last executing test programs: 1m26.716134667s ago: executing program 3 (id=3609): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168) pwrite64(r1, &(0x7f0000000140), 0x0, 0xfecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 1m25.760546103s ago: executing program 3 (id=3613): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x1, 0x87, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x22, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x1}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x5}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0) 1m24.670343254s ago: executing program 3 (id=3617): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 1m24.497863032s ago: executing program 3 (id=3619): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r1) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 1m23.305753119s ago: executing program 3 (id=3625): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 1m22.265886328s ago: executing program 3 (id=3628): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) 1m20.182109727s ago: executing program 1 (id=3641): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, 0x7, 0x7) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) 1m19.89418709s ago: executing program 1 (id=3645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff0000", 0xa) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f00000001c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="6e0a00000000000061114c0000000000850000001c000000"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8d33864195c5c22f}, 0x60400c0) 1m18.896190968s ago: executing program 1 (id=3649): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 1m18.250242968s ago: executing program 1 (id=3658): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f00000001c0)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) 1m17.190541168s ago: executing program 1 (id=3664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 1m16.544228479s ago: executing program 1 (id=3668): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x9) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x400c, @loopback, 0xc}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000780)=ANY=[], 0x8) sendmmsg$inet6(r0, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000017c0)="5225b2", 0x3}], 0x1}}], 0x1, 0x4000800) 1m16.215067844s ago: executing program 32 (id=3668): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x9) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x400c, @loopback, 0xc}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000780)=ANY=[], 0x8) sendmmsg$inet6(r0, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000017c0)="5225b2", 0x3}], 0x1}}], 0x1, 0x4000800) 1m10.373582711s ago: executing program 0 (id=3709): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff0000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf6100"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000000000002d9d8aaf5dc79048", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m10.224755188s ago: executing program 0 (id=3711): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket(0x2, 0x80805, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1], 0x31c}, 0x1, 0x0, 0x0, 0x4050}, 0x4800) syz_emit_ethernet(0xf4, &(0x7f00000009c0)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4008000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB='d\x00\x00\b', @ANYRESOCT=r3, @ANYBLOB="7829eca9de9891203eea18280016be21fb1777a31659615d286ff72b61ee23d917c0a562eb690e0edae8640d240035af4f5c", @ANYRES64=r4, @ANYBLOB="48002f8008000100030000000c0002000203aa8aaaaaaaaa30000380240003800600010002000000060003"], 0x64}}, 0x24000050) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x16, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x69}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00174000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd29, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0xffd8) 1m10.030660997s ago: executing program 0 (id=3714): mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r4, 0x6a98047402e98331, 0xa1, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x40010) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000880)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x5, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 1m9.028779824s ago: executing program 0 (id=3719): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1m8.937012319s ago: executing program 0 (id=3720): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 1m7.815382681s ago: executing program 0 (id=3726): quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x10, 0x0, '\x00', @d}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @d}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000000c0)='gadgetfs\x00', 0x1216032, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xc8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) 1m7.134510934s ago: executing program 33 (id=3628): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) 57.146073617s ago: executing program 4 (id=3785): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) 57.06667756s ago: executing program 4 (id=3786): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(0x0, r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}]}, 0x34}}, 0x100) 57.005873753s ago: executing program 4 (id=3787): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 56.943459196s ago: executing program 4 (id=3788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000000200)="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", 0x2000, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0xfffffff9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000000c0)={0x9, 0x7, 0x8000, 0xa9c, 0x13, 0x101}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) setitimer(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r6) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r5, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) 55.954665523s ago: executing program 4 (id=3791): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 55.78747603s ago: executing program 4 (id=3792): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r0, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="da", 0x1}, {&(0x7f00000001c0)="dce47d58143ff9975973ec6aad78b725cf7ee968dc787e", 0x17}, {&(0x7f0000000200)="c22cabfe56b714f4571dc38c97de917222cd64f7dc6a5b7985cbec64f72175d612e16be49da57035e8a8b03d679abbb7c93a5097335297db86ce912ec45239f069", 0x41}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x1) 52.032956608s ago: executing program 34 (id=3726): quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x10, 0x0, '\x00', @d}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @d}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000000c0)='gadgetfs\x00', 0x1216032, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xc8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) 41.662235749s ago: executing program 2 (id=3834): mknodat(0xffffffffffffff9c, 0x0, 0x1001, 0x8000000e) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}}}, 0xa) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) 41.560183354s ago: executing program 2 (id=3835): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20008004}, 0x8040) 41.478907857s ago: executing program 2 (id=3836): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x100) 41.396384331s ago: executing program 2 (id=3837): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x51d, &(0x7f00000014c0)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195a420, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0]) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 41.249033098s ago: executing program 2 (id=3838): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 41.107657165s ago: executing program 2 (id=3839): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000300)=ANY=[], 0x3, 0x2cb, &(0x7f0000000ac0)="$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") landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) syz_open_procfs(0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) socket(0xa, 0x3, 0xff) 40.535312162s ago: executing program 35 (id=3792): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r0, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="da", 0x1}, {&(0x7f00000001c0)="dce47d58143ff9975973ec6aad78b725cf7ee968dc787e", 0x17}, {&(0x7f0000000200)="c22cabfe56b714f4571dc38c97de917222cd64f7dc6a5b7985cbec64f72175d612e16be49da57035e8a8b03d679abbb7c93a5097335297db86ce912ec45239f069", 0x41}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x1) 38.745706787s ago: executing program 5 (id=3842): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, 0x0, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x3, 0x0, 0x0, &(0x7f0000000100)="af", 0x1, 0x8000000000000000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000780)={0x28, 0x2, 0x0, 0x0, &(0x7f0000000680)='%', 0x1, 0x33e2}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, 0x0, 0x0, &(0x7f00000006c0)="689f904e8f", 0x5, 0x388}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, 0x0, 0x7, 0x280000000}) 38.579100565s ago: executing program 5 (id=3843): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001a0001002dbd70000000000081808000"], 0x38}, 0x1, 0x0, 0x0, 0x20008004}, 0x8040) 38.350496655s ago: executing program 5 (id=3844): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x100) 38.233312621s ago: executing program 5 (id=3845): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x50, 0x0, 0x7fff0000}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000400)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004080)="cf6dcad1f5c5c712407a3f1d491539b627c8255f86be020a4f0ff8851dc6d8ab33ec6d10e619ed910e4811af9ee1581a1d0687020937fa7005f26bab6e9591923f5c1086ecd154e9bfbec5afd856afe3429448161089fab21bc7b9ab5158aa219761d845b8307b1fc87605dbaa4cf80fc74737d4d4cfc68fe06c16b87b759a91a368c70b2e05ee4acf0f9111df10f30c4e16b7ee3d1cf380273ab8e6ca382e06022f539c0c4e62b1ad827ff576249375b2231e47038c67b3353242c81baaf90b3645ed12504a4ccf4b0e6419804399f9fe7f60df022a12405093264d225e8003061dd690cd169f922da3507717ade8bfa8ae2c45eccd32e14ffc4e11ae939e90fceb53e0bde3916d9e4e36d1de07fbbdd2dbc24145e1e7bc8f3423f4c3426406fa499a6de404e6827db35840a726a1582be4457f0ce0cde1c414e2f497ff8ff4cb606962f6acac00230b2cbce10b09d2f6b33b9f4edc3839a222c4bc5bb3e552056f8c2b7bc84ab62434bcc61f64b74367a9ec857ec7f5a09ab6b16667bdc846434d22dd95f7b8a47a1246a39d135de1ffc2946cf36034ef8d753b7d692aa00c91fc1636c0be309ef4bf345918a386e76edc3680ee574528bf3369741c9104bd77e61aa72d8b82162bb150d4232e21c8c9453d89467f9e00fd5148bee49da206fbe6357bbc31b111e68f0b95c37063a6c5401a094819e28a2104c37db5624fe075d0b2cc50f7140f4f49396b43d14f93ab9f9649e2dc694cea520cc068a3869a3ea4ec599a995f69d936dd62e2b81499f3ed4879d25b90aff3eae74b28ae35f18f0b457a5af35e2ede43786958b127ef76723d6ffe0e7e3346d5a9f0aabcc0d93fc085316516ef79b3e2400ed2946a0d1b2ace13ea7ed39ac51cb9d98cf70feb30d5bad39f6b5903e8ab654f48bfd7e54dcb502b158f68bd96e6beb4392fa59d3e1048803e4749f3ad522414d3180de3a0da1227bfbb704b66ae6a85b1c2c51e484622eeb169760e9ec50e14c014a0cc05aebbee77f31b62834169cb49bec0c43090506c8f34ca6e108e6328ced7a9f11cb3d57398b0b1d84c9e75d5cdf17766d619dc2658aacb900ca0f93aa248d702039417b558b8ab4a41921154153cdc86d999b2e7932eabb55a4e6c8c03029c851a9e84ef84acd9affdff84ffc063bb1ab6c97e169071edbe524462fef9116edd9fbb5032478cd5ad2b2c5527fdf64223dbc952fb528f7b1d817ca787f8a57992b40202ca124cd27eadd6d70351379a6456b697b317d101514d1d5d61002e4f3bcf7555c6b36c4c1d18cba0fd4fd7b3a246b72d47d7c1908cc9c3a29fbf43019b5179b0975d7680ec15720f7fc8b96b13522d058ef009719580227489ea68062cc735cca0b6a60a10c44f2b75d2895be41a278c50e62f979674c9e507dfa7a0c087c4fd43ccc32357e34c0bcc526fe43bed33e99632c84ea59780f78e7954d8e5430c9acb7d9dd28ac3761515cba6064fe81d3b4541dacfd6fb916735833704a5cb1723f867322fa806a20d5029a608986b5019402035bebf3e099547702409815bd1d3c63072fb0fc216c2186048f1e4ae5288a12a5c9b25f7649899f84c8aedc3721334d7bcdb656f8e3c0f2b7e40b837a15c9d6472b6acb58a39babc65d08e529f2f690ea780f43c35698610351fde4615efafba129b2b619135f8af77c7291483262c5555f4d66173b34c5c7f1c415cd6ab15ae4cef34cf5680e11332c6863d2140f00cc3a337b23afb0080fa54360282086b0c0faaf2bc2a9f7335a96fa8af6a52a1e04eed2e7c337d1e378545ded0d0453b8a16b6d0a90860dfe560528515005ba852a314b4540206a8513e73212c65fb4b35f4ac7050d18bd62a6c720cfda30cb2385d3d5217655db1f344fc34361b83b22d31a040366acbdc28d397254b41c3b1f0d20e0a5db4df6338e78ae09b38f82c71fb0208afbb506461384bf578c607e05ad5a6ddb708b9add5d4d363877659a663827136b4dc1b4012c7035a56bb91e14a3d22b3ac3989f91d78808758d1b5bfdbfc66d3389e3362987e13bf9a9747373c90c0c658b7b832eff19aa2f3667f79bcd073765308fbabf2d612d0445fa1be6280cb9d0ba759d218ae971d3dd5d458c10d14f154109bfb2fd03523ac5748bcd8582dc3be5c28ef4be94cb55fdcb12a6271dbb7f11fd33d61382096588167a2b20b02cc43b88729985073a5b21b8e4bb2c43894d7c88bf111576b3b56f905b1f23f0570c07b475d5f86508c3489f4f2e2d0f3b11bfd6c3c58930483f9345f4f755089848c42361d4b0c0e855935d7f6793f78a68b554358b810cdcdec350376c94486c67fc5d11c0a68873312b40b49bb29aca16e1f3e3ce4da7a9e7aaa6ec1d9932b78d9c12c45e61b5f6faa6ffcb21608fc61bc4180f91d26f9db592c98e532d60c28e9fab794ab8a62c21122397193d8b5b72bf050b07f79df5e14069b56359835e3048f182629328e4a72a1fd0530182c802744611637e93deabc6c3ee30041025026be97ac314eaf7b399b0702cf73848e54f355d766121361398609078057473c2aa46b2fbd7e7a7d6d039615eea23fd223c49a9b5b5fd7b0c6f30c9b0e55fbebced3c90ceb668e6dbd5e6511c19d32c29b5fef7d06cf2ffff7872bd541d0fe70e5991ba3c19e72d5533e6fe9652c21338ced211c7d9e912486b4de29998ef4cca892fe94972b31fa33e781386b75b5d6980a9bfb887d7485d71f6744a6f87bc407ccd03281e10eb1bafd5d9bf279d362e2a49e54187e40abb06e21ed8425135a169ba5b8e1a806951352580ae135dfbbe3395e18ccf67fdb891903934739b56dc0e49e258552dc66d46eadfed9a7ceeabf20d02aee2c8ce4060382474252ccd9bab03d7e8eb77195bb712c19e066153bef5a212f2a450d4a1280d243928f3add450c2544c800b507c8b8ffc5d7f3cd9a4526505d05d04fbfdd0fc1f996ba3f4a797c96b24af37c15859b4bcda9234750fb6acef8dc20893ac5051b3d6aee60f01fc34e3b6753848fdca9b18e461c87f08fb8d67ddce234ca56bbe021f468f964ec1416ba6df0434440140090edd222cb9534830fec026788f43899737771e67552df68fb81d90aa90fcc1149149aaa96c1730829c6856407e5194dd2ec7cfe5fa419c2ea6127039ae188649b2cfccb9faf59f45dc9af76f3cb17c8224e68fb5f81b4556980542a928f9563bebcf3db248cff2183fffff15710432f8691041fa8aceb65b6454e9c375402b599503fb4881a3baa5ba58893cac154575ef0ec8efe35a6eeccb98d081f6d4cf2661b484765ce95bca5bda75fc90e630e355d0dd6d22a5d4c7990931ac160da14f211c33b668edb93cd9c87de3881c47e4b0fab746d0e931600478c9cc2e3cc08eab1ee7cb4e3749ab44e7ab4be15e5b031e58d59b294fbe794fb5760a2ceedd1cfc4343b1c2886b0721945a109384cb00fe6e9bdf09e5e406e757a6f24e659495a11a93382d5425d6fcab1d802303aa1531a120b8f30dd17cac7385bb8455503b2ff0daf8b4dc5353f88f34c894fc0b2fd2920c97432aded8b89fba9a9db4c4f3498043f936a1cb0dee7f5d902b1f6d909b637b8e2f05d31a2640eb1ac556ede22006466014d4a407e3486f94ca676ef39be6399ca24bff48b03ab1da71d1a5e3994d0a8723894bfbbc33969923970df3a9fd0b5084a6cbb41f79a0d3338bb61e7dc2cf795f2fa883aa61d7820c4e2215744dd9cf517cc5921850d1d9aaaaede5fb125e663c830c2414655d6af43a90f9b79eccbc2c009b963b503827c7614ab8824b3289ed8e559ed644a163db18fe66789037eb599be39fb66955a27a4831a59322d39b95b6d571d8fffb5352a0297b449719a5246247ec4c24f40b5ace1c8e76fa1029a47065af4adfc03b2732677f81bf9729ba06380a330cb388c9e4f50a0cf4ceb5ea8b6bdda8df0839de274c0c7a57f7a9173d21832b7f19ee8cfc340eea461ce7956f986f828c91697c5a241cb9efec40a1a0f34a2a63821dbd50a111b368a034823191dbd3b7a9fe8bee53cada1902f2a278efe3f10eecbf8279c2f9b2e7bf542076bf0bb41e9f21e766741f3ecfbd5a38158b1ce884255cc227a7b7196f966b631c228fea918d8dfee020dcf4c40231c0ab6fd7ccf4e7444fb360f2be3c1519a577dae770a14cd90df85490995fa8553fb255ee9807e0c7617c582f82ac56a0d902c8cd58244cddcec23cf2a05a79b474c716d9ea92bc28b0132ec48a3c5257dc7e1d9cc3f760d559b5c12ad75c95497962f9a564b0d9ed29f44f63b2c56169b2151d699e8d2d570d94f5f37898d3d8abde9253354fd146af62ccfd171d9014fd4d142e2e390f3ce2370165a01aff0fe566ec44e3084815cecc85540d84d8a11d0504fbd95f2c2709b87083b3cfffe36f611a4a6b9e4237a350d1ad4b1e0239946d86ce535e9f07def01a5e6d2e65ee59f380e55c9f295478c5589425852fd22eec2d6e555828ffb4212b33ad530c38b76254d2baac6bff5f94d3ba19ff4b35cb1c972c0b538e1adb5da70affc99c99c0613bea6111848054b416d26368c90784d845f0507f89fd058381dc7d6c6bb81dae94d11e3a0de778aca82814fec0b63780fb2b4f480da063411cd66356f87e68780448ed0c1f3836a46e536609d672d7cef1cffa0614a4f6286ab7f3fab0baf595b4c3c2e43f979f4f4a89165c24698f71406b4330a333f6c8ee018420b2b47735295043123459fafeb5886fc044a3805b162714a3436f58264c0713a4be82a7550f37f88cd7f61c0ec27d887285da7ecb4eb32963c8205eff6d5bf532b72976c5f0a24d6d4d2bf4030f04a47a15fb4de2631361fe0895aeacd2028401c5c183223647c1e765e6406542eeac4d979e6a493e389a649af7ddb35fadd32cf1edaeaaf0982ae8131084ae4759e2af1dbd007f7ce00900437be6d8d3559210b3011d1fe52e8485cc5c14ad4aab4c03c7dec4302e7f72abb7fcc799899cec17308151a758b810369c4d53c443cb1278709df6336f84fa39e51d208b4507a31e6f06352dbd99d7dadd86215e47ed645a9b89bdce630cf80fc1fe59dc31eae39010a930965b3b0e0f595347158d683de6888f3284c1fd47b3e79e0fcc299cd4f519ce067a007ae7ee906d639789fedc850e60a7b4be9dc525e3e58b01f24b065c4b21b9011e74030aba77931bec74698557b4768ae41eeb4caa2f530578bf1f9379fb623a27561bba03c7623400ef975ca2e2d6881e0f96fe1e7f9ec0e8f6aeac30f70f848399c6dc9c4e58bf50aacbe566965b257943f6c9ffe210af0cb488488d67b09164d98f3254cc313f7cf8dab1f2e1ed3a7e4a86ad85707d4fe0e7fe483c7f311912e92bee9b17819b53a39c374cfbadf8c3641bae4177aafacf3394af12310f222dc0a67eba49c1475da8607c25f3ee7b1e1e0961c7d319b32ab549c002b93852af7146f5e74aab020446d9a446582a2bc19a730bafcca463fbe0cf2664e10746ddbf0966ec1e327e1f8fa6bb67e18cf849fa810c938695de5f8df98d3004065c787181f4bd8324c59b18972ac5ca92f96c51b4a63ea130712d70a51c49def99feb37312fa6a52e188de88f5446fa4688514bf96f195bfdae4b248445ef5a37e5c0169c7ee42a8e613e71793486bfb24e37bd0d9f0cfb3db61b45ed731edd5c4bd7b6b133f5f3f51fb3a12e9e43db5a23a4c6c787c803791341f10aa083760413724031ec83d5d5c03e9d3585e6a6c87f51ad4db6d678cae14936c09e24fba69e90fe4c2ebed615e254b1d2a25c12b07c1226c0e9fa9112a49cffc9238d3303d3a9a293c5bdec80545e76b911aec6f956d2122d0ee2bee424aee05e0a25a7ff72e3e1c10f590380f82f1e693fb45b1466cbc7e8ee741ca97775c2ae15c1ad0f4a8221c55e82b4e4ddbbb3d88516fdc26969707143e3175f56b07ea8a7d40660ee346a511e0985c6cde95b573dab7c53cb9d32eb18bdb67147b562dd99124d744703492a89dc8cf387ad17a992a6870ee683953c70547f2c70ac44ddc4563fb0c0c23ac7b806a0172a3a74db45378568306ab3036b5348f96ddec344a899b6058179c070cb5f3a478a02d94dbd836a0e2223194e406c2296ceb6dd39667ce62b4c191889ea052f382b9c051c272480111fe287b84c10cf7512a6dd0a601a1cb41545915925a63bd09f9d77a1bc156a7d822e204029363b3c713c5cbef590efd01c4ffe00b816745a37d83b27ab05c3a0c2d6ff800276f3fe502bb3bd7b60b38d32376246a3384554072fe63ec409a0182d588b839d319c680f830583db3e4f5071eaa066689e9e19539d9a12fefffe223288b77600dabde9b2bea871cc1ea2b3318a9699d736f02490d76c1e457aaf45ce318445ce10625b43059694e996ace387580589f9f37944b799337fa38ef9292d2276e0f659471134aaef911514212553779be2ba00816187465e278ba2d03e66cd633f9a274ce882ae971f2d07cb4fde38bf88327aea83d5303011b0263f24630916b796d532e5437179882b0470dbf8d693bbae4015ef28b3d57b5e3b643068dc1d1921291f4f1280a8183532298dffc2501cd3ff0bfb6b0e61d2a59c596f21b98db4d730e155936e98c95c96ac6231b1232e4ed89ce65311fe66199e113f9f69084c31444ae9f106e909bc070d83c1cffc514189c1e0b6763c2732a227a6229407af592772c2b843fb944896ff61161449b6df045ba618d117d8361733198f0963850df3e077aa538571efe279f9c7e006e2c882f5301706ee2bbbe769164cf7d9597d0142d0052641eb43a9ffe76d978384ea8c10050a80021d3c9177fcb29652b4906081d926ea23e749c9272731aff7fd0c271ac4859a5829c5b406a1c363752fecb1a76b201a0df467efd6ffe6adc0debe36ec6d1fc84ccebfa07cb136bbea0f1ef74983bdfc087e050430f5aa395cd8786b609941fbce55ab9f304ba11910a0790685cab24847d85f8bc7a5784a4367ba06690cf1a88acfeddcb7cc44c9797f4f0e5daf9d301c6e702652268530c22df26d14da8768a8951f26849fa1e20015878cb6332d033531b8128233e61094cfc5dd71ba9af36ba6aa1c37b24805a45c3dd302bbc1dc8e9348f9a47540e14016bd5357e7978092497b800a97425363a42454eb04c32c9ac959fb37eb00ed6e31f81b2aa67d9f4930eb31dc2260151d845f9865d2b3a301ce3bef54a977492039eb908512a083087961f90ee568c5e5c60d6e726dda2c3f31c072979e09d8fd6f2365f65ef46399a183511904226d8ec72805582107ff5951d2e0d5c028d29e940fa068c0ca1c238420e53297c31d68f70fb543f347d91afb5d66ef1e8460a1431b638a6b0ae259f7fe8eb03aae9ef1ea4cfcfbac7e7b20b5c46ea8b0a2e88527bf54fd866362ab6a99e466bb029259f35711bc376b2f70edd738b48451f20ee404938821419ee5eace0171b3fd73d57bf0a723152933ccb84d567e79737b33e334dab955cdc03298215a2943ee493d815af83d48ee808a5e508903cc574ea4b52de645a18b0f43cd6b81a15a7f089cc7596adde2ea693381c7eaa2e246b9cbec98bb4e8ea3db8b47e57ef8d3a2eace3e2dcc083f6625f4e86bdbe2d6c57fa8ae4902ae9964c847eb292998d485d3326a7076360b85365edd5b733876abb5e26943481a52b10a1c95f34aed88568b873ef481798fbafe036d5d580c7437cb1a651e2a89d98d9002d0bf6418a271f9808df4b2ceaa8508e6c1d7d58e96d87f6db011395a0b74cb39e066411fef6c8ce7942ef8d8bb826be0b06ecada10e46f7ac25eb7ab0e3339752c8d0784659d72a287ea9a5e3a699977456695a6f9fe40eb8f7269b414cda403ba94f512c332fcea82f1927a5695ea2eb2ce7380ae74a0672ffe7fd2c4a19715a984d518b5be67543c31e42962b4c030fbdfedc5977b03d85294db2578d6561fdd9e0f9cfaf7eb1609bfab67105b227ec43189e449c4f2f17b8175b3afb0087f70786673353a3913cd03240761b5ff91a1e6510499c1f4152a759b1ca39ace773a1f27a5a88bb94a4201a91addf5c2c8587547e454d186b562cf89a41a02c36765565c3d753a2d8127d3908853f5ccc1c35346f22284573695c5695a520ace2d0cd13c1138b1fb10f74487b9a2c7a5e01195a1629d3e5d567a77a2aae2e74e24d2936c2618c63eb5cdeb64f5592cb38175d416c05588f03b287c6e16329fee69c8294db5b5bbb81499d7ef18ddb93144c897253e8330cea3be31bab73de42284fce239597ab7cd5b68cfba057b01aaab0f0d4191c31b407fd8f9c7f04eaca31e5d240c7910663bde4ad478f134d09dca902e6acdd292f2745c73cecea2204a56d0098c32da73eeee41b348d5826109ccfd2397bb73a25ebb7e95537df71cce504f14c219ec525795d2fd5027cea9810aadc77e1b874f9fc4e33ed7b90a4007bbc341493302e4e2cbca2a8229fd2c3db7faecec2b8805bde9d92a29f6a7096cfc05ed5b678566e6c079dddfcc0b6c17541047beb477c4493a1588be177490db134d69a225aa6848b27494f17c3882ea2ee436ac1e981256ccaa70ba1f7a621385694b62bda8c4f6b04c61d6798afdc9cec019392d1242a35c3382b09aab4999e1b383714622f2ab80f275ecc8ea67694f020466aef6ed5a4535f32df47f0478e00194b44b9003f6dff232bdecbdf2a06da35246dfbc0d40becfdd5ecf971f0f408913bf094282fa2272cc5683604945e3eba52231f131c81b1035dcbb8a4292059ceaf92f36877aa15049bacc544d2c9bee4eb1bd01d76861557e646082f118454c37bbc7d08a311b4668f2777912cf882439b47e7d3c08bfdefe31e3effcbddf9e5bf175fd7c1ae85f6436cd817580970b3d8303e33ea128d222e8adb1de246fd9583c0385fe89bbf9af2cd82a38083069a997175fc7e96096052d55620554bd723b28de9a177b0aa0a5928d3d991c7da85a3513b1fffb8c75b5bc2874491ac6affc2a71ef1d639a90bb4c53624139ab8764f60e7470592608a520dfa0289c3be27e2a8f6525a31830aaf887213285eeb4286509c4904f2f5c6058e07c9c5c7886e107fc8b6411ea86bef63c88c863c7d7be52424a0126b8642d83946792de32c6150e9ce9be9d20eada4b47bd24fda102ee8cbc3a870743ab1839f979076b79cffac7d2234db5b345de7f994110bbb873a7058e5ad2fe9d9f0527a4a7b3799f81a06c9ee25c1a4a6317c3c454e9b9bb03360775184c37897db2e23dda4fc5cfbbdd477f564ad48416224ab75742d8d2375773c34325b36cead158372821e3db81a2dc99fc4293b39b183f1a71afbd4faa5e66a0d457f15424ca9c39969a85226b03b1ba8a98b0655a4581c7849bad2b1e5eb09236284779235ec2c0f44d547705298a9076bd32cdbb0a1169529a4780629e8cc291bbe25d98eaca72e934b7ef3a26d60dcebb509b8122d9d3de366b1c81c01e1a3f2ec0556d4759917612ba175b48f47534e592293e50e66dfbd0e1d0373cb3f58a43f3c32408ceba4c2614ff35b72a2cc03166f9866904f7ec19650edc06ca73ef63fc759094ae06a8405144dc22a0480155057169e59897eded975544a3e26dc0ba673a803fd35e16f6ef4695fc554e0c92fd97d3287f368b06ebb41e7d9a5956ceac39f27a82dda86f981519e31f544d844109d5ed58c159e7aa1805461149c604f262a1dd0c2f072f8f5b9b9bd4542cff3050c85b981dbf1731805fee07a4f92bb1828842f34395b90b76834a624690bfd431185026fd090c8dce10ac30ea68502dc8d2d85f836eb747c9bb8b6d16da1cb692f33b77f80c05b250496f3a880dca37c6514d5b5e2cf90d0b18bc31fd27a2c96110b9aacbe2afce417c415778e58e0b9ace5f209696980cc45e51bc292b3d5c247e2c8fffecd214d927aab0fecd0f50b359df4971944891fbefd40345e7f14e833486c126df0c1839032e64fa59280d699eed79f03acc206d6a5340cc1c5deb4204cb8780830497f23522b89fc503e6a8a01d11e83de680bbaed65fbd970c71e2087213c3ee64280bcc1f616a274c11d01f0d81f084c3873bc871d50395e05f658a75915118b0da8281a310fc905488ae03aa89726d74d6ed6da76d6dffcdafd7b4d2fa4a867e9b42cdf71db56c542ccf1270974f1efcd80f70fd463d2cfc03c8e111f2d1232bf6e228123c316ecb60eb6d8f650e9281381d540b29b520be3f921bd314eff9ca241b69d95e78256f1bfcbfe37a9f094716d36af6e1ce36184bc6a4dfb88320ee186f52db245dd50d8af51f489f792494c14efffdb88faa1d9ad1d633b327b7ff6523bbfdfe4274b856bbca9e2847499923738207a399dffb514bba855b75d12c9c57aa2e58db0000210f5ad375d3b697f3dda96f5f78c13bfd6d01a5050e01a2e55cc2695a3f2193820286a688cc144fb9043e7c6772bf2cbd7bb5a7a57fee1c18dbdfaadfa5be0d1adfa55dd3a8480807708ee6e11d9f9dfc5bc682e104795928e56af800b42c9c07a25237b092ba1e93a525ed5b5b39ad6e02ac6b41e136c904dd4592370c322f5eb595ed30fa00a277928dfc765930af1c2936f5ad2425c411980b5bb012e0e240c7d50f16ba990540a765cc1fef3809a0344ce6d083ab8705378fabe14a2e63e12eaef453273a78a7d3fabff1fe6a9ba07e208740ab8ed6e50abe2a85b649e1d3ec2f3191e010b50a7ddffdfb25e53e196775655a1ae707daafc4e9709927eb961faaeb1be21ddde0fab9665774086c34af3beac362a5cb712b786a5e1c8811ef574c5b269946939ed530c5bf42306016b69957dd57d83c88cc32a366c0aacc964c693fa7e03c1e89832f2076ec03995f1f9b2cde66acdffa3ca33776b61176369c78e87b2eeb0a14d7cbbaa597c0ae8e1014660baf06e22a6fc4974772975b7d7d003e6bc6a4cdf4cd5f2a95dcfc8194d93b273e59baeb350935aef906bdb94d1fd3c0781aa8fcb17f3f68c9afe090ba059acf599d2934481eae73717c4354c8c2b4d425ef7073968624c5d91e46322cc23091c58643316acff626f160b9cb770e0d9595d33cb6f44915d7efb6747973ffbf34119bba44d074472e661095012ad94af00463520deb45a6b6b7b6a173b23aef637e4cc0363d43c5ddb43c81936143f7db63f7f7771a611930f9f82a12f3c59b0f72de98bbc75ad33f1823fa872be154b19f16f0fba01ac3d64d46cbfc1850d1b4b5790cd86633b1880b86fc34a8b9f31100950ea0bda3abf2b037e21ee348418df67cc1d056d74125f9c73b42b104b6ad322ffebfe658dc3c0a06af44d73324b5ae59e2bd99d4782ec053ea07513a271ecf8651b25bc3e026bc88a4aa1513a2b4d4e173c1e21c77302ce64be8331c4d5b6203bbccd96dfbf9debb29a167753e06c55ca88550ec186bd20b3d94f7c2af719bc638cac3f8cc6c80220fd5f4be03bab9bb975e5effa4c5eac098c531590ec5eeaa90faec3630671d9e1a454577b01b73bfea67456ae187f0e61a9292612f428ab8c5780a3803b7dc2ec8221181db3876f2c00", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x9, {0xfffffffffffffffe, 0x1, 0x0, {0x3, 0x88, 0x3, 0x201, 0x110, 0x7655, 0x5, 0xfffffff9, 0xe004, 0x4000, 0x2000cd35, 0xee01, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f0000000140)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 38.002965762s ago: executing program 5 (id=3846): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 37.83193268s ago: executing program 5 (id=3847): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1e8}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 25.080163863s ago: executing program 36 (id=3839): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000300)=ANY=[], 0x3, 0x2cb, &(0x7f0000000ac0)="$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") landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) syz_open_procfs(0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) socket(0xa, 0x3, 0xff) 22.290038535s ago: executing program 37 (id=3847): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1e8}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 8.398997122s ago: executing program 6 (id=3948): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff0000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r0, 0x0, 0x7, 0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00-', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.199953832s ago: executing program 6 (id=3950): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x2f000000, 0x134, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x50) 8.045602299s ago: executing program 6 (id=3951): close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT2(r0, &(0x7f0000000340)={0xc, {0xb, "9f821429cc00483187bc09"}}, 0x11) 7.899860206s ago: executing program 6 (id=3953): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r1) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)}, 0x700) 6.723830282s ago: executing program 6 (id=3960): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055b87b0, 0x48a21}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x200000000000000, 0x0, 0xd1}, 0x2400c000) 3.715466094s ago: executing program 7 (id=3965): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) setresuid(0x0, 0xee01, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 3.610002289s ago: executing program 7 (id=3966): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r1) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)}, 0x700) 2.664462823s ago: executing program 7 (id=3967): socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket(0x2b, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r1, r1, 0x0, 0x21) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, {&(0x7f00000002c0)}, 0x400000}) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f00000001c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000200)=0x1) 1.673152661s ago: executing program 7 (id=3968): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x7fffffff}}]}}]}, 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 256.775388ms ago: executing program 6 (id=3969): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) read(r0, &(0x7f0000000080)=""/220, 0xdc) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0x11) shutdown(r0, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) 150.679622ms ago: executing program 7 (id=3970): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff0000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r0, 0x0, 0xb, 0x0, &(0x7f0000000080)="0000000000002d9d8aaf5d", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 7 (id=3971): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x2f000000, 0x136, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x50) kernel console output (not intermixed with test programs): as an invalid length. [ 571.499910][T14101] netlink: 'syz.1.3092': attribute type 2 has an invalid length. [ 571.511949][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3092'. [ 571.528606][T14106] loop0: detected capacity change from 0 to 128 [ 571.584085][T14106] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 571.637252][T14106] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.717632][T14111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3096'. [ 571.777257][T14111] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3096'. [ 571.831198][T14118] netlink: 'syz.2.3098': attribute type 1 has an invalid length. [ 571.920656][T14118] bond2: entered promiscuous mode [ 571.930996][T14118] 8021q: adding VLAN 0 to HW filter on device bond2 [ 571.950870][T14122] siw: device registration error -23 [ 572.030539][T13003] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 572.275660][T14130] netlink: 'syz.2.3104': attribute type 12 has an invalid length. [ 572.287252][T14130] bond0: option primary_reselect: invalid value (183) [ 573.056066][T14137] netlink: 'syz.2.3105': attribute type 1 has an invalid length. [ 573.079590][T14137] netlink: 'syz.2.3105': attribute type 2 has an invalid length. [ 573.091131][T14138] netlink: 'syz.0.3106': attribute type 25 has an invalid length. [ 573.107268][T14138] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 573.419505][T14149] netlink: 'syz.3.3110': attribute type 1 has an invalid length. [ 574.646701][T14165] validate_nla: 1 callbacks suppressed [ 574.646715][T14165] netlink: 'syz.0.3113': attribute type 12 has an invalid length. [ 574.670340][T14165] __nla_validate_parse: 6 callbacks suppressed [ 574.670356][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3113'. [ 574.690188][T14165] bond0: option primary_reselect: invalid value (183) [ 574.697336][T14168] netlink: 'syz.1.3117': attribute type 25 has an invalid length. [ 574.717367][T14168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3117'. [ 574.748660][T14168] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 574.769990][T14172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3118'. [ 574.800146][T14172] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3118'. [ 574.827752][T14174] netlink: 'syz.0.3119': attribute type 1 has an invalid length. [ 574.848829][T14174] netlink: 'syz.0.3119': attribute type 2 has an invalid length. [ 574.885001][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3119'. [ 575.098336][T14183] loop0: detected capacity change from 0 to 2048 [ 575.182808][T14183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.215057][T14183] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.334002][T14189] syz.1.3122 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 575.992557][T14192] netlink: 'syz.3.3125': attribute type 1 has an invalid length. [ 576.029862][T14192] netlink: 'syz.3.3125': attribute type 2 has an invalid length. [ 576.046994][T14194] netlink: 'syz.2.3127': attribute type 12 has an invalid length. [ 576.065105][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3127'. [ 576.074399][T14194] bond0: option primary_reselect: invalid value (183) [ 576.226057][T14202] netlink: 'syz.3.3129': attribute type 25 has an invalid length. [ 576.244235][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3129'. [ 576.269474][T14202] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 576.368313][T14207] netlink: 'syz.2.3131': attribute type 1 has an invalid length. [ 576.383302][T14207] netlink: 'syz.2.3131': attribute type 2 has an invalid length. [ 576.423147][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3131'. [ 576.918802][T14225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3140'. [ 576.948167][T14225] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 576.991265][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3143'. [ 578.283918][T13003] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.455751][T14231] syz.2.3142 (14231): drop_caches: 2 [ 578.464183][T14250] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 578.562930][T14252] siw: device registration error -23 [ 579.030594][T14272] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 579.076313][T14276] loop2: detected capacity change from 0 to 512 [ 579.120852][T14278] siw: device registration error -23 [ 579.159890][T11620] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 579.205737][T14276] loop2: detected capacity change from 0 to 2048 [ 579.213385][T11620] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 579.227007][T11620] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.267840][T11620] Buffer I/O error on dev loop2, logical block 0, async page read [ 579.337173][T14276] GPT:first_usable_lbas don't match. [ 579.349436][T14276] GPT:34 != 290 [ 579.352999][T14276] GPT: Use GNU Parted to correct GPT errors. [ 579.371507][T14276] loop2: p1 p2 p3 [ 579.688327][T11620] udevd[11620]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 579.701439][T12132] udevd[12132]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 579.711813][T12977] udevd[12977]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 579.727338][T14299] validate_nla: 5 callbacks suppressed [ 579.727353][T14299] netlink: 'syz.0.3175': attribute type 25 has an invalid length. [ 579.749422][T14299] __nla_validate_parse: 2 callbacks suppressed [ 579.749437][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3175'. [ 579.798909][T14299] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 580.375529][T14324] netlink: 'syz.2.3188': attribute type 25 has an invalid length. [ 580.390725][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3188'. [ 580.408639][T14324] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 580.668199][T14338] loop3: detected capacity change from 0 to 2048 [ 580.724470][T14338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.807955][T14337] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 580.827872][T14337] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 580.841642][T14337] EXT4-fs (loop3): This should not happen!! Data will be lost [ 580.841642][T14337] [ 580.853443][T14337] EXT4-fs (loop3): Total free blocks count 0 [ 580.859737][T14337] EXT4-fs (loop3): Free/Dirty block details [ 580.865806][T14337] EXT4-fs (loop3): free_blocks=4096 [ 580.871524][T14337] EXT4-fs (loop3): dirty_blocks=64 [ 580.876763][T14337] EXT4-fs (loop3): Block reservation details [ 580.883427][T14337] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 580.940645][ T3533] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 581.558950][T14367] loop0: detected capacity change from 0 to 2048 [ 581.813067][T14367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.236400][T14366] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 582.319692][T14366] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 582.354785][T14366] EXT4-fs (loop0): This should not happen!! Data will be lost [ 582.354785][T14366] [ 582.387333][T14366] EXT4-fs (loop0): Total free blocks count 0 [ 582.394734][T14366] EXT4-fs (loop0): Free/Dirty block details [ 582.410742][T14366] EXT4-fs (loop0): free_blocks=4096 [ 582.419430][T14366] EXT4-fs (loop0): dirty_blocks=64 [ 582.424574][T14366] EXT4-fs (loop0): Block reservation details [ 582.437248][T14366] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 582.516036][ T3533] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 583.141282][T14396] netlink: 'syz.0.3214': attribute type 1 has an invalid length. [ 583.520032][T14396] bond1: entered promiscuous mode [ 583.525406][T14396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 584.666374][T14420] loop3: detected capacity change from 0 to 1024 [ 584.678310][T14421] loop2: detected capacity change from 0 to 2048 [ 584.785359][T14421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.798960][T14420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.838730][T14421] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 584.883349][T14421] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.3225: bg 0: block 2: invalid block bitmap [ 584.927494][T14421] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -28 [ 584.995719][T14420] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 585.071710][T12128] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /212/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 585.100884][T12474] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.114782][T12128] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.301722][T14442] loop2: detected capacity change from 0 to 512 [ 585.345264][T14442] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.3233: inode has both inline data and extents flags [ 585.395228][T14442] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.3233: couldn't read orphan inode 15 (err -117) [ 585.416418][T14447] FAULT_INJECTION: forcing a failure. [ 585.416418][T14447] name failslab, interval 1, probability 0, space 0, times 0 [ 585.430659][T14447] CPU: 1 PID: 14447 Comm: syz.1.3235 Not tainted syzkaller #0 [ 585.438180][T14447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.448272][T14447] Call Trace: [ 585.451574][T14447] [ 585.451746][T14442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.454505][T14447] dump_stack_lvl+0x18c/0x250 [ 585.471612][T14447] ? show_regs_print_info+0x20/0x20 [ 585.476847][T14447] ? load_image+0x420/0x420 [ 585.481385][T14447] ? __lock_acquire+0x7d80/0x7d80 [ 585.486439][T14447] ? __lock_acquire+0x1336/0x7d80 [ 585.491491][T14447] should_fail_ex+0x394/0x4c0 [ 585.496207][T14447] should_failslab+0x9/0x20 [ 585.500742][T14447] slab_pre_alloc_hook+0x59/0x300 [ 585.505809][T14447] kmem_cache_alloc_lru+0x4d/0x2b0 [ 585.510951][T14447] ? __d_alloc+0x31/0x710 [ 585.515309][T14447] __d_alloc+0x31/0x710 [ 585.519491][T14447] d_alloc_parallel+0xe0/0x1590 [ 585.524367][T14447] ? __x64_sys_openat+0x139/0x160 [ 585.529425][T14447] ? __asan_memset+0x22/0x40 [ 585.534052][T14447] ? lockdep_init_map_type+0x9c/0x8e0 [ 585.539453][T14447] ? lockdep_softirqs_off+0x440/0x440 [ 585.544849][T14447] ? d_hash_and_lookup+0x1b0/0x1b0 [ 585.549992][T14447] ? __init_waitqueue_head+0xa8/0x140 [ 585.555396][T14447] __lookup_slow+0x138/0x400 [ 585.560013][T14447] ? lookup_one_len+0x2e0/0x2e0 [ 585.564900][T14447] ? down_read+0x1ac/0x2e0 [ 585.569342][T14447] lookup_slow+0x53/0x70 [ 585.573611][T14447] link_path_walk+0x97c/0xe40 [ 585.578334][T14447] ? handle_lookup_down+0x130/0x130 [ 585.583568][T14447] path_openat+0x291/0x3270 [ 585.588129][T14447] ? verify_lock_unused+0x140/0x140 [ 585.593354][T14447] ? do_filp_open+0x430/0x430 [ 585.598070][T14447] do_filp_open+0x1f2/0x430 [ 585.602611][T14447] ? vfs_tmpfile+0x620/0x620 [ 585.607233][T14447] ? noop_direct_IO+0x20/0x20 [ 585.611948][T14447] ? _raw_spin_unlock+0x28/0x40 [ 585.616824][T14447] ? alloc_fd+0x590/0x640 [ 585.621194][T14447] do_sys_openat2+0x134/0x1d0 [ 585.625901][T14447] ? do_sys_open+0xe0/0xe0 [ 585.630342][T14447] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 585.636355][T14447] ? lock_chain_count+0x20/0x20 [ 585.641239][T14447] __x64_sys_openat+0x139/0x160 [ 585.646126][T14447] do_syscall_64+0x55/0xb0 [ 585.650575][T14447] ? clear_bhb_loop+0x40/0x90 [ 585.655281][T14447] ? clear_bhb_loop+0x40/0x90 [ 585.659990][T14447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.665907][T14447] RIP: 0033:0x7ff42075e98e [ 585.670346][T14447] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 585.689985][T14447] RSP: 002b:00007ff421716ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 585.698424][T14447] RAX: ffffffffffffffda RBX: 00007ff4217176c0 RCX: 00007ff42075e98e [ 585.706422][T14447] RDX: 0000000000000002 RSI: 00007ff421716f90 RDI: ffffffffffffff9c [ 585.714420][T14447] RBP: 00007ff42083506b R08: 0000000000000000 R09: 0000000000000000 [ 585.722415][T14447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.730408][T14447] R13: 00007ff420a26038 R14: 00007ff420a25fa0 R15: 00007ffe04c298b8 [ 585.738412][T14447] [ 585.783140][T12474] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.962825][T14458] netlink: 'syz.3.3241': attribute type 12 has an invalid length. [ 585.972249][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3241'. [ 585.981345][T14458] bond0: option primary_reselect: invalid value (183) [ 586.538297][T14491] netlink: 'syz.0.3251': attribute type 12 has an invalid length. [ 586.548240][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3251'. [ 586.557662][T14491] bond0: option primary_reselect: invalid value (183) [ 586.771713][T14497] netlink: 'syz.2.3255': attribute type 1 has an invalid length. [ 586.833963][T14499] loop0: detected capacity change from 0 to 2048 [ 586.901730][T14499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.958755][T14498] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 586.976012][T14498] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 586.988604][T14498] EXT4-fs (loop0): This should not happen!! Data will be lost [ 586.988604][T14498] [ 587.006604][T14498] EXT4-fs (loop0): Total free blocks count 0 [ 587.012752][T14498] EXT4-fs (loop0): Free/Dirty block details [ 587.016590][T14497] bond3: entered promiscuous mode [ 587.018723][T14498] EXT4-fs (loop0): free_blocks=4096 [ 587.034390][T14497] 8021q: adding VLAN 0 to HW filter on device bond3 [ 587.041494][T14498] EXT4-fs (loop0): dirty_blocks=64 [ 587.046965][T14498] EXT4-fs (loop0): Block reservation details [ 587.059912][T14498] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 587.122328][ T49] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 587.341073][T14518] netlink: 'syz.3.3261': attribute type 12 has an invalid length. [ 587.356224][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'. [ 587.380413][T14518] bond0: option primary_reselect: invalid value (183) [ 587.603355][T14528] loop0: detected capacity change from 0 to 2048 [ 587.665003][T14528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.794139][T13003] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.353182][T14559] loop3: detected capacity change from 0 to 2048 [ 588.426045][T14559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.681301][T12128] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.809892][T14574] loop2: detected capacity change from 0 to 2048 [ 588.892248][T14574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.024631][T14572] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 589.045763][T14572] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 589.058299][T14572] EXT4-fs (loop2): This should not happen!! Data will be lost [ 589.058299][T14572] [ 589.090193][T14572] EXT4-fs (loop2): Total free blocks count 0 [ 589.096235][T14572] EXT4-fs (loop2): Free/Dirty block details [ 589.118339][T14572] EXT4-fs (loop2): free_blocks=4096 [ 589.124585][T14572] EXT4-fs (loop2): dirty_blocks=64 [ 589.137372][T14572] EXT4-fs (loop2): Block reservation details [ 589.148916][T14572] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 589.180306][T14589] netlink: 'syz.0.3292': attribute type 1 has an invalid length. [ 589.188083][T14589] netlink: 'syz.0.3292': attribute type 2 has an invalid length. [ 589.270722][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3292'. [ 589.297128][ T49] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 589.485398][T14601] loop1: detected capacity change from 0 to 256 [ 589.548231][T14601] FAT-fs (loop1): Directory bread(block 1285) failed [ 589.555926][T14603] loop2: detected capacity change from 0 to 2048 [ 589.679872][T14601] FAT-fs (loop1): Directory bread(block 1286) failed [ 589.700586][T14601] FAT-fs (loop1): Directory bread(block 1287) failed [ 589.711734][T14603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.733953][T14601] FAT-fs (loop1): Directory bread(block 1288) failed [ 589.787806][T12474] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.815472][T14613] netlink: 'syz.2.3300': attribute type 12 has an invalid length. [ 590.868549][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3300'. [ 590.909424][T14613] bond0: option primary_reselect: invalid value (183) [ 591.202875][T14626] netlink: 'syz.0.3306': attribute type 1 has an invalid length. [ 591.218772][T14623] loop1: detected capacity change from 0 to 2048 [ 591.231328][T14626] netlink: 'syz.0.3306': attribute type 2 has an invalid length. [ 591.247985][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3306'. [ 591.353745][T14623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.355578][T14634] loop3: detected capacity change from 0 to 128 [ 591.421023][T14634] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 591.493203][T14634] ext4 filesystem being mounted at /231/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 591.519067][T14634] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 591.531547][T14634] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 591.543559][T14634] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 591.588395][T12128] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 591.596374][T14639] loop2: detected capacity change from 0 to 2048 [ 591.684096][T14639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.713772][T14639] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.718863][T14621] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 591.750044][T14621] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 591.764249][T14621] EXT4-fs (loop1): This should not happen!! Data will be lost [ 591.764249][T14621] [ 591.774845][T14621] EXT4-fs (loop1): Total free blocks count 0 [ 591.781049][T14621] EXT4-fs (loop1): Free/Dirty block details [ 591.787071][T14621] EXT4-fs (loop1): free_blocks=4096 [ 591.792784][T14621] EXT4-fs (loop1): dirty_blocks=64 [ 591.793706][T14644] netlink: 'syz.3.3312': attribute type 12 has an invalid length. [ 591.798012][T14621] EXT4-fs (loop1): Block reservation details [ 591.814552][T14621] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 591.821199][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3312'. [ 591.830461][T14644] bond0: option primary_reselect: invalid value (183) [ 591.908097][T12474] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.949836][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 592.270049][T14656] netlink: 'syz.2.3319': attribute type 1 has an invalid length. [ 592.356230][T14656] bond4: entered promiscuous mode [ 592.368128][T14663] loop0: detected capacity change from 0 to 512 [ 592.379097][T14656] 8021q: adding VLAN 0 to HW filter on device bond4 [ 592.387590][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3318'. [ 592.401655][T14663] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 592.422892][T14663] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 592.486568][T14663] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.3321: bg 0: block 104: invalid block bitmap [ 592.527742][T14668] loop1: detected capacity change from 0 to 2048 [ 592.551296][T14663] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 592.562610][T14663] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.3321: invalid indirect mapped block 1 (level 1) [ 592.578128][T14663] EXT4-fs (loop0): 1 truncate cleaned up [ 592.590575][T14668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.605390][T14663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.618091][T14668] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.772710][T11618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.883384][T13003] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.184793][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3331'. [ 593.204684][T14691] netlink: 'syz.3.3332': attribute type 1 has an invalid length. [ 593.346955][T14691] bond2: entered promiscuous mode [ 593.377790][T14691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 593.503448][T14697] loop1: detected capacity change from 0 to 2048 [ 593.579110][T14697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.593274][T14697] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.340867][T11618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.710656][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3342'. [ 594.790618][T14726] netlink: 'syz.1.3344': attribute type 1 has an invalid length. [ 594.885754][T14726] bond1: entered promiscuous mode [ 594.891255][T14726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 594.953976][T14733] netlink: 'syz.2.3345': attribute type 13 has an invalid length. [ 595.001693][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3345'. [ 595.021779][T14733] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 596.254768][T14756] netlink: 'syz.2.3355': attribute type 1 has an invalid length. [ 596.371546][T14756] bond5: entered promiscuous mode [ 596.393443][T14756] 8021q: adding VLAN 0 to HW filter on device bond5 [ 598.367365][T14792] netlink: 'syz.1.3371': attribute type 1 has an invalid length. [ 598.428701][T14792] bond2: entered promiscuous mode [ 598.466882][T14792] 8021q: adding VLAN 0 to HW filter on device bond2 [ 600.507919][T14826] netlink: 'syz.2.3382': attribute type 1 has an invalid length. [ 600.742218][T14826] bond6: entered promiscuous mode [ 600.751282][T14826] 8021q: adding VLAN 0 to HW filter on device bond6 [ 600.883882][T14841] loop0: detected capacity change from 0 to 512 [ 600.910558][T14841] EXT4-fs (loop0): Test dummy encryption mode enabled [ 600.941806][T14841] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.3386: inode has both inline data and extents flags [ 600.970009][T14841] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.3386: couldn't read orphan inode 15 (err -117) [ 601.040302][T14841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.081747][ T5784] Bluetooth: hci4: command 0x0406 tx timeout [ 601.272237][T14841] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 601.347580][T13003] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.447293][T14873] netlink: 'syz.0.3396': attribute type 1 has an invalid length. [ 602.610292][T14873] bond2: entered promiscuous mode [ 602.621885][T14873] 8021q: adding VLAN 0 to HW filter on device bond2 [ 602.709412][T14873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3396'. [ 602.926783][T14893] loop3: detected capacity change from 0 to 2048 [ 602.976218][T14893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.091506][T14902] netlink: 'syz.2.3410': attribute type 1 has an invalid length. [ 603.099403][T14902] netlink: 'syz.2.3410': attribute type 2 has an invalid length. [ 603.194073][T14893] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 603.327314][T12128] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.658892][T14925] netlink: 'syz.2.3416': attribute type 1 has an invalid length. [ 603.776328][T14933] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 603.805099][T14925] bond7: entered promiscuous mode [ 603.820310][T14932] netlink: 'syz.3.3420': attribute type 1 has an invalid length. [ 603.828072][T14932] netlink: 'syz.3.3420': attribute type 2 has an invalid length. [ 603.875690][T14925] 8021q: adding VLAN 0 to HW filter on device bond7 [ 603.977016][T14935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3416'. [ 604.218603][T14943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3425'. [ 604.245509][T14943] IPv6: NLM_F_CREATE should be specified when creating new route [ 605.211434][T14960] netlink: 'syz.2.3433': attribute type 1 has an invalid length. [ 605.220221][T14960] netlink: 'syz.2.3433': attribute type 2 has an invalid length. [ 605.298708][T14965] netlink: 'syz.1.3435': attribute type 1 has an invalid length. [ 605.444933][T14974] UBIFS error (pid: 14974): cannot open "ubi0_0", error -19 [ 605.463510][T14965] bond3: entered promiscuous mode [ 605.504901][T14965] 8021q: adding VLAN 0 to HW filter on device bond3 [ 605.584680][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3438'. [ 605.618133][T14979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3435'. [ 607.938818][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3449'. [ 608.144331][T15012] netlink: 'syz.1.3450': attribute type 1 has an invalid length. [ 608.186332][T15012] bond4: entered promiscuous mode [ 608.192786][T15012] 8021q: adding VLAN 0 to HW filter on device bond4 [ 608.211165][T15012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3450'. [ 610.030661][T15029] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 610.290199][T15034] netlink: 'syz.2.3460': attribute type 1 has an invalid length. [ 610.366089][T15034] bond8: entered promiscuous mode [ 610.371613][T15034] 8021q: adding VLAN 0 to HW filter on device bond8 [ 610.520036][T15038] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3461'. [ 610.534495][T15034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3460'. [ 610.583279][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3458'. [ 610.885426][T15056] loop1: detected capacity change from 0 to 512 [ 610.950919][T15053] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 610.996809][T15056] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.3466: inode #11: comm syz.1.3466: iget: illegal inode # [ 611.057411][T15056] EXT4-fs (loop1): Remounting filesystem read-only [ 611.075906][T15056] EXT4-fs (loop1): 1 orphan inode deleted [ 611.083336][T15056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.246430][T11618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.364752][T15066] ima: policy update failed [ 611.385978][ T27] audit: type=1802 audit(1789510321.676:18): pid=15066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3471" res=0 errno=0 [ 611.446761][T15069] netlink: 'syz.0.3473': attribute type 1 has an invalid length. [ 611.526010][T15069] bond3: entered promiscuous mode [ 611.531608][T15069] 8021q: adding VLAN 0 to HW filter on device bond3 [ 611.586650][T15072] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3472'. [ 611.596317][T15079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3473'. [ 611.624004][T14825] IPVS: stopping master sync thread 8803 ... [ 611.809110][T15085] loop2: detected capacity change from 0 to 2048 [ 611.906147][T15087] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 611.941180][T15085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.080814][T15085] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 612.196378][T12474] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.366411][T14825] hsr_slave_0: left promiscuous mode [ 612.476653][T14825] veth1_macvtap: left promiscuous mode [ 612.492319][T14825] veth0_macvtap: left promiscuous mode [ 612.507168][T14825] veth1_vlan: left promiscuous mode [ 612.517760][T14825] veth0_vlan: left promiscuous mode [ 612.725140][T15117] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 612.736544][T14825] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 612.753775][T14825] bridge5 (unregistering): left promiscuous mode [ 612.926074][T14825] bond4 (unregistering): Released all slaves [ 612.956028][T14825] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 612.971087][T14825] bridge4 (unregistering): left promiscuous mode [ 613.115236][T14825] bond3 (unregistering): Released all slaves [ 613.243290][T14825] bond2 (unregistering): Released all slaves [ 613.404236][T14825] bond1 (unregistering): Released all slaves [ 614.368094][T14825] bond0 (unregistering): Released all slaves [ 614.475175][T15104] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3487'. [ 614.485183][T15106] netlink: 'syz.0.3489': attribute type 1 has an invalid length. [ 614.514055][T15106] bond4: entered promiscuous mode [ 614.520127][T15106] 8021q: adding VLAN 0 to HW filter on device bond4 [ 614.548112][T15113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3489'. [ 614.949047][T15129] loop1: detected capacity change from 0 to 2048 [ 615.002339][T15129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.613980][T15129] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 615.723825][T14825] IPVS: stop unused estimator thread 0... [ 615.816791][T11618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.019938][T15149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3504'. [ 616.054956][T15149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3504'. [ 616.067107][T15147] null_blk: disk rnullb0 created [ 616.106194][T15154] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 616.193916][T15156] netlink: 'syz.0.3505': attribute type 1 has an invalid length. [ 616.275207][T15156] bond5: entered promiscuous mode [ 616.281837][T15156] 8021q: adding VLAN 0 to HW filter on device bond5 [ 616.407628][T15156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3505'. [ 616.443772][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 616.580412][T15166] loop0: detected capacity change from 0 to 2048 [ 616.671011][T15166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.696831][ T5785] Bluetooth: Frame is too long (len 10, expected len 8) [ 616.706327][ T5785] Bluetooth: Wrong link type (-71) [ 616.777659][T15166] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 616.847968][T15176] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 616.923540][T13003] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.154267][T15187] netlink: 'syz.3.3518': attribute type 1 has an invalid length. [ 617.253218][T15187] bond3: entered promiscuous mode [ 617.270776][T15187] 8021q: adding VLAN 0 to HW filter on device bond3 [ 617.281297][T15193] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3520'. [ 617.387465][T15187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3518'. [ 617.460427][T15204] loop0: detected capacity change from 0 to 128 [ 617.470577][T15203] binder: 15202:15203 unknown command 0 [ 617.481108][T15203] binder: 15202:15203 ioctl c0306201 200000000140 returned -22 [ 617.508828][T15204] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 617.561133][T15204] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.907408][T15218] loop1: detected capacity change from 0 to 128 [ 618.004423][T15218] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 618.008707][T13003] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 618.065080][T15218] ext4 filesystem being mounted at /343/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 618.113875][T15218] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 618.128373][T15218] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 618.142462][T15218] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 618.154910][T15218] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 618.169590][T15218] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 618.265841][T11618] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 618.578376][T15241] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 619.692569][T15255] loop0: detected capacity change from 0 to 128 [ 619.767048][T15255] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 619.810771][T15259] trusted_key: syz.3.3545 sent an empty control message without MSG_MORE. [ 619.904955][T15255] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 619.980152][T15255] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 620.010789][T15255] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 620.058856][T15255] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 620.080540][T15271] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 620.098120][T15271] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 620.145990][T13003] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 620.256384][T15275] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 620.712462][T15295] loop2: detected capacity change from 0 to 128 [ 620.756619][T15295] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 620.799435][T15295] ext4 filesystem being mounted at /271/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 620.878824][T15305] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 620.983468][T12474] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 622.131717][T15329] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 622.297807][T15337] loop1: detected capacity change from 0 to 128 [ 622.304320][T15331] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 622.305330][T15337] EXT4-fs: Ignoring removed i_version option [ 622.371547][T15337] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 622.435995][T15337] ext4 filesystem being mounted at /353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 622.607203][T11618] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 622.681266][T15344] loop2: detected capacity change from 0 to 2048 [ 622.706286][T15350] loop1: detected capacity change from 0 to 256 [ 622.741660][T15350] FAT-fs (loop1): Directory bread(block 1285) failed [ 622.747379][T15344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.748555][T15350] FAT-fs (loop1): Directory bread(block 1286) failed [ 622.768142][T15350] FAT-fs (loop1): Directory bread(block 1287) failed [ 622.778925][T15350] FAT-fs (loop1): Directory bread(block 1288) failed [ 622.919684][T12474] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.185143][T15368] overlay: filesystem on ./file0 not supported as upperdir [ 624.254626][T15364] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 624.609958][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.619536][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.906827][T15381] loop3: detected capacity change from 0 to 2048 [ 624.977299][T15381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.238777][T12128] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.359811][T15392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 625.928466][T15418] loop3: detected capacity change from 0 to 2048 [ 626.335108][T15418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.796347][T12128] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.828208][T15430] syzkaller0: entered promiscuous mode [ 626.833807][T15430] syzkaller0: entered allmulticast mode [ 627.489343][ T5785] Bluetooth: hci2: command tx timeout [ 627.551120][T15435] loop3: detected capacity change from 0 to 512 [ 627.589468][T15435] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 627.632475][T15435] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.3613: bad orphan inode 131083 [ 627.696346][T15435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.882310][T12128] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.286571][T15465] loop1: detected capacity change from 0 to 2048 [ 628.373341][T15465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.561220][T15469] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 629.601793][T11618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.675761][T15488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3624'. [ 630.621642][T15490] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 631.050529][T15511] loop1: detected capacity change from 0 to 1024 [ 631.072868][T15511] ext4: Unknown parameter 'noacl' [ 631.120062][ T5784] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9 [ 631.128096][ T5784] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 631.390222][T15518] loop1: detected capacity change from 0 to 2048 [ 631.708178][T15518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.889676][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 632.191929][T15517] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 632.218927][T15517] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 632.239357][T15517] EXT4-fs (loop1): This should not happen!! Data will be lost [ 632.239357][T15517] [ 632.266839][T15517] EXT4-fs (loop1): Total free blocks count 0 [ 632.273075][T15517] EXT4-fs (loop1): Free/Dirty block details [ 632.279088][T15517] EXT4-fs (loop1): free_blocks=4096 [ 632.286711][T15517] EXT4-fs (loop1): dirty_blocks=64 [ 632.292011][T15517] EXT4-fs (loop1): Block reservation details [ 632.298009][T15517] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 632.308943][T15530] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 632.375642][T14825] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 633.530695][T15548] smc: net device erspan0 applied user defined pnetid SYZ1 [ 633.748390][T15554] loop1: detected capacity change from 0 to 2048 [ 633.752731][T15556] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 633.830947][T15554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.997851][T15553] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 634.059978][T15553] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 634.103663][T15553] EXT4-fs (loop1): This should not happen!! Data will be lost [ 634.103663][T15553] [ 634.136988][T15553] EXT4-fs (loop1): Total free blocks count 0 [ 634.146631][T15553] EXT4-fs (loop1): Free/Dirty block details [ 634.155699][T15553] EXT4-fs (loop1): free_blocks=4096 [ 634.165058][T15553] EXT4-fs (loop1): dirty_blocks=64 [ 634.173566][T15553] EXT4-fs (loop1): Block reservation details [ 634.182937][T15553] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 634.287206][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 634.997388][T15575] loop1: detected capacity change from 0 to 1024 [ 635.025953][T15575] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 635.065469][T15575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.132949][T15581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3659'. [ 635.234863][T15583] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 635.356124][T11618] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 635.442142][T15589] loop2: detected capacity change from 0 to 128 [ 635.457030][T11618] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /369/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 635.472888][T15589] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 635.496029][T15589] ext4 filesystem being mounted at /300/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 635.514872][T11618] EXT4-fs (loop1): Remounting filesystem read-only [ 635.561824][T14095] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.637911][T12474] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 635.778846][T15596] loop2: detected capacity change from 0 to 2048 [ 635.823557][T15596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.865007][T15596] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 635.882081][T15596] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 635.895922][T15596] EXT4-fs (loop2): This should not happen!! Data will be lost [ 635.895922][T15596] [ 635.906354][T15596] EXT4-fs (loop2): Total free blocks count 0 [ 635.912493][T15596] EXT4-fs (loop2): Free/Dirty block details [ 635.918576][T15596] EXT4-fs (loop2): free_blocks=4096 [ 635.929863][T15596] EXT4-fs (loop2): dirty_blocks=64 [ 635.943059][T15596] EXT4-fs (loop2): Block reservation details [ 635.949204][T15596] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 635.970783][T15595] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 637.158057][T15607] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 637.341548][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 637.344291][T15613] loop0: detected capacity change from 0 to 128 [ 637.352211][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 637.363878][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 637.374308][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 637.382247][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 637.389591][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 637.392157][T15613] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 637.489466][T15613] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 637.653306][T13003] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 637.877881][T15610] chnl_net:caif_netlink_parms(): no params data found [ 637.994083][T15610] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.029580][T15610] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.036807][T15610] bridge_slave_0: entered allmulticast mode [ 638.060835][T15610] bridge_slave_0: entered promiscuous mode [ 638.068858][T15610] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.076493][T15610] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.083983][T15610] bridge_slave_1: entered allmulticast mode [ 638.092895][T15610] bridge_slave_1: entered promiscuous mode [ 638.134914][T15610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.147391][T15610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.198939][T15610] team0: Port device team_slave_0 added [ 638.213021][T15610] team0: Port device team_slave_1 added [ 638.239736][T15610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.246716][T15610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.272939][T15641] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 638.283477][T15610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.300537][T15610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.307503][T15610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.339894][T15610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.417690][T15610] hsr_slave_0: entered promiscuous mode [ 638.424847][T15610] hsr_slave_1: entered promiscuous mode [ 638.431754][T15610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 638.440547][T15610] Cannot create hsr debugfs directory [ 638.648459][T15610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 638.670039][T15610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 638.706640][T15610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 638.723456][T15610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 638.762367][T15647] loop2: detected capacity change from 0 to 128 [ 638.783015][T15647] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 638.801909][ T5784] Bluetooth: to_multiplier 0 < 10 [ 638.829442][T15647] ext4 filesystem being mounted at /313/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 638.916923][T15610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.942796][T15610] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.962128][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.969322][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.996760][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.002859][T12474] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 639.003962][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.042878][T15652] syzkaller0: entered promiscuous mode [ 639.054857][T15652] syzkaller0: entered allmulticast mode [ 639.325279][T15661] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 639.473348][T15610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.495154][ T5784] Bluetooth: hci3: command tx timeout [ 639.558005][T15668] loop2: detected capacity change from 0 to 256 [ 639.637701][T15668] FAT-fs (loop2): Directory bread(block 64) failed [ 639.648505][T15668] FAT-fs (loop2): Directory bread(block 65) failed [ 639.659449][T15668] FAT-fs (loop2): Directory bread(block 66) failed [ 639.666018][T15668] FAT-fs (loop2): Directory bread(block 67) failed [ 639.678813][T15668] FAT-fs (loop2): Directory bread(block 68) failed [ 639.700241][T15668] FAT-fs (loop2): Directory bread(block 69) failed [ 639.706957][T15668] FAT-fs (loop2): Directory bread(block 70) failed [ 639.721840][T15668] FAT-fs (loop2): Directory bread(block 71) failed [ 639.731584][T15668] FAT-fs (loop2): Directory bread(block 72) failed [ 639.738291][T15668] FAT-fs (loop2): Directory bread(block 73) failed [ 639.851393][T15668] syz.2.3692: attempt to access beyond end of device [ 639.851393][T15668] loop2: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 639.866596][T15668] syz.2.3692: attempt to access beyond end of device [ 639.866596][T15668] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 639.884382][ T27] audit: type=1800 audit(1789510350.176:19): pid=15668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3692" name="file1" dev="loop2" ino=1048613 res=0 errno=0 [ 639.927353][T15668] syz.2.3692: attempt to access beyond end of device [ 639.927353][T15668] loop2: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 639.936829][T15610] veth0_vlan: entered promiscuous mode [ 639.955246][T15668] syz.2.3692: attempt to access beyond end of device [ 639.955246][T15668] loop2: rw=2049, sector=1772, nr_sectors = 4 limit=256 [ 639.975456][T15668] Buffer I/O error on dev loop2, logical block 443, lost async page write [ 639.988378][T15668] syz.2.3692: attempt to access beyond end of device [ 639.988378][T15668] loop2: rw=2049, sector=1776, nr_sectors = 128 limit=256 [ 639.997209][T15610] veth1_vlan: entered promiscuous mode [ 640.034204][T15610] veth0_macvtap: entered promiscuous mode [ 640.058137][T15610] veth1_macvtap: entered promiscuous mode [ 640.084618][T15610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.100202][T15610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.113628][T15610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.136066][T15610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.147471][T15610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.158369][T15610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.168700][ T5784] Bluetooth: to_multiplier 0 < 10 [ 640.175872][T15610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.186733][T15610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.210748][T15610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.222123][T15610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.243720][T15610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.258195][T15610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.260273][T15680] loop2: detected capacity change from 0 to 128 [ 640.275977][T15610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.286287][T15610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.299764][T15610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.310299][T15610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.311662][T15680] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 640.321686][T15610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.349660][T15680] ext4 filesystem being mounted at /318/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 640.364647][T15610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.395560][T15610] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.430285][T15610] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.460525][T15610] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.469705][T15610] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.494513][T12474] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 640.713383][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.725407][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.777494][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.787669][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.840297][ T5784] Bluetooth: hci2: command tx timeout [ 640.953141][T15693] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 641.149059][T15700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3702'. [ 641.286677][T15705] loop4: detected capacity change from 0 to 128 [ 641.579562][ T5784] Bluetooth: hci3: command tx timeout [ 641.592710][T15705] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 641.739795][T15705] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 642.031245][T15610] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 642.200246][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 642.403852][T15722] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 642.693454][T15734] loop4: detected capacity change from 0 to 128 [ 642.751933][T15734] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 642.778227][T15734] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 643.066100][T15610] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 643.639604][ T5784] Bluetooth: hci3: command tx timeout [ 643.758405][T15749] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 644.801677][T15759] overlayfs: failed to resolve './bus': -2 [ 645.123956][T15771] FAULT_INJECTION: forcing a failure. [ 645.123956][T15771] name failslab, interval 1, probability 0, space 0, times 0 [ 645.136849][T15771] CPU: 0 PID: 15771 Comm: syz.2.3733 Not tainted syzkaller #0 [ 645.144328][T15771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 645.154394][T15771] Call Trace: [ 645.157668][T15771] [ 645.160598][T15771] dump_stack_lvl+0x18c/0x250 [ 645.165287][T15771] ? show_regs_print_info+0x20/0x20 [ 645.170479][T15771] ? load_image+0x420/0x420 [ 645.174978][T15771] ? __lock_acquire+0x7d80/0x7d80 [ 645.179993][T15771] should_fail_ex+0x394/0x4c0 [ 645.184682][T15771] should_failslab+0x9/0x20 [ 645.189201][T15771] slab_pre_alloc_hook+0x59/0x300 [ 645.194253][T15771] kmem_cache_alloc_lru+0x4d/0x2b0 [ 645.199386][T15771] ? sock_alloc_inode+0x28/0xc0 [ 645.204254][T15771] sock_alloc_inode+0x28/0xc0 [ 645.208978][T15771] ? sockfs_init_fs_context+0xb0/0xb0 [ 645.214352][T15771] new_inode_pseudo+0x63/0x1d0 [ 645.219113][T15771] __sock_create+0x12d/0x940 [ 645.223696][T15771] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 645.229675][T15771] __sys_socket+0xd7/0x1b0 [ 645.234087][T15771] __x64_sys_socket+0x7a/0x90 [ 645.238754][T15771] do_syscall_64+0x55/0xb0 [ 645.243172][T15771] ? clear_bhb_loop+0x40/0x90 [ 645.247855][T15771] ? clear_bhb_loop+0x40/0x90 [ 645.252536][T15771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.258434][T15771] RIP: 0033:0x7f2bd799e159 [ 645.262853][T15771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.282461][T15771] RSP: 002b:00007f2bd87ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 645.290877][T15771] RAX: ffffffffffffffda RBX: 00007f2bd7c25fa0 RCX: 00007f2bd799e159 [ 645.298845][T15771] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 645.306815][T15771] RBP: 00007f2bd7a3506b R08: 0000000000000000 R09: 0000000000000000 [ 645.314783][T15771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.322754][T15771] R13: 00007f2bd7c26038 R14: 00007f2bd7c25fa0 R15: 00007fffe28095a8 [ 645.330732][T15771] [ 645.340044][T15771] socket: no more sockets [ 645.684768][T15779] overlayfs: failed to resolve './bus': -2 [ 645.720348][ T5784] Bluetooth: hci3: command tx timeout [ 646.742550][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 646.762810][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 646.803754][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.864409][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 646.876776][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 646.892976][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 646.901928][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 647.067596][T15794] loop4: detected capacity change from 0 to 2048 [ 647.097945][T15794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.104163][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.111014][T15794] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.144357][T15794] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.3742: bg 0: block 2: invalid block bitmap [ 647.159707][T15794] fs-verity (loop4, inode 13): ext4_end_enable_verity() failed with err -28 [ 647.210061][T15610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.234225][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.345126][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.423707][T15804] overlayfs: failed to resolve './bus': -2 [ 647.582700][T15786] chnl_net:caif_netlink_parms(): no params data found [ 647.898587][T15786] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.917965][T15786] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.932101][T15786] bridge_slave_0: entered allmulticast mode [ 647.953736][T15786] bridge_slave_0: entered promiscuous mode [ 648.009421][T15786] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.016583][T15786] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.043553][T15786] bridge_slave_1: entered allmulticast mode [ 648.059177][T15786] bridge_slave_1: entered promiscuous mode [ 648.208759][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3750'. [ 648.212861][T15786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.298763][T15786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.394789][T15786] team0: Port device team_slave_0 added [ 648.467621][T15786] team0: Port device team_slave_1 added [ 648.580734][T15786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.616025][T15786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.643276][T15786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.021105][ T5785] Bluetooth: hci1: command tx timeout [ 649.301688][T15786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.325230][T15786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.359388][T15786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.494860][T15845] loop2: detected capacity change from 0 to 1024 [ 649.551148][T15845] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 649.627037][T15845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.680183][T15845] overlayfs: failed to resolve './bus': -2 [ 649.745148][T12474] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.775413][T15786] hsr_slave_0: entered promiscuous mode [ 649.801970][T15786] hsr_slave_1: entered promiscuous mode [ 649.819614][T15786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.836323][T15786] Cannot create hsr debugfs directory [ 651.079989][ T5785] Bluetooth: hci1: command tx timeout [ 651.316666][ T60] hsr_slave_0: left promiscuous mode [ 651.365410][ T60] hsr_slave_1: left promiscuous mode [ 651.387104][T15886] loop4: detected capacity change from 0 to 1024 [ 651.408349][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.428594][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.439721][T15886] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 651.457718][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.476082][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.500299][ T60] bridge_slave_1: left allmulticast mode [ 651.541666][ T60] bridge_slave_1: left promiscuous mode [ 651.549465][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.579589][T15886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.601762][ T60] bridge_slave_0: left allmulticast mode [ 651.605412][T15886] overlayfs: failed to resolve './bus': -2 [ 651.614148][ T60] bridge_slave_0: left promiscuous mode [ 651.614445][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.666167][ T60] veth1_macvtap: left promiscuous mode [ 651.674482][ T60] veth0_macvtap: left promiscuous mode [ 651.680456][ T60] veth1_vlan: left promiscuous mode [ 651.685770][ T60] veth0_vlan: left promiscuous mode [ 651.687775][T15610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.139127][ T60] bond3 (unregistering): Released all slaves [ 652.287207][ T60] bond2 (unregistering): Released all slaves [ 652.401731][ T60] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 652.410021][ T60] bridge1 (unregistering): left promiscuous mode [ 653.138687][ T60] bond1 (unregistering): Released all slaves [ 653.159531][ T5785] Bluetooth: hci1: command tx timeout [ 653.177592][T15909] fuse: Bad value for 'group_id' [ 653.428138][T15914] loop4: detected capacity change from 0 to 1024 [ 653.449980][T15914] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 653.526224][T15914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.595158][T15914] overlayfs: failed to resolve './bus': -2 [ 653.635732][T15610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.047014][ T60] team0 (unregistering): Port device team_slave_1 removed [ 654.151870][ T60] team0 (unregistering): Port device team_slave_0 removed [ 654.248794][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.328009][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.059651][T15931] fuse: Bad value for 'group_id' [ 655.239388][ T5785] Bluetooth: hci1: command tx timeout [ 655.440272][ T60] bond0 (unregistering): Released all slaves [ 656.106225][T15952] fuse: Bad value for 'group_id' [ 656.152289][T15786] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 656.407108][T15786] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 656.584544][T15786] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 656.635299][T15786] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 656.918897][T15786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.968154][T15786] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.996824][T14825] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.004056][T14825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.402295][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 657.507212][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.514440][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.588668][ T60] tipc: Disabling bearer [ 657.613028][ T60] tipc: Left network mode [ 658.324088][T15786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.577571][T15786] veth0_vlan: entered promiscuous mode [ 659.596038][T15786] veth1_vlan: entered promiscuous mode [ 659.686028][T15786] veth0_macvtap: entered promiscuous mode [ 659.721412][T15786] veth1_macvtap: entered promiscuous mode [ 660.401627][T15786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.429295][T15786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.473542][T15786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.495027][T15786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.520633][T15786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.537547][T15786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.559356][T15786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.577169][T16019] loop2: detected capacity change from 0 to 128 [ 660.583785][T15786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.585324][T15786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.720800][T16019] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 660.735100][T16019] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.787406][ T60] hsr_slave_0: left promiscuous mode [ 660.794259][ T60] hsr_slave_1: left promiscuous mode [ 660.816226][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.829473][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.850162][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.857605][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.900710][ T60] bridge_slave_1: left allmulticast mode [ 660.906403][ T60] bridge_slave_1: left promiscuous mode [ 660.921013][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.962180][ T60] bridge_slave_0: left allmulticast mode [ 660.967863][ T60] bridge_slave_0: left promiscuous mode [ 660.982080][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.098989][ T60] veth1_macvtap: left promiscuous mode [ 661.118355][ T60] veth0_macvtap: left promiscuous mode [ 661.131264][ T60] veth1_vlan: left promiscuous mode [ 661.153187][ T60] veth0_vlan: left promiscuous mode [ 661.153560][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 661.177621][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 661.204195][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 661.215576][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 661.231169][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 661.240716][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 661.307639][T12474] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 661.670097][ T60] bond3 (unregistering): Released all slaves [ 661.866891][ T60] bond2 (unregistering): Released all slaves [ 662.074069][ T60] bond1 (unregistering): (slave dummy0): Releasing active interface [ 662.083338][ T60] bond1 (unregistering): Released all slaves [ 662.665971][ T60] team0 (unregistering): Port device team_slave_1 removed [ 662.713081][ T60] team0 (unregistering): Port device team_slave_0 removed [ 662.758488][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.806763][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.122048][ T60] bond0 (unregistering): Released all slaves [ 663.314736][T15786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.326991][T15786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.329388][ T5785] Bluetooth: hci2: command tx timeout [ 663.337244][T15786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.372244][T15786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.386985][T15786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.398489][T15786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.419075][T15786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.445401][T15786] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.489334][T15786] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.498093][T15786] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.522021][T15786] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.587694][T16036] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3806'. [ 663.842064][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.859192][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.860550][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.875957][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.772215][T16023] chnl_net:caif_netlink_parms(): no params data found [ 664.983467][T16062] loop2: detected capacity change from 0 to 128 [ 665.100888][T16062] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 665.119469][T16023] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.160417][T16023] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.167682][T16023] bridge_slave_0: entered allmulticast mode [ 665.175094][T16062] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.202197][T16023] bridge_slave_0: entered promiscuous mode [ 665.223663][T16023] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.258476][T16023] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.285849][T16023] bridge_slave_1: entered allmulticast mode [ 665.295655][T16023] bridge_slave_1: entered promiscuous mode [ 665.344507][T16023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.365387][T16023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.399505][ T5785] Bluetooth: hci2: command tx timeout [ 665.486613][T16023] team0: Port device team_slave_0 added [ 665.528560][ T60] IPVS: stop unused estimator thread 0... [ 665.537725][T16023] team0: Port device team_slave_1 added [ 665.621187][T16023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.649426][T16023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.677241][T16023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.690698][T16023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.697904][T16023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.729602][T16023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.771803][T12474] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 665.947575][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.753071][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.831133][T16023] hsr_slave_0: entered promiscuous mode [ 666.855630][T16023] hsr_slave_1: entered promiscuous mode [ 667.012981][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.195656][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.482240][ T5785] Bluetooth: hci2: command tx timeout [ 667.684694][T16023] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 667.713980][T16115] netlink: 'syz.5.3818': attribute type 1 has an invalid length. [ 667.738530][T16023] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 667.740200][T16115] netlink: 'syz.5.3818': attribute type 2 has an invalid length. [ 667.845352][T16023] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 667.868469][T16023] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 667.945985][T16119] loop2: detected capacity change from 0 to 128 [ 668.052268][T16119] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 668.083927][T16119] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 668.177128][T16023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.318504][T16023] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.508444][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.515638][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.554016][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.561239][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.637420][T12474] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 668.797340][T16139] loop5: detected capacity change from 0 to 512 [ 668.878519][T16139] EXT4-fs (loop5): Test dummy encryption mode enabled [ 668.941795][T16139] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.3826: inode has both inline data and extents flags [ 668.966808][T16143] loop2: detected capacity change from 0 to 2048 [ 668.968724][T16139] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.3826: couldn't read orphan inode 15 (err -117) [ 669.007595][T16139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.018290][T16143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.206409][T16143] batadv_slave_0: entered promiscuous mode [ 669.220704][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3825'. [ 669.245334][T15786] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.265166][T16152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.418934][T16152] batadv_slave_0 (unregistering): left promiscuous mode [ 669.439507][T16152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.559738][ T5785] Bluetooth: hci2: command tx timeout [ 669.672382][ T60] hsr_slave_0: left promiscuous mode [ 669.685225][ T60] hsr_slave_1: left promiscuous mode [ 669.697486][T12474] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.707087][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.726981][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.735487][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.743250][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.751501][ T60] bridge_slave_1: left allmulticast mode [ 669.761925][ T60] bridge_slave_1: left promiscuous mode [ 669.773875][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.785636][ T60] bridge_slave_0: left allmulticast mode [ 669.796290][ T60] bridge_slave_0: left promiscuous mode [ 669.806745][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.838211][T16166] loop2: detected capacity change from 0 to 1024 [ 669.868883][ T60] veth1_vlan: left promiscuous mode [ 669.878550][ T60] veth0_vlan: left promiscuous mode [ 669.905525][T16166] EXT4-fs (loop2): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 669.939909][T16166] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 669.988297][T16166] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.3830: lblock 0 mapped to illegal pblock 0 (length 1) [ 670.025403][T16166] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.3830: lblock 0 mapped to illegal pblock 0 (length 1) [ 670.058033][T16166] EXT4-fs error (device loop2): ext4_ext_remove_space:2957: inode #15: comm syz.2.3830: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 670.083409][T16169] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.3830: lblock 0 mapped to illegal pblock 0 (length 1) [ 670.132745][T12474] EXT4-fs (loop2): unmounting filesystem 00000000-0100-0006-0000-000000000000. [ 670.275060][ T60] bond5 (unregistering): Released all slaves [ 670.367640][T16173] loop2: detected capacity change from 0 to 128 [ 670.401279][T16173] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 670.414185][T16173] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 670.544109][ T60] bond4 (unregistering): Released all slaves [ 670.708738][T12474] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 670.720024][ T60] bond3 (unregistering): Released all slaves [ 670.932732][T16179] sock: sock_set_timeout: `syz.2.3834' (pid 16179) tries to set negative timeout [ 670.945248][ T60] bond2 (unregistering): Released all slaves [ 671.198340][T16185] loop2: detected capacity change from 0 to 512 [ 671.206846][T16185] EXT4-fs: test_dummy_encryption requires encrypt feature [ 671.235333][ T60] bond1 (unregistering): Released all slaves [ 671.733249][ T60] team0 (unregistering): Port device team_slave_1 removed [ 671.775547][ T60] team0 (unregistering): Port device team_slave_0 removed [ 671.820270][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.866634][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.396175][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 672.420266][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 672.439852][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 672.455912][ T5784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 672.482633][ T5784] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 672.491948][ T5784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 672.582649][ T60] bond0 (unregistering): Released all slaves [ 672.915815][T16023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.045086][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.096193][T16208] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3843'. [ 674.139118][T16189] chnl_net:caif_netlink_parms(): no params data found [ 674.221731][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.361298][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.479723][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.587297][T16023] veth0_vlan: entered promiscuous mode [ 674.599376][ T5785] Bluetooth: hci4: command tx timeout [ 674.647126][T16189] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.677264][T16189] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.687001][T16189] bridge_slave_0: entered allmulticast mode [ 674.701968][T16189] bridge_slave_0: entered promiscuous mode [ 674.712256][T16023] veth1_vlan: entered promiscuous mode [ 674.725000][T16189] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.732545][T16189] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.740613][T16189] bridge_slave_1: entered allmulticast mode [ 674.747909][T16189] bridge_slave_1: entered promiscuous mode [ 674.815040][T16189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.828572][T16189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.900763][T16189] team0: Port device team_slave_0 added [ 674.910979][T16189] team0: Port device team_slave_1 added [ 674.973402][T16189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.981350][T16189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.008281][T16189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.077852][T16189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.086209][T16189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.113507][T16189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.143423][T16023] veth0_macvtap: entered promiscuous mode [ 675.181693][T16023] veth1_macvtap: entered promiscuous mode [ 675.217021][T16189] hsr_slave_0: entered promiscuous mode [ 675.224022][T16189] hsr_slave_1: entered promiscuous mode [ 675.230416][T16189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 675.237977][T16189] Cannot create hsr debugfs directory [ 675.306072][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.323298][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.334377][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.351731][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.368425][T16023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.385822][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.398500][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.417878][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.436180][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.446209][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.459448][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.473795][T16023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.538322][T16023] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.550787][T16023] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.560531][T16023] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.577341][T16023] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.864415][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.896201][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.032072][ T3427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.038742][T16189] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 676.057820][ T3427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.068642][T16189] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 676.123950][T16189] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 676.140086][T16189] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 676.323141][ T60] hsr_slave_0: left promiscuous mode [ 676.330365][ T60] hsr_slave_1: left promiscuous mode [ 676.345894][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.360834][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.368866][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.388050][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.419983][ T60] bridge_slave_1: left allmulticast mode [ 676.440993][ T60] bridge_slave_1: left promiscuous mode [ 676.446784][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.473047][ T60] bridge_slave_0: left allmulticast mode [ 676.483914][ T60] bridge_slave_0: left promiscuous mode [ 676.501628][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.565697][ T60] veth1_macvtap: left promiscuous mode [ 676.572821][ T60] veth0_macvtap: left promiscuous mode [ 676.578493][ T60] veth1_vlan: left promiscuous mode [ 676.599878][ T60] veth0_vlan: left promiscuous mode [ 676.680542][ T5785] Bluetooth: hci4: command tx timeout [ 677.354130][ T60] team0 (unregistering): Port device team_slave_1 removed [ 677.406139][ T60] team0 (unregistering): Port device team_slave_0 removed [ 677.452067][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.500355][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.830886][ T60] bond0 (unregistering): Released all slaves [ 677.946351][T16270] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3850'. [ 678.110795][T16189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.197458][T16189] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.242950][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.250133][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.446571][T14825] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.453879][T14825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.631161][T16189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 678.830292][ T5785] Bluetooth: hci4: command tx timeout [ 679.545761][T16189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.591772][T16299] loop6: detected capacity change from 0 to 4096 [ 679.656587][T16299] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.551102][T16189] veth0_vlan: entered promiscuous mode [ 680.597546][T16189] veth1_vlan: entered promiscuous mode [ 680.657726][T16023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.678689][T16189] veth0_macvtap: entered promiscuous mode [ 680.702838][T16189] veth1_macvtap: entered promiscuous mode [ 680.738242][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.769328][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.783189][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.801645][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.813449][T16189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.825782][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.839838][ T5785] Bluetooth: hci4: command tx timeout [ 680.879401][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.901106][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.959838][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.975778][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.987338][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.012953][T16189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.062421][T16189] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.073485][T16332] binder: BINDER_SET_CONTEXT_MGR already set [ 681.079346][T16189] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.084726][T16332] binder: 16331:16332 ioctl 4018620d 200000000040 returned -16 [ 681.088723][T16189] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.107368][T16189] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.107912][T16332] binder: 16331:16332 unknown command 0 [ 681.123115][T16332] binder: 16331:16332 ioctl c0306201 200000000140 returned -22 [ 681.270484][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.278380][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.335164][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.348779][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.566281][T16348] loop7: detected capacity change from 0 to 128 [ 681.602691][T16348] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 681.690415][T16348] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.721099][T16362] loop6: detected capacity change from 0 to 512 [ 682.800179][T16189] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 682.801423][T16362] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.844415][T16362] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.971012][T16371] loop7: detected capacity change from 0 to 512 [ 682.988163][T16371] EXT4-fs (loop7): Test dummy encryption mode enabled [ 683.009974][T16371] EXT4-fs error (device loop7): ext4_orphan_get:1408: inode #15: comm syz.7.3863: inode has both inline data and extents flags [ 683.048869][T16371] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.3863: couldn't read orphan inode 15 (err -117) [ 683.096013][T16371] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.272535][T16371] Bluetooth: MGMT ver 1.22 [ 684.378197][T16304] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 684.467723][T16386] overlay: Unknown parameter 'euid<00000000000000060929' [ 685.051587][T14825] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 685.071195][T14825] EXT4-fs (loop6): This should not happen!! Data will be lost [ 685.071195][T14825] [ 685.088090][T14825] EXT4-fs (loop6): Total free blocks count 0 [ 685.097860][T14825] EXT4-fs (loop6): Free/Dirty block details [ 685.108783][T14825] EXT4-fs (loop6): free_blocks=65280 [ 685.115448][T14825] EXT4-fs (loop6): dirty_blocks=4157 [ 685.126472][T14825] EXT4-fs (loop6): Block reservation details [ 685.137783][T14825] EXT4-fs (loop6): i_reserved_data_blocks=4157 [ 685.297197][ T60] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 685.793542][T16189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.045480][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.059611][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.079850][T16410] binder: 16408:16410 unknown command 0 [ 686.085594][T16410] binder: 16408:16410 ioctl c0306201 200000000140 returned -22 [ 686.097299][T16411] loop7: detected capacity change from 0 to 256 [ 686.174214][T14825] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.185967][T16411] FAT-fs (loop7): Directory bread(block 1285) failed [ 686.196012][T16411] FAT-fs (loop7): Directory bread(block 1286) failed [ 686.215066][T16411] FAT-fs (loop7): Directory bread(block 1287) failed [ 686.234926][T16411] FAT-fs (loop7): Directory bread(block 1288) failed [ 686.327422][T14825] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.555042][T14825] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.745978][T14825] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.679040][T16429] loop6: detected capacity change from 0 to 128 [ 687.857345][T16429] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 687.921214][T16429] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 688.204190][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 688.230411][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 688.240022][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 688.270011][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 688.279562][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 688.286883][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 688.602005][T16023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 689.349552][T16474] loop6: detected capacity change from 0 to 256 [ 689.358047][T16474] FAT-fs (loop6): Directory bread(block 1285) failed [ 689.364916][T16474] FAT-fs (loop6): Directory bread(block 1286) failed [ 689.371765][T16474] FAT-fs (loop6): Directory bread(block 1287) failed [ 689.404267][T16474] FAT-fs (loop6): Directory bread(block 1288) failed [ 690.379304][ T5784] Bluetooth: hci3: command tx timeout [ 690.531132][T16481] loop7: detected capacity change from 0 to 4096 [ 690.695070][T16481] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.142132][T16443] chnl_net:caif_netlink_parms(): no params data found [ 691.447564][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 691.459178][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 691.467702][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 691.477251][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 691.484916][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 691.492372][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 691.811404][T16189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.835742][T16509] netlink: 'syz.6.3887': attribute type 1 has an invalid length. [ 691.903765][T16509] netlink: 'syz.6.3887': attribute type 2 has an invalid length. [ 692.442983][ T5785] Bluetooth: hci3: command tx timeout [ 692.455313][T16443] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.480025][T16443] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.487287][T16443] bridge_slave_0: entered allmulticast mode [ 692.519552][T16443] bridge_slave_0: entered promiscuous mode [ 692.560859][T16443] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.568461][T16443] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.594837][T16443] bridge_slave_1: entered allmulticast mode [ 692.611434][T16443] bridge_slave_1: entered promiscuous mode [ 692.685138][T16527] loop7: detected capacity change from 0 to 1024 [ 692.813340][T16527] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.867796][T16443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.901674][T16443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.181495][ T27] audit: type=1804 audit(1789510403.466:20): pid=16538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3890" name="/newroot/12/file1/file0/file1" dev="overlay" ino=15 res=1 errno=0 [ 693.226617][T14825] hsr_slave_0: left promiscuous mode [ 693.237491][ T27] audit: type=1804 audit(1789510403.526:21): pid=16527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3890" name="/newroot/12/file1/file0/file1" dev="overlay" ino=15 res=1 errno=0 [ 693.262859][T14825] hsr_slave_1: left promiscuous mode [ 693.327475][T14825] veth1_macvtap: left promiscuous mode [ 693.334970][T14825] veth0_macvtap: left promiscuous mode [ 693.347481][T14825] veth1_vlan: left promiscuous mode [ 693.353139][T14825] veth0_vlan: left promiscuous mode [ 693.429447][T16189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.564597][ T5784] Bluetooth: hci0: command tx timeout [ 693.663731][T16548] binder: 16547:16548 unknown command 0 [ 693.678084][T16548] binder: 16547:16548 ioctl c0306201 200000000140 returned -22 [ 693.956352][T14825] bond4 (unregistering): Released all slaves [ 694.133993][T14825] bond3 (unregistering): Released all slaves [ 694.259134][T14825] bond2 (unregistering): Released all slaves [ 694.387517][T14825] bond1 (unregistering): Released all slaves [ 694.529548][ T5784] Bluetooth: hci3: command tx timeout [ 695.425363][T16582] binder: 16581:16582 unknown command 0 [ 695.432414][T16582] binder: 16581:16582 ioctl c0306201 200000000140 returned -22 [ 695.642413][ T5784] Bluetooth: hci0: command tx timeout [ 695.975491][T14825] bond0 (unregistering): Released all slaves [ 696.061337][T16443] team0: Port device team_slave_0 added [ 696.087493][T16443] team0: Port device team_slave_1 added [ 696.138412][T16443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.165992][T16443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.201714][T16443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.215993][T16443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.223023][T16443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.249377][T16443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.422362][T16443] hsr_slave_0: entered promiscuous mode [ 696.441235][T16443] hsr_slave_1: entered promiscuous mode [ 696.461562][T16443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 696.469153][T16443] Cannot create hsr debugfs directory [ 696.522162][T16497] chnl_net:caif_netlink_parms(): no params data found [ 696.599298][ T5784] Bluetooth: hci3: command tx timeout [ 696.940355][T16497] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.967435][T16497] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.019160][T16497] bridge_slave_0: entered allmulticast mode [ 697.026649][T16497] bridge_slave_0: entered promiscuous mode [ 697.066692][T16497] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.125482][T16497] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.128512][T16610] binder: 16609:16610 unknown command 0 [ 697.149605][T16497] bridge_slave_1: entered allmulticast mode [ 697.151619][T16610] binder: 16609:16610 ioctl c0306201 200000000140 returned -22 [ 697.157962][T16497] bridge_slave_1: entered promiscuous mode [ 697.336577][T16497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.368977][T16497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.398935][T16616] loop6: detected capacity change from 0 to 1024 [ 697.459907][T14825] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.497358][T16616] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.563008][T16497] team0: Port device team_slave_0 added [ 697.581880][T16443] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 697.614548][ T27] audit: type=1804 audit(1789510407.906:22): pid=16616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3908" name="/newroot/44/file1/file1" dev="loop6" ino=15 res=1 errno=0 [ 697.664786][T14825] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.695216][T16497] team0: Port device team_slave_1 added [ 697.701977][T16023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.719641][ T5784] Bluetooth: hci0: command tx timeout [ 697.740414][T16443] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 697.756501][T16443] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 697.829972][T16443] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 697.862301][T16631] FAULT_INJECTION: forcing a failure. [ 697.862301][T16631] name failslab, interval 1, probability 0, space 0, times 0 [ 697.882161][T16631] CPU: 1 PID: 16631 Comm: syz.6.3910 Not tainted syzkaller #0 [ 697.889662][T16631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.899735][T16631] Call Trace: [ 697.903025][T16631] [ 697.905977][T16631] dump_stack_lvl+0x18c/0x250 [ 697.910696][T16631] ? show_regs_print_info+0x20/0x20 [ 697.915939][T16631] ? load_image+0x420/0x420 [ 697.920474][T16631] ? __might_sleep+0xe0/0xe0 [ 697.925091][T16631] ? __lock_acquire+0x7d80/0x7d80 [ 697.930146][T16631] ? mtree_load+0x109/0x840 [ 697.934680][T16631] should_fail_ex+0x394/0x4c0 [ 697.939392][T16631] should_failslab+0x9/0x20 [ 697.943945][T16631] slab_pre_alloc_hook+0x59/0x300 [ 697.948993][T16631] ? can_vma_merge_before+0x6e/0x280 [ 697.954294][T16631] kmem_cache_alloc+0x5a/0x2c0 [ 697.959048][T16631] ? vm_area_dup+0x27/0x270 [ 697.963539][T16631] vm_area_dup+0x27/0x270 [ 697.967857][T16631] __split_vma+0x1a8/0xc20 [ 697.972268][T16631] ? mmap_write_unlock+0x160/0x160 [ 697.977398][T16631] ? split_vma+0x8f/0x110 [ 697.981741][T16631] madvise_update_vma+0x44e/0xda0 [ 697.986764][T16631] ? __ia32_sys_process_madvise+0xc0/0xc0 [ 697.992471][T16631] ? down_write_killable+0x181/0x230 [ 697.997754][T16631] do_madvise+0x145c/0x3790 [ 698.002280][T16631] ? madvise_set_anon_name+0x440/0x440 [ 698.007811][T16631] ? schedule+0xc7/0x170 [ 698.012045][T16631] ? futex_wait_queue+0x27/0x1b0 [ 698.016982][T16631] ? futex_wait_queue+0x138/0x1b0 [ 698.022006][T16631] ? futex_unqueue+0xcb/0xf0 [ 698.026579][T16631] ? futex_wait+0x4a7/0x5c0 [ 698.031067][T16631] ? futex_setup_timer+0xc0/0xc0 [ 698.036006][T16631] ? futex_wait_setup+0x270/0x270 [ 698.041026][T16631] ? file_end_write+0x159/0x250 [ 698.045862][T16631] ? vfs_write+0x5de/0x9a0 [ 698.050269][T16631] ? do_futex+0x2ff/0x3e0 [ 698.054583][T16631] ? __ia32_sys_get_robust_list+0x110/0x110 [ 698.060473][T16631] ? lock_chain_count+0x20/0x20 [ 698.065314][T16631] __x64_sys_madvise+0xa6/0xc0 [ 698.070099][T16631] do_syscall_64+0x55/0xb0 [ 698.074501][T16631] ? clear_bhb_loop+0x40/0x90 [ 698.079161][T16631] ? clear_bhb_loop+0x40/0x90 [ 698.083826][T16631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 698.089707][T16631] RIP: 0033:0x7fed0339e159 [ 698.094107][T16631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.113702][T16631] RSP: 002b:00007fed041de028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 698.122105][T16631] RAX: ffffffffffffffda RBX: 00007fed03625fa0 RCX: 00007fed0339e159 [ 698.130061][T16631] RDX: 000000000000000a RSI: 86ac726dff2f4713 RDI: 0000200000bdc000 [ 698.138031][T16631] RBP: 00007fed0343506b R08: 0000000000000000 R09: 0000000000000000 [ 698.145991][T16631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.153956][T16631] R13: 00007fed03626038 R14: 00007fed03625fa0 R15: 00007fff124c69b8 [ 698.161931][T16631] [ 698.174885][T14825] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.206249][T16497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.217139][T16497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.245958][T16497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.386491][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3912'. [ 698.388746][T16497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.413630][T16497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.448796][T16497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.527948][T14825] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.699960][T16640] binder: 16639:16640 unknown command 0 [ 698.729531][T16640] binder: 16639:16640 ioctl c0306201 200000000140 returned -22 [ 698.738333][T16497] hsr_slave_0: entered promiscuous mode [ 698.768129][T16497] hsr_slave_1: entered promiscuous mode [ 698.789682][T16497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 698.809352][T16497] Cannot create hsr debugfs directory [ 698.884046][T16643] netlink: 'syz.6.3915': attribute type 1 has an invalid length. [ 698.898118][T16645] loop7: detected capacity change from 0 to 1024 [ 698.936356][T16643] bond1: entered promiscuous mode [ 698.942059][T16643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 698.966658][T16645] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.019144][ T27] audit: type=1804 audit(1789510409.306:23): pid=16645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3916" name="/newroot/19/file1/file1" dev="loop7" ino=15 res=1 errno=0 [ 699.052300][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3915'. [ 699.066179][T16189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.109894][T16643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 699.117411][T16643] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 699.130522][T16643] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 699.154273][T16643] bond1: (slave wireguard0): making interface the new active one [ 699.162613][T16643] wireguard0: entered promiscuous mode [ 699.175047][T16643] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 699.547575][T14825] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.655105][T16665] netlink: 'syz.6.3921': attribute type 1 has an invalid length. [ 699.663660][T16665] netlink: 'syz.6.3921': attribute type 2 has an invalid length. [ 699.683237][T16443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.721893][T14825] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.781445][T16443] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.799889][ T5784] Bluetooth: hci0: command tx timeout [ 699.867181][T14825] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.906957][T16052] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.914160][T16052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.925832][T16052] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.933020][T16052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.086189][T14825] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.248924][T16443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 700.322773][T16443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 700.380550][T16497] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 700.412715][T16497] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 700.459596][T16497] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 700.487077][T16687] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3927'. [ 700.584558][T16497] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 701.246958][T16443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.289604][T16497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.433703][T16497] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.541581][T16719] loop6: detected capacity change from 0 to 512 [ 701.557975][T16015] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.565151][T16015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.581238][T16719] EXT4-fs (loop6): Test dummy encryption mode enabled [ 701.625119][T16719] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #15: comm syz.6.3935: inode has both inline data and extents flags [ 701.663552][T16719] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.3935: couldn't read orphan inode 15 (err -117) [ 701.703389][T16719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.782746][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.789939][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.830128][T16023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.134890][T16736] FAULT_INJECTION: forcing a failure. [ 702.134890][T16736] name failslab, interval 1, probability 0, space 0, times 0 [ 702.170081][T16736] CPU: 1 PID: 16736 Comm: syz.6.3938 Not tainted syzkaller #0 [ 702.177593][T16736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 702.187664][T16736] Call Trace: [ 702.190961][T16736] [ 702.193905][T16736] dump_stack_lvl+0x18c/0x250 [ 702.198606][T16736] ? show_regs_print_info+0x20/0x20 [ 702.203828][T16736] ? load_image+0x420/0x420 [ 702.208351][T16736] ? __might_sleep+0xe0/0xe0 [ 702.212960][T16736] ? __lock_acquire+0x7d80/0x7d80 [ 702.218010][T16736] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 702.224012][T16736] should_fail_ex+0x394/0x4c0 [ 702.228718][T16736] should_failslab+0x9/0x20 [ 702.233241][T16736] slab_pre_alloc_hook+0x59/0x300 [ 702.238287][T16736] ? lockdep_hardirqs_on+0x98/0x150 [ 702.243503][T16736] kmem_cache_alloc+0x5a/0x2c0 [ 702.248287][T16736] ? taskstats_exit+0x14d/0xce0 [ 702.253149][T16736] taskstats_exit+0x14d/0xce0 [ 702.257812][T16736] ? sysctl_delayacct+0x220/0x220 [ 702.262835][T16736] ? rcu_read_lock_any_held+0xb4/0x140 [ 702.268309][T16736] ? rcu_read_lock_bh_held+0x100/0x100 [ 702.273794][T16736] do_exit+0x8fc/0x2530 [ 702.277980][T16736] ? put_task_struct+0xc0/0xc0 [ 702.282771][T16736] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 702.288766][T16736] ? get_signal+0x100e/0x1390 [ 702.293458][T16736] ? lock_chain_count+0x20/0x20 [ 702.298325][T16736] ? _raw_spin_lock_irq+0xbb/0xf0 [ 702.303367][T16736] do_group_exit+0x22d/0x2f0 [ 702.307969][T16736] ? lockdep_hardirqs_on+0x98/0x150 [ 702.313184][T16736] get_signal+0x12a6/0x1390 [ 702.317725][T16736] arch_do_signal_or_restart+0xc2/0x7b0 [ 702.323283][T16736] ? __ia32_sys_get_robust_list+0x110/0x110 [ 702.329164][T16736] ? get_sigframe_size+0x20/0x20 [ 702.334127][T16736] ? exit_to_user_mode_loop+0x3b/0x110 [ 702.339590][T16736] exit_to_user_mode_loop+0x70/0x110 [ 702.344881][T16736] exit_to_user_mode_prepare+0xee/0x180 [ 702.350428][T16736] syscall_exit_to_user_mode+0x1a/0x50 [ 702.355905][T16736] do_syscall_64+0x61/0xb0 [ 702.360315][T16736] ? clear_bhb_loop+0x40/0x90 [ 702.365009][T16736] ? clear_bhb_loop+0x40/0x90 [ 702.369708][T16736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 702.375616][T16736] RIP: 0033:0x7fed0339e159 [ 702.380042][T16736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.385516][T16739] loop7: detected capacity change from 0 to 2048 [ 702.399641][T16736] RSP: 002b:00007fed041de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 702.399665][T16736] RAX: fffffffffffffe00 RBX: 00007fed03625fa8 RCX: 00007fed0339e159 [ 702.399678][T16736] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fed03625fa8 [ 702.399689][T16736] RBP: 00007fed03625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 702.399700][T16736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.399711][T16736] R13: 00007fed03626038 R14: 00007fff124c68d0 R15: 00007fff124c69b8 [ 702.399737][T16736] [ 702.513655][T16739] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.616378][T16189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.836750][T16753] fuse: Bad value for 'fd' [ 702.848338][T16754] loop6: detected capacity change from 0 to 512 [ 702.885373][T16754] EXT4-fs (loop6): Test dummy encryption mode enabled [ 702.898474][T16443] veth0_vlan: entered promiscuous mode [ 702.988031][T16754] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #15: comm syz.6.3942: inode has both inline data and extents flags [ 703.037812][T16754] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.3942: couldn't read orphan inode 15 (err -117) [ 703.091150][T16754] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.152046][T16443] veth1_vlan: entered promiscuous mode [ 703.259764][T16023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.443508][T16771] netlink: 'syz.6.3944': attribute type 13 has an invalid length. [ 703.473023][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3944'. [ 703.485099][T16771] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 703.589787][T16497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.764897][T16443] veth0_macvtap: entered promiscuous mode [ 703.837605][T16443] veth1_macvtap: entered promiscuous mode [ 703.857139][T16782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3946'. [ 703.982339][T16785] loop7: detected capacity change from 0 to 2048 [ 704.067542][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.087421][T16785] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 704.119684][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.149302][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.169668][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.196797][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.233496][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.274557][T16443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.279004][T16189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.424431][T16796] fuse: Bad value for 'fd' [ 704.541974][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.581725][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.602876][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.617965][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.639748][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.656298][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.667756][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.689887][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.707401][T16443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.742419][T16443] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.786688][T16443] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.819311][T16443] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.828051][T16443] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.880971][T14825] hsr_slave_0: left promiscuous mode [ 704.887638][T14825] hsr_slave_1: left promiscuous mode [ 704.905761][T14825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.914655][T16815] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 704.921711][T14825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.931041][T14825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.938463][T14825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.945832][T16815] binder: 16813:16815 ioctl 4018620d 200000000100 returned -1 [ 704.968526][T14825] bridge_slave_1: left allmulticast mode [ 704.974246][T14825] bridge_slave_1: left promiscuous mode [ 704.987802][T14825] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.026610][T14825] bridge_slave_0: left allmulticast mode [ 705.033018][T14825] bridge_slave_0: left promiscuous mode [ 705.038820][T14825] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.076430][T14825] hsr_slave_0: left promiscuous mode [ 705.094645][T14825] hsr_slave_1: left promiscuous mode [ 705.106720][T16820] loop7: detected capacity change from 0 to 2048 [ 705.123754][T14825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.131413][T14825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.148650][T14825] bridge_slave_1: left allmulticast mode [ 705.154598][T14825] bridge_slave_1: left promiscuous mode [ 705.162854][T14825] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.182158][T16820] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.204061][T14825] bridge_slave_0: left allmulticast mode [ 705.210736][T14825] bridge_slave_0: left promiscuous mode [ 705.216536][T14825] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.274322][T16189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.318872][T14825] veth1_macvtap: left promiscuous mode [ 705.343177][T14825] veth0_macvtap: left promiscuous mode [ 705.364497][T14825] veth1_vlan: left promiscuous mode [ 705.384715][T14825] veth0_vlan: left promiscuous mode [ 705.404668][T14825] veth1_macvtap: left promiscuous mode [ 705.411570][T14825] veth0_macvtap: left promiscuous mode [ 705.419024][T14825] veth1_vlan: left promiscuous mode [ 705.425399][T14825] veth0_vlan: left promiscuous mode [ 705.523351][T16828] fuse: Bad value for 'fd' [ 707.852177][T14825] team0 (unregistering): Port device team_slave_1 removed [ 707.917597][T14825] team0 (unregistering): Port device team_slave_0 removed [ 708.387642][T14825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.570987][T14825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.874990][T16848] fuse: Bad value for 'fd' [ 709.132482][T14825] bond0 (unregistering): Released all slaves [ 709.348517][T14825] bond8 (unregistering): Released all slaves [ 709.486789][T14825] bond7 (unregistering): Released all slaves [ 709.615252][T14825] bond6 (unregistering): Released all slaves [ 709.748249][T14825] bond5 (unregistering): Released all slaves [ 709.932826][T14825] bond4 (unregistering): Released all slaves [ 710.617202][T14825] bond3 (unregistering): Released all slaves [ 710.923627][T14825] bond2 (unregistering): Released all slaves [ 711.116963][T14825] bond1 (unregistering): Released all slaves [ 711.663235][T14825] team0 (unregistering): Port device team_slave_1 removed [ 711.706434][T14825] team0 (unregistering): Port device team_slave_0 removed [ 711.757282][T14825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.807632][T14825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.816525][ T23] infiniband syz1: ib_query_port failed (-19) [ 712.154199][T14825] bond0 (unregistering): Released all slaves [ 712.500919][T16867] [ 712.503297][T16867] ====================================================== [ 712.510322][T16867] WARNING: possible circular locking dependency detected [ 712.513787][T16497] veth0_vlan: entered promiscuous mode [ 712.517336][T16867] syzkaller #0 Not tainted [ 712.527201][T16867] ------------------------------------------------------ [ 712.534224][T16867] syz.6.3969/16867 is trying to acquire lock: [ 712.540296][T16867] ffff88801aff00b8 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfc/0xe30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 712.542226][T16497] veth1_vlan: entered promiscuous mode [ 712.549357][T16867] [ 712.549357][T16867] but task is already holding lock: [ 712.549364][T16867] ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 712.571046][T16867] [ 712.571046][T16867] which lock already depends on the new lock. [ 712.571046][T16867] [ 712.581455][T16867] [ 712.581455][T16867] the existing dependency chain (in reverse order) is: [ 712.590483][T16867] [ 712.590483][T16867] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 712.597890][T16867] __mutex_lock+0x135/0xc80 [ 712.602929][T16867] rfcomm_security_cfm+0x41/0x550 [ 712.608493][T16867] hci_encrypt_cfm+0x363/0x4d0 [ 712.613796][T16867] hci_cc_read_enc_key_size+0x219/0x380 [ 712.619881][T16867] hci_cmd_complete_evt+0x4e7/0xa40 [ 712.625610][T16867] hci_event_packet+0x7b4/0x1280 [ 712.631074][T16867] hci_rx_work+0x43a/0xd60 [ 712.636026][T16867] process_scheduled_works+0xa60/0x1600 [ 712.642101][T16867] worker_thread+0xa5e/0xfe0 [ 712.647200][T16867] kthread+0x2fa/0x390 [ 712.651789][T16867] ret_from_fork+0x48/0x80 [ 712.656712][T16867] ret_from_fork_asm+0x11/0x20 [ 712.661995][T16867] [ 712.661995][T16867] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 712.669744][T16867] __mutex_lock+0x135/0xc80 [ 712.674776][T16867] hci_remote_features_evt+0x535/0x900 [ 712.680762][T16867] hci_event_packet+0x807/0x1280 [ 712.686232][T16867] hci_rx_work+0x43a/0xd60 [ 712.691188][T16867] process_scheduled_works+0xa60/0x1600 [ 712.697267][T16867] worker_thread+0xa5e/0xfe0 [ 712.702393][T16867] kthread+0x2fa/0x390 [ 712.706996][T16867] ret_from_fork+0x48/0x80 [ 712.711947][T16867] ret_from_fork_asm+0x11/0x20 [ 712.717260][T16867] [ 712.717260][T16867] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 712.724568][T16867] __lock_acquire+0x37ef/0x7d80 [ 712.729922][T16867] lock_acquire+0x19e/0x420 [ 712.734945][T16867] __mutex_lock+0x135/0xc80 [ 712.739953][T16867] l2cap_chan_connect+0xfc/0xe30 [ 712.745392][T16867] l2cap_sock_connect+0x586/0x760 [ 712.750917][T16867] kernel_connect+0x142/0x1c0 [ 712.756098][T16867] rfcomm_dlc_open+0xa1f/0xec0 [ 712.761373][T16867] rfcomm_sock_connect+0x2ed/0x600 [ 712.767023][T16867] __sys_connect+0x3da/0x470 [ 712.772156][T16867] __x64_sys_connect+0x7a/0x90 [ 712.777460][T16867] do_syscall_64+0x55/0xb0 [ 712.782416][T16867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 712.788852][T16867] [ 712.788852][T16867] other info that might help us debug this: [ 712.788852][T16867] [ 712.799086][T16867] Chain exists of: [ 712.799086][T16867] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 712.799086][T16867] [ 712.811625][T16867] Possible unsafe locking scenario: [ 712.811625][T16867] [ 712.819078][T16867] CPU0 CPU1 [ 712.824449][T16867] ---- ---- [ 712.829823][T16867] lock(rfcomm_mutex); [ 712.833998][T16867] lock(hci_cb_list_lock); [ 712.841035][T16867] lock(rfcomm_mutex); [ 712.847720][T16867] lock(&hdev->lock); [ 712.851802][T16867] [ 712.851802][T16867] *** DEADLOCK *** [ 712.851802][T16867] [ 712.859953][T16867] 1 lock held by syz.6.3969/16867: [ 712.865069][T16867] #0: ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 712.874413][T16867] [ 712.874413][T16867] stack backtrace: [ 712.880315][T16867] CPU: 1 PID: 16867 Comm: syz.6.3969 Not tainted syzkaller #0 [ 712.887787][T16867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 712.897850][T16867] Call Trace: [ 712.901140][T16867] [ 712.904078][T16867] dump_stack_lvl+0x18c/0x250 [ 712.908801][T16867] ? load_image+0x420/0x420 [ 712.913326][T16867] ? show_regs_print_info+0x20/0x20 [ 712.918557][T16867] ? print_circular_bug+0x12b/0x1a0 [ 712.923780][T16867] check_noncircular+0x2fc/0x400 [ 712.928743][T16867] ? print_deadlock_bug+0x5d0/0x5d0 [ 712.933976][T16867] ? lockdep_lock+0xf5/0x230 [ 712.938590][T16867] ? _find_first_zero_bit+0xd6/0x100 [ 712.943897][T16867] __lock_acquire+0x37ef/0x7d80 [ 712.948802][T16867] ? is_bpf_text_address+0x28f/0x2a0 [ 712.954119][T16867] ? verify_lock_unused+0x140/0x140 [ 712.959337][T16867] ? __lock_acquire+0x1336/0x7d80 [ 712.964380][T16867] ? verify_lock_unused+0x140/0x140 [ 712.969613][T16867] lock_acquire+0x19e/0x420 [ 712.974141][T16867] ? l2cap_chan_connect+0xfc/0xe30 [ 712.979271][T16867] ? __might_sleep+0xe0/0xe0 [ 712.983969][T16867] ? read_lock_is_recursive+0x20/0x20 [ 712.989362][T16867] ? hci_get_route+0x3a5/0x4d0 [ 712.994152][T16867] ? __lock_acquire+0x7d80/0x7d80 [ 712.999198][T16867] __mutex_lock+0x135/0xc80 [ 713.003721][T16867] ? l2cap_chan_connect+0xfc/0xe30 [ 713.008851][T16867] ? do_raw_read_unlock+0x3d/0x80 [ 713.013900][T16867] ? _raw_read_unlock+0x28/0x40 [ 713.018772][T16867] ? hci_get_route+0x3a5/0x4d0 [ 713.023564][T16867] ? l2cap_chan_connect+0xfc/0xe30 [ 713.028697][T16867] ? mutex_lock_nested+0x20/0x20 [ 713.033665][T16867] ? print_unlock_imbalance_bug+0x160/0x160 [ 713.039584][T16867] ? mark_lock+0x94/0x320 [ 713.043940][T16867] l2cap_chan_connect+0xfc/0xe30 [ 713.048900][T16867] ? lock_chain_count+0x20/0x20 [ 713.053778][T16867] ? l2cap_chan_le_send_credits+0x4e0/0x4e0 [ 713.059701][T16867] ? __local_bh_enable_ip+0x13a/0x1c0 [ 713.065101][T16867] ? _local_bh_enable+0xa0/0xa0 [ 713.069978][T16867] ? bacmp+0xe/0x30 [ 713.073811][T16867] l2cap_sock_connect+0x586/0x760 [ 713.078865][T16867] ? l2cap_sock_bind+0x940/0x940 [ 713.083826][T16867] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 713.089829][T16867] ? __lock_acquire+0x7d80/0x7d80 [ 713.094876][T16867] ? kernel_connect+0xf2/0x1c0 [ 713.099664][T16867] kernel_connect+0x142/0x1c0 [ 713.104366][T16867] ? kernel_accept+0x350/0x350 [ 713.109159][T16867] ? rfcomm_dlc_open+0x9e3/0xec0 [ 713.114115][T16867] rfcomm_dlc_open+0xa1f/0xec0 [ 713.118897][T16867] ? rfcomm_sock_connect+0x2c6/0x600 [ 713.124205][T16867] ? __local_bh_enable_ip+0x13a/0x1c0 [ 713.129599][T16867] ? rfcomm_dlc_free+0x50/0x50 [ 713.134381][T16867] ? __local_bh_enable_ip+0x13a/0x1c0 [ 713.139771][T16867] ? _local_bh_enable+0xa0/0xa0 [ 713.144648][T16867] ? do_raw_spin_unlock+0x121/0x230 [ 713.149872][T16867] rfcomm_sock_connect+0x2ed/0x600 [ 713.155012][T16867] __sys_connect+0x3da/0x470 [ 713.159621][T16867] ? __sys_connect_file+0x170/0x170 [ 713.164835][T16867] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 713.170757][T16867] __x64_sys_connect+0x7a/0x90 [ 713.175551][T16867] do_syscall_64+0x55/0xb0 [ 713.179985][T16867] ? clear_bhb_loop+0x40/0x90 [ 713.184684][T16867] ? clear_bhb_loop+0x40/0x90 [ 713.189384][T16867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.195376][T16867] RIP: 0033:0x7fed0339e159 [ 713.199825][T16867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.219447][T16867] RSP: 002b:00007fed041bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 713.227886][T16867] RAX: ffffffffffffffda RBX: 00007fed03626090 RCX: 00007fed0339e159 [ 713.235878][T16867] RDX: 0000000000000011 RSI: 0000200000000040 RDI: 0000000000000004 [ 713.243867][T16867] RBP: 00007fed0343506b R08: 0000000000000000 R09: 0000000000000000 [ 713.251857][T16867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.259847][T16867] R13: 00007fed03626128 R14: 00007fed03626090 R15: 00007fff124c69b8 [ 713.267841][T16867] [ 714.400942][T14825] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.445245][T14825] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.485872][T14825] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.553931][T14825] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.917055][T14825] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.955331][T14825] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.023514][T14825] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.064139][T14825] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.163359][T14825] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.225314][T14825] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.302500][T14825] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.346622][T14825] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.501488][T14825] hsr_slave_0: left promiscuous mode [ 716.507397][T14825] hsr_slave_1: left promiscuous mode [ 716.514940][T14825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.525317][T14825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.533293][T14825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.542808][T14825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.551613][T14825] bridge_slave_1: left allmulticast mode [ 716.557276][T14825] bridge_slave_1: left promiscuous mode [ 716.564732][T14825] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.573709][T14825] bridge_slave_0: left allmulticast mode [ 716.580866][T14825] bridge_slave_0: left promiscuous mode [ 716.586579][T14825] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.602727][T14825] hsr_slave_0: left promiscuous mode [ 716.608749][T14825] hsr_slave_1: left promiscuous mode [ 716.614991][T14825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.626282][T14825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.634254][T14825] bridge_slave_1: left allmulticast mode [ 716.641305][T14825] bridge_slave_1: left promiscuous mode [ 716.646991][T14825] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.656911][T14825] bridge_slave_0: left allmulticast mode [ 716.664964][T14825] bridge_slave_0: left promiscuous mode [ 716.671173][T14825] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.686263][T14825] hsr_slave_0: left promiscuous mode [ 716.692140][T14825] hsr_slave_1: left promiscuous mode [ 716.697978][T14825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.707587][T14825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.716218][T14825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.726670][T14825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.735312][T14825] bridge_slave_1: left allmulticast mode [ 716.742501][T14825] bridge_slave_1: left promiscuous mode [ 716.748227][T14825] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.757328][T14825] bridge_slave_0: left allmulticast mode [ 716.766222][T14825] bridge_slave_0: left promiscuous mode [ 716.773062][T14825] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.787639][T14825] hsr_slave_0: left promiscuous mode [ 716.793592][T14825] hsr_slave_1: left promiscuous mode [ 716.806056][T14825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.815255][T14825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.831476][T14825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.838889][T14825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.847227][T14825] bridge_slave_1: left allmulticast mode [ 716.853012][T14825] bridge_slave_1: left promiscuous mode [ 716.858675][T14825] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.866897][T14825] bridge_slave_0: left allmulticast mode [ 716.872675][T14825] bridge_slave_0: left promiscuous mode [ 716.878283][T14825] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.891649][T14825] veth1_macvtap: left promiscuous mode [ 716.897166][T14825] veth0_macvtap: left promiscuous mode [ 716.903219][T14825] veth1_vlan: left promiscuous mode [ 716.908488][T14825] veth0_vlan: left promiscuous mode [ 716.914493][T14825] veth1_vlan: left promiscuous mode [ 716.919966][T14825] veth0_vlan: left promiscuous mode [ 716.925789][T14825] veth1_macvtap: left promiscuous mode [ 716.932182][T14825] veth0_macvtap: left promiscuous mode [ 716.937702][T14825] veth1_vlan: left promiscuous mode [ 716.944705][T14825] veth0_vlan: left promiscuous mode [ 716.951388][T14825] veth1_macvtap: left promiscuous mode [ 716.956866][T14825] veth0_macvtap: left promiscuous mode [ 716.962462][T14825] veth1_vlan: left promiscuous mode [ 716.967714][T14825] veth0_vlan: left promiscuous mode [ 717.267764][T14825] team0 (unregistering): Port device team_slave_1 removed [ 717.300446][T14825] team0 (unregistering): Port device team_slave_0 removed [ 717.312512][T14825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.325125][T14825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.391162][T14825] bond0 (unregistering): Released all slaves [ 717.592718][T14825] team0 (unregistering): Port device team_slave_1 removed [ 717.623096][T14825] team0 (unregistering): Port device team_slave_0 removed [ 717.649756][T14825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.676820][T14825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.735520][T14825] bond0 (unregistering): Released all slaves [ 717.773420][T14825] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 717.781819][T14825] wireguard0 (unregistering): left promiscuous mode [ 717.894150][T14825] bond1 (unregistering): Released all slaves [ 717.987876][T14825] team0 (unregistering): Port device team_slave_1 removed [ 718.006943][T14825] team0 (unregistering): Port device team_slave_0 removed [ 718.033586][T14825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.068898][T14825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.137843][T14825] bond0 (unregistering): Released all slaves [ 718.305599][T14825] team0 (unregistering): Port device team_slave_1 removed [ 718.330116][T14825] team0 (unregistering): Port device team_slave_0 removed [ 718.353594][T14825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.384309][T14825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.453331][T14825] bond0 (unregistering): Released all slaves