last executing test programs: 9m22.724828778s ago: executing program 0 (id=35): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") setxattr$security_ima(&(0x7f0000000c00)='./file1\x00', &(0x7f0000000c40), &(0x7f0000000c80)=ANY=[], 0x700, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 9m22.107862893s ago: executing program 0 (id=39): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80c5}, 0xc000) 9m18.827981204s ago: executing program 0 (id=46): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r3, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000001000/0x2000)=nil) recvmmsg(r3, &(0x7f0000000440), 0xf02, 0xf0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) execve(&(0x7f0000000540)='./file2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) 9m18.213816659s ago: executing program 32 (id=46): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r3, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000001000/0x2000)=nil) recvmmsg(r3, &(0x7f0000000440), 0xf02, 0xf0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) execve(&(0x7f0000000540)='./file2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) 9m15.3406735s ago: executing program 33 (id=55): fsopen(&(0x7f0000000640)='virtiofs\x00', 0x1) 7m42.095836155s ago: executing program 34 (id=394): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x83}}}, &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0)=[{0x0, 0x3, 0xb, 0xc}], 0x10, 0x4f740086}, 0x94) 5m16.614599186s ago: executing program 35 (id=1058): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x80002c1, 0x2, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) r4 = socket(0x11, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) waitid(0x0, r0, 0x0, 0xb, &(0x7f0000000400)) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000010003704000000009a8c2ab9c2edb380", @ANYRES32=0x0, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='.\x02\x00', 0x22000402, &(0x7f00000000c0)={[{@noinit_itable}, {@init_itable}, {@noinit_itable}, {@discard}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@delalloc}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@resgid}, {@nolazytime}], [], 0x2c}, 0x1, 0x4ef, &(0x7f00000007c0)="$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") getsockname$inet6(r4, 0x0, &(0x7f0000000cc0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x20008090) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xa, 0x6, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0500000000000f00711904000000000085100000020000"], &(0x7f0000000e00)='GPL\x00', 0x5, 0xc3, &(0x7f0000000e40)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 4m35.566281046s ago: executing program 36 (id=1291): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f00000002c0)="04", 0x1) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000003500)="000012", 0x3}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x0, 0x2, 0x5}, 0x10) writev(r1, &(0x7f0000005ec0)=[{&(0x7f0000000040)="fd02baf738", 0x5}], 0x1) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) close(r1) 4m31.410186919s ago: executing program 37 (id=1313): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x804, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@uni_xlateno}, {@uni_xlateno}, {@utf8no}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@rodir}, {@rodir}, {@shortname_winnt}, {@shortname_win95}, {@utf8no}, {@shortname_win95}]}, 0x1, 0x294, &(0x7f00000009c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000980)='.\x00', 0x8000, 0x90) getdents64(r0, 0x0, 0x0) 4m19.457922863s ago: executing program 6 (id=1351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="03030800030016000c00456500"], 0x2e) 4m19.106231312s ago: executing program 6 (id=1352): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0fc5:1227:la', 0xc) 4m18.720509141s ago: executing program 6 (id=1354): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x2, &(0x7f00000002c0)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000440)="ea6916302816b500000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m18.068078517s ago: executing program 6 (id=1355): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 4m17.284129406s ago: executing program 6 (id=1358): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x50bd2a, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xb692, 0x2, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x3}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x36, &(0x7f00000006c0)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) 4m15.795587483s ago: executing program 6 (id=1365): ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) chdir(&(0x7f0000000440)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000a80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000ac0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000b00)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x2800402, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') read$char_usb(r1, 0x0, 0x0) 4m15.308466405s ago: executing program 38 (id=1365): ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) chdir(&(0x7f0000000440)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000a80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000ac0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000b00)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x2800402, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') read$char_usb(r1, 0x0, 0x0) 4m1.256320631s ago: executing program 0 (id=1366): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 4m0.87242179s ago: executing program 9 (id=1443): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000010852000002849030095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x43725, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 4m0.617725207s ago: executing program 0 (id=1445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f00000004c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) renameat2(r2, 0x0, r2, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./tracefs\x00', &(0x7f0000000380)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracefs/instances/foo\x00', 0x1ff) 3m59.739016569s ago: executing program 9 (id=1448): prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x6, &(0x7f0000000380)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000580), 0x2010001, 0x0) 3m57.165715492s ago: executing program 9 (id=1452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="03030800030016000c00456500"], 0x2e) 3m56.333343182s ago: executing program 9 (id=1454): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 3m55.621163579s ago: executing program 9 (id=1457): prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b00), 0xc) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000580), 0x2010001, 0x0) 3m54.779991591s ago: executing program 9 (id=1461): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r1, 0xff, 0x24, &(0x7f0000000440)="f0c46000", 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 3m54.456201828s ago: executing program 39 (id=1461): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r1, 0xff, 0x24, &(0x7f0000000440)="f0c46000", 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 3m53.541607421s ago: executing program 0 (id=1467): r0 = syz_open_dev$hiddev(&(0x7f00000011c0), 0x6, 0x101200) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000001200)={0x3, 0x100, 0xba, 0x708, 0x4, 0xffffff77}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210080, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@minixdf}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x13}}, {@abort}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$eJzs3c1rHOUfAPDvbHb7/vs1hVKsiBR6sFK7aRJfKnioR9FiQT3XkGxDyaZbspvSxILtwV68SBFELIh3vXvwULx49K8oaKFICQp6WZnNbLJpNslmszFp9/OBSZ5nZnafeeaZ78Mz++wyAfStE+mfXMTxiPgiiTjcsi0f2cYTi/stPL45ni5J1Osf/JFEkq1r7p9k/w9mmeci4ufPIk7nVpdbnZufGiuXSzNZfqg2fW2oOjd/5sr02GRpsnR1ZHT03GujI2++8XrP6vryxb++fv/+O+c+P7nw1Q8Pj9xN4nwcyra11mNT9q7I3WrNnKjXs3NSiPNPvGy4q8J2r2SnD4CuDGRxXoiI44XDhWbUA8++TyOiDvSpZJPxv1d/Ac+I5jigeW/f9X3wU+rR24s3QKvrn1/8bCT2Ne6NDiwkK+6M0vvdwR6Un5bx4+/37qZLbOVzCIBNunU7Is7m86v7vyTr/7p3toN9nixD/wf/nfvp+OeVduOf3NL4J9qMfw62id1ubBz/uYc9KGZN6fjvrbbj36VJq8GBLPe/xpivkFy+Ui6lfdv/I+JUFPam+fXmc84tPKivta11/JcuafnNsWB2HA/zK+eYYmKsNraVOrd6dDvi+bbj32Sp/ZM27Z+ej486LONY6d6La23buP7bq/5dxEtt2395RitZf35yqHE9DDWvitX+vHPs17XKb1//X37ahqq2lbb/gfXrP5i0ztdWN1/Gt/v+Ka21rdvrf0/yYSO9J1t3Y6xWmxmO2JO8t3r9yPJrm/nm/mn9T51cv/9rd/3vj4iPO6z/naPfv9B9/bdXWv+JTbX/5hMP3v3km7XK76z9X22kTmVrOun/Oj3ArZw7AAAAAAAA2G1yEXEoklwx9mXpXK5YXPx+x9E4kCtXqrXTlyuzVyei8VvZwSjkmjPdh1u+DzGcfR+2mR95Ij8aEUci4suB/Y18cbxSntjpygMAAAAAAAAAAAAAAAAAAMAucXDp9/+x4vf/qd8GdvrogG2XX3z+N9CHNnzkfy+e9ATsShvGP/DMEv/Qv8Q/9C/xD32pMcUn/qF/iX/oX+If+pf4BwAAAAAAAAAAAAAAAAAAAAAAAAAAgJ66eOFCutQXHt8cT/MT1+dmpyrXz0yUqlPF6dnx4nhl5lpxslKZLJeK45Xpjd6vXKlcGx6J2RtDtVK1NlSdm780XZm9Wrt0ZXpssnSp5DnjAAAAAAAAAAAAAAAAAAAAsFp1bn5qrFwuzfQgUSiXS7mI6GTniB4V+tQl/t7y+6Ttdivf2XnenkQSy2vyu+KsSvQ6sdM9EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAs+zcAAP//MUwypA==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8801, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000380), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000003c0), 0x80002c1, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtaction={0x68, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2, r6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xe, &(0x7f00000006c0)=ANY=[], &(0x7f0000001100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001140), 0x8}, 0x94) write$rfkill(r1, &(0x7f0000000140)={0x8, 0x6}, 0xfe76) 3m52.523159816s ago: executing program 40 (id=1467): r0 = syz_open_dev$hiddev(&(0x7f00000011c0), 0x6, 0x101200) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000001200)={0x3, 0x100, 0xba, 0x708, 0x4, 0xffffff77}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210080, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@minixdf}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x13}}, {@abort}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8801, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000380), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000003c0), 0x80002c1, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtaction={0x68, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2, r6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xe, &(0x7f00000006c0)=ANY=[], &(0x7f0000001100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001140), 0x8}, 0x94) write$rfkill(r1, &(0x7f0000000140)={0x8, 0x6}, 0xfe76) 3m24.993623944s ago: executing program 1 (id=1532): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000b40)=0xf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000b80)=0xc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000bc0)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x2b) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000d00)=0xcf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000d40)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000d80)=0xc0) 3m23.014551273s ago: executing program 1 (id=1537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f00000004c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./tracefs\x00', &(0x7f0000000380)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracefs/instances/foo\x00', 0x1ff) 3m22.801431648s ago: executing program 1 (id=1539): syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYBLOB], 0xa) 3m22.035886777s ago: executing program 1 (id=1545): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") setxattr$security_ima(&(0x7f0000000c00)='./file1\x00', &(0x7f0000000c40), 0x0, 0x700, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 3m21.09092591s ago: executing program 1 (id=1550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="03030800030016000c00456500"], 0x2e) 3m20.26849841s ago: executing program 1 (id=1555): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000109000000ff"], 0x38}, 0x1, 0x0, 0x0, 0x8002}, 0x20004841) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="88020000", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m19.86681142s ago: executing program 41 (id=1555): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000109000000ff"], 0x38}, 0x1, 0x0, 0x0, 0x8002}, 0x20004841) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="88020000", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m18.932017223s ago: executing program 3 (id=1562): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000010852000002849030095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x43725, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 3m18.492979253s ago: executing program 3 (id=1565): syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYBLOB="040e07"], 0xa) 3m17.763262132s ago: executing program 3 (id=1568): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30, 0xa]}}}, 0x4e}]}) 3m17.556486267s ago: executing program 3 (id=1570): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") setxattr$security_ima(&(0x7f0000000c00)='./file1\x00', &(0x7f0000000c40), 0x0, 0x700, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 3m16.631781619s ago: executing program 3 (id=1573): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sync_file_range(0xffffffffffffffff, 0x3, 0x200, 0x1) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x28, r3, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) 3m15.79342423s ago: executing program 3 (id=1577): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) syz_open_dev$dri(&(0x7f0000000200), 0x82, 0x101000) 3m15.38307762s ago: executing program 42 (id=1577): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) syz_open_dev$dri(&(0x7f0000000200), 0x82, 0x101000) 32.91616338s ago: executing program 4 (id=2262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="380033000000e100ffffffffffff080211000000505050505050"], 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x0) 32.543986969s ago: executing program 4 (id=2264): socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 31.031074896s ago: executing program 4 (id=2268): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001080)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xa, 0x148, 0x0, 0x10, 0x4c8, 0x2a8, 0x2a8, 0x4c8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'bridge0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x220, 0x290, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x400, 0x0, 0x44, 0x81, 0xff, 0xff, 0xfffffaf9, 0xe, 0x20, 0x8}, {0x9}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x7f, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1f8, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x4, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240, 0x0, 0x8}, {0xfffffffffffffffc}}}, @common=@addrtype={{0x30}, {0xe84, 0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xf, 0x1, {0xe6}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x5c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 27.259979869s ago: executing program 4 (id=2279): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") setxattr$security_ima(&(0x7f0000000c00)='./file1\x00', &(0x7f0000000c40), &(0x7f0000000c80)=ANY=[], 0x700, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x2) 26.599974915s ago: executing program 4 (id=2280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff, 0x7}, {0xfff3, 0xffff}, {0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_UDP_DST_MASK={0x6}]}}]}, 0x3c}}, 0x0) 25.862038363s ago: executing program 4 (id=2285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="03030800030016000c00456500"], 0x2e) 25.038066593s ago: executing program 43 (id=2285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="03030800030016000c00456500"], 0x2e) 13.43253156s ago: executing program 5 (id=2308): socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 12.101400652s ago: executing program 2 (id=2313): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x802, 0x90) write$UHID_DESTROY(r1, &(0x7f0000000940), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@generic={0x73, 0x1, 0x1, 0x9f}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x26, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0xc0ed0040, &(0x7f0000000280)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@acl}, {@nodiscard}]}, 0xfe, 0x478, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0/file0\x00', 0x22042, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x70, 0x66, 0x0, 0x3, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x15, 0x4, 0x0, 0x17, 0xc, 0x65, 0x7b98, 0x40, 0x1, 0x4, @multicast1, @loopback, {[@rr={0x7, 0x3, 0x54}, @cipso={0x86, 0x2a, 0x1, [{0x6, 0x7, "abcbae4ca3"}, {0x7, 0x4, "8cfb"}, {0x5, 0x11, "bdc32e2c803418c7d6ff621df9ada7"}, {0x7, 0x8, "14abc9b4b4d5"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x48, 0x0, 0x8, [0x0, 0x80338c]}]}}}}}}}, 0x0) 11.161878815s ago: executing program 2 (id=2317): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x55}, 0x2}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000200)="84c1", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000840) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000640), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) 9.775724349s ago: executing program 2 (id=2320): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x28, r3, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) 8.90731954s ago: executing program 5 (id=2322): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x14080) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x80, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffff525400123456ed3e000a22010008"], 0x3a) 4.904429919s ago: executing program 2 (id=2327): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240), 0x4) sendto$inet(r0, &(0x7f0000000280)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) recvfrom$inet(r0, &(0x7f0000000300)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.755997693s ago: executing program 8 (id=2328): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x55}, 0x2}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000200)="84c1", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000840) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000640), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) 4.754533283s ago: executing program 5 (id=2329): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x36, 0x0, &(0x7f0000000200)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000000000000000000000000000001", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.300029654s ago: executing program 5 (id=2331): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000b40)=0xf) ioctl$TCSBRK(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000b80)=0xc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000bc0)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000cc0)=0x2f) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000d00)=0xcf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000d80)=0xc0) 3.63746993s ago: executing program 8 (id=2332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x58, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'batadv_slave_0\x00'}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008090}, 0x40c00d4) 3.529479233s ago: executing program 5 (id=2334): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000003c0)={0x0, 0x1, 0x1, 0x0, 0x8}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000480)={0x1, 0x1, 0x1}, 0xc) 3.287918629s ago: executing program 2 (id=2335): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x28, r3, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) 3.287601009s ago: executing program 8 (id=2336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000004c0)={0x5, 0x80010, 0xffffffc0, 0x80000e, 0x7, "03e7ffffffffffffff04ddd0ff936d7fcb180e", 0x2000006, 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x64}}, 0x0) write$tun(r0, &(0x7f00000004c0)=ANY=[], 0x9dd7) 2.481425559s ago: executing program 5 (id=2338): syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) write(0xffffffffffffffff, &(0x7f0000000340)="1c0000001a009b8a140000003b000000000000000000", 0x16) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x300, 0x0, 0x50565559, 0x1, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x0, 0x7}}) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) socket$inet_sctp(0x2, 0x1, 0x84) 2.312328473s ago: executing program 7 (id=2339): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x36, 0x0, &(0x7f0000000200)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000000000000000000000000000001", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.264795824s ago: executing program 8 (id=2340): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x55}, 0x2}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000200)="84c1", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000840) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000600), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000640), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) 2.172040076s ago: executing program 7 (id=2341): socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 1.803607166s ago: executing program 7 (id=2342): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x40100, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) 1.488679533s ago: executing program 8 (id=2343): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000001100)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) write(r1, &(0x7f0000000400)='27', 0x2) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x20, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x210000, &(0x7f0000000700)={[{@lazytime}, {@sysvgroups}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f00000007c0)="$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") unlinkat(0xffffffffffffff9c, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 1.478866334s ago: executing program 7 (id=2351): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x55}, 0x2}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000200)="84c1", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000840) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000600), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000640), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) 545.987977ms ago: executing program 7 (id=2344): r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)='1', 0x1) 203.951845ms ago: executing program 7 (id=2345): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x0, 0x3c}, 0x28) socket$nl_route(0x10, 0x3, 0x0) statx(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x800, 0x1, &(0x7f0000000480)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x81, 0x0, 0x32315258, 0x3, 0x3, [{0x9, 0x7}, {0x670, 0x64b0a44e}, {0x1, 0x3ff}, {0x0, 0x9}, {0x80000000, 0x10000}, {0x1000, 0x1}, {0x7, 0x4}, {0x6, 0x2}], 0xf2, 0x8, 0x6, 0x0, 0x6}}) 58.888708ms ago: executing program 2 (id=2346): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x10, 0xc9, 0x5}}}, 0x7) 0s ago: executing program 8 (id=2347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r1, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc40}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000680)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r3, &(0x7f00000006c0), 0x0) kernel console output (not intermixed with test programs): 0581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.026879][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.065745][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.115967][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.170940][T10581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.246787][T10581] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.300265][T10581] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.333501][T10581] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.342296][T10581] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.378676][T10821] loop6: detected capacity change from 0 to 1024 [ 407.400742][T10503] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 407.500700][T10821] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 407.572274][T10821] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.711954][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.747967][T10821] EXT4-fs error (device loop6): ext4_find_dest_de:2117: inode #12: block 7: comm syz.6.1355: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 407.772611][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.799194][T10821] EXT4-fs (loop6): Remounting filesystem read-only [ 407.865007][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.882099][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.749543][T10838] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1359'. [ 408.779638][T10838] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1359'. [ 408.802923][T10841] Bluetooth: Short BCSP packet [ 408.823759][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1359'. [ 409.295497][ T1101] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.391394][T10253] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.415564][ T1101] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.549417][ T1101] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.707020][ T1101] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.039370][T10872] loop9: detected capacity change from 0 to 512 [ 410.084246][T10872] EXT4-fs: Ignoring removed bh option [ 410.122739][T10872] EXT4-fs (loop9): Test dummy encryption mode enabled [ 410.212636][T10872] EXT4-fs error (device loop9): ext4_iget_extra_inode:4752: inode #15: comm syz.9.1367: corrupted in-inode xattr: invalid ea_ino [ 410.312637][T10872] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.1367: couldn't read orphan inode 15 (err -117) [ 410.381321][T10872] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.525863][T10581] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.882550][ T5788] Bluetooth: hci1: command 0x1003 tx timeout [ 410.883181][ T5787] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 411.007144][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 411.018138][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 411.028220][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 411.037603][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 411.051392][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 411.059375][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 411.438826][T10899] rxe_eth0 speed is unknown, defaulting to 1000 [ 412.046502][T10930] Bluetooth: Short BCSP packet [ 412.669778][ T1101] hsr_slave_0: left promiscuous mode [ 412.678414][ T1101] hsr_slave_1: left promiscuous mode [ 412.689267][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.697717][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.708666][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.719335][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.730265][ T1101] bridge_slave_1: left allmulticast mode [ 412.736415][ T1101] bridge_slave_1: left promiscuous mode [ 412.742403][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.754670][ T1101] bridge_slave_0: left allmulticast mode [ 412.760368][ T1101] bridge_slave_0: left promiscuous mode [ 412.766744][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.811233][ T1101] veth1_macvtap: left promiscuous mode [ 412.829880][ T1101] veth0_macvtap: left promiscuous mode [ 412.842960][ T1101] veth1_vlan: left promiscuous mode [ 412.850695][ T1101] veth0_vlan: left promiscuous mode [ 413.122799][ T5788] Bluetooth: hci1: command tx timeout [ 413.615316][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 413.666566][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 413.713695][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.765060][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.085070][ T5787] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 414.086172][ T5788] Bluetooth: hci2: command 0x1003 tx timeout [ 414.169998][ T1101] bond0 (unregistering): Released all slaves [ 414.257824][T10899] chnl_net:caif_netlink_parms(): no params data found [ 414.334588][T10964] loop9: detected capacity change from 0 to 8192 [ 415.203004][ T5787] Bluetooth: hci1: command tx timeout [ 415.324383][T10899] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.362790][T10899] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.377199][T10899] bridge_slave_0: entered allmulticast mode [ 415.385318][T10899] bridge_slave_0: entered promiscuous mode [ 415.397088][T10899] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.404370][T10899] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.411595][T10899] bridge_slave_1: entered allmulticast mode [ 415.419232][T10899] bridge_slave_1: entered promiscuous mode [ 415.756434][T10899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.804048][T10899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.877188][T10899] team0: Port device team_slave_0 added [ 415.886756][T10899] team0: Port device team_slave_1 added [ 415.954894][T10988] Bluetooth: Short BCSP packet [ 415.965220][T10899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.972228][T10899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.000247][T10899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.023917][T10899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.030921][T10899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.082857][T10899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.196116][T10990] loop8: detected capacity change from 0 to 512 [ 416.231017][T10899] hsr_slave_0: entered promiscuous mode [ 416.239854][T10990] EXT4-fs: Ignoring removed bh option [ 416.249940][T10990] EXT4-fs (loop8): Test dummy encryption mode enabled [ 416.259059][T10899] hsr_slave_1: entered promiscuous mode [ 416.287327][T10899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.295589][T10990] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.1397: corrupted in-inode xattr: invalid ea_ino [ 416.317946][T10899] Cannot create hsr debugfs directory [ 416.342985][T10990] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1397: couldn't read orphan inode 15 (err -117) [ 416.368058][T10990] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.500231][T10503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.282686][T10504] Bluetooth: hci1: command tx timeout [ 418.092206][T10504] Bluetooth: hci2: command 0x1003 tx timeout [ 418.100864][ T5787] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 418.326335][T11021] loop7: detected capacity change from 0 to 512 [ 418.350858][T11021] EXT4-fs: Ignoring removed bh option [ 418.383041][T11021] EXT4-fs (loop7): Test dummy encryption mode enabled [ 418.415176][T11021] EXT4-fs error (device loop7): ext4_iget_extra_inode:4752: inode #15: comm syz.7.1407: corrupted in-inode xattr: invalid ea_ino [ 418.434648][T11021] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.1407: couldn't read orphan inode 15 (err -117) [ 418.458021][T11021] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.174540][ T9696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.363130][ T5787] Bluetooth: hci1: command tx timeout [ 419.778810][T11039] loop8: detected capacity change from 0 to 512 [ 419.849209][T11039] EXT4-fs: Ignoring removed bh option [ 419.933914][T11039] EXT4-fs (loop8): Test dummy encryption mode enabled [ 419.987142][T11039] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.1415: corrupted in-inode xattr: invalid ea_ino [ 420.066299][T11039] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1415: couldn't read orphan inode 15 (err -117) [ 420.081396][T11039] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.481300][T10503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.005748][T10899] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 421.025189][T10899] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 421.080661][T10899] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 421.118433][T10899] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 421.296749][T11062] Bluetooth: Short BCSP packet [ 421.561494][T10899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.597251][T10899] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.656203][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.663466][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.720767][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.728012][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.748712][T11070] loop7: detected capacity change from 0 to 512 [ 421.771417][T11070] EXT4-fs: Ignoring removed bh option [ 421.825517][T11070] EXT4-fs (loop7): Test dummy encryption mode enabled [ 421.896867][T11070] EXT4-fs error (device loop7): ext4_iget_extra_inode:4752: inode #15: comm syz.7.1427: corrupted in-inode xattr: invalid ea_ino [ 422.040726][T11070] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.1427: couldn't read orphan inode 15 (err -117) [ 422.097139][T11070] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.260213][ T9696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.757670][T10899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.893599][T11092] Bluetooth: Short BCSP packet [ 423.015834][T10899] veth0_vlan: entered promiscuous mode [ 423.057751][T10899] veth1_vlan: entered promiscuous mode [ 423.095054][T10899] veth0_macvtap: entered promiscuous mode [ 423.107537][T10899] veth1_macvtap: entered promiscuous mode [ 423.130302][T10899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.141712][T10899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.151764][T10899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.164426][T10899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.176398][T10899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.187077][T10899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.199672][T10899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.231512][T10899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.259385][T10899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.274203][T10899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.285709][T10899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.295832][T10899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.306484][T10899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.331259][T10899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.356959][T10899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.376184][T10899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.391912][T10899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.400875][T10899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.577914][T11107] loop9: detected capacity change from 0 to 512 [ 423.588376][T11107] EXT4-fs: Ignoring removed bh option [ 423.594843][T11107] EXT4-fs (loop9): Test dummy encryption mode enabled [ 423.609499][T11107] EXT4-fs error (device loop9): ext4_iget_extra_inode:4752: inode #15: comm syz.9.1438: corrupted in-inode xattr: invalid ea_ino [ 423.626826][T11107] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.1438: couldn't read orphan inode 15 (err -117) [ 423.643469][T11107] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.693659][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.724700][T10581] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.742245][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.781421][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.816781][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.121103][T11121] loop0: detected capacity change from 0 to 1024 [ 424.157679][T11121] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 424.261823][T11121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.378258][T11121] EXT4-fs error (device loop0): ext4_find_dest_de:2117: inode #12: block 7: comm syz.0.1366: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 424.413271][T11121] EXT4-fs (loop0): Remounting filesystem read-only [ 424.914029][ T5787] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 425.385670][T11140] loop8: detected capacity change from 0 to 512 [ 425.419222][T11140] EXT4-fs: Ignoring removed bh option [ 425.493361][T11140] EXT4-fs (loop8): Test dummy encryption mode enabled [ 425.574972][T11140] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.1446: corrupted in-inode xattr: invalid ea_ino [ 425.605079][T11140] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1446: couldn't read orphan inode 15 (err -117) [ 425.841889][T11140] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.965100][T10503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.739302][T11159] loop8: detected capacity change from 0 to 1024 [ 426.794475][T11159] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 426.839137][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1450'. [ 426.933950][T11159] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.044049][T11169] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 429.075121][T11179] loop9: detected capacity change from 0 to 1024 [ 429.136307][T11179] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 429.208798][T11181] Bluetooth: Short BCSP packet [ 429.244528][T11179] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.265114][T10504] Bluetooth: hci1: sending frame failed (-49) [ 429.274070][ T5787] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 429.404042][T11179] EXT4-fs error (device loop9): ext4_find_dest_de:2117: inode #12: block 7: comm syz.9.1454: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 429.479456][T11179] EXT4-fs (loop9): Remounting filesystem read-only [ 429.691058][T11188] loop7: detected capacity change from 0 to 256 [ 430.017237][ T1101] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 430.083823][ T1101] EXT4-fs (loop8): This should not happen!! Data will be lost [ 430.083823][ T1101] [ 430.100110][ T1101] EXT4-fs (loop8): Total free blocks count 0 [ 430.113852][ T1101] EXT4-fs (loop8): Free/Dirty block details [ 430.129282][ T1101] EXT4-fs (loop8): free_blocks=20480 [ 430.141608][ T1101] EXT4-fs (loop8): dirty_blocks=64 [ 430.157097][ T1101] EXT4-fs (loop8): Block reservation details [ 430.167311][ T1101] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 430.190813][T10503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.376009][T11094] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.909615][T11211] Bluetooth: Short BCSP packet [ 431.410379][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 431.421300][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 431.438952][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 431.450697][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 431.472576][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 431.482142][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 431.575385][T10899] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.658217][T11227] loop7: detected capacity change from 0 to 8192 [ 431.725751][ T6959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.911134][T11225] rxe_eth0 speed is unknown, defaulting to 1000 [ 432.309863][ T6959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.682164][ T6959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.866273][ T6959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.969119][ T5787] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 433.553489][ T5788] Bluetooth: hci2: command tx timeout [ 434.247766][T11225] chnl_net:caif_netlink_parms(): no params data found [ 434.384748][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 434.400681][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 434.409295][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 434.423304][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 434.432591][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 434.455529][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 434.851477][T11265] fuse: Bad value for 'fd' [ 434.899759][T11225] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.952611][T11225] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.959904][T11225] bridge_slave_0: entered allmulticast mode [ 435.014188][T11225] bridge_slave_0: entered promiscuous mode [ 435.067831][T11225] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.103642][T11225] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.127169][T11225] bridge_slave_1: entered allmulticast mode [ 435.322525][T11225] bridge_slave_1: entered promiscuous mode [ 435.386048][T11254] rxe_eth0 speed is unknown, defaulting to 1000 [ 435.510593][T11225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.588374][T11225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.602876][ T5787] Bluetooth: hci2: command tx timeout [ 435.693670][T11225] team0: Port device team_slave_0 added [ 435.726632][T11225] team0: Port device team_slave_1 added [ 435.832892][T11225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.856993][T11225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.910560][T11225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.052047][T11225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.066372][T11225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.111193][T11225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.396476][T11288] loop7: detected capacity change from 0 to 512 [ 436.456453][T11225] hsr_slave_0: entered promiscuous mode [ 436.473438][T11288] EXT4-fs: Ignoring removed bh option [ 436.490938][T11225] hsr_slave_1: entered promiscuous mode [ 436.594606][ T5787] Bluetooth: hci1: command tx timeout [ 436.605143][T11288] EXT4-fs (loop7): Test dummy encryption mode enabled [ 436.760462][T11225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.905154][T11288] EXT4-fs error (device loop7): ext4_iget_extra_inode:4752: inode #15: comm syz.7.1477: corrupted in-inode xattr: invalid ea_ino [ 436.940690][T11225] Cannot create hsr debugfs directory [ 437.171009][T11288] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.1477: couldn't read orphan inode 15 (err -117) [ 437.255161][T11288] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.518542][ T9696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.692628][ T5787] Bluetooth: hci2: command tx timeout [ 438.197965][T11254] chnl_net:caif_netlink_parms(): no params data found [ 438.642532][ T5787] Bluetooth: hci1: command tx timeout [ 439.579758][T11332] loop7: detected capacity change from 0 to 512 [ 439.617990][T11332] EXT4-fs: Ignoring removed bh option [ 439.659302][T11332] EXT4-fs (loop7): Test dummy encryption mode enabled [ 439.697128][T11332] EXT4-fs error (device loop7): ext4_iget_extra_inode:4752: inode #15: comm syz.7.1484: corrupted in-inode xattr: invalid ea_ino [ 439.737002][T11332] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.1484: couldn't read orphan inode 15 (err -117) [ 439.762742][ T5787] Bluetooth: hci2: command tx timeout [ 439.799366][T11332] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.053496][ T9696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.265133][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.275392][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.742879][ T5787] Bluetooth: hci1: command tx timeout [ 440.972624][T11254] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.995651][T11254] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.009324][T11254] bridge_slave_0: entered allmulticast mode [ 441.057810][T11254] bridge_slave_0: entered promiscuous mode [ 441.404798][T11254] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.517442][T11254] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.625487][T11254] bridge_slave_1: entered allmulticast mode [ 441.755620][T11254] bridge_slave_1: entered promiscuous mode [ 441.977372][T11254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.991896][ T6959] hsr_slave_0: left promiscuous mode [ 441.998683][ T6959] hsr_slave_1: left promiscuous mode [ 442.009930][ T6959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.025827][ T6959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.048828][ T6959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.062492][ T6959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.089418][ T6959] bridge_slave_1: left allmulticast mode [ 442.095625][ T6959] bridge_slave_1: left promiscuous mode [ 442.101440][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.119728][ T6959] bridge_slave_0: left allmulticast mode [ 442.125543][ T6959] bridge_slave_0: left promiscuous mode [ 442.131359][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.195209][ T6959] veth1_macvtap: left promiscuous mode [ 442.213203][ T6959] veth0_macvtap: left promiscuous mode [ 442.226562][ T6959] veth1_vlan: left promiscuous mode [ 442.232168][ T6959] veth0_vlan: left promiscuous mode [ 442.352768][T11372] loop7: detected capacity change from 0 to 256 [ 442.802507][ T5787] Bluetooth: hci1: command tx timeout [ 443.039039][ T6959] team0 (unregistering): Port device team_slave_1 removed [ 443.087383][ T6959] team0 (unregistering): Port device team_slave_0 removed [ 443.137595][ T6959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.187557][ T6959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.560770][ T6959] bond0 (unregistering): Released all slaves [ 443.629960][T11254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.781968][T11254] team0: Port device team_slave_0 added [ 443.824874][T11254] team0: Port device team_slave_1 added [ 444.202042][T11254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.227090][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.264448][T11254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.285526][T11254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.292643][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.318833][T11254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.410549][T11225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 444.461796][T11225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 444.530719][T11254] hsr_slave_0: entered promiscuous mode [ 444.540048][T11254] hsr_slave_1: entered promiscuous mode [ 444.558519][T11254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.567336][T11254] Cannot create hsr debugfs directory [ 444.573283][T11225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 444.629169][T11225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 447.881133][T11443] loop8: detected capacity change from 0 to 512 [ 447.908481][T11443] EXT4-fs: Ignoring removed bh option [ 447.916444][T11443] EXT4-fs (loop8): Test dummy encryption mode enabled [ 447.951357][T11443] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.1502: corrupted in-inode xattr: invalid ea_ino [ 447.988125][T11443] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1502: couldn't read orphan inode 15 (err -117) [ 448.017503][T11225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.025869][T11443] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.079081][T11225] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.154259][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.161524][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.179930][T10503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.193505][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.200760][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.420266][T11225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 448.442651][T11254] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 448.474107][T11254] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 448.501233][T11254] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 448.534510][T11254] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 448.781200][T11254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.839599][T11254] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.879715][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.886990][ T6959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.938166][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.945397][ T6959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.683121][ T5787] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 449.904896][T11225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.138895][T11225] veth0_vlan: entered promiscuous mode [ 450.227584][T11225] veth1_vlan: entered promiscuous mode [ 450.345832][T11225] veth0_macvtap: entered promiscuous mode [ 450.377579][T11225] veth1_macvtap: entered promiscuous mode [ 450.427439][T11225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.449126][T11225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.469292][T11225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.480081][T11225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.496257][T11225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.510650][T11225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.524182][T11225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.547762][T11225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.559565][T11225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.590095][T11225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.628176][T11225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.664861][T11225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.695792][T11225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.728500][T11225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.787863][T11225] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.973588][T11225] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.010212][T11225] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.068996][T11225] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.382295][T11254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.669856][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.707788][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.839536][T11254] veth0_vlan: entered promiscuous mode [ 451.914482][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.931396][T11254] veth1_vlan: entered promiscuous mode [ 452.023050][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.040779][T11254] veth0_macvtap: entered promiscuous mode [ 452.095245][T11254] veth1_macvtap: entered promiscuous mode [ 452.142208][T11254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.154251][T11254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.171032][T11254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.185960][T11254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.198406][T11254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.218358][T11254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.228616][T11254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.250795][T11254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.270006][T11254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.306645][T11254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.342554][T11254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.365871][T11254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.392524][T11254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.408943][T11254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.420526][T11254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.432021][T11254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.443521][T11254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.466048][T11254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.555731][T11254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.583685][T11254] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.602782][T11254] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.611551][T11254] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.716694][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.060432][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.445284][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.484339][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.648949][T11535] loop3: detected capacity change from 0 to 512 [ 455.677595][T11535] EXT4-fs: Ignoring removed bh option [ 455.745333][T11535] EXT4-fs (loop3): Test dummy encryption mode enabled [ 455.799909][T11535] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.1519: corrupted in-inode xattr: invalid ea_ino [ 455.850990][T11535] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.1519: couldn't read orphan inode 15 (err -117) [ 455.926206][T11535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.794316][T11225] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.181038][T11559] loop7: detected capacity change from 0 to 8192 [ 462.049288][T11598] loop3: detected capacity change from 0 to 512 [ 462.081216][T11598] EXT4-fs: Ignoring removed bh option [ 462.129475][T11598] EXT4-fs (loop3): Test dummy encryption mode enabled [ 462.191279][T11598] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.1533: corrupted in-inode xattr: invalid ea_ino [ 462.213031][T11598] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.1533: couldn't read orphan inode 15 (err -117) [ 462.296618][T11598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.435393][T11225] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.260651][T11635] loop1: detected capacity change from 0 to 1024 [ 463.291220][T11638] loop7: detected capacity change from 0 to 256 [ 463.351997][T11635] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 463.476376][T11631] loop8: detected capacity change from 0 to 8192 [ 463.489137][T11635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.556471][T11643] loop3: detected capacity change from 0 to 512 [ 463.564125][T11643] EXT4-fs: Ignoring removed bh option [ 463.570818][T11643] EXT4-fs (loop3): Test dummy encryption mode enabled [ 463.656905][T11643] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.1546: corrupted in-inode xattr: invalid ea_ino [ 463.796807][T11643] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.1546: couldn't read orphan inode 15 (err -117) [ 463.829946][T11643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.910524][T11648] EXT4-fs error (device loop1): ext4_find_dest_de:2117: inode #12: block 7: comm syz.1.1545: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 463.993806][T11648] EXT4-fs (loop1): Remounting filesystem read-only [ 464.080168][T11225] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.595044][T11663] tipc: Started in network mode [ 464.599990][T11663] tipc: Node identity 1000001, cluster identity 4369 [ 464.632632][T11663] tipc: Node number set to 16777217 [ 464.665754][T11663] tipc: Cannot configure node identity twice [ 464.785673][T11665] tipc: New replicast peer: 127.0.0.1 [ 464.814597][T11665] tipc: Enabled bearer , priority 10 [ 464.839125][T11254] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.993765][ T6959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.256341][ T6959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.351173][ T6959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.470327][ T6959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.073589][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 467.084548][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 467.097869][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 467.210108][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 467.218258][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 467.226867][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 467.523403][T11717] rxe_eth0 speed is unknown, defaulting to 1000 [ 467.829154][T11737] loop3: detected capacity change from 0 to 1024 [ 467.981123][T11737] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 468.099052][T11737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.407371][T11737] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #12: block 7: comm syz.3.1570: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 468.526142][T11737] EXT4-fs (loop3): Remounting filesystem read-only [ 469.259314][ T6959] hsr_slave_0: left promiscuous mode [ 469.272698][ T6959] hsr_slave_1: left promiscuous mode [ 469.279170][ T6959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.287066][ T5787] Bluetooth: hci1: command tx timeout [ 469.300801][ T6959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.309542][ T6959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.322737][ T6959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.338847][T11225] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.349747][ T6959] bridge_slave_1: left allmulticast mode [ 469.359124][ T6959] bridge_slave_1: left promiscuous mode [ 469.374191][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.389476][ T6959] bridge_slave_0: left allmulticast mode [ 469.395881][ T6959] bridge_slave_0: left promiscuous mode [ 469.401694][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.436941][ T6959] veth1_macvtap: left promiscuous mode [ 469.462959][ T6959] veth0_macvtap: left promiscuous mode [ 469.487763][ T6959] veth1_vlan: left promiscuous mode [ 469.505030][ T6959] veth0_vlan: left promiscuous mode [ 470.189546][T11787] loop8: detected capacity change from 0 to 256 [ 470.271092][ T5783] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 470.520888][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 470.544541][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 470.554624][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 470.584268][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 470.592563][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 470.600224][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 470.876680][ T6959] team0 (unregistering): Port device team_slave_1 removed [ 470.930408][ T6959] team0 (unregistering): Port device team_slave_0 removed [ 470.985201][ T6959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.039160][ T6959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.369038][ T5788] Bluetooth: hci1: command tx timeout [ 471.393895][ T6959] bond0 (unregistering): Released all slaves [ 471.575039][T11789] rxe_eth0 speed is unknown, defaulting to 1000 [ 471.610426][T11717] chnl_net:caif_netlink_parms(): no params data found [ 471.678834][T11795] loop8: detected capacity change from 0 to 1024 [ 471.726590][T11795] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 471.933953][T11795] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.027931][T11795] overlayfs: failed to resolve './bus': -2 [ 472.338222][T10503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.478499][T11717] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.497272][T11717] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.532951][T11717] bridge_slave_0: entered allmulticast mode [ 472.541145][T11717] bridge_slave_0: entered promiscuous mode [ 472.662993][T11717] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.670197][T11717] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.710273][T11717] bridge_slave_1: entered allmulticast mode [ 472.720312][T11717] bridge_slave_1: entered promiscuous mode [ 472.728430][ T5788] Bluetooth: hci2: command tx timeout [ 472.826029][T11717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.855970][T11717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.939116][T11820] loop8: detected capacity change from 0 to 8192 [ 473.043408][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 473.104366][ T5788] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 473.124423][ T5787] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 473.133874][ T5787] Bluetooth: hci4: Injecting HCI hardware error event [ 473.143607][ T5788] Bluetooth: hci4: hardware error 0x00 [ 473.220404][T11717] team0: Port device team_slave_0 added [ 473.397633][T11717] team0: Port device team_slave_1 added [ 473.442479][ T5787] Bluetooth: hci1: command tx timeout [ 473.877344][ T6959] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.965612][T11717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.986473][T11836] loop8: detected capacity change from 0 to 256 [ 473.993361][T11717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.075684][T11717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.195267][ T6959] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.253993][T11717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.272441][T11717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.372498][T11717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.399081][T11789] chnl_net:caif_netlink_parms(): no params data found [ 474.633810][ T6959] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.812659][ T5787] Bluetooth: hci2: command tx timeout [ 474.890069][ T6959] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.957981][T11717] hsr_slave_0: entered promiscuous mode [ 475.059436][T11717] hsr_slave_1: entered promiscuous mode [ 475.083343][T11717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.090977][T11717] Cannot create hsr debugfs directory [ 475.229999][T11789] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.259455][T11789] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.276158][T11789] bridge_slave_0: entered allmulticast mode [ 475.282620][ T5788] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 475.302796][T11789] bridge_slave_0: entered promiscuous mode [ 475.381493][T11789] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.409734][T11789] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.425647][T11789] bridge_slave_1: entered allmulticast mode [ 475.462591][T11789] bridge_slave_1: entered promiscuous mode [ 475.522809][ T5788] Bluetooth: hci1: command tx timeout [ 475.696988][ T5788] Bluetooth: hci0: unexpected event for opcode 0x002d [ 475.769958][T11789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.796960][T11789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.127985][T11789] team0: Port device team_slave_0 added [ 476.199905][T11789] team0: Port device team_slave_1 added [ 476.443655][T11887] loop7: detected capacity change from 0 to 1024 [ 476.487793][T11887] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 476.560000][T11887] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.637908][T11887] overlayfs: failed to resolve './bus': -2 [ 476.648137][T11789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.657151][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.684000][T11789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.740665][T11789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.750421][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.785839][T11789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.884458][ T5788] Bluetooth: hci2: command tx timeout [ 476.976426][ T9696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.171919][T11789] hsr_slave_0: entered promiscuous mode [ 477.191751][T11789] hsr_slave_1: entered promiscuous mode [ 477.204642][T11789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.212262][T11789] Cannot create hsr debugfs directory [ 477.683843][ T5788] Bluetooth: hci0: unexpected event for opcode 0x002d [ 478.195363][T11717] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 478.223714][T11717] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 478.359821][T11917] FAULT_INJECTION: forcing a failure. [ 478.359821][T11917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.380818][T11917] CPU: 0 PID: 11917 Comm: syz.7.1604 Not tainted syzkaller #0 [ 478.388348][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 478.398448][T11917] Call Trace: [ 478.401773][T11917] [ 478.404747][T11917] dump_stack_lvl+0x18c/0x250 [ 478.409555][T11917] ? show_regs_print_info+0x20/0x20 [ 478.414811][T11917] ? load_image+0x420/0x420 [ 478.419401][T11917] ? __might_fault+0xaa/0x120 [ 478.424179][T11917] ? __lock_acquire+0x7eb0/0x7eb0 [ 478.429313][T11917] ? __virt_addr_valid+0x10c/0x380 [ 478.434516][T11917] should_fail_ex+0x394/0x4c0 [ 478.439303][T11917] _copy_from_user+0x2f/0xe0 [ 478.443962][T11917] do_handle_open+0x1d3/0x590 [ 478.448724][T11917] ? __ia32_compat_sys_open_by_handle_at+0x80/0x80 [ 478.455293][T11917] ? lockdep_hardirqs_on+0x98/0x150 [ 478.460549][T11917] do_syscall_64+0x55/0xb0 [ 478.465007][T11917] ? clear_bhb_loop+0x40/0x90 [ 478.469824][T11917] ? clear_bhb_loop+0x40/0x90 [ 478.474574][T11917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.480663][T11917] RIP: 0033:0x7f99f939e559 [ 478.485125][T11917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.504787][T11917] RSP: 002b:00007f99fa34d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 478.513276][T11917] RAX: ffffffffffffffda RBX: 00007f99f9625fa0 RCX: 00007f99f939e559 [ 478.521287][T11917] RDX: 0000000000000400 RSI: 0000200000000580 RDI: 0000000000000003 [ 478.529303][T11917] RBP: 00007f99f9435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 478.537321][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.545341][T11917] R13: 00007f99f9626038 R14: 00007f99f9625fa0 R15: 00007fffd8243be8 [ 478.553373][T11917] [ 478.570517][T11717] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 478.651885][T11717] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 478.697657][ T6959] hsr_slave_0: left promiscuous mode [ 478.706172][ T6959] hsr_slave_1: left promiscuous mode [ 478.713080][ T6959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.720582][ T6959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.728813][ T6959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.743306][ T6959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.751365][ T6959] bridge_slave_1: left allmulticast mode [ 478.758364][ T6959] bridge_slave_1: left promiscuous mode [ 478.764374][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.780448][ T6959] bridge_slave_0: left allmulticast mode [ 478.788825][ T6959] bridge_slave_0: left promiscuous mode [ 478.796920][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.831780][ T6959] veth1_macvtap: left promiscuous mode [ 478.837523][ T6959] veth0_macvtap: left promiscuous mode [ 478.843266][ T6959] veth1_vlan: left promiscuous mode [ 478.848744][ T6959] veth0_vlan: left promiscuous mode [ 478.962908][ T5788] Bluetooth: hci2: command tx timeout [ 479.671054][ T6959] team0 (unregistering): Port device team_slave_1 removed [ 479.723558][ T6959] team0 (unregistering): Port device team_slave_0 removed [ 479.774267][ T6959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.825782][ T6959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.208498][ T6959] bond0 (unregistering): Released all slaves [ 480.935050][T11717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.013028][T11717] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.047718][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.054962][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.147393][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.154648][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.166905][T11789] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 481.184444][T11789] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 481.204766][T11789] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 481.253080][T11789] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 481.477484][ T5788] Bluetooth: hci0: unexpected event for opcode 0x002d [ 482.444972][T11789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.552285][T11789] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.617776][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.625070][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.708572][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.715826][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.072166][T11717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.622945][T11969] loop7: detected capacity change from 0 to 256 [ 483.918343][T11789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.414419][T11717] veth0_vlan: entered promiscuous mode [ 484.443866][T11717] veth1_vlan: entered promiscuous mode [ 484.581679][T11717] veth0_macvtap: entered promiscuous mode [ 484.632994][T11717] veth1_macvtap: entered promiscuous mode [ 484.702229][T11717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.748016][T11717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.773066][T11717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.776329][T12010] loop7: detected capacity change from 0 to 256 [ 484.802384][T11717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.832743][T11717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.856544][T11717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.030327][T11717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.108896][ T5783] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 485.131099][T11717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.272812][T11717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.382007][T11717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.563716][T11717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.811561][T11717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.862430][T11717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.914385][T11717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.017499][T11717] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.070422][T11717] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.112497][T11717] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.121263][T11717] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.266371][T11789] veth0_vlan: entered promiscuous mode [ 486.321701][T11789] veth1_vlan: entered promiscuous mode [ 486.590359][T11789] veth0_macvtap: entered promiscuous mode [ 486.638838][ T3850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.678005][ T3850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.717167][T11789] veth1_macvtap: entered promiscuous mode [ 486.732028][T12027] loop7: detected capacity change from 0 to 256 [ 486.910856][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.950794][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.982756][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.022961][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.079070][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.140452][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.171190][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.212526][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.242758][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.271191][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.335213][T11789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.390477][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.442489][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.462180][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.487665][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.503552][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.519203][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.539979][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.555483][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.583381][T11789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.664118][T11789] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.692258][T11789] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.707695][T11789] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.733907][T11789] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.998279][T12050] loop4: detected capacity change from 0 to 512 [ 488.029865][T12050] EXT4-fs: Ignoring removed bh option [ 488.037685][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.085169][T12050] EXT4-fs (loop4): Test dummy encryption mode enabled [ 488.120502][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.138388][T12050] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.1557: corrupted in-inode xattr: invalid ea_ino [ 488.186370][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.220134][T12050] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1557: couldn't read orphan inode 15 (err -117) [ 488.253723][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.280278][T12050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.449777][T11717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.471385][T12064] loop7: detected capacity change from 0 to 256 [ 488.919543][T12079] loop8: detected capacity change from 0 to 256 [ 489.416299][T12094] loop8: detected capacity change from 0 to 512 [ 489.451466][T12094] EXT4-fs: Ignoring removed bh option [ 489.501516][T12094] EXT4-fs (loop8): Test dummy encryption mode enabled [ 489.566534][T12094] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.1636: corrupted in-inode xattr: invalid ea_ino [ 489.602086][T12094] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1636: couldn't read orphan inode 15 (err -117) [ 489.659150][T12094] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.879299][T10503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.937735][T12107] loop4: detected capacity change from 0 to 256 [ 489.996059][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 490.196206][T12114] loop7: detected capacity change from 0 to 256 [ 491.409170][T12132] loop4: detected capacity change from 0 to 512 [ 491.454990][T12132] EXT4-fs: Ignoring removed bh option [ 491.494058][T12126] loop7: detected capacity change from 0 to 8192 [ 491.513509][T12132] EXT4-fs (loop4): Test dummy encryption mode enabled [ 491.604343][T12132] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.1647: corrupted in-inode xattr: invalid ea_ino [ 491.694765][T12132] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1647: couldn't read orphan inode 15 (err -117) [ 491.818678][T12142] loop8: detected capacity change from 0 to 256 [ 491.831289][T12132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.938736][ T5783] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 492.134222][T12148] loop5: detected capacity change from 0 to 256 [ 492.158001][T11717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.947434][T12172] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1657'. [ 493.738534][T12179] loop8: detected capacity change from 0 to 256 [ 493.765550][T12174] loop5: detected capacity change from 0 to 8192 [ 494.433843][T12192] loop5: detected capacity change from 0 to 512 [ 494.453638][T12192] EXT4-fs: Ignoring removed bh option [ 494.484281][T12192] EXT4-fs (loop5): Test dummy encryption mode enabled [ 494.557130][T12192] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.1664: corrupted in-inode xattr: invalid ea_ino [ 494.632104][T12199] loop8: detected capacity change from 0 to 256 [ 494.661735][T12192] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1664: couldn't read orphan inode 15 (err -117) [ 494.716252][T12192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.934430][T11789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.296846][T12216] loop7: detected capacity change from 0 to 256 [ 495.385720][ T5783] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 495.755977][T12232] loop4: detected capacity change from 0 to 512 [ 495.770880][T12232] EXT4-fs: Ignoring removed bh option [ 495.814580][T12232] EXT4-fs (loop4): Test dummy encryption mode enabled [ 495.855067][T12232] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.1680: corrupted in-inode xattr: invalid ea_ino [ 495.931186][T12232] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1680: couldn't read orphan inode 15 (err -117) [ 495.946301][T12232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.906586][T11717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.045827][T12252] loop7: detected capacity change from 0 to 256 [ 497.103590][ T5783] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 498.459255][T12280] loop5: detected capacity change from 0 to 512 [ 498.480284][T12280] EXT4-fs: Ignoring removed bh option [ 498.508123][T12280] EXT4-fs (loop5): Test dummy encryption mode enabled [ 498.576148][T12280] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.1694: corrupted in-inode xattr: invalid ea_ino [ 498.670664][T12280] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1694: couldn't read orphan inode 15 (err -117) [ 498.747352][T12280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.902481][T12298] loop8: detected capacity change from 0 to 256 [ 498.954542][T11789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.729076][T12330] loop5: detected capacity change from 0 to 512 [ 500.768505][T12330] EXT4-fs: Ignoring removed bh option [ 500.793739][T12330] EXT4-fs (loop5): Test dummy encryption mode enabled [ 500.835996][T12330] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.1709: corrupted in-inode xattr: invalid ea_ino [ 500.861029][T12335] loop7: detected capacity change from 0 to 256 [ 500.880586][T12330] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1709: couldn't read orphan inode 15 (err -117) [ 500.983676][T12330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.018757][ T5785] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 501.285227][T11789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.321833][T12348] loop7: detected capacity change from 0 to 1024 [ 501.357011][T12348] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 501.440363][T12348] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.518908][T12348] overlayfs: missing 'lowerdir' [ 501.761435][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.789864][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.544186][ T9696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.434601][T12373] loop5: detected capacity change from 0 to 256 [ 503.572968][T12378] loop4: detected capacity change from 0 to 512 [ 503.608827][T12378] EXT4-fs: Ignoring removed bh option [ 503.645847][T12378] EXT4-fs (loop4): Test dummy encryption mode enabled [ 503.750613][ T5783] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 503.782596][T12378] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.1721: corrupted in-inode xattr: invalid ea_ino [ 503.859940][T12378] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1721: couldn't read orphan inode 15 (err -117) [ 504.003943][T12378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.054836][T12395] loop5: detected capacity change from 0 to 1024 [ 504.134421][T12395] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 504.179367][T12395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.252049][T12395] overlayfs: missing 'lowerdir' [ 504.306062][T11717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.521166][T11789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.576363][T12424] loop4: detected capacity change from 0 to 256 [ 505.650103][T12427] loop5: detected capacity change from 0 to 512 [ 505.698457][T12427] EXT4-fs: Ignoring removed bh option [ 505.769390][T12427] EXT4-fs (loop5): Test dummy encryption mode enabled [ 505.780989][ T5783] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 505.805431][T12427] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.1734: corrupted in-inode xattr: invalid ea_ino [ 505.910190][T12427] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1734: couldn't read orphan inode 15 (err -117) [ 506.321033][T12427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.898519][T11789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.979873][T12438] loop4: detected capacity change from 0 to 1024 [ 507.204786][T12438] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 507.576895][T12438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.714862][T12438] overlayfs: missing 'lowerdir' [ 507.875946][T11717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.003692][T12458] loop8: detected capacity change from 0 to 256 [ 509.467879][T12493] loop8: detected capacity change from 0 to 1024 [ 509.515436][T12493] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 509.593759][T12493] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.753912][T12493] overlayfs: missing 'lowerdir' [ 509.947686][T10503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.924439][ T5787] Bluetooth: hci3: command 0x1003 tx timeout [ 511.933025][ T5788] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 512.296773][T12553] loop8: detected capacity change from 0 to 1024 [ 512.359575][T12553] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 512.413646][T12555] loop5: detected capacity change from 0 to 256 [ 512.637285][T12553] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.849989][T12553] overlayfs: missing 'lowerdir' [ 513.521008][T10503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.824577][T12594] loop8: detected capacity change from 0 to 512 [ 514.840267][T12594] EXT4-fs: Ignoring removed bh option [ 514.881480][T12594] EXT4-fs (loop8): Test dummy encryption mode enabled [ 514.925977][T12594] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.1781: corrupted in-inode xattr: invalid ea_ino [ 514.978691][T12594] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1781: couldn't read orphan inode 15 (err -117) [ 514.991447][T12602] loop5: detected capacity change from 0 to 1024 [ 515.022303][T12602] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 515.040086][T12594] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.068973][T12602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.173569][T12602] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 515.194262][T12602] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 515.433130][T10503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.640461][T11789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.168772][T12625] Bluetooth: Short BCSP packet [ 518.156744][T12674] loop8: detected capacity change from 0 to 256 [ 518.203323][T12669] syzkaller0: entered promiscuous mode [ 518.209254][T12669] syzkaller0: entered allmulticast mode [ 518.240944][ T5783] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 518.243325][ T5787] Bluetooth: hci3: command 0x1003 tx timeout [ 518.251208][ T5788] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 519.821604][T12706] Bluetooth: Short BCSP packet [ 521.273784][T12714] loop7: detected capacity change from 0 to 256 [ 521.842663][ T5787] Bluetooth: hci3: command 0x1003 tx timeout [ 521.850962][ T5788] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 521.985272][T12721] loop4: detected capacity change from 0 to 8192 [ 522.726866][T12740] loop5: detected capacity change from 0 to 256 [ 522.821707][T12738] syzkaller0: entered promiscuous mode [ 522.827605][ T5783] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 522.852612][T12738] syzkaller0: entered allmulticast mode [ 523.132149][T12748] loop5: detected capacity change from 0 to 1024 [ 523.170491][T12748] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 523.285973][T12748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.386683][T12748] overlayfs: missing 'lowerdir' [ 523.673319][T11789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.219045][T12768] loop4: detected capacity change from 0 to 256 [ 525.978046][T12779] loop4: detected capacity change from 0 to 1024 [ 525.986834][T12779] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 526.034324][T12779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.100301][T12779] overlayfs: missing 'lowerdir' [ 526.177997][T12784] loop8: detected capacity change from 0 to 512 [ 526.214588][T11717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.231158][T12784] EXT4-fs: Ignoring removed bh option [ 526.257308][T12784] EXT4-fs (loop8): Test dummy encryption mode enabled [ 526.283376][T12784] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.1838: corrupted in-inode xattr: invalid ea_ino [ 526.356629][T12784] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1838: couldn't read orphan inode 15 (err -117) [ 526.404004][T12784] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.451912][T12787] loop4: detected capacity change from 0 to 8192 [ 526.665349][T10503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.191640][T12796] loop8: detected capacity change from 0 to 256 [ 527.277011][T12796] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.1842'. [ 527.288873][ T5783] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 528.288731][T12805] loop7: detected capacity change from 0 to 1024 [ 528.319821][T12805] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 528.366411][T12805] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.431376][T12805] overlayfs: missing 'lowerdir' [ 528.594741][ T9696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.652205][T12817] loop4: detected capacity change from 0 to 8192 [ 529.194944][T12825] syzkaller0: entered promiscuous mode [ 529.207380][T12825] syzkaller0: entered allmulticast mode [ 530.310850][T12841] loop8: detected capacity change from 0 to 2048 [ 530.359945][T12841] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.506324][T12841] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm syz.8.1861: bg 0: block 296: padding at end of block bitmap is not set [ 530.570568][T12841] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 530.613550][T12841] EXT4-fs (loop8): This should not happen!! Data will be lost [ 530.613550][T12841] [ 530.629944][T12841] EXT4-fs (loop8): Total free blocks count 0 [ 530.653131][T12841] EXT4-fs (loop8): Free/Dirty block details [ 530.682465][T12841] EXT4-fs (loop8): free_blocks=0 [ 530.688530][T12841] EXT4-fs (loop8): dirty_blocks=64 [ 530.700092][T12841] EXT4-fs (loop8): Block reservation details [ 530.734582][T12841] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 530.856683][T12840] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 531.021438][T12841] syz.8.1861 (12841) used greatest stack depth: 20312 bytes left [ 531.644430][T12856] loop4: detected capacity change from 0 to 512 [ 531.652015][T12856] EXT4-fs: Ignoring removed bh option [ 531.669003][T12856] EXT4-fs (loop4): Test dummy encryption mode enabled [ 531.744729][T12856] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.1867: corrupted in-inode xattr: invalid ea_ino [ 531.769861][T12856] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1867: couldn't read orphan inode 15 (err -117) [ 531.783790][T12856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.906629][T11717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.216522][T12894] loop4: detected capacity change from 0 to 512 [ 534.276259][T12894] EXT4-fs: Ignoring removed bh option [ 534.318303][T12894] EXT4-fs (loop4): Test dummy encryption mode enabled [ 534.348811][T12894] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.1877: corrupted in-inode xattr: invalid ea_ino [ 534.372212][T12894] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1877: couldn't read orphan inode 15 (err -117) [ 534.405844][T12894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.428934][T11717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.643559][T12911] syzkaller0: entered promiscuous mode [ 535.661568][T12911] syzkaller0: entered allmulticast mode [ 539.521121][ T11] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.713131][ T11] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.806310][T12975] FAULT_INJECTION: forcing a failure. [ 539.806310][T12975] name failslab, interval 1, probability 0, space 0, times 0 [ 539.832188][T12975] CPU: 1 PID: 12975 Comm: syz.7.1895 Not tainted syzkaller #0 [ 539.839818][T12975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 539.849925][T12975] Call Trace: [ 539.853323][T12975] [ 539.856332][T12975] dump_stack_lvl+0x18c/0x250 [ 539.861072][T12975] ? show_regs_print_info+0x20/0x20 [ 539.866345][T12975] ? load_image+0x420/0x420 [ 539.870908][T12975] ? __might_sleep+0xe0/0xe0 [ 539.875633][T12975] ? __lock_acquire+0x7eb0/0x7eb0 [ 539.880707][T12975] should_fail_ex+0x394/0x4c0 [ 539.885433][T12975] should_failslab+0x9/0x20 [ 539.889976][T12975] slab_pre_alloc_hook+0x59/0x300 [ 539.895090][T12975] ? nft_chain_parse_hook+0x9bd/0x14c0 [ 539.900685][T12975] __kmem_cache_alloc_node+0x53/0x250 [ 539.906159][T12975] ? nft_chain_parse_hook+0x9bd/0x14c0 [ 539.911672][T12975] kmalloc_trace+0x2a/0xe0 [ 539.916142][T12975] nft_chain_parse_hook+0x9bd/0x14c0 [ 539.921476][T12975] ? nf_tables_updchain+0x1d90/0x1d90 [ 539.926888][T12975] ? nft_pernet+0x23/0x230 [ 539.931406][T12975] ? nft_pernet+0x23/0x230 [ 539.935860][T12975] nf_tables_newchain+0x1032/0x29b0 [ 539.941112][T12975] ? nf_tables_deltable+0xe80/0xe80 [ 539.946371][T12975] ? nft_trans_table_add+0x1e6/0x270 [ 539.951691][T12975] ? nfnl_pernet+0x23/0x230 [ 539.956336][T12975] ? __nla_parse+0x40/0x50 [ 539.960794][T12975] nfnetlink_rcv+0x1133/0x2490 [ 539.965620][T12975] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 539.971275][T12975] ? __lock_acquire+0x7eb0/0x7eb0 [ 539.976365][T12975] ? netlink_deliver_tap+0x2e/0x1b0 [ 539.981663][T12975] netlink_unicast+0x7b1/0x930 [ 539.986493][T12975] netlink_sendmsg+0x8d0/0xbf0 [ 539.991404][T12975] ? netlink_getsockopt+0x590/0x590 [ 539.996652][T12975] ? apparmor_socket_sendmsg+0x8e/0x330 [ 540.002286][T12975] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 540.007642][T12975] ? security_socket_sendmsg+0x80/0xa0 [ 540.013159][T12975] ? netlink_getsockopt+0x590/0x590 [ 540.018404][T12975] ____sys_sendmsg+0x61b/0x980 [ 540.023322][T12975] ? __asan_memset+0x22/0x40 [ 540.027955][T12975] ? __sys_sendmsg_sock+0x30/0x30 [ 540.033013][T12975] ? __import_iovec+0x5f2/0x850 [ 540.037935][T12975] ? import_iovec+0x73/0xa0 [ 540.042495][T12975] ___sys_sendmsg+0x2a6/0x360 [ 540.047214][T12975] ? __sys_sendmsg+0x2b0/0x2b0 [ 540.052050][T12975] __se_sys_sendmsg+0x1d0/0x2c0 [ 540.056946][T12975] ? __x64_sys_sendmsg+0x80/0x80 [ 540.061961][T12975] ? lockdep_hardirqs_on+0x98/0x150 [ 540.067201][T12975] do_syscall_64+0x55/0xb0 [ 540.071668][T12975] ? clear_bhb_loop+0x40/0x90 [ 540.076378][T12975] ? clear_bhb_loop+0x40/0x90 [ 540.081089][T12975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 540.087018][T12975] RIP: 0033:0x7f99f939e559 [ 540.091471][T12975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.111135][T12975] RSP: 002b:00007f99fa34d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.119586][T12975] RAX: ffffffffffffffda RBX: 00007f99f9625fa0 RCX: 00007f99f939e559 [ 540.127595][T12975] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 540.135598][T12975] RBP: 00007f99f9435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 540.143600][T12975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.151610][T12975] R13: 00007f99f9626038 R14: 00007f99f9625fa0 R15: 00007fffd8243be8 [ 540.159628][T12975] [ 540.226852][ T11] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.321482][ T11] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.637828][T12994] syzkaller0: entered promiscuous mode [ 541.646097][T12994] syzkaller0: entered allmulticast mode [ 542.765056][T13037] FAULT_INJECTION: forcing a failure. [ 542.765056][T13037] name failslab, interval 1, probability 0, space 0, times 0 [ 542.779490][T13037] CPU: 0 PID: 13037 Comm: syz.4.1909 Not tainted syzkaller #0 [ 542.787027][T13037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 542.797157][T13037] Call Trace: [ 542.800489][T13037] [ 542.803469][T13037] dump_stack_lvl+0x18c/0x250 [ 542.808232][T13037] ? show_regs_print_info+0x20/0x20 [ 542.813496][T13037] ? load_image+0x420/0x420 [ 542.818091][T13037] ? __might_sleep+0xe0/0xe0 [ 542.822747][T13037] ? __lock_acquire+0x7eb0/0x7eb0 [ 542.827837][T13037] should_fail_ex+0x394/0x4c0 [ 542.832594][T13037] should_failslab+0x9/0x20 [ 542.837178][T13037] slab_pre_alloc_hook+0x59/0x300 [ 542.842257][T13037] ? kvmalloc_node+0x70/0x180 [ 542.846984][T13037] ? kvmalloc_node+0x70/0x180 [ 542.851701][T13037] __kmem_cache_alloc_node+0x53/0x250 [ 542.857125][T13037] ? kvmalloc_node+0x70/0x180 [ 542.861891][T13037] __kmalloc_node+0xa6/0x240 [ 542.866537][T13037] kvmalloc_node+0x70/0x180 [ 542.871097][T13037] rhashtable_init+0x529/0xa60 [ 542.875911][T13037] ? __asan_memcpy+0x40/0x70 [ 542.880546][T13037] rhltable_init+0x1e/0x60 [ 542.884998][T13037] nf_tables_newtable+0x69f/0x17b0 [ 542.890178][T13037] nfnetlink_rcv+0x1133/0x2490 [ 542.895008][T13037] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 542.900643][T13037] ? __lock_acquire+0x7eb0/0x7eb0 [ 542.905711][T13037] ? netlink_deliver_tap+0x2e/0x1b0 [ 542.910953][T13037] netlink_unicast+0x7b1/0x930 [ 542.915758][T13037] netlink_sendmsg+0x8d0/0xbf0 [ 542.920566][T13037] ? netlink_getsockopt+0x590/0x590 [ 542.925803][T13037] ? apparmor_socket_sendmsg+0x8e/0x330 [ 542.931386][T13037] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 542.936702][T13037] ? security_socket_sendmsg+0x80/0xa0 [ 542.942194][T13037] ? netlink_getsockopt+0x590/0x590 [ 542.947428][T13037] ____sys_sendmsg+0x61b/0x980 [ 542.952239][T13037] ? __asan_memset+0x22/0x40 [ 542.956869][T13037] ? __sys_sendmsg_sock+0x30/0x30 [ 542.961925][T13037] ? __import_iovec+0x5f2/0x850 [ 542.966822][T13037] ? import_iovec+0x73/0xa0 [ 542.971382][T13037] ___sys_sendmsg+0x2a6/0x360 [ 542.976100][T13037] ? __sys_sendmsg+0x2b0/0x2b0 [ 542.980945][T13037] __se_sys_sendmsg+0x1d0/0x2c0 [ 542.985837][T13037] ? __x64_sys_sendmsg+0x80/0x80 [ 542.990830][T13037] ? lockdep_hardirqs_on+0x98/0x150 [ 542.996085][T13037] do_syscall_64+0x55/0xb0 [ 543.000527][T13037] ? clear_bhb_loop+0x40/0x90 [ 543.005233][T13037] ? clear_bhb_loop+0x40/0x90 [ 543.009955][T13037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.015892][T13037] RIP: 0033:0x7fa683b9e559 [ 543.020336][T13037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.039973][T13037] RSP: 002b:00007fa681df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.048422][T13037] RAX: ffffffffffffffda RBX: 00007fa683e25fa0 RCX: 00007fa683b9e559 [ 543.056432][T13037] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 543.064435][T13037] RBP: 00007fa683c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 543.072439][T13037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.080435][T13037] R13: 00007fa683e26038 R14: 00007fa683e25fa0 R15: 00007ffe3c81e0a8 [ 543.088451][T13037] [ 546.262147][ T5788] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 546.585483][T13089] syzkaller0: entered promiscuous mode [ 546.591160][T13089] syzkaller0: entered allmulticast mode [ 546.736518][T13096] nbd0: detected capacity change from 0 to 64 [ 546.776344][ T5788] block nbd0: Receive control failed (result -104) [ 550.323456][ T5788] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 550.334310][ T5788] Bluetooth: hci1: Injecting HCI hardware error event [ 550.346304][ T5787] Bluetooth: hci1: hardware error 0x00 [ 551.069103][T13178] syzkaller0: entered promiscuous mode [ 551.075034][T13178] syzkaller0: entered allmulticast mode [ 552.234337][T13214] loop4: detected capacity change from 0 to 2048 [ 552.304784][T13214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.572487][ T5787] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 552.702472][T13213] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1942: bg 0: block 296: padding at end of block bitmap is not set [ 552.767061][T13213] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 552.787252][T13213] EXT4-fs (loop4): This should not happen!! Data will be lost [ 552.787252][T13213] [ 552.818684][T13213] EXT4-fs (loop4): Total free blocks count 0 [ 552.834830][T13213] EXT4-fs (loop4): Free/Dirty block details [ 552.840800][T13213] EXT4-fs (loop4): free_blocks=0 [ 552.853131][T13213] EXT4-fs (loop4): dirty_blocks=64 [ 552.871767][T13213] EXT4-fs (loop4): Block reservation details [ 552.889603][T13213] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 553.020047][ T6024] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 554.995187][ T11] hsr_slave_0: left promiscuous mode [ 555.010322][ T11] hsr_slave_1: left promiscuous mode [ 555.026500][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.037203][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.388375][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.561484][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.783154][ T11] bridge_slave_1: left allmulticast mode [ 555.908089][T13258] loop5: detected capacity change from 0 to 2048 [ 555.914773][ T11] bridge_slave_1: left promiscuous mode [ 555.920570][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.994007][ T11] bridge_slave_0: left allmulticast mode [ 556.034255][ T11] bridge_slave_0: left promiscuous mode [ 556.040231][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.049616][T13258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.222707][ T11] veth1_macvtap: left promiscuous mode [ 556.232941][ T11] veth0_macvtap: left promiscuous mode [ 556.238671][ T11] veth1_vlan: left promiscuous mode [ 556.287352][ T11] veth0_vlan: left promiscuous mode [ 556.521655][T13257] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.1951: bg 0: block 296: padding at end of block bitmap is not set [ 556.625714][T13257] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 556.695531][T13257] EXT4-fs (loop5): This should not happen!! Data will be lost [ 556.695531][T13257] [ 556.747668][T13257] EXT4-fs (loop5): Total free blocks count 0 [ 556.785104][T13257] EXT4-fs (loop5): Free/Dirty block details [ 556.813267][T13257] EXT4-fs (loop5): free_blocks=0 [ 556.818295][T13257] EXT4-fs (loop5): dirty_blocks=64 [ 556.865637][T13257] EXT4-fs (loop5): Block reservation details [ 556.871706][T13257] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 557.156540][ T6959] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 558.493448][ T11] team0 (unregistering): Port device team_slave_1 removed [ 558.569639][ T11] team0 (unregistering): Port device team_slave_0 removed [ 558.641855][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.715854][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.230427][ T11] bond0 (unregistering): Released all slaves [ 560.896430][T13382] syzkaller0: entered promiscuous mode [ 560.902058][T13382] syzkaller0: entered allmulticast mode [ 563.146169][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.154046][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.759415][T13485] syzkaller0: entered promiscuous mode [ 565.767779][T13485] syzkaller0: entered allmulticast mode [ 569.514571][T13557] fuse: Bad value for 'fd' [ 569.945546][T13562] syzkaller0: entered promiscuous mode [ 569.959987][T13562] syzkaller0: entered allmulticast mode [ 571.829185][T13615] fuse: Bad value for 'fd' [ 574.510065][T13663] fuse: Bad value for 'fd' [ 575.094575][T13677] syzkaller0: entered promiscuous mode [ 575.109796][T13677] syzkaller0: entered allmulticast mode [ 577.229134][ T24] block nbd0: Possible stuck request ffff888022c10000: control (read@0,4096B). Runtime 30 seconds [ 581.209147][T13789] loop5: detected capacity change from 0 to 128 [ 583.499964][T13878] loop8: detected capacity change from 0 to 128 [ 583.556473][T13878] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 583.673453][T13878] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 587.168113][T10503] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 595.322964][T14057] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2127'. [ 596.262610][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 598.338780][T14100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 598.413826][T14100] tap0: tun_chr_ioctl cmd 1074025677 [ 598.419356][T14100] tap0: linktype set to 805 [ 598.967393][T14119] FAULT_INJECTION: forcing a failure. [ 598.967393][T14119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.002364][T14119] CPU: 0 PID: 14119 Comm: syz.4.2140 Not tainted syzkaller #0 [ 599.009896][T14119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 599.020006][T14119] Call Trace: [ 599.023337][T14119] [ 599.026305][T14119] dump_stack_lvl+0x18c/0x250 [ 599.031040][T14119] ? show_regs_print_info+0x20/0x20 [ 599.036298][T14119] ? load_image+0x420/0x420 [ 599.040873][T14119] ? __might_fault+0xaa/0x120 [ 599.045615][T14119] ? __lock_acquire+0x7eb0/0x7eb0 [ 599.050695][T14119] ? __kasan_slab_alloc+0x6c/0x80 [ 599.055784][T14119] should_fail_ex+0x394/0x4c0 [ 599.060536][T14119] strncpy_from_user+0x36/0x2f0 [ 599.065453][T14119] getname_flags+0xf6/0x500 [ 599.070045][T14119] __x64_sys_mkdirat+0x7c/0xa0 [ 599.074877][T14119] do_syscall_64+0x55/0xb0 [ 599.079349][T14119] ? clear_bhb_loop+0x40/0x90 [ 599.084077][T14119] ? clear_bhb_loop+0x40/0x90 [ 599.088802][T14119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.094761][T14119] RIP: 0033:0x7fa683b9e559 [ 599.099223][T14119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.118883][T14119] RSP: 002b:00007fa681df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 599.127350][T14119] RAX: ffffffffffffffda RBX: 00007fa683e25fa0 RCX: 00007fa683b9e559 [ 599.135359][T14119] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 599.143373][T14119] RBP: 00007fa683c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 599.151390][T14119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.159404][T14119] R13: 00007fa683e26038 R14: 00007fa683e25fa0 R15: 00007ffe3c81e0a8 [ 599.167440][T14119] [ 604.110995][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2164'. [ 604.371927][T14220] loop5: detected capacity change from 0 to 512 [ 604.589786][T14220] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.2166: inode has both inline data and extents flags [ 604.622869][T14220] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.2166: couldn't read orphan inode 15 (err -117) [ 604.675897][T14220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.767385][T14220] EXT4-fs (loop5): shut down requested (0) [ 605.216057][T11789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.691896][T14246] loop5: detected capacity change from 0 to 512 [ 605.710065][T14246] EXT4-fs: inline encryption not supported [ 605.931209][T14246] EXT4-fs (loop5): Test dummy encryption mode enabled [ 606.059141][T14246] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 606.714878][T14254] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2174'. [ 607.293574][ T24] block nbd0: Possible stuck request ffff888022c10000: control (read@0,4096B). Runtime 60 seconds [ 609.702160][ T5138] udevd[5138]: worker [13083] /devices/virtual/block/nbd0 is taking a long time [ 610.068963][T14308] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2185'. [ 612.942774][T14351] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2196'. [ 617.804279][T14417] loop7: detected capacity change from 0 to 512 [ 617.829493][T14417] EXT4-fs: inline encryption not supported [ 617.873669][T14417] EXT4-fs (loop7): Test dummy encryption mode enabled [ 617.880599][T14417] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 624.400154][T14493] loop4: detected capacity change from 0 to 1024 [ 624.464093][T14493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 624.503274][T14493] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.570299][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.579385][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.837256][T11717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 627.917286][T14541] loop5: detected capacity change from 0 to 4096 [ 627.957641][T14541] ext4: Unknown parameter 'noacl' [ 630.807147][T14585] loop5: detected capacity change from 0 to 1024 [ 630.979043][T14585] EXT4-fs: Ignoring removed bh option [ 631.209839][T14585] EXT4-fs (loop5): stripe (11) is not aligned with cluster size (16), stripe is disabled [ 631.509783][T14585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.451509][T11789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.457450][T14636] FAULT_INJECTION: forcing a failure. [ 634.457450][T14636] name failslab, interval 1, probability 0, space 0, times 0 [ 634.676616][T14636] CPU: 1 PID: 14636 Comm: syz.4.2268 Not tainted syzkaller #0 [ 634.684167][T14636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 634.694280][T14636] Call Trace: [ 634.697604][T14636] [ 634.700580][T14636] dump_stack_lvl+0x18c/0x250 [ 634.705315][T14636] ? show_regs_print_info+0x20/0x20 [ 634.710563][T14636] ? load_image+0x420/0x420 [ 634.715145][T14636] ? __lock_acquire+0x7eb0/0x7eb0 [ 634.720237][T14636] ? lockdep_hardirqs_on+0x98/0x150 [ 634.725549][T14636] should_fail_ex+0x394/0x4c0 [ 634.730291][T14636] should_failslab+0x9/0x20 [ 634.734856][T14636] slab_pre_alloc_hook+0x59/0x300 [ 634.739941][T14636] ? __vmalloc_node_range+0x598/0x1320 [ 634.745455][T14636] ? __vmalloc_node_range+0x598/0x1320 [ 634.750966][T14636] __kmem_cache_alloc_node+0x53/0x250 [ 634.756428][T14636] ? __vmalloc_node_range+0x598/0x1320 [ 634.761944][T14636] __kmalloc_node+0xa6/0x240 [ 634.766619][T14636] __vmalloc_node_range+0x598/0x1320 [ 634.771960][T14636] ? preempt_schedule+0xc0/0xd0 [ 634.776965][T14636] ? free_vm_area+0x50/0x50 [ 634.781530][T14636] ? hashlimit_pernet+0x23/0x230 [ 634.786579][T14636] ? htable_create+0xf1/0x7f0 [ 634.791294][T14636] vmalloc+0x79/0x90 [ 634.795237][T14636] ? htable_create+0xf1/0x7f0 [ 634.799960][T14636] htable_create+0xf1/0x7f0 [ 634.804543][T14636] hashlimit_mt_check_common+0x6a7/0xa50 [ 634.810247][T14636] hashlimit_mt_check_v1+0x237/0x380 [ 634.815581][T14636] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 634.821272][T14636] ? hashlimit_mt_v1+0x2d0/0x2d0 [ 634.826303][T14636] ? hashlimit_mt_v1+0x2d0/0x2d0 [ 634.831320][T14636] xt_check_match+0x49d/0xc60 [ 634.836113][T14636] ? xt_check_proc_name+0x270/0x270 [ 634.841364][T14636] ? pcpu_alloc+0x11e7/0x1880 [ 634.846090][T14636] ? xt_percpu_counter_alloc+0x139/0x1e0 [ 634.851796][T14636] ? xt_find_match+0x1f1/0x230 [ 634.856612][T14636] translate_table+0x1480/0x1f60 [ 634.861699][T14636] ? ipt_register_table+0x7b0/0x7b0 [ 634.866950][T14636] ? __might_fault+0xaa/0x120 [ 634.871677][T14636] ? __lock_acquire+0x7eb0/0x7eb0 [ 634.876750][T14636] ? __virt_addr_valid+0x10c/0x380 [ 634.881911][T14636] ? __virt_addr_valid+0x10c/0x380 [ 634.887074][T14636] ? __might_fault+0xc6/0x120 [ 634.891797][T14636] ? __might_fault+0xaa/0x120 [ 634.896545][T14636] do_ipt_set_ctl+0x9f5/0xe00 [ 634.901283][T14636] ? ipt_unregister_table_exit+0x230/0x230 [ 634.907142][T14636] ? __lock_acquire+0x7eb0/0x7eb0 [ 634.912224][T14636] ? mark_lock+0x94/0x320 [ 634.916615][T14636] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 634.922295][T14636] ? mutex_unlock+0x10/0x10 [ 634.926845][T14636] ? lockdep_hardirqs_on+0x98/0x150 [ 634.932109][T14636] nf_setsockopt+0x263/0x280 [ 634.936751][T14636] ? sock_common_recvmsg+0x190/0x190 [ 634.942116][T14636] do_sock_setsockopt+0x175/0x1a0 [ 634.947221][T14636] ? __fdget+0x180/0x210 [ 634.951542][T14636] __x64_sys_setsockopt+0x182/0x200 [ 634.956814][T14636] do_syscall_64+0x55/0xb0 [ 634.961286][T14636] ? clear_bhb_loop+0x40/0x90 [ 634.966023][T14636] ? clear_bhb_loop+0x40/0x90 [ 634.970773][T14636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 634.976721][T14636] RIP: 0033:0x7fa683b9e559 [ 634.981242][T14636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.000900][T14636] RSP: 002b:00007fa681df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 635.009369][T14636] RAX: ffffffffffffffda RBX: 00007fa683e25fa0 RCX: 00007fa683b9e559 [ 635.017387][T14636] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 635.025402][T14636] RBP: 00007fa683c35ab8 R08: 00000000000005c0 R09: 0000000000000000 [ 635.033424][T14636] R10: 0000200000001080 R11: 0000000000000246 R12: 0000000000000000 [ 635.041460][T14636] R13: 00007fa683e26038 R14: 00007fa683e25fa0 R15: 00007ffe3c81e0a8 [ 635.049510][T14636] [ 635.282070][T14636] syz.4.2268: vmalloc error: size 69632, failed to allocated page array size 136, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 635.336118][T14636] CPU: 0 PID: 14636 Comm: syz.4.2268 Not tainted syzkaller #0 [ 635.343666][T14636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 635.353796][T14636] Call Trace: [ 635.357129][T14636] [ 635.360098][T14636] dump_stack_lvl+0x18c/0x250 [ 635.364836][T14636] ? show_regs_print_info+0x20/0x20 [ 635.370079][T14636] ? load_image+0x420/0x420 [ 635.374643][T14636] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 635.381146][T14636] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 635.385080][T14638] loop5: detected capacity change from 0 to 8192 [ 635.387692][T14636] warn_alloc+0x246/0x340 [ 635.398470][T14636] ? zone_watermark_ok_safe+0x230/0x230 [ 635.404074][T14636] ? __vmalloc_node_range+0x598/0x1320 [ 635.409594][T14636] ? __vmalloc_node_range+0x598/0x1320 [ 635.415110][T14636] ? rcu_is_watching+0x15/0xb0 [ 635.419941][T14636] ? __vmalloc_node_range+0x598/0x1320 [ 635.425437][T14636] ? __kmalloc_node+0xe4/0x240 [ 635.430245][T14636] __vmalloc_node_range+0x661/0x1320 [ 635.435590][T14636] ? preempt_schedule+0xc0/0xd0 [ 635.440518][T14636] ? free_vm_area+0x50/0x50 [ 635.445077][T14636] ? hashlimit_pernet+0x23/0x230 [ 635.450044][T14636] ? htable_create+0xf1/0x7f0 [ 635.454764][T14636] vmalloc+0x79/0x90 [ 635.458695][T14636] ? htable_create+0xf1/0x7f0 [ 635.463398][T14636] htable_create+0xf1/0x7f0 [ 635.467940][T14636] hashlimit_mt_check_common+0x6a7/0xa50 [ 635.473611][T14636] hashlimit_mt_check_v1+0x237/0x380 [ 635.479025][T14636] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 635.484693][T14636] ? hashlimit_mt_v1+0x2d0/0x2d0 [ 635.489671][T14636] ? hashlimit_mt_v1+0x2d0/0x2d0 [ 635.494650][T14636] xt_check_match+0x49d/0xc60 [ 635.499365][T14636] ? xt_check_proc_name+0x270/0x270 [ 635.504596][T14636] ? pcpu_alloc+0x11e7/0x1880 [ 635.509308][T14636] ? xt_percpu_counter_alloc+0x139/0x1e0 [ 635.514980][T14636] ? xt_find_match+0x1f1/0x230 [ 635.519774][T14636] translate_table+0x1480/0x1f60 [ 635.524761][T14636] ? ipt_register_table+0x7b0/0x7b0 [ 635.530002][T14636] ? __might_fault+0xaa/0x120 [ 635.534712][T14636] ? __lock_acquire+0x7eb0/0x7eb0 [ 635.539818][T14636] ? __virt_addr_valid+0x10c/0x380 [ 635.544989][T14636] ? __virt_addr_valid+0x10c/0x380 [ 635.550163][T14636] ? __might_fault+0xc6/0x120 [ 635.554883][T14636] ? __might_fault+0xaa/0x120 [ 635.559600][T14636] do_ipt_set_ctl+0x9f5/0xe00 [ 635.564319][T14636] ? ipt_unregister_table_exit+0x230/0x230 [ 635.570157][T14636] ? __lock_acquire+0x7eb0/0x7eb0 [ 635.575213][T14636] ? mark_lock+0x94/0x320 [ 635.579578][T14636] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 635.585244][T14636] ? mutex_unlock+0x10/0x10 [ 635.589772][T14636] ? lockdep_hardirqs_on+0x98/0x150 [ 635.595014][T14636] nf_setsockopt+0x263/0x280 [ 635.599649][T14636] ? sock_common_recvmsg+0x190/0x190 [ 635.604973][T14636] do_sock_setsockopt+0x175/0x1a0 [ 635.610036][T14636] ? __fdget+0x180/0x210 [ 635.614322][T14636] __x64_sys_setsockopt+0x182/0x200 [ 635.619560][T14636] do_syscall_64+0x55/0xb0 [ 635.624012][T14636] ? clear_bhb_loop+0x40/0x90 [ 635.628714][T14636] ? clear_bhb_loop+0x40/0x90 [ 635.633432][T14636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.639364][T14636] RIP: 0033:0x7fa683b9e559 [ 635.643810][T14636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.663454][T14636] RSP: 002b:00007fa681df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 635.671893][T14636] RAX: ffffffffffffffda RBX: 00007fa683e25fa0 RCX: 00007fa683b9e559 [ 635.679898][T14636] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 635.687898][T14636] RBP: 00007fa683c35ab8 R08: 00000000000005c0 R09: 0000000000000000 [ 635.695948][T14636] R10: 0000200000001080 R11: 0000000000000246 R12: 0000000000000000 [ 635.703946][T14636] R13: 00007fa683e26038 R14: 00007fa683e25fa0 R15: 00007ffe3c81e0a8 [ 635.711962][T14636] [ 635.745107][T14636] Mem-Info: [ 635.749072][T14636] active_anon:22843 inactive_anon:3256 isolated_anon:0 [ 635.749072][T14636] active_file:2634 inactive_file:44034 isolated_file:0 [ 635.749072][T14636] unevictable:768 dirty:54 writeback:0 [ 635.749072][T14636] slab_reclaimable:11622 slab_unreclaimable:100632 [ 635.749072][T14636] mapped:24391 shmem:19945 pagetables:923 [ 635.749072][T14636] sec_pagetables:0 bounce:0 [ 635.749072][T14636] kernel_misc_reclaimable:0 [ 635.749072][T14636] free:1321951 free_pcp:8988 free_cma:0 [ 636.621490][T14636] Node 0 active_anon:35512kB inactive_anon:49732kB active_file:10548kB inactive_file:175932kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97692kB dirty:220kB writeback:0kB shmem:55412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11484kB pagetables:3772kB sec_pagetables:0kB all_unreclaimable? no [ 636.697355][T14636] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 636.765111][T14636] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 636.883028][T14636] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 636.901882][T14636] Node 0 DMA32 free:1386596kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:33484kB inactive_anon:44848kB active_file:10548kB inactive_file:174864kB unevictable:1536kB writepending:224kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:36616kB local_pcp:19600kB free_cma:0kB [ 637.102507][T14636] lowmem_reserve[]: 0 0 1 1 1 [ 637.114833][T14636] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1068kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 637.217510][T14636] lowmem_reserve[]: 0 0 0 0 0 [ 637.290521][T14636] Node 1 Normal free:3897428kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13472kB local_pcp:7072kB free_cma:0kB [ 637.351435][T14636] lowmem_reserve[]: 0 0 0 0 0 [ 637.356346][T14636] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 637.373351][ T24] block nbd0: Possible stuck request ffff888022c10000: control (read@0,4096B). Runtime 90 seconds [ 637.391382][T14636] Node 0 DMA32: 1680*4kB (UME) 2003*8kB (UME) 1302*16kB (UME) 1590*32kB (UME) 1078*64kB (UME) 512*128kB (UM) 290*256kB (UME) 156*512kB (UM) 69*1024kB (UME) 45*2048kB (M) 205*4096kB (UM) = 1385592kB [ 637.432123][T14636] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 637.490255][T14636] Node 1 Normal: 249*4kB (UME) 66*8kB (UME) 36*16kB (UME) 173*32kB (UME) 34*64kB (UE) 10*128kB (UME) 1*256kB (U) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3897428kB [ 637.545033][T14636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.567488][T14636] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 637.589397][T14636] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.625665][T14636] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 637.642631][T14636] 64164 total pagecache pages [ 637.648895][T14636] 0 pages in swap cache [ 637.667182][T14636] Free swap = 123664kB [ 637.676978][T14636] Total swap = 124996kB [ 637.681996][T14636] 2097051 pages RAM [ 637.686984][T14636] 0 pages HighMem/MovableOnly [ 637.691784][T14636] 421118 pages reserved [ 637.697393][T14636] 0 pages cma reserved [ 638.120528][T14680] loop4: detected capacity change from 0 to 1024 [ 638.170985][T14680] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 638.384242][T14680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.665300][T11717] EXT4-fs error (device loop4): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /156/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 638.724428][T11717] EXT4-fs (loop4): Remounting filesystem read-only [ 639.023098][T14692] loop8: detected capacity change from 0 to 8192 [ 639.054221][T11717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.463596][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 641.475336][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 641.487915][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 641.524409][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 641.534821][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 641.542180][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 641.703671][T14734] rxe_eth0 speed is unknown, defaulting to 1000 [ 642.678542][T14734] chnl_net:caif_netlink_parms(): no params data found [ 642.967178][T14734] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.999437][T14734] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.023372][T14734] bridge_slave_0: entered allmulticast mode [ 643.046712][T14760] loop8: detected capacity change from 0 to 512 [ 643.053160][T14734] bridge_slave_0: entered promiscuous mode [ 643.083512][T14734] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.127809][T14734] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.158537][T14760] EXT4-fs error (device loop8): ext4_orphan_get:1408: inode #15: comm syz.8.2292: inode has both inline data and extents flags [ 643.176053][T14734] bridge_slave_1: entered allmulticast mode [ 643.204627][T14734] bridge_slave_1: entered promiscuous mode [ 643.237267][T14760] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.2292: couldn't read orphan inode 15 (err -117) [ 643.272702][T14760] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.305703][T14734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.321036][T14734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.367711][T14760] EXT4-fs (loop8): shut down requested (0) [ 643.413634][T14734] team0: Port device team_slave_0 added [ 643.445616][T14734] team0: Port device team_slave_1 added [ 643.477718][T10503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.549197][T14734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.558107][T14734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.591544][T14734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.616619][ T5787] Bluetooth: hci1: command tx timeout [ 643.663036][T14734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.678812][T14734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.777250][T14734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.710056][T14734] hsr_slave_0: entered promiscuous mode [ 644.752868][T14734] hsr_slave_1: entered promiscuous mode [ 644.779274][T14734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 644.796425][T14734] Cannot create hsr debugfs directory [ 645.683522][ T5787] Bluetooth: hci1: command tx timeout [ 646.750613][T14734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 646.780896][T14734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 646.840877][T14734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 646.894875][T14734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 647.158379][T14734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.209399][T14734] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.276584][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.283802][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.334526][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.341735][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.429276][T14821] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2302'. [ 647.772496][ T5788] Bluetooth: hci1: command tx timeout [ 648.026406][T14734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.160928][T14734] veth0_vlan: entered promiscuous mode [ 648.244597][T14734] veth1_vlan: entered promiscuous mode [ 648.374710][T14734] veth0_macvtap: entered promiscuous mode [ 648.407687][T14734] veth1_macvtap: entered promiscuous mode [ 648.477595][T14734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.522380][T14734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.542421][T14734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.573018][T14734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.618159][T14734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.352366][T14734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.412634][T14734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.472391][T14734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.509589][T14734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.557532][T14734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.606283][T14850] Bluetooth: Short BCSP packet [ 649.612358][T14734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.622219][T14734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.661957][T14734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.706827][T14734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.745220][T14734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.762653][T14734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.782540][T14734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.804339][T14734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.831257][T14734] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.850672][ T5787] Bluetooth: hci1: command tx timeout [ 649.874133][T14734] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.914518][T14734] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.958291][T14734] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.303986][ T3850] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.368640][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.399354][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.496151][ T3850] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.635412][ T3850] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.700626][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.710017][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.775502][ T3850] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.603478][ T5788] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 652.549590][T14880] loop2: detected capacity change from 0 to 8192 [ 653.034320][T14889] loop7: detected capacity change from 0 to 256 [ 653.361560][T14895] loop7: detected capacity change from 0 to 128 [ 653.436384][T14895] FAULT_INJECTION: forcing a failure. [ 653.436384][T14895] name failslab, interval 1, probability 0, space 0, times 0 [ 653.476720][T14898] loop2: detected capacity change from 0 to 512 [ 653.512692][T14895] CPU: 1 PID: 14895 Comm: syz.7.2314 Not tainted syzkaller #0 [ 653.520234][T14895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 653.530336][T14895] Call Trace: [ 653.533669][T14895] [ 653.536648][T14895] dump_stack_lvl+0x18c/0x250 [ 653.541397][T14895] ? show_regs_print_info+0x20/0x20 [ 653.546682][T14895] ? load_image+0x420/0x420 [ 653.551258][T14895] ? __might_sleep+0xe0/0xe0 [ 653.555919][T14895] ? __lock_acquire+0x7eb0/0x7eb0 [ 653.561009][T14895] should_fail_ex+0x394/0x4c0 [ 653.565759][T14895] should_failslab+0x9/0x20 [ 653.570322][T14895] slab_pre_alloc_hook+0x59/0x300 [ 653.575404][T14895] kmem_cache_alloc+0x5a/0x2c0 [ 653.580231][T14895] ? __anon_vma_prepare+0xb6/0x440 [ 653.585404][T14895] __anon_vma_prepare+0xb6/0x440 [ 653.590413][T14895] do_wp_page+0x24b7/0x34d0 [ 653.594991][T14895] ? folio_put+0xd0/0xd0 [ 653.599314][T14895] ? do_raw_spin_lock+0x11f/0x2b0 [ 653.604405][T14895] ? __rwlock_init+0x150/0x150 [ 653.609222][T14895] handle_mm_fault+0x1306/0x4a50 [ 653.614193][T14895] ? handle_mm_fault+0xe6/0x4a50 [ 653.619172][T14895] ? numa_migrate_prep+0x350/0x350 [ 653.624339][T14895] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 653.629656][T14895] do_user_addr_fault+0x736/0x12d0 [ 653.634830][T14895] exc_page_fault+0x64/0x100 [ 653.639464][T14895] asm_exc_page_fault+0x26/0x30 [ 653.644345][T14895] RIP: 0033:0x7f99f92552a3 [ 653.648785][T14895] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 653.668419][T14895] RSP: 002b:00007f99fa34c470 EFLAGS: 00010202 [ 653.674518][T14895] RAX: 0000000000000400 RBX: 00007f99fa34c530 RCX: 00007f99ef1f7000 [ 653.682523][T14895] RDX: 00007f99fa34c6d0 RSI: 0000000000000029 RDI: 00007f99fa34c5d0 [ 653.690525][T14895] RBP: 00000000000000f9 R08: 0000000000000009 R09: 000000000000019a [ 653.698530][T14895] R10: 00000000000001bc R11: 00007f99fa34c530 R12: 0000000000000001 [ 653.706534][T14895] R13: 00007f99f9455e20 R14: 0000000000000020 R15: 00007f99fa34c5d0 [ 653.714548][T14895] [ 653.752848][T14895] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 653.775386][T14898] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.2313: inode has both inline data and extents flags [ 653.840886][T14898] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.2313: couldn't read orphan inode 15 (err -117) [ 653.912231][T14898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.084079][T14734] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.577626][T14912] loop7: detected capacity change from 0 to 256 [ 654.666274][ T3850] hsr_slave_0: left promiscuous mode [ 654.703423][ T3850] hsr_slave_1: left promiscuous mode [ 654.757413][ T3850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.015618][ T3850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.024394][ T3850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.031922][ T3850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.048207][ T3850] bridge_slave_1: left allmulticast mode [ 655.062633][ T3850] bridge_slave_1: left promiscuous mode [ 655.068470][ T3850] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.102919][ T3850] bridge_slave_0: left allmulticast mode [ 655.110978][ T3850] bridge_slave_0: left promiscuous mode [ 655.390494][ T3850] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.889245][ T3850] veth1_macvtap: left promiscuous mode [ 655.906609][ T3850] veth0_macvtap: left promiscuous mode [ 655.965383][ T3850] veth1_vlan: left promiscuous mode [ 655.970831][ T3850] veth0_vlan: left promiscuous mode [ 656.595697][T14930] loop8: detected capacity change from 0 to 8192 [ 659.562640][ T3850] team0 (unregistering): Port device team_slave_1 removed [ 659.617101][ T3850] team0 (unregistering): Port device team_slave_0 removed [ 659.668159][ T3850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.725077][ T3850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.111424][ T3850] bond0 (unregistering): Released all slaves [ 660.354401][T14966] loop7: detected capacity change from 0 to 512 [ 660.458858][T14966] EXT4-fs error (device loop7): __ext4_iget:5091: inode #11: block 1: comm syz.7.2326: invalid block [ 660.504905][T14966] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.2326: couldn't read orphan inode 11 (err -117) [ 660.580785][T14966] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.859751][ T9696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.210519][T14982] Bluetooth: Short BCSP packet [ 662.349988][T14995] pim6reg: entered allmulticast mode [ 663.916758][T15032] loop8: detected capacity change from 0 to 128 [ 664.069167][T15032] FAULT_INJECTION: forcing a failure. [ 664.069167][T15032] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 664.471917][T15032] CPU: 0 PID: 15032 Comm: syz.8.2343 Not tainted syzkaller #0 [ 664.479475][T15032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 664.489585][T15032] Call Trace: [ 664.492911][T15032] [ 664.495897][T15032] dump_stack_lvl+0x18c/0x250 [ 664.500654][T15032] ? show_regs_print_info+0x20/0x20 [ 664.505903][T15032] ? load_image+0x420/0x420 [ 664.510467][T15032] ? __lock_acquire+0x7eb0/0x7eb0 [ 664.515565][T15032] should_fail_ex+0x394/0x4c0 [ 664.520307][T15032] prepare_alloc_pages+0x1e1/0x5b0 [ 664.525489][T15032] __alloc_pages+0x134/0x460 [ 664.530140][T15032] ? zone_statistics+0x170/0x170 [ 664.535148][T15032] ? handle_mm_fault+0xe6/0x4a50 [ 664.540176][T15032] ? __lock_acquire+0x7eb0/0x7eb0 [ 664.545269][T15032] __folio_alloc+0x10/0x20 [ 664.549745][T15032] vma_alloc_folio+0x474/0x8f0 [ 664.554566][T15032] ? handle_mm_fault+0xe6/0x4a50 [ 664.559594][T15032] handle_mm_fault+0x1ab6/0x4a50 [ 664.564597][T15032] ? handle_mm_fault+0xe6/0x4a50 [ 664.569605][T15032] ? lock_vma_under_rcu+0x52c/0x660 [ 664.574863][T15032] ? numa_migrate_prep+0x350/0x350 [ 664.580024][T15032] ? lock_vma_under_rcu+0xe5/0x660 [ 664.585215][T15032] ? do_user_addr_fault+0x1cb/0x12d0 [ 664.590573][T15032] do_user_addr_fault+0xad2/0x12d0 [ 664.595764][T15032] ? rcu_is_watching+0x15/0xb0 [ 664.600592][T15032] exc_page_fault+0x64/0x100 [ 664.605242][T15032] asm_exc_page_fault+0x26/0x30 [ 664.610143][T15032] RIP: 0033:0x7f03990552a3 [ 664.614625][T15032] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 664.634291][T15032] RSP: 002b:00007f039a079470 EFLAGS: 00010206 [ 664.640420][T15032] RAX: 0000000000002000 RBX: 00007f039a079530 RCX: 00007f038eff7000 [ 664.648451][T15032] RDX: 00007f039a0796d0 RSI: 0000000000000000 RDI: 00007f039a0795d0 [ 664.656484][T15032] RBP: 000000000000000d R08: 0000000000000009 R09: 00000000000001b4 [ 664.664509][T15032] R10: 00000000000001bc R11: 00007f039a079530 R12: 0000000000000001 [ 664.672540][T15032] R13: 00007f0399255e20 R14: 00000000000000ed R15: 00007f039a0795d0 [ 664.680591][T15032] [ 664.813371][T15032] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 665.263645][ T5788] [ 665.266040][ T5788] ====================================================== [ 665.273093][ T5788] WARNING: possible circular locking dependency detected [ 665.280151][ T5788] syzkaller #0 Not tainted [ 665.284593][ T5788] ------------------------------------------------------ [ 665.291643][ T5788] kworker/u5:7/5788 is trying to acquire lock: [ 665.297832][ T5788] ffffffff8f364ac8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x41/0x550 [ 665.307229][ T5788] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 665.307229][ T5788] but task is already holding lock: [ 665.314622][ T5788] ffffffff8f341368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 665.324083][ T5788] [ 665.324083][ T5788] which lock already depends on the new lock. [ 665.324083][ T5788] [ 665.334513][ T5788] [ 665.334513][ T5788] the existing dependency chain (in reverse order) is: [ 665.343556][ T5788] [ 665.343556][ T5788] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 665.351349][ T5788] __mutex_lock+0x135/0xc80 [ 665.356422][ T5788] hci_remote_features_evt+0x535/0x900 [ 665.362450][ T5788] hci_event_packet+0x807/0x1280 [ 665.367965][ T5788] hci_rx_work+0x43a/0xd60 [ 665.373037][ T5788] process_scheduled_works+0xa60/0x1600 [ 665.379155][ T5788] worker_thread+0xa5e/0xfe0 [ 665.384342][ T5788] kthread+0x2fa/0x390 [ 665.388977][ T5788] ret_from_fork+0x48/0x80 [ 665.393973][ T5788] ret_from_fork_asm+0x11/0x20 [ 665.399346][ T5788] [ 665.399346][ T5788] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 665.406695][ T5788] __mutex_lock+0x135/0xc80 [ 665.411770][ T5788] l2cap_chan_connect+0xfc/0xe30 [ 665.417369][ T5788] l2cap_sock_connect+0x586/0x760 [ 665.423010][ T5788] kernel_connect+0x142/0x1c0 [ 665.428256][ T5788] rfcomm_dlc_open+0xa1f/0xec0 [ 665.433586][ T5788] rfcomm_sock_connect+0x2ed/0x600 [ 665.439268][ T5788] __sys_connect+0x3da/0x470 [ 665.444424][ T5788] __x64_sys_connect+0x7a/0x90 [ 665.449750][ T5788] do_syscall_64+0x55/0xb0 [ 665.454730][ T5788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 665.461203][ T5788] [ 665.461203][ T5788] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 665.468642][ T5788] __lock_acquire+0x3a07/0x7eb0 [ 665.474071][ T5788] lock_acquire+0x19e/0x420 [ 665.479140][ T5788] __mutex_lock+0x135/0xc80 [ 665.484214][ T5788] rfcomm_security_cfm+0x41/0x550 [ 665.489811][ T5788] hci_encrypt_cfm+0x363/0x4d0 [ 665.495154][ T5788] hci_encrypt_change_evt+0x5c3/0xe30 [ 665.501095][ T5788] hci_event_packet+0x807/0x1280 [ 665.506597][ T5788] hci_rx_work+0x43a/0xd60 [ 665.511583][ T5788] process_scheduled_works+0xa60/0x1600 [ 665.517723][ T5788] worker_thread+0xa5e/0xfe0 [ 665.522887][ T5788] kthread+0x2fa/0x390 [ 665.527527][ T5788] ret_from_fork+0x48/0x80 [ 665.532511][ T5788] ret_from_fork_asm+0x11/0x20 [ 665.537855][ T5788] [ 665.537855][ T5788] other info that might help us debug this: [ 665.537855][ T5788] [ 665.548129][ T5788] Chain exists of: [ 665.548129][ T5788] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 665.548129][ T5788] [ 665.560699][ T5788] Possible unsafe locking scenario: [ 665.560699][ T5788] [ 665.568185][ T5788] CPU0 CPU1 [ 665.573590][ T5788] ---- ---- [ 665.578994][ T5788] lock(hci_cb_list_lock); [ 665.583545][ T5788] lock(&hdev->lock); [ 665.590181][ T5788] lock(hci_cb_list_lock); [ 665.597245][ T5788] lock(rfcomm_mutex); [ 665.601462][ T5788] [ 665.601462][ T5788] *** DEADLOCK *** [ 665.601462][ T5788] [ 665.609638][ T5788] 4 locks held by kworker/u5:7/5788: [ 665.614956][ T5788] #0: ffff888082d37138 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 665.626008][ T5788] #1: ffffc900045dfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 665.638109][ T5788] #2: ffff88805e1440b8 (&hdev->lock){+.+.}-{3:3}, at: hci_encrypt_change_evt+0x93/0xe30 [ 665.648048][ T5788] #3: ffffffff8f341368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 665.657954][ T5788] [ 665.657954][ T5788] stack backtrace: [ 665.663878][ T5788] CPU: 1 PID: 5788 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 665.671479][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 665.681669][ T5788] Workqueue: hci1 hci_rx_work [ 665.686404][ T5788] Call Trace: [ 665.689730][ T5788] [ 665.692704][ T5788] dump_stack_lvl+0x18c/0x250 [ 665.697427][ T5788] ? load_image+0x420/0x420 [ 665.701987][ T5788] ? show_regs_print_info+0x20/0x20 [ 665.707240][ T5788] ? print_circular_bug+0x12b/0x1a0 [ 665.712493][ T5788] check_noncircular+0x2fc/0x400 [ 665.717504][ T5788] ? __bfs+0x27a/0x560 [ 665.721618][ T5788] ? print_deadlock_bug+0x5d0/0x5d0 [ 665.726874][ T5788] ? lockdep_lock+0xf5/0x230 [ 665.731531][ T5788] ? _find_first_zero_bit+0xd6/0x100 [ 665.736870][ T5788] __lock_acquire+0x3a07/0x7eb0 [ 665.741785][ T5788] ? verify_lock_unused+0x140/0x140 [ 665.747034][ T5788] ? l2cap_security_cfm+0x1277/0x1300 [ 665.752458][ T5788] ? __lock_acquire+0x7eb0/0x7eb0 [ 665.757530][ T5788] lock_acquire+0x19e/0x420 [ 665.762089][ T5788] ? rfcomm_security_cfm+0x41/0x550 [ 665.767344][ T5788] ? __might_sleep+0xe0/0xe0 [ 665.771995][ T5788] ? read_lock_is_recursive+0x20/0x20 [ 665.777419][ T5788] ? __mutex_trylock_common+0x160/0x270 [ 665.783023][ T5788] __mutex_lock+0x135/0xc80 [ 665.787576][ T5788] ? rfcomm_security_cfm+0x41/0x550 [ 665.792827][ T5788] ? trace_contention_end+0x39/0xe0 [ 665.798099][ T5788] ? __mutex_lock+0x30d/0xc80 [ 665.802841][ T5788] ? rfcomm_security_cfm+0x41/0x550 [ 665.808119][ T5788] ? mutex_lock_nested+0x20/0x20 [ 665.813198][ T5788] ? hci_encrypt_cfm+0x2fe/0x4d0 [ 665.818191][ T5788] ? mutex_lock_nested+0x20/0x20 [ 665.823222][ T5788] ? __lock_acquire+0x7eb0/0x7eb0 [ 665.828300][ T5788] rfcomm_security_cfm+0x41/0x550 [ 665.833379][ T5788] ? hci_conn_hash_lookup_handle+0x20/0x240 [ 665.839328][ T5788] ? rfcomm_send_msc+0x360/0x360 [ 665.844511][ T5788] hci_encrypt_cfm+0x363/0x4d0 [ 665.849347][ T5788] hci_encrypt_change_evt+0x5c3/0xe30 [ 665.854818][ T5788] ? __skb_clone+0x446/0x6c0 [ 665.859495][ T5788] ? hci_remote_name_evt+0x610/0x610 [ 665.864857][ T5788] ? skb_pull_data+0xf0/0x1f0 [ 665.869611][ T5788] ? hci_remote_name_evt+0x610/0x610 [ 665.874945][ T5788] hci_event_packet+0x807/0x1280 [ 665.879934][ T5788] ? __lock_acquire+0x7eb0/0x7eb0 [ 665.885222][ T5788] ? lock_chain_count+0x20/0x20 [ 665.890155][ T5788] ? bis_list+0x290/0x290 [ 665.894562][ T5788] ? kcov_remote_start+0x513/0x810 [ 665.899740][ T5788] ? lockdep_hardirqs_on+0x98/0x150 [ 665.904988][ T5788] ? hci_send_to_monitor+0xd7/0x4f0 [ 665.910231][ T5788] hci_rx_work+0x43a/0xd60 [ 665.914787][ T5788] ? process_scheduled_works+0x975/0x1600 [ 665.920578][ T5788] process_scheduled_works+0xa60/0x1600 [ 665.926220][ T5788] ? worker_attach_to_pool+0x370/0x370 [ 665.931745][ T5788] ? assign_work+0x3cc/0x5d0 [ 665.936406][ T5788] worker_thread+0xa5e/0xfe0 [ 665.941071][ T5788] ? _raw_spin_unlock+0x40/0x40 [ 665.946043][ T5788] ? __kthread_parkme+0x71/0x1c0 [ 665.951058][ T5788] kthread+0x2fa/0x390 [ 665.955190][ T5788] ? pr_cont_work+0x550/0x550 [ 665.959940][ T5788] ? kthread_blkcg+0xd0/0xd0 [ 665.964586][ T5788] ret_from_fork+0x48/0x80 [ 665.969055][ T5788] ? kthread_blkcg+0xd0/0xd0 [ 665.973698][ T5788] ret_from_fork_asm+0x11/0x20 [ 665.978525][ T5788] [ 667.071402][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.168839][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.266966][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.285111][ T5787] Bluetooth: hci1: command tx timeout [ 667.385248][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.456043][ T24] block nbd0: Possible stuck request ffff888022c10000: control (read@0,4096B). Runtime 120 seconds [ 668.509198][ T11] hsr_slave_0: left promiscuous mode [ 668.516746][ T11] hsr_slave_1: left promiscuous mode [ 668.522945][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.530384][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.538662][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.546153][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.554259][ T11] bridge_slave_1: left allmulticast mode [ 668.559930][ T11] bridge_slave_1: left promiscuous mode [ 668.565900][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.583842][ T11] bridge_slave_0: left allmulticast mode [ 668.589544][ T11] bridge_slave_0: left promiscuous mode [ 668.595496][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.608068][ T11] veth1_macvtap: left promiscuous mode [ 668.614360][ T11] veth0_macvtap: left promiscuous mode [ 668.620184][ T11] veth1_vlan: left promiscuous mode [ 668.626812][ T11] veth0_vlan: left promiscuous mode [ 668.875519][ T11] team0 (unregistering): Port device team_slave_1 removed [ 668.907146][ T11] team0 (unregistering): Port device team_slave_0 removed [ 668.942127][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.958929][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.061613][ T11] bond0 (unregistering): Released all slaves [ 669.471842][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.541066][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.584387][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.651358][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.867187][ T11] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.920877][ T11] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.968910][ T11] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.020639][ T11] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.152201][ T11] tipc: Disabling bearer [ 670.159057][ T11] tipc: Left network mode [ 671.297114][ T11] hsr_slave_0: left promiscuous mode [ 671.327077][ T11] hsr_slave_1: left promiscuous mode [ 671.333840][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.341266][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.351006][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.358586][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.368088][ T11] bridge_slave_1: left allmulticast mode [ 671.374000][ T11] bridge_slave_1: left promiscuous mode [ 671.379814][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.390308][ T11] bridge_slave_0: left allmulticast mode [ 671.396365][ T11] bridge_slave_0: left promiscuous mode [ 671.402097][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.428209][ T11] hsr_slave_0: left promiscuous mode [ 671.435115][ T11] hsr_slave_1: left promiscuous mode [ 671.441157][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.449981][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.460000][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.468623][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.476887][ T11] bridge_slave_1: left allmulticast mode [ 671.483783][ T11] bridge_slave_1: left promiscuous mode [ 671.489650][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.498404][ T11] bridge_slave_0: left allmulticast mode [ 671.505371][ T11] bridge_slave_0: left promiscuous mode [ 671.511097][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.526851][ T11] veth1_macvtap: left promiscuous mode [ 671.532478][ T11] veth0_macvtap: left promiscuous mode [ 671.538122][ T11] veth1_vlan: left promiscuous mode [ 671.546254][ T11] veth0_vlan: left promiscuous mode [ 671.554715][ T11] veth1_macvtap: left promiscuous mode [ 671.560277][ T11] veth0_macvtap: left promiscuous mode [ 671.567878][ T11] veth1_vlan: left promiscuous mode [ 671.573412][ T11] veth0_vlan: left promiscuous mode [ 671.853445][ T11] team0 (unregistering): Port device team_slave_1 removed [ 671.890723][ T11] team0 (unregistering): Port device team_slave_0 removed [ 671.917912][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.947900][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.026575][ T11] bond0 (unregistering): Released all slaves [ 672.176115][ T11] team0 (unregistering): Port device team_slave_1 removed [ 672.205042][ T11] team0 (unregistering): Port device team_slave_0 removed [ 672.231541][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.246761][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.320230][ T11] bond0 (unregistering): Released all slaves