last executing test programs: 3m22.520232429s ago: executing program 5 (id=164): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) remap_file_pages(&(0x7f000014a000/0x3000)=nil, 0x3000, 0x0, 0x6, 0xf0ffffff) 3m21.273608996s ago: executing program 5 (id=169): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0xc1b, 0x4) 3m20.386015043s ago: executing program 5 (id=172): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_create1(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) 3m18.312264749s ago: executing program 5 (id=178): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x7) ioctl$TIOCSTI(r1, 0x5412, 0x0) 3m15.509837572s ago: executing program 5 (id=192): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="0c03573afa64193f5c0c67f7ed0f08ef102566dce7ec5f66a648", 0x1a}], 0x1}}], 0x1, 0x40080) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2501"], 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) 3m15.036825721s ago: executing program 5 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x4000000129a83, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) 2m59.51081114s ago: executing program 32 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x4000000129a83, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) 22.532559739s ago: executing program 0 (id=728): mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x800) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f80004000000000000001000000000000000000080008000100000000ff", 0x24) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{}]}) 21.145144445s ago: executing program 0 (id=730): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 17.656219621s ago: executing program 0 (id=733): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@bridge_getlink={0x20, 0x12, 0x1, 0x70bd69, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x20, 0x2000}}, 0x20}}, 0x4004) 17.527829201s ago: executing program 1 (id=734): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\x90\xe1\xf4=\xb5#\xc6\xa5:\xcd\x8e\x02tm\xcb\xbc\x9b\xdc\x85\xfby\x1d\x8f3\xe8W\x1b\xf9\x16\x9c\xc3W\x01\x93\xb1\xb4b\xd9\x7f\xd4.5+\x17\x8c\x1a\xcf\xc5\x90\x03\x94\xd0\xf0\xa9\f\x84\x17', 0xfffffffffffffffd) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000100)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@audit}]}, 0x1, 0x4c4, &(0x7f0000000d40)="$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") capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x1, 0x7}) r3 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) unshare(0x20000600) mount$fuseblk(&(0x7f0000000340), 0x0, &(0x7f0000000440), 0x488, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGMRU(r4, 0x80047453, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x0, [0x0, 0x20000080, 0x200000b0, 0x200000e0], 0x0, 0x0, 0x0}, 0x108) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 17.072334823s ago: executing program 0 (id=737): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) 15.505893164s ago: executing program 0 (id=739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) 13.933449838s ago: executing program 1 (id=745): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f}) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r5, 0x400455c8, 0x1) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0) shmctl$IPC_RMID(r0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 12.525937764s ago: executing program 0 (id=748): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x206}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 10.316154739s ago: executing program 33 (id=748): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x206}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 10.300975243s ago: executing program 6 (id=753): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x24, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a40)={0x50, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x6]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 9.005173538s ago: executing program 4 (id=755): syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x801, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) userfaultfd(0x80000) close(0xffffffffffffffff) fsopen(&(0x7f0000000280)='ocfs2_dlmfs\x00', 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noauto_da_alloc}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@noauto_da_alloc}, {@nouid32}]}, 0x7, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48842, 0x8e) fallocate(r5, 0x0, 0x6, 0x10001) close_range(r4, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000080), 0x4) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) 9.003726218s ago: executing program 6 (id=756): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 8.638474313s ago: executing program 2 (id=759): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 8.305979012s ago: executing program 4 (id=762): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0001054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094013000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a50254cca9e00360db798262f3d40fad95667e006dcdff11a49b1328d9dd74977efd563951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6", 0xcb}], 0x1}, 0x4008850) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x65d, 0x0, &(0x7f0000000340)="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", 0x7, 0x0, 0x4}, 0x50) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000195c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028"], 0x0, 0x4a, 0x0, 0x1}, 0x28) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$setperm(0x5, r1, 0x2008) keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0) 8.045713172s ago: executing program 2 (id=763): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0xd}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff000000", 0x46}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x80) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="84000000030701010000000000000000000000070c000640000000000000000ff4ff0440000000af666fb90073797a300000000008000540000000013c000780080002400000000003fd01400000000d0800014000000002080001400000000908000240000007b408000140000007ff08000240000000040c0003400000"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYRES32], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) recvmmsg(r0, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 8.04339726s ago: executing program 1 (id=764): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x814000, &(0x7f0000000000), 0x1, 0x76a, &(0x7f0000000f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 8.008214611s ago: executing program 6 (id=766): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r8, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 7.528735196s ago: executing program 3 (id=767): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xf8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 7.510371025s ago: executing program 4 (id=768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a3000000000090001007379"], 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002"], 0x74}}, 0x0) 7.102589633s ago: executing program 3 (id=769): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x71bd0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x3c, 0x2, 0x0, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x10}, @mcast1, [0x0, 0x0, 0xff], [0x0, 0x0, 0xffffff00], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xd4b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r5 = gettid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000016000f1000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 6.95694932s ago: executing program 1 (id=770): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRES8], 0x1, 0x1ef, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, 0x0, 0x0) 6.758046693s ago: executing program 4 (id=771): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x88) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x800) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x7c65, 0xa334, 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f80004000000000000001000000000000000000080008000100000000ff", 0x24) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{}]}) 6.757224468s ago: executing program 6 (id=772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) 6.708210106s ago: executing program 2 (id=773): syz_open_dev$dri(0x0, 0x7, 0x44000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() socket$inet(0x2, 0x2, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x22, &(0x7f0000000040)={0x0, 0x1445e, 0x1d410, 0x0, 0x8a}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0xffffffff80000019, 0x0, 0x0) 5.421962517s ago: executing program 2 (id=774): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x68) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r1, r2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16], 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 5.367935368s ago: executing program 4 (id=775): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd86) read$FUSE(r5, &(0x7f00000059c0)={0x2020}, 0x2020) socket$inet6(0xa, 0x2, 0x0) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) 5.062147918s ago: executing program 2 (id=776): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f}) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r5, 0x400455c8, 0x1) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0) shmctl$IPC_RMID(r0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 3.831969037s ago: executing program 3 (id=777): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1001a}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x5}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.675517079s ago: executing program 6 (id=778): r0 = socket$kcm(0x10, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab0700040005"], 0xfe33) 3.297959977s ago: executing program 6 (id=779): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 3.29225514s ago: executing program 1 (id=780): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) remap_file_pages(&(0x7f000014a000/0x3000)=nil, 0x3000, 0x0, 0x6, 0xf0ffffff) 3.267540372s ago: executing program 3 (id=781): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff000f00000000000002000200000000000000000100000000000003000000080000000604002ac2c3d70009000000000000000400000000000000fc0000000000008003000000000000000000000000000000ffffff7f580000b6f708e0081900040000000090000009000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b"], 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.869736826s ago: executing program 3 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\x90\xe1\xf4=\xb5#\xc6\xa5:\xcd\x8e\x02tm\xcb\xbc\x9b\xdc\x85\xfby\x1d\x8f3\xe8W\x1b\xf9\x16\x9c\xc3W\x01\x93\xb1\xb4b\xd9\x7f\xd4.5+\x17\x8c\x1a\xcf\xc5\x90\x03\x94\xd0\xf0\xa9\f\x84\x17', 0xfffffffffffffffd) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000100)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@audit}]}, 0x1, 0x4c4, &(0x7f0000000d40)="$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") r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) unshare(0x20000600) mount$fuseblk(&(0x7f0000000340), 0x0, &(0x7f0000000440), 0x488, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGMRU(r5, 0x80047453, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x0, [0x0, 0x20000080, 0x200000b0, 0x200000e0], 0x0, 0x0, 0x0}, 0x108) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 2.562346521s ago: executing program 4 (id=783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a3000000000090001007379"], 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002"], 0x74}}, 0x0) 1.573630465s ago: executing program 1 (id=784): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0xd}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x4048004) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff000000", 0x46}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x80) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="84000000030701010000000000000000000000070c000640000000000000000ff4ff0440000000af666fb90073797a300000000008000540000000013c000780080002400000000003fd01400000000d0800014000000002080001400000000908000240000007b408000140000007ff08000240000000040c0003400000"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYRES32], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) recvmmsg(r0, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 1.411110252s ago: executing program 2 (id=785): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4120c3, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x1aa) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)={'#! ', './bus'}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$full(0xffffffffffffff9c, 0x0, 0x80100, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) 0s ago: executing program 3 (id=786): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x88) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x800) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x7c65, 0xa334, 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f80004000000000000001000000000000000000080008000100000000ff", 0x24) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{}]}) kernel console output (not intermixed with test programs): 3: command tx timeout [ 92.841226][ T5625] Bluetooth: hci1: command tx timeout [ 92.847106][ T5630] Bluetooth: hci4: command tx timeout [ 92.847164][ T5641] Bluetooth: hci5: command tx timeout [ 93.286153][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.294557][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.302393][ T5634] bridge_slave_0: entered allmulticast mode [ 93.311786][ T5634] bridge_slave_0: entered promiscuous mode [ 93.360692][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.368884][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.376418][ T5634] bridge_slave_1: entered allmulticast mode [ 93.384057][ T5634] bridge_slave_1: entered promiscuous mode [ 93.526455][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.575720][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.582989][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.590184][ T5635] bridge_slave_0: entered allmulticast mode [ 93.597973][ T5635] bridge_slave_0: entered promiscuous mode [ 93.608465][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.686138][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.693382][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.700558][ T5635] bridge_slave_1: entered allmulticast mode [ 93.708391][ T5635] bridge_slave_1: entered promiscuous mode [ 93.733222][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.740420][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.747823][ T5627] bridge_slave_0: entered allmulticast mode [ 93.755533][ T5627] bridge_slave_0: entered promiscuous mode [ 93.812255][ T5634] team0: Port device team_slave_0 added [ 93.817993][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.825167][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.832518][ T5627] bridge_slave_1: entered allmulticast mode [ 93.840058][ T5627] bridge_slave_1: entered promiscuous mode [ 93.859792][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.866938][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.874257][ T5633] bridge_slave_0: entered allmulticast mode [ 93.883047][ T5633] bridge_slave_0: entered promiscuous mode [ 93.917803][ T5634] team0: Port device team_slave_1 added [ 93.961097][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.968203][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.975691][ T5633] bridge_slave_1: entered allmulticast mode [ 93.983366][ T5633] bridge_slave_1: entered promiscuous mode [ 93.990795][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.998159][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.005482][ T5624] bridge_slave_0: entered allmulticast mode [ 94.013140][ T5624] bridge_slave_0: entered promiscuous mode [ 94.023818][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.036254][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.070610][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.077921][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.085140][ T5623] bridge_slave_0: entered allmulticast mode [ 94.092867][ T5623] bridge_slave_0: entered promiscuous mode [ 94.112508][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.119723][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.127549][ T5624] bridge_slave_1: entered allmulticast mode [ 94.135819][ T5624] bridge_slave_1: entered promiscuous mode [ 94.155636][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.162695][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.188815][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.204592][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.214197][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.221617][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.228865][ T5623] bridge_slave_1: entered allmulticast mode [ 94.236701][ T5623] bridge_slave_1: entered promiscuous mode [ 94.283235][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.290291][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.316385][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.330269][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.368651][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.393381][ T5635] team0: Port device team_slave_0 added [ 94.442998][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.471397][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.483419][ T5635] team0: Port device team_slave_1 added [ 94.517927][ T5627] team0: Port device team_slave_0 added [ 94.527163][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.555275][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.579059][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.586261][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.612574][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.626195][ T5627] team0: Port device team_slave_1 added [ 94.634630][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.646515][ T5633] team0: Port device team_slave_0 added [ 94.656114][ T5633] team0: Port device team_slave_1 added [ 94.692762][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.699835][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.726057][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.799482][ T5624] team0: Port device team_slave_0 added [ 94.841885][ T5641] Bluetooth: hci3: command tx timeout [ 94.847731][ T5625] Bluetooth: hci2: command tx timeout [ 94.853803][ T5630] Bluetooth: hci0: command tx timeout [ 94.867709][ T5634] hsr_slave_0: entered promiscuous mode [ 94.874704][ T5634] hsr_slave_1: entered promiscuous mode [ 94.884059][ T5624] team0: Port device team_slave_1 added [ 94.891836][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.898779][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.924882][ T5630] Bluetooth: hci5: command tx timeout [ 94.925410][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.941220][ T5630] Bluetooth: hci1: command tx timeout [ 94.941270][ T5630] Bluetooth: hci4: command tx timeout [ 94.950855][ T5623] team0: Port device team_slave_0 added [ 94.958939][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.966286][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.992369][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.005389][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.012570][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.038607][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.076296][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.083536][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.109679][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.123317][ T5623] team0: Port device team_slave_1 added [ 95.152432][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.159445][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.185893][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.261975][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.268998][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.295487][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.353691][ T5635] hsr_slave_0: entered promiscuous mode [ 95.360528][ T5635] hsr_slave_1: entered promiscuous mode [ 95.367026][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 95.372897][ T5635] Cannot create hsr debugfs directory [ 95.414069][ T5627] hsr_slave_0: entered promiscuous mode [ 95.420774][ T5627] hsr_slave_1: entered promiscuous mode [ 95.427739][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 95.433630][ T5627] Cannot create hsr debugfs directory [ 95.453725][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.460820][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.487262][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.547781][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.556707][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.584640][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.653089][ T5633] hsr_slave_0: entered promiscuous mode [ 95.659596][ T5633] hsr_slave_1: entered promiscuous mode [ 95.666150][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 95.672356][ T5633] Cannot create hsr debugfs directory [ 95.716417][ T5624] hsr_slave_0: entered promiscuous mode [ 95.723175][ T5624] hsr_slave_1: entered promiscuous mode [ 95.729347][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 95.735361][ T5624] Cannot create hsr debugfs directory [ 95.992709][ T5623] hsr_slave_0: entered promiscuous mode [ 95.999218][ T5623] hsr_slave_1: entered promiscuous mode [ 96.006850][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 96.012628][ T5623] Cannot create hsr debugfs directory [ 96.449882][ T5634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.464512][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.472981][ T5634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.483642][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.500055][ T5634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.511476][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.555729][ T5634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.566139][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.667662][ T5635] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.680775][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.692217][ T5635] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.702831][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.710827][ T5635] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.723888][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.733524][ T5635] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.744084][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.855017][ T5627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.867676][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.883078][ T5627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.895046][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.903450][ T5627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.914632][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.923510][ T5625] Bluetooth: hci3: command tx timeout [ 96.928960][ T5641] Bluetooth: hci0: command tx timeout [ 96.935011][ T5630] Bluetooth: hci2: command tx timeout [ 96.948920][ T5627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.958713][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.002089][ T5625] Bluetooth: hci5: command tx timeout [ 97.007701][ T5641] Bluetooth: hci4: command tx timeout [ 97.011087][ T5630] Bluetooth: hci1: command tx timeout [ 97.083430][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.097607][ T5624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.107951][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.117207][ T5624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.127455][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.145228][ T5624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.156598][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.186568][ T5624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.198147][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.306148][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.314797][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.325702][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.338033][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.348648][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.359354][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.370282][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.379062][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.389717][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.439248][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.446919][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.459233][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.496249][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.503409][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.596717][ T5623] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.607570][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.617708][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.638143][ T5623] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.651710][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.676107][ T5623] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.687857][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.709552][ T5623] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.720097][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.736927][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.744075][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.780871][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.788069][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.827945][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.999110][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.016125][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.075323][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.082602][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.148933][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.156222][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.170906][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.216569][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.223802][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.273147][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.280355][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.388210][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.508907][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.574817][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.582168][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.624372][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.631585][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.726219][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.876298][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.917161][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.955489][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.962727][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.001574][ T5630] Bluetooth: hci2: command tx timeout [ 99.003132][ T5625] Bluetooth: hci3: command tx timeout [ 99.014670][ T5641] Bluetooth: hci0: command tx timeout [ 99.044844][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.052093][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.081792][ T5641] Bluetooth: hci5: command tx timeout [ 99.084821][ T5630] Bluetooth: hci1: command tx timeout [ 99.087251][ T5625] Bluetooth: hci4: command tx timeout [ 99.354145][ T5634] veth0_vlan: entered promiscuous mode [ 99.439043][ T5634] veth1_vlan: entered promiscuous mode [ 99.498557][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.681861][ T5634] veth0_macvtap: entered promiscuous mode [ 99.708621][ T5634] veth1_macvtap: entered promiscuous mode [ 99.844867][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.896467][ T5635] veth0_vlan: entered promiscuous mode [ 99.938652][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.021463][ T5635] veth1_vlan: entered promiscuous mode [ 100.033971][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.060049][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.074468][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.087834][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.241874][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.317940][ T5635] veth0_macvtap: entered promiscuous mode [ 100.385929][ T5635] veth1_macvtap: entered promiscuous mode [ 100.463800][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.515998][ T3326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.548757][ T3326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.702654][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.724459][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.745975][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.752669][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.762908][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.849204][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.865193][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.935823][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.964488][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.989197][ T5634] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.016573][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.026844][ T5624] veth0_vlan: entered promiscuous mode [ 101.148595][ T5624] veth1_vlan: entered promiscuous mode [ 101.253588][ T5633] veth0_vlan: entered promiscuous mode [ 101.310573][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.336189][ T5627] veth0_vlan: entered promiscuous mode [ 101.354957][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.359321][ T5633] veth1_vlan: entered promiscuous mode [ 101.440405][ T5627] veth1_vlan: entered promiscuous mode [ 101.492611][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.501247][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.523644][ T5624] veth0_macvtap: entered promiscuous mode [ 101.565777][ T5624] veth1_macvtap: entered promiscuous mode [ 101.646931][ T5633] veth0_macvtap: entered promiscuous mode [ 101.705934][ T5627] veth0_macvtap: entered promiscuous mode [ 101.739427][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.767953][ T5633] veth1_macvtap: entered promiscuous mode [ 101.820942][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.879186][ T5627] veth1_macvtap: entered promiscuous mode [ 101.937079][ T5623] veth0_vlan: entered promiscuous mode [ 102.014894][ T3326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.051091][ T3326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.108308][ T5623] veth1_vlan: entered promiscuous mode [ 102.135221][ T3326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.034443][ T5873] loop0: detected capacity change from 0 to 256 [ 103.048473][ T5873] ======================================================= [ 103.048473][ T5873] WARNING: The mand mount option has been deprecated and [ 103.048473][ T5873] and is ignored by this kernel. Remove the mand [ 103.048473][ T5873] option from the mount to silence this warning. [ 103.048473][ T5873] ======================================================= [ 103.127040][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.140690][ T3326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.435602][ T3326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.469925][ T3326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.598783][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.627452][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.904372][ T5876] loop0: detected capacity change from 0 to 8 [ 104.012466][ T5876] SQUASHFS error: zlib decompression failed, data probably corrupt [ 104.035846][ T5876] SQUASHFS error: Failed to read block 0x9b: -5 [ 104.051836][ T5876] SQUASHFS error: Unable to read metadata cache entry [99] [ 104.066121][ T5876] SQUASHFS error: Unable to read inode 0x104 [ 104.138051][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.190787][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.577150][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.808684][ T3326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.827745][ T3326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.884788][ T3326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.913268][ T3326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.947420][ T5623] veth0_macvtap: entered promiscuous mode [ 105.973498][ T3326] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.008658][ T5623] veth1_macvtap: entered promiscuous mode [ 106.064694][ T3326] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.111727][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.134282][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.316248][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.403498][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.446412][ T5905] loop3: detected capacity change from 0 to 4096 [ 106.464833][ T5905] EXT4-fs: Ignoring removed orlov option [ 106.498547][ T5905] EXT4-fs: Mount option(s) incompatible with ext2 [ 106.580180][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.620230][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.706739][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.739076][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.780376][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.920930][ T1032] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.030871][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.230739][ T5914] overlayfs: missing 'lowerdir' [ 107.688555][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.869233][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.918826][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.156360][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.233763][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.693082][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.770087][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.968463][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.035992][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.669342][ T5935] loop3: detected capacity change from 0 to 256 [ 112.780849][ T5935] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.915672][ T5935] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.986166][ T5936] loop0: detected capacity change from 0 to 8 [ 113.008302][ T5938] loop1: detected capacity change from 0 to 512 [ 113.116056][ T5936] SQUASHFS error: zlib decompression failed, data probably corrupt [ 113.863009][ T5936] SQUASHFS error: Failed to read block 0x9b: -5 [ 113.914461][ T5936] SQUASHFS error: Unable to read metadata cache entry [99] [ 114.195390][ T5936] SQUASHFS error: Unable to read inode 0x104 [ 114.236957][ T5938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.471045][ T5953] loop5: detected capacity change from 0 to 512 [ 114.487224][ T5953] ext4: Unknown parameter 'audit' [ 114.897985][ T5938] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.810551][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.107125][ T5985] loop1: detected capacity change from 0 to 4096 [ 117.755578][ T5985] EXT4-fs: Ignoring removed orlov option [ 117.879956][ T5988] loop0: detected capacity change from 0 to 512 [ 117.887617][ T5988] ext4: Unknown parameter 'audit' [ 118.645340][ T5987] loop0: detected capacity change from 0 to 512 [ 119.194655][ T5987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.208644][ T5987] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.481422][ T5985] EXT4-fs: Mount option(s) incompatible with ext2 [ 120.695310][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.599818][ T5970] syzkaller1: entered promiscuous mode [ 121.606261][ C0] Unknown status report in ack skb [ 121.618623][ T5970] syzkaller1: entered allmulticast mode [ 122.288140][ T6009] loop1: detected capacity change from 0 to 512 [ 122.295783][ T6009] ext4: Unknown parameter 'audit' [ 122.724919][ T6009] loop1: detected capacity change from 0 to 512 [ 123.304773][ T6009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.319009][ T6009] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.158260][ T6027] loop3: detected capacity change from 0 to 8 [ 125.264558][ T6027] SQUASHFS error: zlib decompression failed, data probably corrupt [ 125.314336][ T6027] SQUASHFS error: Failed to read block 0x9b: -5 [ 125.342985][ T6027] SQUASHFS error: Unable to read metadata cache entry [99] [ 125.378321][ T6027] SQUASHFS error: Unable to read inode 0x104 [ 125.480518][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.486447][ T6032] loop0: detected capacity change from 0 to 256 [ 125.724088][ T6036] loop5: detected capacity change from 0 to 512 [ 125.740125][ T6036] ext4: Unknown parameter 'audit' [ 126.668982][ T6042] loop2: detected capacity change from 0 to 4096 [ 126.738878][ T6042] EXT4-fs: Ignoring removed orlov option [ 126.856511][ T6042] EXT4-fs: Mount option(s) incompatible with ext2 [ 128.390858][ T6072] loop0: detected capacity change from 0 to 512 [ 130.388154][ T6072] ext4: Unknown parameter 'audit' [ 131.874186][ T6080] netlink: 32 bytes leftover after parsing attributes in process `syz.1.62'. [ 132.133196][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.140237][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.582685][ T6084] loop3: detected capacity change from 0 to 8 [ 132.718053][ T6084] SQUASHFS error: zlib decompression failed, data probably corrupt [ 132.804303][ T6084] SQUASHFS error: Failed to read block 0x9b: -5 [ 132.868018][ T6084] SQUASHFS error: Unable to read metadata cache entry [99] [ 132.949929][ T6084] SQUASHFS error: Unable to read inode 0x104 [ 133.352688][ T6102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.71'. [ 133.826983][ T5625] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 133.836691][ T5625] CPU: 0 UID: 0 PID: 5625 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 133.836739][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 133.836765][ T5625] Workqueue: hci1 hci_rx_work [ 133.836829][ T5625] Call Trace: [ 133.836841][ T5625] [ 133.836855][ T5625] dump_stack_lvl+0x100/0x190 [ 133.836904][ T5625] sysfs_warn_dup.cold+0x1c/0x28 [ 133.836965][ T5625] sysfs_create_dir_ns+0x24b/0x2b0 [ 133.837015][ T5625] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 133.837061][ T5625] ? find_held_lock+0x2b/0x80 [ 133.837117][ T5625] ? kobject_add_internal+0x25f/0x930 [ 133.837169][ T5625] ? kobject_add_internal+0x25f/0x930 [ 133.837222][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.837270][ T5625] ? do_raw_spin_unlock+0x145/0x1e0 [ 133.837323][ T5625] kobject_add_internal+0x2c8/0x930 [ 133.837383][ T5625] kobject_add+0x16a/0x1e0 [ 133.837432][ T5625] ? __pfx_kobject_add+0x10/0x10 [ 133.837480][ T5625] ? class_to_subsys+0x10f/0x150 [ 133.837550][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.837601][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.837648][ T5625] ? kobject_put+0xb9/0x640 [ 133.837692][ T5625] ? _raw_spin_unlock+0x28/0x50 [ 133.837762][ T5625] device_add+0x294/0x1970 [ 133.837817][ T5625] ? __pfx_dev_set_name+0x10/0x10 [ 133.837881][ T5625] ? __pfx_device_add+0x10/0x10 [ 133.837937][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.837986][ T5625] ? mgmt_send_event_skb+0x2fb/0x460 [ 133.838064][ T5625] hci_conn_add_sysfs+0x1a3/0x260 [ 133.838111][ T5625] le_conn_complete_evt+0x11eb/0x1f60 [ 133.838190][ T5625] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 133.838253][ T5625] ? hci_event_packet+0x186/0xcd0 [ 133.838314][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.838376][ T5625] hci_le_conn_complete_evt+0x23c/0x3a0 [ 133.838443][ T5625] ? skb_pull_data+0x15f/0x1e0 [ 133.838512][ T5625] hci_le_meta_evt+0x34a/0x5f0 [ 133.838554][ T5625] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 133.838629][ T5625] hci_event_packet+0x51c/0xcd0 [ 133.838697][ T5625] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 133.838739][ T5625] ? __pfx_hci_event_packet+0x10/0x10 [ 133.838804][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.838855][ T5625] ? kcov_remote_start+0x384/0x670 [ 133.838893][ T5625] ? lockdep_hardirqs_on+0x78/0x100 [ 133.838957][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.839017][ T5625] hci_rx_work+0x451/0xfc0 [ 133.839091][ T5625] process_one_work+0xa23/0x1940 [ 133.839177][ T5625] ? __pfx_process_one_work+0x10/0x10 [ 133.839240][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.839304][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.839361][ T5625] worker_thread+0x5ef/0xe50 [ 133.839444][ T5625] ? kthread+0x13a/0x450 [ 133.839506][ T5625] ? __pfx_worker_thread+0x10/0x10 [ 133.839568][ T5625] kthread+0x370/0x450 [ 133.839625][ T5625] ? __pfx_kthread+0x10/0x10 [ 133.839687][ T5625] ret_from_fork+0x72b/0xd50 [ 133.839739][ T5625] ? __pfx_ret_from_fork+0x10/0x10 [ 133.839788][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.839836][ T5625] ? __switch_to+0x800/0x10f0 [ 133.839896][ T5625] ? __switch_to_asm+0x39/0x70 [ 133.839951][ T5625] ? __pfx_kthread+0x10/0x10 [ 133.840012][ T5625] ret_from_fork_asm+0x1a/0x30 [ 133.840093][ T5625] [ 133.840129][ T5625] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 134.189325][ T5625] Bluetooth: hci1: failed to register connection device [ 134.254023][ T6126] loop5: detected capacity change from 0 to 512 [ 134.272739][ T6126] EXT4-fs (loop5): Test dummy encryption mode enabled [ 134.288050][ T6120] loop3: detected capacity change from 0 to 4096 [ 134.296929][ T6120] EXT4-fs: Ignoring removed orlov option [ 134.304127][ T6120] EXT4-fs: Mount option(s) incompatible with ext2 [ 134.458294][ T6126] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.80: inode has both inline data and extents flags [ 134.531296][ T6126] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 134.541079][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 134.557770][ C1] EXT4-fs (loop5): initial error at time 1784053244: ext4_orphan_get:1399: inode 15 [ 134.567231][ C1] EXT4-fs (loop5): last error at time 1784053244: ext4_orphan_get:1399: inode 15 [ 134.723068][ T6132] loop0: detected capacity change from 0 to 512 [ 134.739076][ T6132] ext4: Unknown parameter 'audit' [ 135.035032][ T6126] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.80: couldn't read orphan inode 15 (err -117) [ 135.178024][ T6126] loop5: lost filesystem error report for type 5 error -117 [ 135.208468][ T6126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.577433][ T6135] binder: 6134:6135 ioctl c0306201 0 returned -14 [ 135.587557][ T6126] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 137.079367][ T6141] overlayfs: failed to resolve './file1': -2 [ 137.770239][ T6149] overlayfs: failed to resolve './bus': -2 [ 137.985281][ T6152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.87'. [ 138.108853][ T6156] loop1: detected capacity change from 0 to 8 [ 138.169979][ T6156] SQUASHFS error: zlib decompression failed, data probably corrupt [ 138.226669][ T6156] SQUASHFS error: Failed to read block 0x9b: -5 [ 138.281317][ T6156] SQUASHFS error: Unable to read metadata cache entry [99] [ 138.337287][ T6156] SQUASHFS error: Unable to read inode 0x104 [ 138.769273][ T5627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.897928][ T6165] loop1: detected capacity change from 0 to 256 [ 138.966282][ T6169] binder: 6167:6169 ioctl c0306201 0 returned -14 [ 139.512002][ T6180] loop2: detected capacity change from 0 to 1024 [ 139.680543][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'. [ 139.690077][ T6180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.796523][ T6201] loop4: detected capacity change from 0 to 512 [ 140.812724][ T6201] ext4: Unknown parameter 'audit' [ 140.948451][ T6201] loop4: detected capacity change from 0 to 512 [ 141.639823][ T6201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.653840][ T6201] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.125902][ T6180] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.333583][ T6193] bond1: entered promiscuous mode [ 142.358395][ T6193] bond1: entered allmulticast mode [ 142.603197][ T6213] loop3: detected capacity change from 0 to 8 [ 142.863217][ T6213] SQUASHFS error: zlib decompression failed, data probably corrupt [ 143.040295][ T6213] SQUASHFS error: Failed to read block 0x9b: -5 [ 143.108970][ T6213] SQUASHFS error: Unable to read metadata cache entry [99] [ 143.245458][ T6213] SQUASHFS error: Unable to read inode 0x104 [ 143.281636][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.652264][ T5641] Bluetooth: hci1: link tx timeout [ 143.658173][ T5641] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 144.599791][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 145.036414][ T6241] binder: 6239:6241 ioctl c0306201 0 returned -14 [ 145.329335][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.121'. [ 145.526266][ T6255] bond2: entered promiscuous mode [ 145.531611][ T6255] bond2: entered allmulticast mode [ 145.721185][ T5641] Bluetooth: hci1: command 0x0406 tx timeout [ 145.776710][ T6262] loop4: detected capacity change from 0 to 8 [ 145.998863][ T6277] loop3: detected capacity change from 0 to 512 [ 146.015061][ T6277] ext4: Unknown parameter 'audit' [ 146.172611][ T6277] loop3: detected capacity change from 0 to 512 [ 146.729564][ T6277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.742687][ T6277] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.051661][ T6262] SQUASHFS error: zlib decompression failed, data probably corrupt [ 147.075274][ T6273] loop1: detected capacity change from 0 to 1024 [ 147.081813][ T6262] SQUASHFS error: Failed to read block 0x9b: -5 [ 147.093660][ T6262] SQUASHFS error: Unable to read metadata cache entry [99] [ 147.101624][ T6262] SQUASHFS error: Unable to read inode 0x104 [ 147.120210][ T6273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.143114][ T6273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.973715][ T6285] loop2: detected capacity change from 0 to 8192 [ 148.337587][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.610036][ T6319] mmap: syz.4.140 (6319) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 151.956723][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.5.142'. [ 152.610343][ T6334] loop2: detected capacity change from 0 to 8 [ 152.646082][ T6334] SQUASHFS error: zlib decompression failed, data probably corrupt [ 152.696699][ T6334] SQUASHFS error: Failed to read block 0x9b: -5 [ 152.724263][ T6334] SQUASHFS error: Unable to read metadata cache entry [99] [ 152.759449][ T6334] SQUASHFS error: Unable to read inode 0x104 [ 153.020050][ T6346] loop1: detected capacity change from 0 to 256 [ 153.135586][ T6346] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 153.179418][ T6340] loop3: detected capacity change from 0 to 8192 [ 153.206161][ T6346] FAT-fs (loop1): Filesystem has been set read-only [ 153.270085][ T12] Bluetooth: hci6: Frame reassembly failed (-90) [ 155.322031][ T5641] Bluetooth: hci6: command 0x1003 tx timeout [ 155.472579][ T5625] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 155.589402][ T6362] loop2: detected capacity change from 0 to 512 [ 156.597653][ T6362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 156.701576][ T6362] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.751730][ T6370] netlink: 'syz.1.158': attribute type 49 has an invalid length. [ 159.016297][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.160'. [ 160.578468][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 160.929186][ T6374] bond3: entered promiscuous mode [ 160.964449][ T6374] bond3: entered allmulticast mode [ 161.967974][ T6406] loop0: detected capacity change from 0 to 256 [ 162.714008][ T6409] loop4: detected capacity change from 0 to 1024 [ 162.966261][ T6409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.092545][ T6409] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.206600][ T6419] bridge_slave_0: left allmulticast mode [ 163.242867][ T6419] bridge_slave_0: left promiscuous mode [ 163.260592][ T6419] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.438733][ T6422] loop3: detected capacity change from 0 to 8192 [ 163.462085][ T5919] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 163.738113][ T6419] bridge_slave_1: left allmulticast mode [ 163.879685][ T6419] bridge_slave_1: left promiscuous mode [ 164.015197][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 164.077675][ T6431] loop1: detected capacity change from 0 to 8 [ 164.094314][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.126588][ T5919] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 164.151386][ T6431] SQUASHFS error: zlib decompression failed, data probably corrupt [ 164.189958][ T5919] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 164.216679][ T6431] SQUASHFS error: Failed to read block 0x9b: -5 [ 164.240244][ T6431] SQUASHFS error: Unable to read metadata cache entry [99] [ 164.248564][ T5919] usb 3-1: config 179 has no interface number 0 [ 164.278423][ T5919] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 164.279647][ T6431] SQUASHFS error: Unable to read inode 0x104 [ 164.298688][ T5919] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 164.369196][ T5919] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 164.385377][ T6419] bond0: (slave bond_slave_0): Releasing backup interface [ 164.428293][ T5919] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 164.457431][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.468189][ T6419] bond0: (slave bond_slave_1): Releasing backup interface [ 164.521395][ T6419] team0: Port device team_slave_0 removed [ 164.579488][ T6419] team0: Port device team_slave_1 removed [ 164.606710][ T6418] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.625102][ T6419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.661176][ T6419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.698973][ T6419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.718523][ T6419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.733824][ T6419] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 164.793405][ T6423] team0: Port device xfrm0 added [ 165.386008][ T5774] usb 3-1: USB disconnect, device number 2 [ 165.455289][ T1032] Bluetooth: hci6: Frame reassembly failed (-90) [ 165.518535][ T6451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.180'. [ 165.657647][ T6451] bond1: entered promiscuous mode [ 165.678347][ T6451] bond1: entered allmulticast mode [ 166.660444][ T6468] loop2: detected capacity change from 0 to 256 [ 167.261040][ T6468] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.186'. [ 167.481781][ T5625] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 167.489123][ T5641] Bluetooth: hci6: command 0x1003 tx timeout [ 167.694735][ T6478] loop0: detected capacity change from 0 to 1024 [ 167.790684][ T6478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.984744][ T6483] bridge_slave_0: left allmulticast mode [ 167.989090][ T6478] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.017882][ T6483] bridge_slave_0: left promiscuous mode [ 168.033525][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.111702][ T6482] loop1: detected capacity change from 0 to 8192 [ 168.132531][ T6483] bridge_slave_1: left allmulticast mode [ 168.149131][ T6483] bridge_slave_1: left promiscuous mode [ 168.195019][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.320722][ T6483] bond0: (slave bond_slave_0): Releasing backup interface [ 168.394831][ T6483] bond0: (slave bond_slave_1): Releasing backup interface [ 168.477163][ T6483] team0: Port device team_slave_0 removed [ 168.630363][ T6483] team0: Port device team_slave_1 removed [ 168.703822][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.713687][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.770042][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.802072][ T6508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.196'. [ 168.821491][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.853474][ T6504] loop5: detected capacity change from 0 to 512 [ 168.938821][ T6483] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 168.959342][ T6510] loop2: detected capacity change from 0 to 512 [ 168.996901][ T6504] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 169.009843][ T6487] team0: Port device xfrm0 added [ 169.066300][ T6510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.101220][ T6504] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 169.104964][ T6510] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.392549][ T6513] bond1: entered promiscuous mode [ 169.405903][ T6504] EXT4-fs (loop5): 1 truncate cleaned up [ 169.413867][ T6513] bond1: entered allmulticast mode [ 169.418349][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.467808][ T6504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.904973][ T6531] loop0: detected capacity change from 0 to 256 [ 170.360482][ T6531] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.203'. [ 171.119691][ T6281] Bluetooth: hci6: Frame reassembly failed (-90) [ 171.181670][ T6536] Bluetooth: hci6: Frame reassembly failed (-84) [ 171.263009][ T6486] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 171.912094][ T6554] loop3: detected capacity change from 0 to 8 [ 171.946849][ T6554] SQUASHFS error: zlib decompression failed, data probably corrupt [ 171.983071][ T6554] SQUASHFS error: Failed to read block 0x9b: -5 [ 172.000044][ T6554] SQUASHFS error: Unable to read metadata cache entry [99] [ 172.023435][ T6554] SQUASHFS error: Unable to read inode 0x104 [ 172.154545][ T6555] loop1: detected capacity change from 0 to 8192 [ 172.493579][ T6558] team0: Port device xfrm0 removed [ 172.528684][ T6558] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 172.653610][ T6559] team0: Port device xfrm0 added [ 172.688091][ T6561] loop0: detected capacity change from 0 to 256 [ 172.792053][ T6561] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 172.851178][ T6561] FAT-fs (loop0): Filesystem has been set read-only [ 173.134290][ T6564] loop3: detected capacity change from 0 to 128 [ 173.163205][ T5625] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 173.170562][ T5641] Bluetooth: hci6: command 0x1003 tx timeout [ 173.187492][ T6564] EXT4-fs (loop3): Test dummy encryption mode enabled [ 173.295071][ T6564] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.488219][ T6564] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.574510][ T6566] loop0: detected capacity change from 0 to 1024 [ 173.611516][ T6573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.214'. [ 173.992046][ T6566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.023460][ T6580] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 174.262156][ T6566] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.388055][ T6573] bond2: entered promiscuous mode [ 174.424997][ T6573] bond2: entered allmulticast mode [ 174.646925][ T5635] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.983033][ T5774] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 175.886437][ T5774] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.003600][ T5774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 176.250583][ T5774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 176.586271][ T5774] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 176.633508][ T5774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.685031][ T5774] usb 3-1: Product: syz [ 176.713243][ T5774] usb 3-1: Manufacturer: syz [ 176.742561][ T5774] usb 3-1: SerialNumber: syz [ 176.836047][ T5774] usb 3-1: config 0 descriptor?? [ 176.845334][ T6608] loop0: detected capacity change from 0 to 256 [ 176.867909][ T6585] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 176.909605][ T6608] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 176.941131][ T6608] FAT-fs (loop0): Filesystem has been set read-only [ 177.147240][ T5774] rc_core: IR keymap rc-streamzap not found [ 177.175011][ T5774] Registered IR keymap rc-empty [ 177.215230][ T5774] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 177.296657][ T5774] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 177.297611][ T6610] loop3: detected capacity change from 0 to 8192 [ 177.374445][ T5641] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 177.386156][ T5641] CPU: 1 UID: 0 PID: 5641 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) [ 177.386210][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 177.386236][ T5641] Workqueue: hci0 hci_rx_work [ 177.386301][ T5641] Call Trace: [ 177.386313][ T5641] [ 177.386327][ T5641] dump_stack_lvl+0x100/0x190 [ 177.386373][ T5641] sysfs_warn_dup.cold+0x1c/0x28 [ 177.386434][ T5641] sysfs_create_dir_ns+0x24b/0x2b0 [ 177.386483][ T5641] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 177.386529][ T5641] ? find_held_lock+0x2b/0x80 [ 177.386583][ T5641] ? kobject_add_internal+0x25f/0x930 [ 177.386633][ T5641] ? kobject_add_internal+0x25f/0x930 [ 177.386686][ T5641] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.386734][ T5641] ? do_raw_spin_unlock+0x145/0x1e0 [ 177.386787][ T5641] kobject_add_internal+0x2c8/0x930 [ 177.386845][ T5641] kobject_add+0x16a/0x1e0 [ 177.386896][ T5641] ? __pfx_kobject_add+0x10/0x10 [ 177.386943][ T5641] ? class_to_subsys+0x10f/0x150 [ 177.387003][ T5641] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.387059][ T5641] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.387105][ T5641] ? kobject_put+0xb9/0x640 [ 177.387148][ T5641] ? _raw_spin_unlock+0x28/0x50 [ 177.387216][ T5641] device_add+0x294/0x1970 [ 177.387270][ T5641] ? __pfx_dev_set_name+0x10/0x10 [ 177.387332][ T5641] ? __pfx_device_add+0x10/0x10 [ 177.387386][ T5641] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.387433][ T5641] ? mgmt_send_event_skb+0x2fb/0x460 [ 177.387512][ T5641] hci_conn_add_sysfs+0x1a3/0x260 [ 177.387560][ T5641] le_conn_complete_evt+0x11eb/0x1f60 [ 177.387638][ T5641] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 177.387701][ T5641] ? hci_event_packet+0x186/0xcd0 [ 177.387761][ T5641] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.387821][ T5641] hci_le_conn_complete_evt+0x23c/0x3a0 [ 177.387889][ T5641] ? skb_pull_data+0x15f/0x1e0 [ 177.387951][ T5641] hci_le_meta_evt+0x34a/0x5f0 [ 177.387992][ T5641] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 177.388070][ T5641] hci_event_packet+0x51c/0xcd0 [ 177.388134][ T5641] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 177.388175][ T5641] ? __pfx_hci_event_packet+0x10/0x10 [ 177.388241][ T5641] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.388291][ T5641] ? kcov_remote_start+0x384/0x670 [ 177.388328][ T5641] ? lockdep_hardirqs_on+0x78/0x100 [ 177.388391][ T5641] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.388450][ T5641] hci_rx_work+0x451/0xfc0 [ 177.388522][ T5641] process_one_work+0xa23/0x1940 [ 177.388606][ T5641] ? __pfx_process_one_work+0x10/0x10 [ 177.388666][ T5641] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.388730][ T5641] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.388785][ T5641] worker_thread+0x5ef/0xe50 [ 177.388860][ T5641] ? __pfx_worker_thread+0x10/0x10 [ 177.388925][ T5641] ? kthread+0x13a/0x450 [ 177.388979][ T5641] ? __pfx_worker_thread+0x10/0x10 [ 177.389044][ T5641] kthread+0x370/0x450 [ 177.389100][ T5641] ? __pfx_kthread+0x10/0x10 [ 177.389160][ T5641] ret_from_fork+0x72b/0xd50 [ 177.389210][ T5641] ? __pfx_ret_from_fork+0x10/0x10 [ 177.389259][ T5641] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.389306][ T5641] ? __switch_to+0x800/0x10f0 [ 177.389364][ T5641] ? __switch_to_asm+0x39/0x70 [ 177.389418][ T5641] ? __pfx_kthread+0x10/0x10 [ 177.389478][ T5641] ret_from_fork_asm+0x1a/0x30 [ 177.389557][ T5641] [ 177.389639][ T5641] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 177.743361][ T5641] Bluetooth: hci0: failed to register connection device [ 177.752970][ T5641] Bluetooth: hci0: link tx timeout [ 177.759626][ T5641] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 177.889107][ T6623] loop0: detected capacity change from 0 to 512 [ 177.898258][ T6623] ext4: Unknown parameter 'audit' [ 177.942675][ T6623] loop0: detected capacity change from 0 to 512 [ 178.115883][ T6623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.128933][ T6623] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.737928][ T5774] usb 3-1: USB disconnect, device number 3 [ 179.805392][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 180.326940][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.414845][ T6634] bond1: entered promiscuous mode [ 180.420189][ T6634] bond1: entered allmulticast mode [ 180.465573][ T6639] syzkaller0: entered promiscuous mode [ 180.488175][ T6639] syzkaller0: entered allmulticast mode [ 181.115079][ T6642] loop0: detected capacity change from 0 to 512 [ 181.165034][ T6642] EXT4-fs: Ignoring removed nobh option [ 181.192307][ T6642] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 181.249142][ T6642] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 181.605669][ T6642] EXT4-fs (loop0): 1 truncate cleaned up [ 181.624557][ T6642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.963709][ T6655] netlink: 32 bytes leftover after parsing attributes in process `syz.2.240'. [ 183.534159][ T6662] loop1: detected capacity change from 0 to 256 [ 183.542719][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.654966][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 183.749571][ T6664] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 184.661909][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'. [ 184.947386][ T6667] loop2: detected capacity change from 0 to 8192 [ 185.085270][ T6678] syzkaller1: entered promiscuous mode [ 185.102196][ T6678] syzkaller1: entered allmulticast mode [ 185.371531][ T6681] loop3: detected capacity change from 0 to 512 [ 185.387089][ T6681] ext4: Unknown parameter 'audit' [ 185.515265][ T6681] loop3: detected capacity change from 0 to 512 [ 185.928181][ T6681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.941564][ T6681] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.342618][ T6689] Zero length message leads to an empty skb [ 186.880589][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 186.918125][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 186.930113][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 186.944567][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 186.955749][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.139106][ T6694] dvmrp0: entered allmulticast mode [ 187.675146][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.036102][ T6711] loop4: detected capacity change from 0 to 1024 [ 188.201212][ T5922] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 188.290192][ T6711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.507766][ T6722] loop3: detected capacity change from 0 to 512 [ 188.524608][ T6722] ext4: Unknown parameter 'audit' [ 188.673266][ T6722] loop3: detected capacity change from 0 to 512 [ 189.002729][ T5625] Bluetooth: hci6: command tx timeout [ 189.129689][ T6722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.142963][ T6722] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.564652][ T6501] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.583151][ T6711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.997045][ T6728] loop0: detected capacity change from 0 to 256 [ 190.301063][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 190.311315][ T5922] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 190.326205][ T5922] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 190.339729][ T5922] usb 3-1: config 179 has no interface number 0 [ 190.774718][ T5922] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 190.787693][ T5922] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 190.802921][ T5922] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 190.816720][ T5922] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 190.826152][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.857975][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.912321][ T6736] netlink: 84 bytes leftover after parsing attributes in process `syz.0.258'. [ 191.010588][ T5922] usb 3-1: can't set config #179, error -71 [ 191.081652][ T5922] usb 3-1: USB disconnect, device number 4 [ 191.144748][ T5625] Bluetooth: hci6: command tx timeout [ 192.143430][ T6740] loop3: detected capacity change from 0 to 4096 [ 192.153392][ T6740] ext4: Unknown parameter 'fsuuid' [ 192.551699][ T6746] loop0: detected capacity change from 0 to 8192 [ 193.394900][ T5625] Bluetooth: hci6: command tx timeout [ 193.572560][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.586732][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.021155][ T6762] loop1: detected capacity change from 0 to 8 [ 194.888019][ T6767] loop2: detected capacity change from 0 to 512 [ 194.895637][ T6767] ext4: Unknown parameter 'audit' [ 195.283759][ T6766] loop2: detected capacity change from 0 to 512 [ 195.441136][ T5625] Bluetooth: hci6: command tx timeout [ 195.899174][ T6766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.913503][ T6766] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.480869][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.486695][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.787877][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.828044][ T6794] syzkaller0: entered promiscuous mode [ 198.833672][ T6794] syzkaller0: entered allmulticast mode [ 198.865506][ T6805] tipc: Enabling of bearer rejected, failed to enable media [ 199.454836][ T6823] loop1: detected capacity change from 0 to 8192 [ 199.569096][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.732799][ T6820] syzkaller0: entered promiscuous mode [ 199.770873][ T6820] syzkaller0: entered allmulticast mode [ 200.289697][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.808537][ T6691] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.855382][ T6691] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.774255][ T6854] loop1: detected capacity change from 0 to 256 [ 201.818483][ T6691] bridge_slave_0: entered allmulticast mode [ 201.826766][ T6691] bridge_slave_0: entered promiscuous mode [ 201.844211][ T6691] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.852385][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.863781][ T6691] bridge_slave_1: entered allmulticast mode [ 201.895672][ T6691] bridge_slave_1: entered promiscuous mode [ 201.917329][ T6858] loop4: detected capacity change from 0 to 128 [ 202.219805][ T6848] infiniband syz2: set down [ 202.224562][ T6848] infiniband syz2: added ipvlan0 [ 202.234277][ T6848] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 202.238158][ T6848] infiniband syz2: Couldn't open port 1 [ 202.255547][ T6848] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 202.270663][ T6848] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 202.288347][ T6848] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 202.341432][ T6858] EXT4-fs (loop4): Test dummy encryption mode enabled [ 202.415938][ T6848] RDS/IB: syz2: added [ 202.420454][ T6848] smc: adding ib device syz2 with port count 1 [ 202.428538][ T6848] smc: ib device syz2 port 1 has no pnetid [ 203.034190][ T6858] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.060868][ T6858] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.489170][ T6868] loop3: detected capacity change from 0 to 1024 [ 203.797536][ T6868] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 203.864615][ T6868] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 203.916814][ T6868] EXT4-fs (loop3): orphan cleanup on readonly fs [ 203.956362][ T6868] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #15: comm syz.3.291: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 32769, max 0(0), depth 0(0) [ 204.101775][ T6868] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.108504][ T6868] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.291: couldn't read orphan inode 15 (err -117) [ 204.117784][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 204.118686][ C1] EXT4-fs (loop3): initial error at time 1784053313: ext4_ext_check_inode:521: inode 15 [ 204.118742][ C1] EXT4-fs (loop3): last error at time 1784053313: ext4_ext_check_inode:521: inode 15 [ 204.121923][ T6691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.182686][ T6691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.198274][ T6868] loop3: lost filesystem error report for type 5 error -117 [ 204.211406][ T6879] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 204.219757][ T5623] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.252913][ T6868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 204.294128][ T6871] syzkaller0: entered promiscuous mode [ 204.361193][ T6871] syzkaller0: entered allmulticast mode [ 204.558863][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.636943][ T6883] tipc: Started in network mode [ 204.643705][ T6883] tipc: Node identity 4e762ecf2aec, cluster identity 4711 [ 204.663538][ T6883] tipc: Enabled bearer , priority 0 [ 204.728415][ T6865] tipc: Resetting bearer [ 204.787091][ T6865] tipc: Disabling bearer [ 205.547765][ T6691] team0: Port device team_slave_0 added [ 205.629760][ T6691] team0: Port device team_slave_1 added [ 209.326324][ T13] team0: Port device xfrm0 removed [ 209.581885][ T13] bond0 (unregistering): Released all slaves [ 209.599627][ T6691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.621264][ T6691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.653946][ T6691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.806981][ T6691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.863486][ T6691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.963647][ T6691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.085079][ T6941] loop3: detected capacity change from 0 to 256 [ 210.129215][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 210.152902][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 210.179797][ T6942] netlink: 14 bytes leftover after parsing attributes in process `syz.4.303'. [ 210.234397][ T6938] netlink: 100 bytes leftover after parsing attributes in process `syz.4.303'. [ 210.674517][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 210.703236][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 210.718842][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 211.329590][ T6953] bond3: entered promiscuous mode [ 211.356757][ T6953] bond3: entered allmulticast mode [ 211.434595][ T6691] hsr_slave_0: entered promiscuous mode [ 211.453298][ T6691] hsr_slave_1: entered promiscuous mode [ 211.466916][ T6691] debugfs: 'hsr0' already exists in 'hsr' [ 211.477640][ T6962] loop4: detected capacity change from 0 to 512 [ 211.489333][ T6691] Cannot create hsr debugfs directory [ 211.499760][ T6962] EXT4-fs: Ignoring removed i_version option [ 211.605139][ T6962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.693765][ T6962] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.720734][ T6962] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.309: iget: bad i_size value: 2533274857506816 [ 211.755488][ T6962] EXT4-fs (loop4): Remounting filesystem read-only [ 211.800622][ T6970] loop2: detected capacity change from 0 to 256 [ 213.725901][ T6978] loop1: detected capacity change from 0 to 1024 [ 213.777910][ T6978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.863248][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.961390][ T6978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 214.096418][ T6978] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.479284][ T6978] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.315: lblock 0 mapped to illegal pblock 0 (length 1) [ 214.543922][ T6978] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 214.606580][ T6978] EXT4-fs (loop1): This should not happen!! Data will be lost [ 214.606580][ T6978] [ 214.664490][ T6994] loop4: detected capacity change from 0 to 1024 [ 214.699680][ T6994] ext2: Unknown parameter 'subj_type' [ 215.008535][ T7009] netlink: 14 bytes leftover after parsing attributes in process `syz.0.319'. [ 215.205154][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 215.556420][ T7013] netlink: 100 bytes leftover after parsing attributes in process `syz.0.319'. [ 215.629144][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 215.659433][ T48] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 215.754577][ T48] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 215.789833][ T48] EXT4-fs (loop1): This should not happen!! Data will be lost [ 215.789833][ T48] [ 215.834984][ T5624] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 215.886605][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 216.133172][ T4938] Bluetooth: hci3: command 0x0406 tx timeout [ 216.139286][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 216.139350][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 216.247555][ T7019] bridge_slave_0: left allmulticast mode [ 216.297265][ T7019] bridge_slave_0: left promiscuous mode [ 216.331448][ T7019] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.419700][ T7031] overlayfs: missing 'lowerdir' [ 216.599757][ T7019] bridge_slave_1: left allmulticast mode [ 217.125264][ T7041] No control pipe specified [ 217.801366][ T7019] bridge_slave_1: left promiscuous mode [ 217.807307][ T7019] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.892476][ T7019] bond0: (slave bond_slave_0): Releasing backup interface [ 220.418961][ T7019] bond0: (slave bond_slave_1): Releasing backup interface [ 220.523838][ T7019] team0: Port device team_slave_0 removed [ 220.585633][ T7019] team0: Port device team_slave_1 removed [ 220.630899][ T7019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.678254][ T7019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.767990][ T7019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.845589][ T7019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.940665][ T7019] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 221.084355][ T7055] loop3: detected capacity change from 0 to 128 [ 221.144242][ T7055] EXT4-fs (loop3): Test dummy encryption mode enabled [ 221.205787][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 221.229185][ T7055] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.321675][ T7055] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.711155][ T13] hsr_slave_0: left promiscuous mode [ 221.745420][ T7059] loop2: detected capacity change from 0 to 2048 [ 221.756431][ T13] hsr_slave_1: left promiscuous mode [ 221.786460][ T13] veth1_macvtap: left promiscuous mode [ 221.792627][ T7059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.967693][ T13] veth0_macvtap: left promiscuous mode [ 222.021239][ T5630] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 222.029692][ T5630] Bluetooth: hci0: unexpected event for opcode 0x0413 [ 222.045448][ T13] veth1_vlan: left promiscuous mode [ 222.073020][ T13] veth0_vlan: left promiscuous mode [ 222.455750][ T5635] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.677966][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.751505][ T5774] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 222.759852][ T7072] syz.0.334 uses obsolete (PF_INET,SOCK_PACKET) [ 222.925836][ T5774] usb 5-1: Using ep0 maxpacket: 8 [ 222.950046][ T5774] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 222.981080][ T5774] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 223.003805][ T5774] usb 5-1: config 179 has no interface number 0 [ 223.010214][ T5774] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 223.025999][ T5774] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 223.040364][ T5774] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 223.055649][ T5774] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 223.064879][ T5774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.092709][ T7083] netlink: 14 bytes leftover after parsing attributes in process `syz.2.338'. [ 223.093147][ T7074] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.189259][ T7084] netlink: 100 bytes leftover after parsing attributes in process `syz.2.338'. [ 223.916608][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 224.994927][ T7106] bridge_slave_0: left allmulticast mode [ 225.000847][ T7106] bridge_slave_0: left promiscuous mode [ 225.009217][ T7106] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.030610][ T7106] bridge_slave_1: left allmulticast mode [ 225.037544][ T7106] bridge_slave_1: left promiscuous mode [ 225.046094][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.277793][ T7106] bond0: (slave bond_slave_0): Releasing backup interface [ 226.053379][ T5630] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 226.067083][ T5630] Bluetooth: hci0: Injecting HCI hardware error event [ 226.094799][ T5641] Bluetooth: hci0: hardware error 0x00 [ 226.859317][ T7119] overlayfs: missing 'lowerdir' [ 227.211694][ T5794] usb 5-1: USB disconnect, device number 2 [ 227.399195][ T7106] bond0: (slave bond_slave_1): Releasing backup interface [ 227.453740][ T7106] team0: Port device team_slave_0 removed [ 227.604024][ T7106] team0: Port device team_slave_1 removed [ 227.654485][ T7106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.690854][ T7106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.940906][ T7106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.967026][ T7106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.998303][ T7106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 229.445710][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 229.484440][ T5641] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 229.901592][ T6691] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 230.400375][ T7147] loop1: detected capacity change from 0 to 2048 [ 230.445408][ T6691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.534914][ T6691] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 230.588919][ T7147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.625209][ T6691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.658362][ T6691] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 230.680628][ T7147] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.692130][ T7150] netlink: 14 bytes leftover after parsing attributes in process `syz.4.353'. [ 230.737665][ T6691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.781446][ T7144] netlink: 100 bytes leftover after parsing attributes in process `syz.4.353'. [ 230.793375][ T6691] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 230.855851][ T6691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.893475][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 230.944444][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 231.105569][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 231.628370][ T7165] capability: warning: `syz.3.355' uses deprecated v2 capabilities in a way that may be insecure [ 231.886509][ T6691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.009718][ T6691] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.057728][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 232.385760][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.392999][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.901372][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.908599][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.307500][ T7185] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 233.366608][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.219224][ T7194] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 235.288230][ T7194] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 235.525119][ T7212] input: syz1 as /devices/virtual/input/input7 [ 236.564307][ T6691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.992863][ T7229] loop0: detected capacity change from 0 to 512 [ 238.243938][ T7229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.562616][ T5630] Bluetooth: hci2: command 0x1003 tx timeout [ 238.570318][ T5641] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 239.224747][ T7253] loop4: detected capacity change from 0 to 512 [ 239.399018][ T7253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.419817][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.608458][ T7253] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.995962][ T7256] team0: Port device xfrm0 removed [ 240.074791][ T7256] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 240.110891][ T7253] capability: warning: `syz.4.377' uses 32-bit capabilities (legacy support in use) [ 240.195226][ T7264] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 240.217741][ T7264] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 240.232108][ T7264] EXT4-fs (loop4): This should not happen!! Data will be lost [ 240.232108][ T7264] [ 240.243565][ T7264] EXT4-fs (loop4): Total free blocks count 0 [ 240.250624][ T7264] EXT4-fs (loop4): Free/Dirty block details [ 240.268866][ T7264] EXT4-fs (loop4): free_blocks=65280 [ 240.310143][ T7264] EXT4-fs (loop4): dirty_blocks=32 [ 240.335860][ T7264] EXT4-fs (loop4): Block reservation details [ 240.380019][ T7264] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 240.660237][ T5623] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 240.708584][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.034665][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 241.988618][ T7292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.384'. [ 243.942436][ T7306] loop4: detected capacity change from 0 to 512 [ 244.976536][ T7306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.103829][ T7306] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.373011][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.529311][ T7322] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 245.601567][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 245.653022][ T7325] netlink: 'syz.1.394': attribute type 26 has an invalid length. [ 245.689384][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.711323][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.722356][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.733838][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.743775][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.108455][ T7338] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.396'. [ 246.222850][ T7340] loop2: detected capacity change from 0 to 2048 [ 246.285223][ T7340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.297986][ T7340] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.396285][ T7340] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 246.421797][ T7340] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 246.444015][ T7340] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 246.496386][ T7350] loop4: detected capacity change from 0 to 256 [ 246.646480][ T7354] loop1: detected capacity change from 0 to 512 [ 246.695547][ T7354] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 247.732578][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.804035][ T5630] Bluetooth: hci2: command tx timeout [ 248.710335][ T7372] binder: 7371:7372 ioctl c0306201 0 returned -14 [ 248.758827][ T7372] binder: 7371:7372 ioctl 40383d03 0 returned -22 [ 249.473580][ T7391] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.411'. [ 250.001593][ T5630] Bluetooth: hci2: command tx timeout [ 250.037715][ T7385] bridge_slave_0: left allmulticast mode [ 250.128660][ T7385] bridge_slave_0: left promiscuous mode [ 250.174190][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.254616][ T7385] bridge_slave_1: left allmulticast mode [ 250.272540][ T7385] bridge_slave_1: left promiscuous mode [ 250.290829][ T7395] overlayfs: missing 'lowerdir' [ 250.294936][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.355175][ T7385] bond0: (slave bond_slave_0): Releasing backup interface [ 250.434732][ T7385] bond0: (slave bond_slave_1): Releasing backup interface [ 250.494510][ T7399] loop2: detected capacity change from 0 to 2048 [ 250.535049][ T7385] team0: Port device team_slave_0 removed [ 250.539437][ T7399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.566447][ T7385] team0: Port device team_slave_1 removed [ 250.575353][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.583541][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.593417][ T7399] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.611463][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.632028][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.662555][ T7385] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 250.698013][ T7399] overlayfs: failed to resolve './bus': -2 [ 250.880826][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.041217][ T5641] Bluetooth: hci2: command tx timeout [ 252.278690][ T7436] overlayfs: missing 'workdir' [ 252.376529][ T3326] bridge_slave_1: left allmulticast mode [ 252.419126][ T3326] bridge_slave_1: left promiscuous mode [ 252.469824][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.528174][ T7441] loop0: detected capacity change from 0 to 2048 [ 252.621501][ T7441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.725960][ T7441] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.807633][ T3326] bridge_slave_0: left allmulticast mode [ 253.214233][ T7441] overlayfs: failed to resolve './bus': -2 [ 253.528540][ T3326] bridge_slave_0: left promiscuous mode [ 253.536777][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.620787][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.124247][ T5641] Bluetooth: hci2: command tx timeout [ 254.583524][ T7485] loop4: detected capacity change from 0 to 8 [ 254.649342][ T3326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.703223][ T3326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.736295][ T3326] bond0 (unregistering): Released all slaves [ 254.866305][ T7449] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 255.013108][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.025101][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.438035][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 256.466640][ T7506] overlayfs: missing 'workdir' [ 256.552786][ T7492] bond1: entered promiscuous mode [ 256.584115][ T7492] bond1: entered allmulticast mode [ 256.837422][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 256.868193][ T7512] netlink: 44 bytes leftover after parsing attributes in process `syz.4.448'. [ 257.044571][ T3326] hsr_slave_0: left promiscuous mode [ 257.103917][ T3326] hsr_slave_1: left promiscuous mode [ 257.148558][ T3326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.215201][ T3326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.984583][ T7554] 0x000000000000-0x000000020000 : "" [ 258.002202][ T3326] team0 (unregistering): Port device team_slave_1 removed [ 258.047716][ T7554] ftl_cs: FTL header not found. [ 258.067067][ T3326] team0 (unregistering): Port device team_slave_0 removed [ 258.485217][ T7567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.458'. [ 258.524052][ T7527] bridge_slave_0: left allmulticast mode [ 258.529723][ T7527] bridge_slave_0: left promiscuous mode [ 258.539096][ T7527] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.556288][ T7527] bridge_slave_1: left allmulticast mode [ 258.563520][ T7527] bridge_slave_1: left promiscuous mode [ 258.570528][ T7527] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.585413][ T7527] bond0: (slave bond_slave_0): Releasing backup interface [ 258.599786][ T7527] bond0: (slave bond_slave_1): Releasing backup interface [ 258.614458][ T7527] team0: Port device team_slave_0 removed [ 258.626944][ T7527] team0: Port device team_slave_1 removed [ 258.633841][ T7527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.641860][ T7527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.650819][ T7527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.659902][ T7527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.670050][ T7527] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 258.783266][ T7545] syzkaller0: entered promiscuous mode [ 258.800804][ T7545] syzkaller0: entered allmulticast mode [ 259.089254][ T7569] bond4: entered promiscuous mode [ 259.099352][ T7569] bond4: entered allmulticast mode [ 259.249778][ T7577] loop4: detected capacity change from 0 to 512 [ 259.485825][ T7577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.500221][ T7577] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.186590][ T7582] loop2: detected capacity change from 0 to 512 [ 260.273503][ T7582] EXT4-fs warning (device loop2): dx_probe:800: inode #2: comm syz.2.461: Unrecognised inode hash code 255 [ 260.380635][ T7582] EXT4-fs warning (device loop2): dx_probe:933: inode #2: comm syz.2.461: Corrupt directory, running e2fsck is recommended [ 260.652899][ T7582] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 260.680337][ T7582] EXT4-fs error (device loop2): ext4_iget_extra_inode:5179: inode #15: comm syz.2.461: corrupted in-inode xattr: invalid ea_ino [ 260.726798][ T7582] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 260.727426][ T7582] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.461: couldn't read orphan inode 15 (err -117) [ 260.736698][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 260.736732][ C0] EXT4-fs (loop2): initial error at time 1784053370: ext4_iget_extra_inode:5179: inode 15 [ 260.736785][ C0] EXT4-fs (loop2): last error at time 1784053370: ext4_iget_extra_inode:5179: inode 15 [ 260.883531][ T7582] loop2: lost filesystem error report for type 5 error -117 [ 260.897775][ T7582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.094143][ T7582] EXT4-fs warning (device loop2): dx_probe:800: inode #2: comm syz.2.461: Unrecognised inode hash code 255 [ 261.134292][ T7582] EXT4-fs warning (device loop2): dx_probe:933: inode #2: comm syz.2.461: Corrupt directory, running e2fsck is recommended [ 261.304918][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.316418][ T7582] EXT4-fs warning (device loop2): dx_probe:800: inode #2: comm syz.2.461: Unrecognised inode hash code 255 [ 261.328897][ T7582] EXT4-fs warning (device loop2): dx_probe:933: inode #2: comm syz.2.461: Corrupt directory, running e2fsck is recommended [ 261.349238][ T7582] EXT4-fs error (device loop2): ext4_find_dest_de:2049: inode #2: block 4: comm syz.2.461: bad entry in directory: inode out of bounds - offset=0, inode=262143, rec_len=1024, size=1024 fake=0 [ 261.736731][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.168443][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 262.192850][ T7599] netlink: 56 bytes leftover after parsing attributes in process `syz.4.467'. [ 263.955756][ T7599] geneve2: entered promiscuous mode [ 263.963595][ T7599] geneve2: entered allmulticast mode [ 264.030835][ T7608] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 264.085413][ T7615] syzkaller0: entered promiscuous mode [ 264.096787][ T7615] syzkaller0: entered allmulticast mode [ 264.358540][ T7630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.473'. [ 265.173801][ T7638] Bluetooth: MGMT ver 1.23 [ 265.416922][ T7633] bond4: entered promiscuous mode [ 265.452886][ T7633] bond4: entered allmulticast mode [ 267.218477][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 267.294730][ T7657] netlink: 56 bytes leftover after parsing attributes in process `syz.2.482'. [ 267.500611][ T7657] geneve2: entered promiscuous mode [ 267.573869][ T7657] geneve2: entered allmulticast mode [ 268.548167][ T7679] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 268.592318][ T7327] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.618374][ T7327] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.645839][ T7327] bridge_slave_0: entered allmulticast mode [ 268.663486][ T7327] bridge_slave_0: entered promiscuous mode [ 268.685479][ T7686] syz_tun: entered allmulticast mode [ 268.703284][ T7327] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.728530][ T7327] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.756726][ T7327] bridge_slave_1: entered allmulticast mode [ 268.792249][ T7327] bridge_slave_1: entered promiscuous mode [ 268.923103][ T7327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.014685][ T7685] syz_tun: left allmulticast mode [ 269.195095][ T7327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.109597][ T7327] team0: Port device team_slave_0 added [ 270.174467][ T7327] team0: Port device team_slave_1 added [ 270.200585][ T7713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.492'. [ 270.409051][ T7721] loop3: detected capacity change from 0 to 128 [ 270.419626][ T7717] bond2: entered promiscuous mode [ 270.424849][ T7717] bond2: entered allmulticast mode [ 270.437985][ T7327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.445236][ T5922] kernel write not supported for file /input/mice (pid: 5922 comm: kworker/0:7) [ 270.448869][ T7327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.489098][ T7721] EXT4-fs (loop3): Test dummy encryption mode enabled [ 270.503862][ T7327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.545094][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 270.558825][ T7721] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 270.582677][ T7327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.590169][ T7327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.592520][ T7721] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.616657][ T7327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.711879][ T7725] loop4: detected capacity change from 0 to 512 [ 270.737289][ T7725] EXT4-fs (loop4): Test dummy encryption mode enabled [ 270.841311][ T7725] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.495: inode has both inline data and extents flags [ 270.872638][ T7725] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 270.873675][ T7725] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.495: couldn't read orphan inode 15 (err -117) [ 270.882948][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 270.882984][ C0] EXT4-fs (loop4): initial error at time 1784053380: ext4_orphan_get:1399: inode 15 [ 270.883048][ C0] EXT4-fs (loop4): last error at time 1784053380: ext4_orphan_get:1399: inode 15 [ 270.956216][ T7729] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 271.017125][ T7725] loop4: lost filesystem error report for type 5 error -117 [ 271.017296][ T7729] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 271.664398][ T7725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.684019][ T7327] hsr_slave_0: entered promiscuous mode [ 271.698579][ T7327] hsr_slave_1: entered promiscuous mode [ 271.706409][ T5635] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.706567][ T7327] debugfs: 'hsr0' already exists in 'hsr' [ 271.723017][ T7327] Cannot create hsr debugfs directory [ 272.625144][ T7750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 272.881761][ T7757] loop3: detected capacity change from 0 to 512 [ 273.557186][ T7757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.579585][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.649267][ T7757] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.106921][ T7765] syzkaller0: entered promiscuous mode [ 274.156924][ T7765] syzkaller0: entered allmulticast mode [ 274.447903][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.835210][ T7783] loop4: detected capacity change from 0 to 256 [ 274.847423][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'. [ 275.458647][ T7784] bond5: entered promiscuous mode [ 275.463893][ T7784] bond5: entered allmulticast mode [ 276.722382][ T7815] loop1: detected capacity change from 0 to 256 [ 276.942407][ T7815] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 278.928329][ T7831] loop2: detected capacity change from 0 to 512 [ 279.024965][ T7831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.133561][ T7831] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 279.303329][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 279.351862][ T7842] netlink: 56 bytes leftover after parsing attributes in process `syz.1.520'. [ 279.504104][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.839018][ T7848] No such timeout policy "syz1" [ 280.702817][ T7842] geneve2: entered promiscuous mode [ 280.752909][ T7842] geneve2: entered allmulticast mode [ 280.864111][ T7327] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 280.944781][ T7327] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 280.995906][ T7327] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 281.097079][ T7327] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 281.174355][ T7327] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 281.249957][ T7327] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 281.308670][ T7327] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 281.374030][ T7327] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 281.446108][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.523'. [ 281.760247][ T7859] bond6: entered promiscuous mode [ 281.790413][ T7859] bond6: entered allmulticast mode [ 282.159332][ T7327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.260885][ T7327] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.420109][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.427351][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.567810][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.575080][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.814969][ T7890] loop0: detected capacity change from 0 to 512 [ 282.830094][ T7890] ext4: Unknown parameter 'audit' [ 283.143373][ T7890] loop0: detected capacity change from 0 to 512 [ 283.519321][ T7890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.532709][ T7890] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.948253][ T5641] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 285.106995][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.389603][ T7921] loop0: detected capacity change from 0 to 512 [ 285.443403][ T7921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.443533][ T7921] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.526207][ T7918] loop1: detected capacity change from 0 to 8192 [ 286.256719][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.353734][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.536'. [ 286.773311][ T7940] bond2: entered promiscuous mode [ 286.798346][ T7940] bond2: entered allmulticast mode [ 287.144673][ T5630] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 288.591546][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'. [ 288.643837][ T7972] netlink: 56 bytes leftover after parsing attributes in process `syz.3.543'. [ 288.742878][ T7972] geneve2: entered promiscuous mode [ 288.773201][ T7972] geneve2: entered allmulticast mode [ 289.124946][ T7983] loop1: detected capacity change from 0 to 512 [ 289.139982][ T7983] ext4: Unknown parameter 'audit' [ 289.426620][ T7983] loop1: detected capacity change from 0 to 512 [ 289.874348][ T7983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.887480][ T7983] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.178559][ T7327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.293381][ T7995] loop3: detected capacity change from 0 to 512 [ 291.477349][ T7995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.546823][ T8000] loop2: detected capacity change from 0 to 512 [ 291.561369][ T7995] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.566549][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.578367][ T8000] EXT4-fs: Ignoring removed i_version option [ 291.634613][ T8000] EXT4-fs: Ignoring removed nobh option [ 291.712770][ T8000] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 291.806688][ T8000] EXT4-fs (loop2): 1 truncate cleaned up [ 291.828180][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.892722][ T8000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.059410][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.158470][ T8018] loop0: detected capacity change from 0 to 8192 [ 293.710141][ T7327] veth0_vlan: entered promiscuous mode [ 293.780389][ T7327] veth1_vlan: entered promiscuous mode [ 293.925621][ T8052] loop1: detected capacity change from 0 to 256 [ 294.014043][ T7327] veth0_macvtap: entered promiscuous mode [ 294.160038][ T7327] veth1_macvtap: entered promiscuous mode [ 294.269503][ T7327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.347945][ T7327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.426212][ T5991] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.459717][ T5991] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.503972][ T5991] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.580385][ T5991] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.694871][ T8066] netlink: 52 bytes leftover after parsing attributes in process `syz.3.569'. [ 294.734347][ T8066] netlink: 52 bytes leftover after parsing attributes in process `syz.3.569'. [ 294.910210][ T5991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.949747][ T5991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.168639][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.219268][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.368546][ T8084] input: syz1 as /devices/virtual/input/input8 [ 296.711787][ T8098] loop3: detected capacity change from 0 to 256 [ 297.102709][ T8108] loop4: detected capacity change from 0 to 128 [ 297.140335][ T8108] EXT4-fs (loop4): Test dummy encryption mode enabled [ 297.204708][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.579'. [ 297.232694][ T8109] netlink: 56 bytes leftover after parsing attributes in process `syz.3.579'. [ 297.429493][ T8108] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 297.458929][ T8117] syz.2.581 (8117): /proc/8113/oom_adj is deprecated, please use /proc/8113/oom_score_adj instead. [ 297.587895][ T8108] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 298.259387][ T5630] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 298.614843][ T5623] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.624579][ T8124] syzkaller0: entered promiscuous mode [ 298.658837][ T8124] syzkaller0: entered allmulticast mode [ 299.295758][ T8148] loop3: detected capacity change from 0 to 256 [ 299.506058][ T8154] loop4: detected capacity change from 0 to 8 [ 300.639277][ T30] audit: type=1326 audit(1784053410.114:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.3.595" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ee39de59 code=0x7ffc0000 [ 300.712591][ T30] audit: type=1326 audit(1784053410.144:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.3.595" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ee39de59 code=0x7ffc0000 [ 300.799046][ T30] audit: type=1326 audit(1784053410.154:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.3.595" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ee39de59 code=0x7ffc0000 [ 300.910306][ T30] audit: type=1326 audit(1784053410.164:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.3.595" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ee39de59 code=0x7ffc0000 [ 301.039849][ T30] audit: type=1326 audit(1784053410.184:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.3.595" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f85ee39de59 code=0x7ffc0000 [ 301.140702][ T30] audit: type=1326 audit(1784053410.184:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.3.595" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f85ee39de59 code=0x7ffc0000 [ 301.767837][ T8184] loop3: detected capacity change from 0 to 512 [ 301.782958][ T8184] ext4: Unknown parameter 'audit' [ 301.835547][ T8184] loop3: detected capacity change from 0 to 512 [ 302.476185][ T8184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.489061][ T8184] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.854974][ T8192] loop4: detected capacity change from 0 to 256 [ 302.946087][ T8194] syz_tun: entered allmulticast mode [ 303.078801][ T8193] syz_tun: left allmulticast mode [ 303.488173][ T8198] loop0: detected capacity change from 0 to 512 [ 303.581455][ T8198] EXT4-fs (loop0): Test dummy encryption mode enabled [ 304.199082][ T8198] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.610: inode has both inline data and extents flags [ 304.225192][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.243307][ T8198] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 304.251067][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 304.266734][ C0] EXT4-fs (loop0): initial error at time 1784053413: ext4_orphan_get:1399: inode 15 [ 304.276213][ C0] EXT4-fs (loop0): last error at time 1784053413: ext4_orphan_get:1399: inode 15 [ 304.289501][ T8198] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.610: couldn't read orphan inode 15 (err -117) [ 304.306113][ T8198] loop0: lost filesystem error report for type 5 error -117 [ 304.320907][ T8198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.467761][ T8209] fuse: Bad value for 'fd' [ 306.961822][ T8226] No such timeout policy "syz1" [ 308.023517][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.118381][ T8243] loop4: detected capacity change from 0 to 1024 [ 309.134435][ T8243] EXT4-fs: Ignoring removed i_version option [ 309.140918][ T8243] EXT4-fs: inline encryption not supported [ 309.718540][ T8243] EXT4-fs (loop4): Test dummy encryption mode enabled [ 309.806178][ T8243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.829483][ T8241] 9pnet_virtio: no channels available for device ./file0 [ 310.129712][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.652953][ T8266] tipc: Started in network mode [ 311.700294][ T8266] tipc: Node identity ea5401a97994, cluster identity 4711 [ 311.754697][ T8266] tipc: Enabled bearer , priority 0 [ 311.964627][ T8273] loop1: detected capacity change from 0 to 128 [ 312.050832][ T8265] tipc: Disabling bearer [ 312.082278][ T8273] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.169917][ T8273] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 313.276381][ T8283] loop4: detected capacity change from 0 to 1024 [ 313.409840][ T8283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.592963][ T5624] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 313.648421][ T8283] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.842860][ T8299] No such timeout policy "syz1" [ 316.442924][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.476368][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.836564][ T8323] syzkaller1: entered promiscuous mode [ 316.880292][ T8323] syzkaller1: entered allmulticast mode [ 318.539281][ T8335] loop2: detected capacity change from 0 to 256 [ 320.517044][ T8361] loop0: detected capacity change from 0 to 1024 [ 320.633588][ T8361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.669301][ T8361] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.999240][ T8387] loop3: detected capacity change from 0 to 128 [ 322.073490][ T8387] EXT4-fs (loop3): Test dummy encryption mode enabled [ 322.133408][ T8387] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 322.166832][ T8387] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 323.432524][ T5635] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 323.622429][ T8417] overlayfs: failed to clone upperpath [ 324.085516][ T8422] loop4: detected capacity change from 0 to 512 [ 324.100220][ T8422] ext4: Unknown parameter 'audit' [ 324.244718][ T8422] loop4: detected capacity change from 0 to 512 [ 324.861130][ T8422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.878845][ T8422] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.764831][ T8432] loop1: detected capacity change from 0 to 1024 [ 326.879597][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.909537][ T8432] EXT4-fs warning (device loop1): ext4_multi_mount_protect:392: Unable to create kmmpd thread for loop1. [ 331.549208][ T8474] overlayfs: failed to clone upperpath [ 333.228633][ T8491] loop4: detected capacity change from 0 to 1024 [ 333.399884][ T8491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.488252][ T8503] No such timeout policy "syz1" [ 334.791518][ T8505] loop0: detected capacity change from 0 to 256 [ 335.005046][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 335.264140][ T8491] netlink: 'syz.4.702': attribute type 29 has an invalid length. [ 335.276870][ T8491] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 335.292708][ T8491] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 335.309161][ T8491] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 335.321450][ T8491] EXT4-fs (loop4): This should not happen!! Data will be lost [ 335.321450][ T8491] [ 335.331246][ T8491] EXT4-fs (loop4): Total free blocks count 0 [ 335.332296][ T8510] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 335.337232][ T8491] EXT4-fs (loop4): Free/Dirty block details [ 335.350970][ T8510] EXT4-fs (loop4): This should not happen!! Data will be lost [ 335.350970][ T8510] [ 335.355798][ T8491] EXT4-fs (loop4): free_blocks=20480 [ 335.365488][ T8510] EXT4-fs (loop4): Total free blocks count 0 [ 335.365521][ T8510] EXT4-fs (loop4): Free/Dirty block details [ 335.408543][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 336.082948][ T8515] 9p: Bad value for 'rfdno' [ 337.752711][ T5623] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 338.647640][ T8531] syzkaller0: entered promiscuous mode [ 338.680120][ T8531] syzkaller0: entered allmulticast mode [ 340.666870][ T188] kernel write not supported for file /input/mice (pid: 188 comm: kworker/0:2) [ 342.111457][ T8570] No such timeout policy "syz1" [ 343.338185][ T8573] loop4: detected capacity change from 0 to 2048 [ 345.341674][ T8573] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 345.357816][ T8573] EXT4-fs: failed to create workqueue [ 345.501018][ T8573] EXT4-fs (loop4): mount failed [ 345.926971][ T8583] loop2: detected capacity change from 0 to 1024 [ 346.484346][ T8583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.725266][ T8607] loop1: detected capacity change from 0 to 512 [ 346.738711][ T8607] ext4: Unknown parameter 'audit' [ 346.879223][ T8607] loop1: detected capacity change from 0 to 512 [ 347.327709][ T8607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.340932][ T8607] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.069414][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.145292][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 349.333482][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.583102][ T8625] input: syz1 as /devices/virtual/input/input9 [ 349.633086][ T8623] netlink: 14 bytes leftover after parsing attributes in process `syz.4.741'. [ 350.299691][ T8631] netlink: 100 bytes leftover after parsing attributes in process `syz.4.741'. [ 350.459132][ T8635] input: syz1 as /devices/virtual/input/input10 [ 350.598797][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 350.627542][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 350.673632][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 350.739270][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 351.118639][ T5991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.607881][ T8645] No such timeout policy "syz1" [ 352.215128][ T5991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.426450][ T5631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 353.441671][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 353.450687][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 353.461854][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 353.471792][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 353.564767][ T5991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.777442][ T5991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.075492][ T5991] dvmrp0: left allmulticast mode [ 354.458705][ T8670] loop2: detected capacity change from 0 to 8 [ 354.664673][ T8674] loop4: detected capacity change from 0 to 1024 [ 354.673942][ T5991] bond0 (unregistering): Released all slaves [ 354.708696][ T5991] bond1 (unregistering): Released all slaves [ 354.767367][ T8674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.771925][ T5991] bond2 (unregistering): Released all slaves [ 354.840727][ T5991] bond3 (unregistering): Released all slaves [ 354.878323][ T5991] bond4 (unregistering): Released all slaves [ 354.926030][ T8672] syz_tun: entered allmulticast mode [ 354.951461][ T8684] warning: `syz.2.759' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 354.975959][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.007007][ T5631] Bluetooth: hci3: command 0x1003 tx timeout [ 355.007719][ T5641] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 355.037080][ T8664] syz_tun: left allmulticast mode [ 355.107078][ T5991] tipc: Left network mode [ 355.437934][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 355.466649][ T8692] loop1: detected capacity change from 0 to 2048 [ 355.561253][ T5641] Bluetooth: hci6: command tx timeout [ 355.601108][ T8692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.651637][ T8692] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.724528][ T8705] tipc: Enabling of bearer rejected, failed to enable media [ 355.836115][ T8696] netlink: 14 bytes leftover after parsing attributes in process `syz.2.763'. [ 355.911742][ T8707] netlink: 100 bytes leftover after parsing attributes in process `syz.2.763'. [ 355.927308][ T8709] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 355.976300][ T8709] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 356.047583][ T8718] netlink: 44 bytes leftover after parsing attributes in process `syz.4.768'. [ 356.084138][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 356.119035][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.768'. [ 356.139504][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 356.182186][ T8721] netlink: 56 bytes leftover after parsing attributes in process `syz.4.768'. [ 356.204872][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 356.832475][ T8733] No such timeout policy "syz1" [ 357.216574][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.777766][ T5641] Bluetooth: hci6: command tx timeout [ 358.442782][ T8749] input: syz1 as /devices/virtual/input/input11 [ 359.524052][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.777'. [ 359.771807][ T8758] loop1: detected capacity change from 0 to 8 [ 359.801435][ T5631] Bluetooth: hci6: command tx timeout [ 359.889913][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.935039][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 360.033756][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.059135][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.111878][ T8764] fuse: Bad value for 'fd' [ 360.183190][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.226213][ T8766] syz_tun: entered allmulticast mode [ 360.550818][ T5991] hsr_slave_0: left promiscuous mode [ 360.773611][ T8774] __nla_validate_parse: 1 callbacks suppressed [ 360.773637][ T8774] netlink: 44 bytes leftover after parsing attributes in process `syz.4.783'. [ 360.789826][ T5991] hsr_slave_1: left promiscuous mode [ 360.797651][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.783'. [ 360.826418][ T5991] veth1_macvtap: left promiscuous mode [ 360.832309][ T8774] netlink: 56 bytes leftover after parsing attributes in process `syz.4.783'. [ 360.843612][ T5991] veth0_macvtap: left promiscuous mode [ 360.849836][ T5991] veth1_vlan: left promiscuous mode [ 360.858009][ T5991] veth0_vlan: left promiscuous mode [ 361.659622][ T5631] Bluetooth: hci3: command 0x1003 tx timeout [ 361.666919][ T5641] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 361.881668][ T5641] Bluetooth: hci6: command tx timeout [ 362.032908][ T8781] loop2: detected capacity change from 0 to 128 [ 362.084158][ T8781] EXT4-fs (loop2): Test dummy encryption mode enabled [ 362.144020][ T8781] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 362.216543][ T8781] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.273744][ T59] smc: removing ib device syz2 [ 362.455696][ T8786] netlink: 100 bytes leftover after parsing attributes in process `syz.1.784'. [ 363.099790][ T8761] syz_tun: left allmulticast mode [ 363.111531][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'. [ 363.201995][ T5759] ================================================================== [ 363.210108][ T5759] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x25a/0x2a0 [ 363.218996][ T5759] Read of size 1 at addr ffff88802d64ce09 by task kworker/1:4/5759 [ 363.226908][ T5759] [ 363.229238][ T5759] CPU: 1 UID: 0 PID: 5759 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 363.229286][ T5759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 363.229314][ T5759] Workqueue: events smc_ib_port_event_work [ 363.229362][ T5759] Call Trace: [ 363.229375][ T5759] [ 363.229389][ T5759] dump_stack_lvl+0x100/0x190 [ 363.229432][ T5759] print_report+0x13d/0x4b0 [ 363.229495][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.229543][ T5759] ? __virt_addr_valid+0x239/0x430 [ 363.229588][ T5759] ? __ethtool_get_link_ksettings+0x25a/0x2a0 [ 363.229637][ T5759] kasan_report+0xdf/0x1c0 [ 363.229702][ T5759] ? __ethtool_get_link_ksettings+0x25a/0x2a0 [ 363.229757][ T5759] __ethtool_get_link_ksettings+0x25a/0x2a0 [ 363.229807][ T5759] netif_get_link_ksettings+0x1f2/0x360 [ 363.229854][ T5759] __ethtool_get_link_ksettings+0xcf/0x2a0 [ 363.229903][ T5759] ib_get_eth_speed+0x13a/0xb40 [ 363.229961][ T5759] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 363.230037][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.230084][ T5759] ? do_raw_spin_unlock+0x145/0x1e0 [ 363.230138][ T5759] rxe_query_port+0x12a/0x330 [ 363.230184][ T5759] ib_query_port+0x445/0x8b0 [ 363.230242][ T5759] smc_ib_port_event_work+0x14c/0xbd0 [ 363.230287][ T5759] ? smc_ib_port_event_work+0x54/0xbd0 [ 363.230333][ T5759] ? rcu_is_watching+0x12/0xc0 [ 363.230390][ T5759] process_one_work+0xa23/0x1940 [ 363.230464][ T5759] ? __pfx_process_one_work+0x10/0x10 [ 363.230524][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.230580][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.230632][ T5759] worker_thread+0x5ef/0xe50 [ 363.230701][ T5759] ? __pfx_worker_thread+0x10/0x10 [ 363.230763][ T5759] ? kthread+0x13a/0x450 [ 363.230818][ T5759] ? __pfx_worker_thread+0x10/0x10 [ 363.230878][ T5759] kthread+0x370/0x450 [ 363.230933][ T5759] ? __pfx_kthread+0x10/0x10 [ 363.230990][ T5759] ret_from_fork+0x72b/0xd50 [ 363.231045][ T5759] ? __pfx_ret_from_fork+0x10/0x10 [ 363.231093][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.231138][ T5759] ? __switch_to+0x800/0x10f0 [ 363.231195][ T5759] ? __switch_to_asm+0x39/0x70 [ 363.231247][ T5759] ? __pfx_kthread+0x10/0x10 [ 363.231304][ T5759] ret_from_fork_asm+0x1a/0x30 [ 363.231370][ T5759] [ 363.231382][ T5759] [ 363.449945][ T5759] Allocated by task 5634: [ 363.454268][ T5759] kasan_save_stack+0x30/0x50 [ 363.458973][ T5759] kasan_save_track+0x14/0x30 [ 363.463670][ T5759] __kasan_kmalloc+0xaa/0xb0 [ 363.468282][ T5759] __kvmalloc_node_noprof+0x34f/0x970 [ 363.473677][ T5759] alloc_netdev_mqs+0xd7/0x15c0 [ 363.478539][ T5759] rtnl_create_link+0xc13/0xf80 [ 363.483405][ T5759] rtnl_newlink+0x13bd/0x2380 [ 363.488094][ T5759] rtnetlink_rcv_msg+0x95e/0xe90 [ 363.493044][ T5759] netlink_rcv_skb+0x159/0x420 [ 363.497833][ T5759] netlink_unicast+0x585/0x850 [ 363.502621][ T5759] netlink_sendmsg+0x8b0/0xda0 [ 363.507412][ T5759] __sys_sendto+0x48b/0x4e0 [ 363.511918][ T5759] __x64_sys_sendto+0xe0/0x1c0 [ 363.516692][ T5759] do_syscall_64+0x115/0x870 [ 363.521284][ T5759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.527185][ T5759] [ 363.529497][ T5759] Freed by task 5991: [ 363.533470][ T5759] kasan_save_stack+0x30/0x50 [ 363.538177][ T5759] kasan_save_track+0x14/0x30 [ 363.542874][ T5759] kasan_save_free_info+0x3b/0x70 [ 363.547915][ T5759] __kasan_slab_free+0x5f/0x80 [ 363.552702][ T5759] kfree+0x22b/0x6c0 [ 363.556604][ T5759] device_release+0xd2/0x270 [ 363.561219][ T5759] kobject_put+0x1f7/0x640 [ 363.565648][ T5759] netdev_run_todo+0xa10/0x1600 [ 363.570506][ T5759] default_device_exit_batch+0x92b/0xc10 [ 363.576154][ T5759] ops_undo_list+0x363/0xab0 [ 363.580771][ T5759] cleanup_net+0x499/0x920 [ 363.585200][ T5759] process_one_work+0xa23/0x1940 [ 363.590164][ T5759] worker_thread+0x5ef/0xe50 [ 363.594779][ T5759] kthread+0x370/0x450 [ 363.598867][ T5759] ret_from_fork+0x72b/0xd50 [ 363.603472][ T5759] ret_from_fork_asm+0x1a/0x30 [ 363.608268][ T5759] [ 363.610580][ T5759] The buggy address belongs to the object at ffff88802d64c000 [ 363.610580][ T5759] which belongs to the cache kmalloc-cg-4k of size 4096 [ 363.624902][ T5759] The buggy address is located 3593 bytes inside of [ 363.624902][ T5759] freed 4096-byte region [ffff88802d64c000, ffff88802d64d000) [ 363.638890][ T5759] [ 363.641214][ T5759] The buggy address belongs to the physical page: [ 363.647620][ T5759] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d648 [ 363.656380][ T5759] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 363.664882][ T5759] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 363.672429][ T5759] page_type: f5(slab) [ 363.676412][ T5759] raw: 00fff00000000040 ffff88813fe3b500 dead000000000122 0000000000000000 [ 363.685001][ T5759] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 363.693592][ T5759] head: 00fff00000000040 ffff88813fe3b500 dead000000000122 0000000000000000 [ 363.702267][ T5759] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 363.710942][ T5759] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 363.719622][ T5759] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 363.728291][ T5759] page dumped because: kasan: bad access detected [ 363.734702][ T5759] page_owner tracks the page as allocated [ 363.740405][ T5759] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5623, tgid 5623 (syz-executor), ts 95332096396, free_ts 95249075636 [ 363.761792][ T5759] post_alloc_hook+0xfd/0x120 [ 363.766492][ T5759] get_page_from_freelist+0xf48/0x3530 [ 363.771971][ T5759] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 363.777879][ T5759] new_slab+0xa2/0x650 [ 363.781956][ T5759] refill_objects+0xe3/0x410 [ 363.786556][ T5759] __pcs_replace_empty_main+0x376/0x680 [ 363.792112][ T5759] __kmalloc_noprof+0x66d/0x820 [ 363.796980][ T5759] __register_sysctl_table+0xac/0x1650 [ 363.802464][ T5759] __addrconf_sysctl_register+0x1a2/0x360 [ 363.808225][ T5759] addrconf_sysctl_register+0x163/0x200 [ 363.813799][ T5759] ipv6_add_dev+0xaf2/0x1520 [ 363.818410][ T5759] addrconf_notify+0x5db/0x1ba0 [ 363.823270][ T5759] notifier_call_chain+0x99/0x3f0 [ 363.828315][ T5759] call_netdevice_notifiers_info+0xbe/0x110 [ 363.834226][ T5759] register_netdevice+0x1998/0x25a0 [ 363.839437][ T5759] veth_newlink+0x44a/0xa00 [ 363.843954][ T5759] page last free pid 5635 tgid 5635 stack trace: [ 363.850278][ T5759] __free_frozen_pages+0x79f/0x1090 [ 363.855492][ T5759] qlist_free_all+0x47/0xf0 [ 363.860021][ T5759] kasan_quarantine_reduce+0x1a0/0x1f0 [ 363.865502][ T5759] __kasan_slab_alloc+0x69/0x90 [ 363.870386][ T5759] __kmalloc_cache_noprof+0x265/0x6c0 [ 363.875770][ T5759] ref_tracker_alloc+0x190/0x590 [ 363.880733][ T5759] netdev_queue_update_kobjects+0x2db/0x6f0 [ 363.886671][ T5759] netdev_register_kobject+0x2b3/0x3d0 [ 363.892160][ T5759] register_netdevice+0x15b6/0x25a0 [ 363.897382][ T5759] veth_newlink+0x316/0xa00 [ 363.901899][ T5759] rtnl_newlink+0x1499/0x2380 [ 363.906590][ T5759] rtnetlink_rcv_msg+0x95e/0xe90 [ 363.911539][ T5759] netlink_rcv_skb+0x159/0x420 [ 363.916332][ T5759] netlink_unicast+0x585/0x850 [ 363.921118][ T5759] netlink_sendmsg+0x8b0/0xda0 [ 363.925907][ T5759] __sys_sendto+0x48b/0x4e0 [ 363.930413][ T5759] [ 363.932724][ T5759] Memory state around the buggy address: [ 363.938345][ T5759] ffff88802d64cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 363.946404][ T5759] ffff88802d64cd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 363.954467][ T5759] >ffff88802d64ce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 363.962525][ T5759] ^ [ 363.966844][ T5759] ffff88802d64ce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 363.974900][ T5759] ffff88802d64cf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 363.982954][ T5759] ================================================================== [ 364.103931][ T5759] Disabling lock debugging due to kernel taint [ 364.115853][ T5759] ================================================================== [ 364.123953][ T5759] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x264/0x2a0 [ 364.132854][ T5759] Read of size 8 at addr ffff88802d64ccc8 by task kworker/1:4/5759 [ 364.140786][ T5759] [ 364.143125][ T5759] CPU: 1 UID: 0 PID: 5759 Comm: kworker/1:4 Tainted: G B syzkaller #0 PREEMPT(full) [ 364.143182][ T5759] Tainted: [B]=BAD_PAGE [ 364.143196][ T5759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 364.143223][ T5759] Workqueue: events smc_ib_port_event_work [ 364.143271][ T5759] Call Trace: [ 364.143285][ T5759] [ 364.143300][ T5759] dump_stack_lvl+0x100/0x190 [ 364.143342][ T5759] print_report+0x13d/0x4b0 [ 364.143399][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.143447][ T5759] ? __virt_addr_valid+0x239/0x430 [ 364.143491][ T5759] ? __ethtool_get_link_ksettings+0x264/0x2a0 [ 364.143544][ T5759] kasan_report+0xdf/0x1c0 [ 364.143609][ T5759] ? __ethtool_get_link_ksettings+0x264/0x2a0 [ 364.143660][ T5759] __ethtool_get_link_ksettings+0x264/0x2a0 [ 364.143706][ T5759] netif_get_link_ksettings+0x1f2/0x360 [ 364.143754][ T5759] __ethtool_get_link_ksettings+0xcf/0x2a0 [ 364.143798][ T5759] ib_get_eth_speed+0x13a/0xb40 [ 364.143852][ T5759] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 364.143912][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.143955][ T5759] ? do_raw_spin_unlock+0x145/0x1e0 [ 364.144003][ T5759] rxe_query_port+0x12a/0x330 [ 364.144046][ T5759] ib_query_port+0x445/0x8b0 [ 364.144098][ T5759] smc_ib_port_event_work+0x14c/0xbd0 [ 364.144140][ T5759] ? smc_ib_port_event_work+0x54/0xbd0 [ 364.144181][ T5759] ? rcu_is_watching+0x12/0xc0 [ 364.144232][ T5759] process_one_work+0xa23/0x1940 [ 364.144297][ T5759] ? __pfx_process_one_work+0x10/0x10 [ 364.144351][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.144400][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.144447][ T5759] worker_thread+0x5ef/0xe50 [ 364.144514][ T5759] ? __pfx_worker_thread+0x10/0x10 [ 364.144577][ T5759] ? kthread+0x13a/0x450 [ 364.144633][ T5759] ? __pfx_worker_thread+0x10/0x10 [ 364.144694][ T5759] kthread+0x370/0x450 [ 364.144749][ T5759] ? __pfx_kthread+0x10/0x10 [ 364.144807][ T5759] ret_from_fork+0x72b/0xd50 [ 364.144858][ T5759] ? __pfx_ret_from_fork+0x10/0x10 [ 364.144907][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.144955][ T5759] ? __switch_to+0x800/0x10f0 [ 364.145013][ T5759] ? __switch_to_asm+0x39/0x70 [ 364.145067][ T5759] ? __pfx_kthread+0x10/0x10 [ 364.145126][ T5759] ret_from_fork_asm+0x1a/0x30 [ 364.145193][ T5759] [ 364.145206][ T5759] [ 364.369450][ T5759] Allocated by task 5634: [ 364.373771][ T5759] kasan_save_stack+0x30/0x50 [ 364.378474][ T5759] kasan_save_track+0x14/0x30 [ 364.383177][ T5759] __kasan_kmalloc+0xaa/0xb0 [ 364.387788][ T5759] __kvmalloc_node_noprof+0x34f/0x970 [ 364.393179][ T5759] alloc_netdev_mqs+0xd7/0x15c0 [ 364.398040][ T5759] rtnl_create_link+0xc13/0xf80 [ 364.402903][ T5759] rtnl_newlink+0x13bd/0x2380 [ 364.407589][ T5759] rtnetlink_rcv_msg+0x95e/0xe90 [ 364.412536][ T5759] netlink_rcv_skb+0x159/0x420 [ 364.417323][ T5759] netlink_unicast+0x585/0x850 [ 364.422111][ T5759] netlink_sendmsg+0x8b0/0xda0 [ 364.426916][ T5759] __sys_sendto+0x48b/0x4e0 [ 364.431421][ T5759] __x64_sys_sendto+0xe0/0x1c0 [ 364.436187][ T5759] do_syscall_64+0x115/0x870 [ 364.440780][ T5759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.446676][ T5759] [ 364.448989][ T5759] Freed by task 5991: [ 364.452961][ T5759] kasan_save_stack+0x30/0x50 [ 364.457666][ T5759] kasan_save_track+0x14/0x30 [ 364.462364][ T5759] kasan_save_free_info+0x3b/0x70 [ 364.467399][ T5759] __kasan_slab_free+0x5f/0x80 [ 364.472183][ T5759] kfree+0x22b/0x6c0 [ 364.476083][ T5759] device_release+0xd2/0x270 [ 364.480694][ T5759] kobject_put+0x1f7/0x640 [ 364.485136][ T5759] netdev_run_todo+0xa10/0x1600 [ 364.489997][ T5759] default_device_exit_batch+0x92b/0xc10 [ 364.495641][ T5759] ops_undo_list+0x363/0xab0 [ 364.500242][ T5759] cleanup_net+0x499/0x920 [ 364.504674][ T5759] process_one_work+0xa23/0x1940 [ 364.509637][ T5759] worker_thread+0x5ef/0xe50 [ 364.514250][ T5759] kthread+0x370/0x450 [ 364.518336][ T5759] ret_from_fork+0x72b/0xd50 [ 364.522937][ T5759] ret_from_fork_asm+0x1a/0x30 [ 364.527722][ T5759] [ 364.530036][ T5759] The buggy address belongs to the object at ffff88802d64c000 [ 364.530036][ T5759] which belongs to the cache kmalloc-cg-4k of size 4096 [ 364.544352][ T5759] The buggy address is located 3272 bytes inside of [ 364.544352][ T5759] freed 4096-byte region [ffff88802d64c000, ffff88802d64d000) [ 364.558331][ T5759] [ 364.560649][ T5759] The buggy address belongs to the physical page: [ 364.567140][ T5759] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d648 [ 364.575912][ T5759] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 364.584410][ T5759] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 364.591955][ T5759] page_type: f5(slab) [ 364.595939][ T5759] raw: 00fff00000000040 ffff88813fe3b500 dead000000000122 0000000000000000 [ 364.604528][ T5759] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 364.613115][ T5759] head: 00fff00000000040 ffff88813fe3b500 dead000000000122 0000000000000000 [ 364.621789][ T5759] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 364.630464][ T5759] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 364.639148][ T5759] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 364.647823][ T5759] page dumped because: kasan: bad access detected [ 364.654231][ T5759] page_owner tracks the page as allocated [ 364.659934][ T5759] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5623, tgid 5623 (syz-executor), ts 95332096396, free_ts 95249075636 [ 364.681349][ T5759] post_alloc_hook+0xfd/0x120 [ 364.686050][ T5759] get_page_from_freelist+0xf48/0x3530 [ 364.691528][ T5759] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 364.697491][ T5759] new_slab+0xa2/0x650 [ 364.701576][ T5759] refill_objects+0xe3/0x410 [ 364.706176][ T5759] __pcs_replace_empty_main+0x376/0x680 [ 364.711734][ T5759] __kmalloc_noprof+0x66d/0x820 [ 364.716600][ T5759] __register_sysctl_table+0xac/0x1650 [ 364.722083][ T5759] __addrconf_sysctl_register+0x1a2/0x360 [ 364.727830][ T5759] addrconf_sysctl_register+0x163/0x200 [ 364.733399][ T5759] ipv6_add_dev+0xaf2/0x1520 [ 364.738012][ T5759] addrconf_notify+0x5db/0x1ba0 [ 364.742870][ T5759] notifier_call_chain+0x99/0x3f0 [ 364.747916][ T5759] call_netdevice_notifiers_info+0xbe/0x110 [ 364.753827][ T5759] register_netdevice+0x1998/0x25a0 [ 364.759037][ T5759] veth_newlink+0x44a/0xa00 [ 364.763555][ T5759] page last free pid 5635 tgid 5635 stack trace: [ 364.769879][ T5759] __free_frozen_pages+0x79f/0x1090 [ 364.775091][ T5759] qlist_free_all+0x47/0xf0 [ 364.779615][ T5759] kasan_quarantine_reduce+0x1a0/0x1f0 [ 364.785095][ T5759] __kasan_slab_alloc+0x69/0x90 [ 364.789972][ T5759] __kmalloc_cache_noprof+0x265/0x6c0 [ 364.795359][ T5759] ref_tracker_alloc+0x190/0x590 [ 364.800321][ T5759] netdev_queue_update_kobjects+0x2db/0x6f0 [ 364.806243][ T5759] netdev_register_kobject+0x2b3/0x3d0 [ 364.811732][ T5759] register_netdevice+0x15b6/0x25a0 [ 364.816945][ T5759] veth_newlink+0x316/0xa00 [ 364.821465][ T5759] rtnl_newlink+0x1499/0x2380 [ 364.826159][ T5759] rtnetlink_rcv_msg+0x95e/0xe90 [ 364.831107][ T5759] netlink_rcv_skb+0x159/0x420 [ 364.835894][ T5759] netlink_unicast+0x585/0x850 [ 364.840680][ T5759] netlink_sendmsg+0x8b0/0xda0 [ 364.845484][ T5759] __sys_sendto+0x48b/0x4e0 [ 364.850028][ T5759] [ 364.852341][ T5759] Memory state around the buggy address: [ 364.857961][ T5759] ffff88802d64cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.866021][ T5759] ffff88802d64cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.874083][ T5759] >ffff88802d64cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.882140][ T5759] ^ [ 364.888546][ T5759] ffff88802d64cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.896615][ T5759] ffff88802d64cd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.904675][ T5759] ================================================================== [ 364.961041][ T5759] ================================================================== [ 364.969139][ T5759] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x289/0x2a0 [ 364.977997][ T5759] Read of size 8 at addr ffff88802d64c008 by task kworker/1:4/5759 [ 364.985880][ T5759] [ 364.988200][ T5759] CPU: 1 UID: 0 PID: 5759 Comm: kworker/1:4 Tainted: G B syzkaller #0 PREEMPT(full) [ 364.988241][ T5759] Tainted: [B]=BAD_PAGE [ 364.988251][ T5759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 364.988271][ T5759] Workqueue: events smc_ib_port_event_work [ 364.988306][ T5759] Call Trace: [ 364.988316][ T5759] [ 364.988327][ T5759] dump_stack_lvl+0x100/0x190 [ 364.988359][ T5759] print_report+0x13d/0x4b0 [ 364.988400][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.988435][ T5759] ? __virt_addr_valid+0x239/0x430 [ 364.988466][ T5759] ? __ethtool_get_link_ksettings+0x289/0x2a0 [ 364.988512][ T5759] kasan_report+0xdf/0x1c0 [ 364.988573][ T5759] ? __ethtool_get_link_ksettings+0x289/0x2a0 [ 364.988611][ T5759] __ethtool_get_link_ksettings+0x289/0x2a0 [ 364.988647][ T5759] netif_get_link_ksettings+0x1f2/0x360 [ 364.988681][ T5759] __ethtool_get_link_ksettings+0xcf/0x2a0 [ 364.988717][ T5759] ib_get_eth_speed+0x13a/0xb40 [ 364.988759][ T5759] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 364.988807][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.988841][ T5759] ? do_raw_spin_unlock+0x145/0x1e0 [ 364.988880][ T5759] rxe_query_port+0x12a/0x330 [ 364.988914][ T5759] ib_query_port+0x445/0x8b0 [ 364.988956][ T5759] smc_ib_port_event_work+0x14c/0xbd0 [ 364.988989][ T5759] ? smc_ib_port_event_work+0x54/0xbd0 [ 364.989024][ T5759] ? rcu_is_watching+0x12/0xc0 [ 364.989064][ T5759] process_one_work+0xa23/0x1940 [ 364.989117][ T5759] ? __pfx_process_one_work+0x10/0x10 [ 364.989160][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.989200][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.989237][ T5759] worker_thread+0x5ef/0xe50 [ 364.989286][ T5759] ? __pfx_worker_thread+0x10/0x10 [ 364.989330][ T5759] ? kthread+0x13a/0x450 [ 364.989369][ T5759] ? __pfx_worker_thread+0x10/0x10 [ 364.989413][ T5759] kthread+0x370/0x450 [ 364.989452][ T5759] ? __pfx_kthread+0x10/0x10 [ 364.989494][ T5759] ret_from_fork+0x72b/0xd50 [ 364.989532][ T5759] ? __pfx_ret_from_fork+0x10/0x10 [ 364.989566][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.989606][ T5759] ? __switch_to+0x800/0x10f0 [ 364.989662][ T5759] ? __switch_to_asm+0x39/0x70 [ 364.989700][ T5759] ? __pfx_kthread+0x10/0x10 [ 364.989741][ T5759] ret_from_fork_asm+0x1a/0x30 [ 364.989789][ T5759] [ 364.989798][ T5759] [ 365.214049][ T5759] Allocated by task 5634: [ 365.218368][ T5759] kasan_save_stack+0x30/0x50 [ 365.223070][ T5759] kasan_save_track+0x14/0x30 [ 365.227766][ T5759] __kasan_kmalloc+0xaa/0xb0 [ 365.232372][ T5759] __kvmalloc_node_noprof+0x34f/0x970 [ 365.237762][ T5759] alloc_netdev_mqs+0xd7/0x15c0 [ 365.242621][ T5759] rtnl_create_link+0xc13/0xf80 [ 365.247481][ T5759] rtnl_newlink+0x13bd/0x2380 [ 365.252172][ T5759] rtnetlink_rcv_msg+0x95e/0xe90 [ 365.257160][ T5759] netlink_rcv_skb+0x159/0x420 [ 365.261948][ T5759] netlink_unicast+0x585/0x850 [ 365.266733][ T5759] netlink_sendmsg+0x8b0/0xda0 [ 365.271522][ T5759] __sys_sendto+0x48b/0x4e0 [ 365.276035][ T5759] __x64_sys_sendto+0xe0/0x1c0 [ 365.280811][ T5759] do_syscall_64+0x115/0x870 [ 365.285406][ T5759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.291309][ T5759] [ 365.293622][ T5759] Freed by task 5991: [ 365.297593][ T5759] kasan_save_stack+0x30/0x50 [ 365.302300][ T5759] kasan_save_track+0x14/0x30 [ 365.307019][ T5759] kasan_save_free_info+0x3b/0x70 [ 365.312052][ T5759] __kasan_slab_free+0x5f/0x80 [ 365.316841][ T5759] kfree+0x22b/0x6c0 [ 365.320743][ T5759] device_release+0xd2/0x270 [ 365.325375][ T5759] kobject_put+0x1f7/0x640 [ 365.329803][ T5759] netdev_run_todo+0xa10/0x1600 [ 365.334663][ T5759] default_device_exit_batch+0x92b/0xc10 [ 365.340310][ T5759] ops_undo_list+0x363/0xab0 [ 365.344911][ T5759] cleanup_net+0x499/0x920 [ 365.349340][ T5759] process_one_work+0xa23/0x1940 [ 365.354301][ T5759] worker_thread+0x5ef/0xe50 [ 365.358914][ T5759] kthread+0x370/0x450 [ 365.363003][ T5759] ret_from_fork+0x72b/0xd50 [ 365.367605][ T5759] ret_from_fork_asm+0x1a/0x30 [ 365.372387][ T5759] [ 365.374700][ T5759] The buggy address belongs to the object at ffff88802d64c000 [ 365.374700][ T5759] which belongs to the cache kmalloc-cg-4k of size 4096 [ 365.389018][ T5759] The buggy address is located 8 bytes inside of [ 365.389018][ T5759] freed 4096-byte region [ffff88802d64c000, ffff88802d64d000) [ 365.402739][ T5759] [ 365.405061][ T5759] The buggy address belongs to the physical page: [ 365.411462][ T5759] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d648 [ 365.420230][ T5759] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 365.428730][ T5759] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 365.436278][ T5759] page_type: f5(slab) [ 365.440261][ T5759] raw: 00fff00000000040 ffff88813fe3b500 dead000000000122 0000000000000000 [ 365.448852][ T5759] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 365.457445][ T5759] head: 00fff00000000040 ffff88813fe3b500 dead000000000122 0000000000000000 [ 365.466125][ T5759] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 365.474808][ T5759] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 365.483491][ T5759] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 365.492159][ T5759] page dumped because: kasan: bad access detected [ 365.498561][ T5759] page_owner tracks the page as allocated [ 365.504263][ T5759] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5623, tgid 5623 (syz-executor), ts 95332096396, free_ts 95249075636 [ 365.525649][ T5759] post_alloc_hook+0xfd/0x120 [ 365.530351][ T5759] get_page_from_freelist+0xf48/0x3530 [ 365.535830][ T5759] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 365.541745][ T5759] new_slab+0xa2/0x650 [ 365.545827][ T5759] refill_objects+0xe3/0x410 [ 365.550428][ T5759] __pcs_replace_empty_main+0x376/0x680 [ 365.555986][ T5759] __kmalloc_noprof+0x66d/0x820 [ 365.560855][ T5759] __register_sysctl_table+0xac/0x1650 [ 365.566342][ T5759] __addrconf_sysctl_register+0x1a2/0x360 [ 365.572094][ T5759] addrconf_sysctl_register+0x163/0x200 [ 365.577666][ T5759] ipv6_add_dev+0xaf2/0x1520 [ 365.582278][ T5759] addrconf_notify+0x5db/0x1ba0 [ 365.587140][ T5759] notifier_call_chain+0x99/0x3f0 [ 365.592191][ T5759] call_netdevice_notifiers_info+0xbe/0x110 [ 365.598110][ T5759] register_netdevice+0x1998/0x25a0 [ 365.603320][ T5759] veth_newlink+0x44a/0xa00 [ 365.607838][ T5759] page last free pid 5635 tgid 5635 stack trace: [ 365.614155][ T5759] __free_frozen_pages+0x79f/0x1090 [ 365.619363][ T5759] qlist_free_all+0x47/0xf0 [ 365.623880][ T5759] kasan_quarantine_reduce+0x1a0/0x1f0 [ 365.629357][ T5759] __kasan_slab_alloc+0x69/0x90 [ 365.634230][ T5759] __kmalloc_cache_noprof+0x265/0x6c0 [ 365.639616][ T5759] ref_tracker_alloc+0x190/0x590 [ 365.644575][ T5759] netdev_queue_update_kobjects+0x2db/0x6f0 [ 365.650496][ T5759] netdev_register_kobject+0x2b3/0x3d0 [ 365.655984][ T5759] register_netdevice+0x15b6/0x25a0 [ 365.661198][ T5759] veth_newlink+0x316/0xa00 [ 365.665715][ T5759] rtnl_newlink+0x1499/0x2380 [ 365.670400][ T5759] rtnetlink_rcv_msg+0x95e/0xe90 [ 365.675346][ T5759] netlink_rcv_skb+0x159/0x420 [ 365.680133][ T5759] netlink_unicast+0x585/0x850 [ 365.684920][ T5759] netlink_sendmsg+0x8b0/0xda0 [ 365.689707][ T5759] __sys_sendto+0x48b/0x4e0 [ 365.694216][ T5759] [ 365.696531][ T5759] Memory state around the buggy address: [ 365.702152][ T5759] ffff88802d64bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 365.710211][ T5759] ffff88802d64bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 365.718272][ T5759] >ffff88802d64c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 365.726417][ T5759] ^ [ 365.730745][ T5759] ffff88802d64c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 365.738807][ T5759] ffff88802d64c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 365.746868][ T5759] ================================================================== [ 365.811120][ T5759] Oops: general protection fault, probably for non-canonical address 0xe08dfc6ae0000343: 0000 [#1] SMP KASAN NOPTI [ 365.823257][ T5759] KASAN: maybe wild-memory-access in range [0x0470035700001a18-0x0470035700001a1f] [ 365.832571][ T5759] CPU: 1 UID: 0 PID: 5759 Comm: kworker/1:4 Tainted: G B syzkaller #0 PREEMPT(full) [ 365.843549][ T5759] Tainted: [B]=BAD_PAGE [ 365.847704][ T5759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 365.857778][ T5759] Workqueue: events smc_ib_port_event_work [ 365.863622][ T5759] RIP: 0010:__ethtool_get_link_ksettings+0x20a/0x2a0 [ 365.870331][ T5759] Code: 48 c1 ea 03 80 3c 02 00 0f 85 96 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 6b 08 49 8d bd b8 02 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 63 49 83 bd b8 02 00 00 00 0f 84 a1 fe ff ff e9 89 [ 365.889970][ T5759] RSP: 0018:ffffc9000465f980 EFLAGS: 00010213 [ 365.896069][ T5759] RAX: dffffc0000000000 RBX: ffff88802d64c000 RCX: ffffffff81c669af [ 365.904062][ T5759] RDX: 008e006ae0000343 RSI: ffffffff81c669bd RDI: 0470035700001a1f [ 365.912053][ T5759] RBP: ffff88802d64ce09 R08: 0000000000000007 R09: 0000000000000000 [ 365.920035][ T5759] R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: ffffc9000465fa30 [ 365.928012][ T5759] R13: 0470035700001767 R14: ffffc9000465fa30 R15: 00000000ffffffff [ 365.935989][ T5759] FS: 0000000000000000(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000 [ 365.944932][ T5759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.951525][ T5759] CR2: 00007f85ee5ed9b8 CR3: 0000000053f4d000 CR4: 0000000000350ef0 [ 365.959498][ T5759] Call Trace: [ 365.962779][ T5759] [ 365.965708][ T5759] netif_get_link_ksettings+0x1f2/0x360 [ 365.971278][ T5759] __ethtool_get_link_ksettings+0xcf/0x2a0 [ 365.977104][ T5759] ib_get_eth_speed+0x13a/0xb40 [ 365.981979][ T5759] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 365.987382][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.993032][ T5759] ? do_raw_spin_unlock+0x145/0x1e0 [ 365.998254][ T5759] rxe_query_port+0x12a/0x330 [ 366.002946][ T5759] ib_query_port+0x445/0x8b0 [ 366.007564][ T5759] smc_ib_port_event_work+0x14c/0xbd0 [ 366.012949][ T5759] ? smc_ib_port_event_work+0x54/0xbd0 [ 366.018423][ T5759] ? rcu_is_watching+0x12/0xc0 [ 366.023212][ T5759] process_one_work+0xa23/0x1940 [ 366.028194][ T5759] ? __pfx_process_one_work+0x10/0x10 [ 366.033601][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.039267][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.044922][ T5759] worker_thread+0x5ef/0xe50 [ 366.049554][ T5759] ? __pfx_worker_thread+0x10/0x10 [ 366.054697][ T5759] ? kthread+0x13a/0x450 [ 366.058963][ T5759] ? __pfx_worker_thread+0x10/0x10 [ 366.064109][ T5759] kthread+0x370/0x450 [ 366.068211][ T5759] ? __pfx_kthread+0x10/0x10 [ 366.072828][ T5759] ret_from_fork+0x72b/0xd50 [ 366.077434][ T5759] ? __pfx_ret_from_fork+0x10/0x10 [ 366.082561][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.088210][ T5759] ? __switch_to+0x800/0x10f0 [ 366.092916][ T5759] ? __switch_to_asm+0x39/0x70 [ 366.097703][ T5759] ? __pfx_kthread+0x10/0x10 [ 366.102320][ T5759] ret_from_fork_asm+0x1a/0x30 [ 366.107119][ T5759] [ 366.110128][ T5759] Modules linked in: [ 366.115093][ T5759] ---[ end trace 0000000000000000 ]--- [ 366.132145][ T5759] RIP: 0010:__ethtool_get_link_ksettings+0x20a/0x2a0 [ 366.138934][ T5759] Code: 48 c1 ea 03 80 3c 02 00 0f 85 96 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 6b 08 49 8d bd b8 02 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 63 49 83 bd b8 02 00 00 00 0f 84 a1 fe ff ff e9 89 [ 366.159034][ T5759] RSP: 0018:ffffc9000465f980 EFLAGS: 00010213 [ 366.165775][ T5759] RAX: dffffc0000000000 RBX: ffff88802d64c000 RCX: ffffffff81c669af [ 366.174014][ T5759] RDX: 008e006ae0000343 RSI: ffffffff81c669bd RDI: 0470035700001a1f [ 366.182279][ T5759] RBP: ffff88802d64ce09 R08: 0000000000000007 R09: 0000000000000000 [ 366.190299][ T5759] R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: ffffc9000465fa30 [ 366.200424][ T5759] R13: 0470035700001767 R14: ffffc9000465fa30 R15: 00000000ffffffff [ 366.208685][ T5759] FS: 0000000000000000(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000 [ 366.217910][ T5759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.224737][ T5759] CR2: 00007f85ee5ed9b8 CR3: 000000007fa08000 CR4: 0000000000350ef0 [ 366.235974][ T5759] Kernel panic - not syncing: Fatal exception [ 366.242265][ T5759] Kernel Offset: disabled [ 366.246578][ T5759] Rebooting in 86400 seconds..