6564] xt_CT: No such helper "syz0" [ 132.368229][ T51] Bluetooth: hci3: command tx timeout [ 132.937301][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.943968][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.991737][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 134.050994][ T49] bond0 (unregistering): Released all slaves [ 134.101933][ T6467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.168339][ T6467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.302876][ T6467] team0: Port device team_slave_0 added [ 134.345417][ T6467] team0: Port device team_slave_1 added [ 134.403274][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.415929][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.448309][ T51] Bluetooth: hci3: command tx timeout [ 134.458013][ T6467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.497314][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.504322][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.585039][ T6467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.749258][ T6467] hsr_slave_0: entered promiscuous mode [ 134.782103][ T6467] hsr_slave_1: entered promiscuous mode [ 134.804096][ T6467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.834182][ T6467] Cannot create hsr debugfs directory [ 136.338803][ T6649] FAULT_INJECTION: forcing a failure. [ 136.338803][ T6649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.352182][ T6649] CPU: 0 PID: 6649 Comm: syz.2.256 Not tainted syzkaller #0 [ 136.359508][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.369575][ T6649] Call Trace: [ 136.372852][ T6649] [ 136.375775][ T6649] dump_stack_lvl+0x18c/0x250 [ 136.380467][ T6649] ? show_regs_print_info+0x20/0x20 [ 136.385682][ T6649] ? load_image+0x420/0x420 [ 136.390182][ T6649] ? __might_fault+0xaa/0x120 [ 136.394848][ T6649] ? __lock_acquire+0x7eb0/0x7eb0 [ 136.399877][ T6649] ? __virt_addr_valid+0x10c/0x380 [ 136.405008][ T6649] should_fail_ex+0x394/0x4c0 [ 136.409688][ T6649] _copy_to_user+0x2f/0xa0 [ 136.414108][ T6649] bpf_verifier_vlog+0x2f1/0x840 [ 136.419063][ T6649] __btf_verifier_log+0xe3/0x140 [ 136.424020][ T6649] ? btf_check_sec_info+0x350/0x350 [ 136.429218][ T6649] ? __lock_acquire+0x7eb0/0x7eb0 [ 136.434235][ T6649] ? __virt_addr_valid+0x10c/0x380 [ 136.439358][ T6649] ? btf_parse_hdr+0x1f0/0x700 [ 136.444149][ T6649] btf_parse_hdr+0x3dd/0x700 [ 136.448741][ T6649] btf_new_fd+0x397/0x9e0 [ 136.453067][ T6649] ? bpf_btf_show_fdinfo+0x80/0x80 [ 136.458193][ T6649] ? capable+0x88/0xe0 [ 136.462281][ T6649] __sys_bpf+0x670/0x890 [ 136.466520][ T6649] ? bpf_link_show_fdinfo+0x560/0x560 [ 136.471897][ T6649] ? lock_chain_count+0x20/0x20 [ 136.476759][ T6649] __x64_sys_bpf+0x7c/0x90 [ 136.481186][ T6649] do_syscall_64+0x55/0xb0 [ 136.485613][ T6649] ? clear_bhb_loop+0x40/0x90 [ 136.490279][ T6649] ? clear_bhb_loop+0x40/0x90 [ 136.494945][ T6649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.500837][ T6649] RIP: 0033:0x7f2aadf9e2d9 [ 136.505253][ T6649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.524864][ T6649] RSP: 002b:00007f2aaedd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.533276][ T6649] RAX: ffffffffffffffda RBX: 00007f2aae225fa0 RCX: 00007f2aadf9e2d9 [ 136.541244][ T6649] RDX: 0000000000000028 RSI: 0000200000000340 RDI: 0000000000000012 [ 136.549215][ T6649] RBP: 00007f2aae035888 R08: 0000000000000000 R09: 0000000000000000 [ 136.557191][ T6649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.565174][ T6649] R13: 00007f2aae226038 R14: 00007f2aae225fa0 R15: 00007ffdd39b5b68 [ 136.573157][ T6649] [ 136.576875][ T51] Bluetooth: hci3: command tx timeout [ 136.880309][ T6656] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 137.032696][ T28] audit: type=1800 audit(1791905908.558:19): pid=6658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.259" name="c_chmask" dev="configfs" ino=9821 res=0 errno=0 [ 137.085505][ T28] audit: type=1800 audit(1791905908.558:20): pid=6658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.259" name="UDC" dev="configfs" ino=9822 res=0 errno=0 [ 138.233764][ T6467] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 138.250488][ T6467] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 138.278424][ T6467] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 138.338823][ T6467] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 138.574717][ T6467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.676021][ T6467] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.724830][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.732046][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.342914][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.350136][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.360051][ T6724] syzkaller0: entered promiscuous mode [ 142.365601][ T6724] syzkaller0: entered allmulticast mode [ 142.395512][ T969] ------------[ cut here ]------------ [ 142.401572][ T969] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 142.410737][ T969] WARNING: CPU: 1 PID: 969 at fs/sysfs/group.c:284 sysfs_remove_group+0x17b/0x290 [ 142.420109][ T969] Modules linked in: [ 142.424017][ T969] CPU: 1 PID: 969 Comm: kworker/1:2 Not tainted syzkaller #0 [ 142.431603][ T969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.441722][ T969] Workqueue: events delete_netdev [ 142.447055][ T969] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 142.452878][ T969] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f7 19 c9 ff 49 8b 17 48 c7 c7 c0 ce da 8a 48 89 de e8 55 f7 39 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9f 38 70 ff [ 142.472737][ T969] RSP: 0018:ffffc90004227840 EFLAGS: 00010246 [ 142.478920][ T969] RAX: ed553ac14679ec00 RBX: ffffffff8bc5d2a0 RCX: ffff8880233cda00 [ 142.487074][ T969] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 142.495064][ T969] RBP: 0000000000000057 R08: ffffc90004227447 R09: 1ffff92000844e88 [ 142.503105][ T969] R10: dffffc0000000000 R11: fffff52000844e89 R12: 1ffffffff178b950 [ 142.511538][ T969] R13: dffffc0000000000 R14: ffff888059c40e88 R15: ffff88802e965820 [ 142.519661][ T969] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 142.529968][ T969] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.536570][ T969] CR2: 00007fd3b35fef2c CR3: 000000002f812000 CR4: 00000000003506e0 [ 142.545114][ T969] Call Trace: [ 142.548490][ T969] [ 142.551441][ T969] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 142.557584][ T969] netdev_queue_update_kobjects+0x3e1/0x480 [ 142.563499][ T969] netdev_unregister_kobject+0x108/0x250 [ 142.569194][ T969] unregister_netdevice_many_notify+0x1449/0x1910 [ 142.575647][ T969] ? __rwlock_init+0x150/0x150 [ 142.580473][ T969] ? unregister_netdevice_many+0x20/0x20 [ 142.586119][ T969] ? do_raw_spin_unlock+0x121/0x230 [ 142.591379][ T969] ? __mutex_lock+0x923/0xc80 [ 142.596070][ T969] ? __mutex_lock+0x4d2/0xc80 [ 142.600821][ T969] unregister_netdevice_queue+0x2e9/0x330 [ 142.606558][ T969] ? list_netdevice+0x730/0x730 [ 142.611993][ T969] ? read_lock_is_recursive+0x20/0x20 [ 142.617836][ T969] lowpan_unregister_netdev+0x1c/0x30 [ 142.623311][ T969] unregister_dev+0x70/0x1a0 [ 142.627965][ T969] ? process_scheduled_works+0x975/0x1600 [ 142.633711][ T969] process_scheduled_works+0xa60/0x1600 [ 142.639357][ T969] ? worker_attach_to_pool+0x370/0x370 [ 142.644842][ T969] ? assign_work+0x3cc/0x5d0 [ 142.649505][ T969] worker_thread+0xa5e/0xfe0 [ 142.654151][ T969] kthread+0x2fa/0x390 [ 142.658294][ T969] ? pr_cont_work+0x550/0x550 [ 142.662983][ T969] ? kthread_blkcg+0xd0/0xd0 [ 142.667622][ T969] ret_from_fork+0x48/0x80 [ 142.672064][ T969] ? kthread_blkcg+0xd0/0xd0 [ 142.676705][ T969] ret_from_fork_asm+0x11/0x20 [ 142.681494][ T969] [ 142.684504][ T969] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 142.691765][ T969] CPU: 1 PID: 969 Comm: kworker/1:2 Not tainted syzkaller #0 [ 142.699118][ T969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.709159][ T969] Workqueue: events delete_netdev [ 142.714182][ T969] Call Trace: [ 142.717474][ T969] [ 142.720409][ T969] dump_stack_lvl+0x18c/0x250 [ 142.725075][ T969] ? show_regs_print_info+0x20/0x20 [ 142.730263][ T969] ? load_image+0x420/0x420 [ 142.734763][ T969] panic+0x2ca/0x720 [ 142.738667][ T969] ? bpf_jit_dump+0xd0/0xd0 [ 142.743195][ T969] ? ret_from_fork_asm+0x11/0x20 [ 142.748143][ T969] __warn+0x2e0/0x470 [ 142.752117][ T969] ? sysfs_remove_group+0x17b/0x290 [ 142.757305][ T969] ? sysfs_remove_group+0x17b/0x290 [ 142.762486][ T969] report_bug+0x2be/0x4f0 [ 142.766806][ T969] ? sysfs_remove_group+0x17b/0x290 [ 142.772000][ T969] ? sysfs_remove_group+0x17b/0x290 [ 142.777184][ T969] ? sysfs_remove_group+0x17d/0x290 [ 142.782367][ T969] handle_bug+0xcf/0x120 [ 142.786609][ T969] exc_invalid_op+0x1a/0x50 [ 142.791140][ T969] asm_exc_invalid_op+0x1a/0x20 [ 142.795986][ T969] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 142.801786][ T969] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f7 19 c9 ff 49 8b 17 48 c7 c7 c0 ce da 8a 48 89 de e8 55 f7 39 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9f 38 70 ff [ 142.821387][ T969] RSP: 0018:ffffc90004227840 EFLAGS: 00010246 [ 142.827454][ T969] RAX: ed553ac14679ec00 RBX: ffffffff8bc5d2a0 RCX: ffff8880233cda00 [ 142.835414][ T969] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 142.843379][ T969] RBP: 0000000000000057 R08: ffffc90004227447 R09: 1ffff92000844e88 [ 142.851341][ T969] R10: dffffc0000000000 R11: fffff52000844e89 R12: 1ffffffff178b950 [ 142.859305][ T969] R13: dffffc0000000000 R14: ffff888059c40e88 R15: ffff88802e965820 [ 142.867284][ T969] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 142.873352][ T969] netdev_queue_update_kobjects+0x3e1/0x480 [ 142.879246][ T969] netdev_unregister_kobject+0x108/0x250 [ 142.884914][ T969] unregister_netdevice_many_notify+0x1449/0x1910 [ 142.891354][ T969] ? __rwlock_init+0x150/0x150 [ 142.896143][ T969] ? unregister_netdevice_many+0x20/0x20 [ 142.901784][ T969] ? do_raw_spin_unlock+0x121/0x230 [ 142.906991][ T969] ? __mutex_lock+0x923/0xc80 [ 142.911667][ T969] ? __mutex_lock+0x4d2/0xc80 [ 142.916344][ T969] unregister_netdevice_queue+0x2e9/0x330 [ 142.922063][ T969] ? list_netdevice+0x730/0x730 [ 142.926921][ T969] ? read_lock_is_recursive+0x20/0x20 [ 142.932297][ T969] lowpan_unregister_netdev+0x1c/0x30 [ 142.937667][ T969] unregister_dev+0x70/0x1a0 [ 142.942252][ T969] ? process_scheduled_works+0x975/0x1600 [ 142.947966][ T969] process_scheduled_works+0xa60/0x1600 [ 142.953526][ T969] ? worker_attach_to_pool+0x370/0x370 [ 142.958984][ T969] ? assign_work+0x3cc/0x5d0 [ 142.963577][ T969] worker_thread+0xa5e/0xfe0 [ 142.968179][ T969] kthread+0x2fa/0x390 [ 142.972239][ T969] ? pr_cont_work+0x550/0x550 [ 142.976915][ T969] ? kthread_blkcg+0xd0/0xd0 [ 142.981499][ T969] ret_from_fork+0x48/0x80 [ 142.985916][ T969] ? kthread_blkcg+0xd0/0xd0 [ 142.990499][ T969] ret_from_fork_asm+0x11/0x20 [ 142.995270][ T969] [ 142.998443][ T969] Kernel Offset: disabled [ 143.002842][ T969] Rebooting in 86400 seconds..