last executing test programs: 4m16.043833897s ago: executing program 0 (id=29): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r1, 0x3a5) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00004e20a2bc560119d7004f19dfb7f393d7359031033f817f004e2000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) 4m16.043080201s ago: executing program 0 (id=31): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000001c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@init_itable}, {@nodioread_nolock}, {@nodelalloc}, {@resuid}, {@quota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100039042cbd7000eaffffff000003e4", @ANYRES32, @ANYBLOB="83000400040000002800128008000100736974001c00028006000d00ff07000008000300e0000001080001002da0c66bd3"], 0x48}, 0x1, 0x0, 0x0, 0x24048014}, 0x4040) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) sendto(r5, 0x0, 0x0, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000010010000000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c000f00"], 0x40}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a29394d5aa05dd7cf5c0a", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_pwait2(r1, &(0x7f0000000040)=[{}, {}, {}], 0x3, &(0x7f00000001c0), &(0x7f0000000200)={[0x9]}, 0x8) 4m15.463849665s ago: executing program 0 (id=37): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x2, 0x0, 0x5}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x4020940d, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x7, 0x6, 0x18, 0x3, 0x94, "5bcf53b1d21e4ec1db466b3bd13eff7f3199e0", 0x4, 0x1}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x8083, 0x1}, 0x50) pidfd_send_signal(0xffffffffffffffff, 0x12, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010202010902"], 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) 4m12.726454662s ago: executing program 0 (id=68): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x522, &(0x7f00000006c0)="$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") r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x2, 0x5, "c303b2", 0xd}) sendto$packet(r0, &(0x7f0000001600)="f2435f0f080880000000008508004309a22d4eb79b4ecbf0c7dca04216618de1938f", 0x22, 0x1, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000140)="9aa2e537f16f2d55b0702f22ab6fac934bf70de182d5c6f6c64fd8c89faab1b059942c64f1d8e889920ba4b4cca769187439fd3db683ba1f4c4b61a4a052eba09c78e46af7904537d0570fe0e5a1c03cfb3ae7396fae92ca5e31f6e6c6f9c35167a8c391590c7604d47b5ebc44326ac4988b89193dfc7500d2054811e9462b724099dbdfa66e6b5ba2c482ca243711388384544e98bbc6bd76", 0x99}, {&(0x7f0000000280)="dc5e840539bcfa0d4dfc3ba782d4a1fab21680", 0x13}, {&(0x7f00000002c0)="b25669c562a7ca36", 0x8}, {&(0x7f0000000300)="441a08d59ac99970482977e7ab27d8831fee7aa3e3ec7650c9a119374e04ccebb3a0223d2eab81c77f7a62e27b607f275c0a039fe0fb70c939d42506cc97bb778f1ad94ebfaeb2ccb649e4dc90e393885652ef808baabf3f5b0e5330f4b40b9b6592d9a906bfe7682cb0", 0x6a}, {&(0x7f00000003c0)="d3948eb365fcc9024c1157bd4cea30c3c57cea9734c518fc34a4ef101b80f1a6cb6d4d395e1cf9b1e10d6942925c603745f3504656b6a0f0a12e876d312427ce43f98a7259b668198b0d7be5d4dc757d27e9751252bef9e0f499daf7ffc0026f8f19b5384b30e5e9de183bb54ba8a6adf9f759869eac10b6c89cfa281220e5141d9f62398a6b11272e18b94f00c70d312c73bb6ec6b7e79d4ae1c881ab6832a3009180373cf07d2b058fcb", 0xab}, {&(0x7f0000000500)="626f8a0fc117990d1632b80e1ed52d00b59094ea9699f64878341aa61709a4218dba93e1c2281198969445360081ca931699b0b571b29d8e8345b46d2e6f34edd9d1a7f3", 0x44}, {&(0x7f0000000580)="8adf8a0eb4a4e52b29a7123a3214de023d8df21c510f8058862dd955bd57f5a6a923eddd1d01e57902e07ae6071d0c6bf79dac14be8eb547794dd78656ae76d2f9bfdee8d27c969742cc9059f163fddaa2adaed223034d64f7730096e2a43b23b34a957e7ce6646f67e71932f491df2bc6f7f71eaa1d95164b0c63142f6ba0d8e7a8ca53d6a880ed1c00b58ede981ac29ae6f7f0384b8cf27151dcfae399268bf214d5b9", 0xa4}, {&(0x7f0000000640)="53d5436bee70a626325e4270b787dd3d827d6e7ab5e9d8acaa7c89580bacfe36d93708e539af47d2501d926b8051ca", 0x2f}], 0x8, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x75e}}, @ip_ttl={{0x14}}, @ip_retopts={{0x18, 0x0, 0x7, {[@end, @ra={0x94, 0x4, 0x1}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xdf}}, @ip_tos_u8={{0x11}}], 0x78}}, {{&(0x7f0000000d00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000d40)="7e46ff6278acde25e5b4003f6b3973e3d18ae23a018e587d1962f8458a1f5ea757d60a80cf77365d9637e5b9b64b5fe174d79a240a306b0eac016553856a9e282e8aeac737809bf556f5d683a96c953b4fb31662a3479525960938edb596a7", 0x5f}, {&(0x7f0000000dc0)="4ea02aad961c8cc6a544c32c9c0ebb381608f2d7d06169c9bdd2998ad7bc183bdc4d5445a8de25efd1628b872577a57cb01a40", 0x33}, {&(0x7f0000000e00)="56f2dcf30b9fe2346ef90bc8536a556383f8e52c3f3709917fddfe84edfd936a2123dc8f65687046614adf7fe501dc9335e57f60d45a087b79dc0578b85f6c07aad386b157338afbb6a31abe5823a270b4bdfafdbbea2ab330a6ca5b38c9a4e752367c389f2edcaaa34a9d498b23106b42adb2997926db1f34ab46b4f30d9674bfdcfd78", 0x84}], 0x3, &(0x7f0000000f00)=[@ip_retopts={{0x30, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xd4, [@multicast1, @empty, @empty]}, @timestamp={0x44, 0x10, 0x9d, 0x0, 0xc, [0x2, 0x2, 0x80000000]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010100, @multicast1}}}], 0x50}}], 0x2, 0x40080) 4m11.823125687s ago: executing program 0 (id=81): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000005540)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xa839, @empty, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000001c0)="53263e17d735862ea057e3b58921e55e43be7042335f827ef18f3195d8a638ef965b01a4fe63e663040ce52c35e5df713abe3a827cc7820369c820555d466ce162985fb88dd980f42a8da9f99c2e041df6f1fe253b67c729ba459b80c1d809f2fb98c8ca5a69a2e09f89712d46c06335432ecc143859c97b8df8821f4f35427dc694aa9cbdce5cac2712580645439fb7d4746d8e963a2df94eac7e91328b57dca0dd68b8d840a46b76abeb165cc4d5fbbc522310629060a5f192f5404b7fba29ca484426ddfca9651f97f7a5328fbd3eeb", 0xd1}, {&(0x7f00000002c0)="7b1832232d84084453af5e5b054622e6646471ad775d6e44e5ff6133604fbda3d14c066e1e9788c2945581d9fdf5a9a8e1b03a9c5baf06feb1280d0ace7b9265430c665b799c7f283f62bf985b5dfa09193e32fb12677678798b654a45fe6e35fdcbb4cec86c7bde44a23deb93528199d9", 0x71}], 0x2, &(0x7f0000000380)=[@tclass={{0x14, 0x29, 0x43, 0xe}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @hopopts={{0x140, 0x29, 0x36, {0x32, 0x24, '\x00', [@generic={0x6, 0xed, "574873c52ea77be92bd1d0bfcd08fd6260ddd65360b0c8ec5a0d05714abeac512863d3cd14249952ff01d978d5272a092cd12f23bf5590db179ada6c25f00f72df50dabaf65550bbed772d5f33ec9301a4ea1d3f9ea216a269cf78079a3c1feb72083ddd209c0acb6ea94f4299ee831a7d57ad23671efabc2d06b81c2fa562969b384a6c8bda76eb59301c41b54467a910b863ba7d9677c59bab58c9eea8ebd73c88e7584ca27e0e8d30dbadc713d07503ff6692fae031ccc95d51c0707d0f6da22fb2ca6110774ec9df72ba75c546c00c65e25bbc1bf152773bcf16a2a81819b1f1bea34bf542d8632d912607"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x80, [0xc9, 0x9]}}]}}}, @dstopts={{0x70, 0x29, 0x37, {0x2c, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0xc9, [0x4, 0x40, 0x10]}}, @enc_lim={0x4, 0x1, 0xf7}, @jumbo={0xc2, 0x4, 0x15402d02}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ra={0x5, 0x2, 0x1d8c}, @generic={0xe2, 0x6, "58ad948cebbe"}, @enc_lim={0x4, 0x1, 0x4}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x31b}}, @hoplimit={{0x14, 0x29, 0x34, 0xf3}}, @hopopts={{0x128, 0x29, 0x36, {0x0, 0x22, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x10, 0xc5, [0x5]}}, @ra={0x5, 0x2, 0x401}, @hao={0xc9, 0x10, @private2}, @jumbo={0xc2, 0x4, 0xfffffff2}, @generic={0x0, 0xa0, "bcde1e47e4ee8f957f921d8ed0157b0c68a670ca540833795f975c3b314903f8d5bc823dc412698ccb9af78213000567e3adec8bd3da3089b6bcac3c9853215adcf8882a335f84906d1bfe8139ab6f84348949c9daf25687ad25f88fde53f461d234042af58b7fd1388c5e3231d075d6fe80ade0a6c077b0469c53dfd26aae6606213f94fe4628f277910269ab5a980939560ce0e5495f9ac6bd0d6e1d3f4e90"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x10, 0x0, [0x3, 0xffffffffffffff1d, 0x2, 0x0, 0x5]}}, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0x350}}, {{&(0x7f0000000700)={0xa, 0x4e23, 0x7, @local, 0x1}, 0x1c, &(0x7f0000002a40)=[{&(0x7f0000000740)="6c4904632ef3d6a5302a181cb361f23cf4298bd2be657aeeafaf5e44147d241c210a2b47ea80f9140bf02529d935da355ea4db8a6791781afb76a44a27d17a6be3147f85b40cfc53140d6dac15628ffd0baa538b43d7d25a4c8db8f7fff23090996ba486f6e3a8fee9f50e31876c0e13c3f2a876eacd5735661e843aa30a7ae0d919ecb5817034ac5a269c33b0b441ab24ee439ff2331ab1960b167dd1931838c4fe022405800c19c936161d80a34e98447a5f08192d9644178abb045d17d00338792849f418aca8f1d50b90ed79742a68aa9777d0429a3efb", 0xd9}, {&(0x7f0000000840)="8b2af00f14d7a2d11a68a2d023bce13c1de50d23c50e4047d6d7c5675bc12f3be7d4d095187a2bd5e77895f562fd2fdba9068863149354d5f15f469a187a81ec20cc31176e66a1f2ac455af77b6b237c9a364d86051a12503b2ce3d50c7b1eebd4d445c2d478ecd9", 0x68}, {&(0x7f00000008c0)="c7f4ab0c7b", 0x5}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="3403ed663a6ee41af3a52413fdce33ab588e01ab0f0f3114b7e69edff6e9b07e48d76f72b1bd28472c9c03e37aa5b243f341e7", 0x33}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="f9991dcb95a89bf0943f120724f1366dacb453f644bdaf6891ecbfe0e4da02e144889295bcacb4413f02cfde8e592955b9d5d44e939993c6a54ab50fa3e73c0d0aaac172416cad6b82010abe788bc2c5c2e71959388604c1b74d4f26f79f55fb65a1c189fa87d766176e58d39ee8f8e5d556b14de42cc71e", 0x78}], 0x7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003240)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x30}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0) 4m11.30468706s ago: executing program 0 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe45e8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x20fe, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 4m11.255583889s ago: executing program 32 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe45e8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x20fe, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 3m18.451860497s ago: executing program 5 (id=602): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x5b, 0x100) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0xa000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) 3m16.965920525s ago: executing program 5 (id=607): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000bc0)={[{@nodelalloc}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000005}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7e}}, {@nodelalloc}, {@nolazytime}, {@resgid}, {@noload}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}], [{@flag='lazytime'}]}, 0xfd, 0x573, &(0x7f0000000640)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getxattr(0x0, &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0) openat$smackfs_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) (async, rerun: 32) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) (rerun: 32) 3m16.792300968s ago: executing program 5 (id=610): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x4100, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x1a}}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 3m16.556127425s ago: executing program 5 (id=616): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f00000003c0)=0x7, 0x4) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)="d3f04bb4604aed32226e529c8812223fc4797c733f8176720c3ad91b943b1ad6f8027b3cc582e5502433b313659a57fa991300b16a4529482443b67e8a41483837b5f9f422cb9d69b64f69b4bb9d3fdc2907e8201322498ed0448ce67f43a68a92938a420012241f6712e9dc52e38a6aed925779287435d8441c3f33760552e488dc42bcadd66a5e1643c45095a0aaae13af", 0x4880}], 0x1}, 0x7101}], 0x1, 0x4001c00) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000340)={[{@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@quota}, {}]}, 0x1, 0x789, &(0x7f0000000dc0)="$eJzs3M9rVOcaAOD3HDPGaO6dXLiLeze2oKAgThKz0VXTTelGEIRubUgmIeQkI5mJJKlg7K5QsGbTdlPafZfdFsT+Ad0VoYXuC6W16aLtZspMJlHjzDjqxFPj88DJ+b7z633fbyZfzkDOBPDKer3xI4kYjohLEVFsbU8j4nCzdSRiY/u4rfvXpxtLEvX65V+SxmmxVS/uXitprY9F85T4X0TcLUScef/xuNW19YWpLCsvt/qjtcWro9W19bPzi1Nz5bny0vjEhbHzExPnxyb6VuvJdy4M3f72rc3N776q3To+cDaJyWbd0aqtb4Eesj0mhZjcs31pP4LlKOnhmIEXkAcAAN017vMPte7NClGMQ93u0tzAAQAAwEupPljv1Z89HwkAAAD8wySRdwYAAADA/tr5P4CdZ3v36znYTn5+MyJG2sUfaD5DHHEkChFxdCt55PGDZPs0eC4bNyPizmSb918vTzR3N/agOdSfK9Jvdxrzz2S7+SfdnX+izfwzsPPdCc+p8/z3IP6hDvPfpR5jfP3Z/wsd49+srn5wvF38ZDd+0iH+uz3Gv7X54e1O++pfRJxq+/cneSRWl++HGJ2dz9r9au2me/ev0/c61x9x9LH4SdKMmnSv/2qP9b+39dvCRpf4p090f/234w8+cl7jPfFRK480Im631o3+5p4YJxa//+bxyMnGTvyZDuPf/vV/e7f+z3us/8cvB1d7PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa0ogYjiQt7bbTtFSKOBYR/42jaVap1s7MVlaWZhr7IkaikM7OZ+WxiChu95NGf7zZftA/t6c/ERH/+WFoO+h8Vi5NV7KZvIsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg17GIGI4kLUVEGhG/F9O0VMo7KwAAAKDvRvJOAAAAANh3Pv8DAADAwfesn/+TPucBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHGiXLl5sLPWt+9enG/2Za2srC5VrZ2fK1YXS4sp0abqyfHUwKpW5rFyariw+6XppRIxfiJXV0Vq5Whutrq1fWaysLNWuzC9OzZWvlAsvpCoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACe1nBzSdJSRKTNdpqWShH/ioiRKCSz81l5LCL+HRH3ioXBRn8876QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADou+ra+sJUlpWXX+5G/WCV03Mjkog809hojXv7Yz5t7e12nWQjIvfBTFuJPs91Og1C+8aNJwxL3o3XcpiLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIX3VtfWEqy8rL1bwzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIF/pT0lENJZTxZPDe/ceTv4oNtcx1NpSqy2PN7b/2toeUfvk8serU7Xa8rmHTrzxovIHAACAV8IbT3Pwzuf05np8/5ICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOnura+sJUlpWX97ERN/OuEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBZ/BwAA//8tjbN7") r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r3 = syz_clone(0x200, &(0x7f0000000140)="8aa4b9d12d63cf152f455ebec5a5ebaf70d27bead33ea5cd65aa405f17081737a0fb63aa10eddbdc80302e0af0d82e183d7843cb031a2f98cd10eca5d45a0f91eea26fb8593597797216e2373a8a264fdb72ba2f075ec3d9aac950cf4090f66231581f75e4c19defa8ae6daf9eea4f18ad2d485451e27957887c225b50e726b32784d81ee68c597370068dec69d9e216529375726b5349aa140d5df745bc418da9c661a476d1c548d44e3290cb40f43f03f2742826f188c6f21836d537", 0xbd, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="ccba827d759d4bfc21285b2f262649024adcf168b296599e6b886b1109404167e05bccee88317ef450d8d6b903636bf49dd7b5e82541747856b1ec550d0d727f3cfce7982f2d21127e5b") write$cgroup_pid(r2, &(0x7f0000000300)=r3, 0x12) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd8580, 0xc5) finit_module(r4, 0x0, 0x1) 3m16.142058235s ago: executing program 5 (id=618): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @local, 0x6}], 0x18) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) setuid(0xee01) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) 3m15.612114407s ago: executing program 5 (id=629): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x40000}, 0x20) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="14678e7cfe43f1c263530400a45c3d5f640deb75013b32e70e9f2c826597b80720d420312839de825c89e02798b66e5d0dcbafbe7f8fda6786211ff24dce1793ac714f84e6db0b6fc3654bf67ac230209fdcac1d17acd91f7def2e0c8f261bc3741500b7e2affa5068", 0x69}, {&(0x7f0000002780)="21acaf08334a264ef994c92e7de9", 0xe}], 0x2}, 0x200440c4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c460104028d040000000000000003000600080000001b00001038000000a20000000804000004002000040007000700000006000000f02a000027060000040000002403f400020000001f0000000700000008000000f7ffffff01000000050000006ecfffff0700000007000000100000000000000003"], 0xb8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0400fd000000a1d6bce4000000", @ANYRES32], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r3}, 0x38) r4 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0xa04011, &(0x7f0000000040), 0xe8, 0xba8, &(0x7f00000017c0)="$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") r5 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00001cb000/0x3000)=nil, &(0x7f0000854000/0x4000)=nil, &(0x7f000056e000/0x4000)=nil, &(0x7f0000a06000/0x2000)=nil, &(0x7f0000871000/0x3000)=nil, &(0x7f0000170000/0x4000)=nil, &(0x7f00006af000/0x3000)=nil, &(0x7f0000291000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000085e000/0x2000)=nil, &(0x7f0000114000/0x1000)=nil, 0x0}, 0x68) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000140)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r7, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000000)={0x3, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setreuid(0x0, 0xee01) 3m15.589467814s ago: executing program 33 (id=629): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x40000}, 0x20) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="14678e7cfe43f1c263530400a45c3d5f640deb75013b32e70e9f2c826597b80720d420312839de825c89e02798b66e5d0dcbafbe7f8fda6786211ff24dce1793ac714f84e6db0b6fc3654bf67ac230209fdcac1d17acd91f7def2e0c8f261bc3741500b7e2affa5068", 0x69}, {&(0x7f0000002780)="21acaf08334a264ef994c92e7de9", 0xe}], 0x2}, 0x200440c4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c460104028d040000000000000003000600080000001b00001038000000a20000000804000004002000040007000700000006000000f02a000027060000040000002403f400020000001f0000000700000008000000f7ffffff01000000050000006ecfffff0700000007000000100000000000000003"], 0xb8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0400fd000000a1d6bce4000000", @ANYRES32], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r3}, 0x38) r4 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0xa04011, &(0x7f0000000040), 0xe8, 0xba8, &(0x7f00000017c0)="$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") r5 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00001cb000/0x3000)=nil, &(0x7f0000854000/0x4000)=nil, &(0x7f000056e000/0x4000)=nil, &(0x7f0000a06000/0x2000)=nil, &(0x7f0000871000/0x3000)=nil, &(0x7f0000170000/0x4000)=nil, &(0x7f00006af000/0x3000)=nil, &(0x7f0000291000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000085e000/0x2000)=nil, &(0x7f0000114000/0x1000)=nil, 0x0}, 0x68) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000140)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r7, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000000)={0x3, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setreuid(0x0, 0xee01) 2m49.855701129s ago: executing program 1 (id=771): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newchain={0x14a0, 0x64, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xa, 0x1}, {0xffec, 0x5}, {0x5, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xc5, 0x6}}, @filter_kind_options=@f_flow={{0x9}, {0x1458, 0x2, [@TCA_FLOW_EMATCHES={0x1414, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_META={0x60, 0x1, 0x0, 0x0, {{0xf, 0x4, 0xb1de}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x8}, {0xe780, 0xee, 0x2}}}, @TCA_EM_META_RVALUE={0x23, 0x3, [@TCF_META_TYPE_VAR="ab", @TCF_META_TYPE_VAR="385d6b51b2ca", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="830c814f"]}, @TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="b55a1e", @TCF_META_TYPE_VAR="0d9952"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x44, 0x3, 0x0, 0x0, {{0xda}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfc}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x525, 0x7, 0x400}, {{0x3, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x9}, {0x401, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x101, 0x2, 0xb602}, {0x31, 0x3, 0x1, "f6fa3f"}}}, @TCF_EM_META={0x64, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x3}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="de"]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="1eb5b04d6f92"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="cceb14fd74f1fd7991", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="a6", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x3, 0x2, 0x1}, {0x4, 0x4, 0x0, "4ebd9506"}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xfc00, 0x2, 0x7}, {0xd, 0x2, 0x2, "96c5"}}}]}, @TCA_EMATCH_TREE_LIST={0x108, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x9c, 0x3, 0x0, 0x0, {{0x4, 0x0, 0x8}, "17c91fdb2eab828c7a2ad684fbdb409d4366be17952996224e76d41d3101babd13c48f3743b8df58be44bd590c9fb5410c6be1c0c0f3f5ea7d7115f559223258989bac7c8cf6929f80b7943bd0fcf1b3dbaac2ea8490d34fff628340711c4c9c137e67843ad31d85e827d4205d4fdfdf663e2e8309c4e3849151d7f272d3f388689718e68b64159f9048d66236"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7ff, 0x7, 0x1000}, {{0x3, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x9}, {{0x4, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x8001}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0xdc32}, {0x20000000, 0x1, 0x7fff, 0x4, 0x1, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc5, 0x7, 0xc196}, {{0x0, 0x0, 0x0, 0x1}, {0x4, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}, @TCA_EMATCH_TREE_LIST={0x1180, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x7c, 0x0, 0x6}, "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"}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xa511, 0x2, 0x8}, {0x8, 0x4, 0x0, "78d80742"}}}, @TCF_EM_META={0x88, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x97b2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1}, {0xedf8, 0x48, 0x1}}}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="b5afea"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe3, 0x5b, 0x2}, {0x7, 0x7c, 0x1}}}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_VAR='\f(yqe&(']}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xf9, 0x2}, {0x9, 0x5, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x3, 0x2}, {0x0, 0x13, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x6}, {0x2, 0x1e, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x17, 0x5, 0x2}, {0xd, 0x1, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x3}, {0x3, 0x1, 0x1}}}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="6f28c600ea55"]}]}}, @TCF_EM_CONTAINER={0xd4, 0x2, 0x0, 0x0, {{0x7, 0x0, 0xc}, "f56c5a36de385e0cba592822751ba5fc85adcc8dad2106642c12d6e313f51c6e907e79484485c54529c9453ce5c4468c67daf613b6e340f2380725a988812c06655f2a207e27340ec5df09c04cea5c09ee261b15e66047fb4b609b31e320b994b45be91c82e45108a5a5f8fbad6fb82a47863f928f8359ecdc7383166d068043f56001a8c35eda7832dc9de8ec51d97fde26c34df7d0cd7525647f3f34917879c7feb8e2692be9e554dabc69e66b9ce6ce6a74e69c2d4cc959b48a0f6271f2115f7db293a56c"}}]}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8000}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff2, 0xa}}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x3}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x3}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffa}, @TCA_FLOW_KEYS={0x8, 0x1, 0x10318}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0xc}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}]}, 0x14a0}}, 0x4c850) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_INDEV={0x14, 0x2, 'macvtap0\x00'}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x40, 0x40, 0xff, 0x81, {{0x1a, 0x4, 0x0, 0xe, 0x68, 0x68, 0x0, 0xe, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp_prespec={0x44, 0x1c, 0xf, 0x3, 0xb, [{@loopback, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast1, 0x100}]}, @rr={0x7, 0x23, 0x2c, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @empty, @rand_addr=0x64010100, @local, @multicast2, @multicast1]}, @lsrr={0x83, 0x13, 0x6b, [@dev={0xac, 0x14, 0x14, 0x43}, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x17}]}]}}}}}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r9, 0x25, 0x0, @void}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000a00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004094) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x94, r13, 0x800, 0x0, 0x3, {{}, {@val={0x8, 0x3, r14}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x55, 0xf, [@prep={0x83, 0x1f, {{}, 0x5, 0xff, @broadcast, 0x9, @void, 0x4, 0x3, @device_b, 0x2}}, @dsss={0x3, 0x1, 0xb1}, @preq={0x82, 0x2b, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0xff, @broadcast, 0x0, @value=@device_b, 0x5, 0x5, 0x1, [{{0x1, 0x0, 0x1}, @device_a, 0x2}]}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}}, 0x0) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r15, 0x7, 0x3, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000240)="cd85312eff5529afc7c04e01b53c186d34ffae5bd6db55e53cfe0d34271cd1f9ef9239f8538a59fde3b562de2c8eba516865bb973b009c66f5d2ce7668143cee886362c165464ede9f5973cc0e105ee57514f7fd59ae134ebe3469625d", 0x5d}, {&(0x7f0000000140)="9f33902a434b5fc0ee788f83efc16fd002047d6136372e7c391a13ef1848d7aedd0cfaed4e1eedbab0c06cbb97a404fb3c81cda65494e33fa9098cc96a44dedac71c7a552fad904bb444efaea85788271760", 0x52}, {&(0x7f0000000000)="a7", 0x1}, {&(0x7f00000001c0)="62d8276e4f4409108826a1b3313c9b9c71b14a30b2fda590cff794a3f432afa6ca60c77968adf20b80dda46bbecedbed6c5bba8b8d8df673d01e1c866be4009ebefbda8a8c22", 0x46}], 0x4, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b, 0x3}) 2m49.818053425s ago: executing program 4 (id=773): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") 2m49.734735298s ago: executing program 1 (id=776): r0 = socket$packet(0x11, 0x3, 0x300) signalfd4(r0, &(0x7f0000000480)={[0x2]}, 0x8, 0x80000) futex(&(0x7f0000000000)=0x1, 0x9, 0x2, 0x0, 0x0, 0x1) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000fee000), 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x0) sendmsg$tipc(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r5 = dup3(r2, r3, 0x0) write$uinput_user_dev(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) 2m49.680153466s ago: executing program 4 (id=777): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = dup(0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) r7 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x1, &(0x7f0000000440)={{}, {0x0, 0x989680}}, 0x0) read(r8, &(0x7f0000000240)=""/123, 0x7b) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m49.631520614s ago: executing program 1 (id=780): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x11, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x8010, r2, 0x91890000) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="00860095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r10}]}, 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e40)=@newlink={0x20, 0x10, 0x437, 0x2, 0x0, {0x0, 0x0, 0x0, r10, 0x192}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r12, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001143f11002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d60be312a894a0ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9c653530627fd6245fa47050af6"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) 2m48.538466755s ago: executing program 4 (id=785): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0401013730102d51b40000000000140203006970365f767469300000"], 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x105, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0x9361, 0x0) ptrace$setregset(0x4205, 0x0, 0x402, &(0x7f0000000000)={0x0}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file1\x00'}) recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001c00)=""/4106, 0x100a}, {&(0x7f0000000d00)=""/76, 0x4c}, {0x0}, {0x0}, {&(0x7f0000000c00)=""/98, 0x62}, {&(0x7f00000000c0)=""/251, 0xfb}, {&(0x7f0000000d80)=""/41, 0x29}, {&(0x7f00000002c0)=""/81, 0x58}, {0x0}], 0x9}, 0x9}], 0x46, 0x10100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) 2m48.451932567s ago: executing program 1 (id=786): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2be, &(0x7f0000000c80)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0xd0, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffffff, 0xff000000, 0x0, 0xff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'bridge0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x62, 0x6, 0x7, 0x3}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@empty, @loopback, [0xffffff00, 0x0, 0xffffff00, 0x101ffff00], [0xff000000, 0xff, 0xff000000, 0xff], 'netpci0\x00', 'tunl0\x00', {}, {}, 0x8, 0x48, 0x2, 0x3}, 0x0, 0x180, 0x1b8, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x0, 0x0, [0x1, 0x8001, 0xffdf, 0x8, 0x2, 0x0, 0x8, 0x800, 0x800, 0x4, 0x8000, 0x7, 0xffff, 0x5, 0xd, 0x2e0], 0x8}}, @common=@srh1={{0x90}, {0x1d, 0x1, 0x4, 0xd6, 0xb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @dev={0xfe, 0x80, '\x00', 0xc}, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xff, 0xffffff00, 0xffffff00], [0x0, 0xff000000, 0xffffffff], 0x2804, 0x801}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x4}, {0xffffffffffffffff, 0x4, 0x1}, {0x3, 0x0, 0x1}, 0x3, 0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [0xff, 0xff, 0x0, 0xff], [0xffffff00, 0xff000000, 0x0, 0xff000000], 'ip_vti0\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x5, 0x2, 0x48}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x1, 0x2}, {0x4, 0x2, 0x4}, {0x3, 0x6, 0x1}, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3e8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001000010025bd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="102a0500000000000012800b00010062726964676500000400028000803fb3bb42f1d960a42cb8387666489bf2f96c0dcf37ccff8b247f033dd2e2d9a31802c0ac91fd8d221e41dfd3e86dffe389994fd500b27e939d0f5e9bb7df05e69fd5363dff457e2d7d59d5cc0363642cc33af353c054ac7d7271b384754099cdd477d432743d78c3171743320fff0d67ebbc"], 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000540)={@desc={0x1, 0x0, @desc3}}) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 2m47.31283568s ago: executing program 1 (id=793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000980)={{{@in=@loopback, @in=@multicast2, 0x4e23, 0x20, 0x20, 0x3, 0xa, 0x80}, {0x80000001, 0x10, 0x80ff, 0x6811221d, 0x8, 0x8000000000000003, 0x200000200000003, 0xd}, {0x200007, 0x40, 0x6, 0x7}, 0x401, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0xfffffffd, 0x6c}, 0x2, @in6=@mcast2, 0x3502, 0x1, 0x0, 0x3, 0x800006, 0x3}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) socket(0x2, 0x3, 0xef) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300"/44], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x10000000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, @empty, @empty, 0x0, 0x4d0285fd79223c74, 0x1000}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m47.311853197s ago: executing program 4 (id=794): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000040", @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000005) syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0xe, 0x4, 0x4, 0x8}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000380)={[{@minixdf}, {@noblock_validity}, {@data_writeback}, {@user_xattr}, {@norecovery, 0x0}, {@noquota}, {@grpid}, {@i_version}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@journal_checksum}, {@usrjquota}, {@data_journal}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@barrier}, {@noinit_itable}, {@discard}, {@resgid}], [{@fsname={'fsname', 0x3d, '\\$'}}, {@subj_user={'subj_user', 0x3d, 'journal_dev'}}], 0x2c}, 0x2, 0x512, &(0x7f0000000ac0)="$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") socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000040", @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000005) (async) syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000100)='./file0\x00') (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f0000000280)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0xe, 0x4, 0x4, 0x8}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) (async) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000380)={[{@minixdf}, {@noblock_validity}, {@data_writeback}, {@user_xattr}, {@norecovery, 0x0}, {@noquota}, {@grpid}, {@i_version}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@journal_checksum}, {@usrjquota}, {@data_journal}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@barrier}, {@noinit_itable}, {@discard}, {@resgid}], [{@fsname={'fsname', 0x3d, '\\$'}}, {@subj_user={'subj_user', 0x3d, 'journal_dev'}}], 0x2c}, 0x2, 0x512, &(0x7f0000000ac0)="$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") (async) 2m47.180438998s ago: executing program 4 (id=797): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2be, &(0x7f0000000c80)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0xd0, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffffff, 0xff000000, 0x0, 0xff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'bridge0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x62, 0x6, 0x7, 0x3}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@empty, @loopback, [0xffffff00, 0x0, 0xffffff00, 0x101ffff00], [0xff000000, 0xff, 0xff000000, 0xff], 'netpci0\x00', 'tunl0\x00', {}, {}, 0x8, 0x48, 0x2, 0x3}, 0x0, 0x180, 0x1b8, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x0, 0x0, [0x1, 0x8001, 0xffdf, 0x8, 0x2, 0x0, 0x8, 0x800, 0x800, 0x4, 0x8000, 0x7, 0xffff, 0x5, 0xd, 0x2e0], 0x8}}, @common=@srh1={{0x90}, {0x1d, 0x1, 0x4, 0xd6, 0xb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @dev={0xfe, 0x80, '\x00', 0xc}, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xff, 0xffffff00, 0xffffff00], [0x0, 0xff000000, 0xffffffff], 0x2804, 0x801}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x4}, {0xffffffffffffffff, 0x4, 0x1}, {0x3, 0x0, 0x1}, 0x3, 0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [0xff, 0xff, 0x0, 0xff], [0xffffff00, 0xff000000, 0x0, 0xff000000], 'ip_vti0\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x5, 0x2, 0x48}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x1, 0x2}, {0x4, 0x2, 0x4}, {0x3, 0x6, 0x1}, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3e8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001000010025bd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="102a0500000000000012800b00010062726964676500000400028000803fb3bb42f1d960a42cb8387666489bf2f96c0dcf37ccff8b247f033dd2e2d9a31802c0ac91fd8d221e41dfd3e86dffe389994fd500b27e939d0f5e9bb7df05e69fd5363dff457e2d7d59d5cc0363642cc33af353c054ac7d7271b384754099cdd477d432743d78c3171743320fff0d67ebbc"], 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 2m45.553776621s ago: executing program 1 (id=804): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = dup(0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) r7 = syz_open_dev$ndb(&(0x7f0000001c80), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) setsockopt$packet_int(r5, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x1, &(0x7f0000000440)={{}, {0x0, 0x989680}}, 0x0) read(r8, &(0x7f0000000240)=""/123, 0x7b) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m45.553361442s ago: executing program 4 (id=805): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0401013730102d51b40000000000140203006970365f767469300000"], 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x105, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0x9361, 0x0) ptrace$setregset(0x4205, 0x0, 0x402, &(0x7f0000000000)={0x0}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file1\x00'}) recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001c00)=""/4106, 0x100a}, {&(0x7f0000000d00)=""/76, 0x4c}, {0x0}, {0x0}, {&(0x7f0000000c00)=""/98, 0x62}, {&(0x7f00000000c0)=""/251, 0xfb}, {&(0x7f0000000d80)=""/41, 0x29}, {&(0x7f00000002c0)=""/81, 0x58}, {0x0}], 0x9}, 0x9}], 0x46, 0x10100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) 2m45.04228695s ago: executing program 34 (id=805): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0401013730102d51b40000000000140203006970365f767469300000"], 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x105, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0x9361, 0x0) ptrace$setregset(0x4205, 0x0, 0x402, &(0x7f0000000000)={0x0}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file1\x00'}) recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001c00)=""/4106, 0x100a}, {&(0x7f0000000d00)=""/76, 0x4c}, {0x0}, {0x0}, {&(0x7f0000000c00)=""/98, 0x62}, {&(0x7f00000000c0)=""/251, 0xfb}, {&(0x7f0000000d80)=""/41, 0x29}, {&(0x7f00000002c0)=""/81, 0x58}, {0x0}], 0x9}, 0x9}], 0x46, 0x10100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) 2m30.327622458s ago: executing program 35 (id=804): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = dup(0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) r7 = syz_open_dev$ndb(&(0x7f0000001c80), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) setsockopt$packet_int(r5, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x1, &(0x7f0000000440)={{}, {0x0, 0x989680}}, 0x0) read(r8, &(0x7f0000000240)=""/123, 0x7b) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m48.293774556s ago: executing program 6 (id=1105): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(0x0, 0x0, &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x6000000, 0x60, &(0x7f0000007c40)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44) 1m48.161015863s ago: executing program 6 (id=1107): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.time\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04ff01"], 0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}, 0x4e}]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1m47.002823421s ago: executing program 6 (id=1111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000500)=ANY=[], 0x32600) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0xff, @mcast2, 0x9}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x0) 1m43.639548162s ago: executing program 6 (id=1117): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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") quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000680)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x80071c, &(0x7f0000000000), 0xfb, 0x4ae, &(0x7f0000000540)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c2a) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x108688d, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 1m42.676183383s ago: executing program 6 (id=1125): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r0, &(0x7f0000005540)=[{{0x0, 0x6000, 0x0}}, {{&(0x7f0000000700)={0xa, 0x4e23, 0x7, @local, 0x1}, 0x1c, 0x0}}], 0x2, 0x0) 1m41.520010407s ago: executing program 6 (id=1131): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c757466383d302c757466383d312c756e695f786c6174653d302c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c6e66733d6e6f7374616c655f726f2c756e695f786c6174653d312c73686f72746e616d653d77696e39352c646973636172642c004338cb8631b26441e86414f461975e105d02960776fcb7ddfd80b96c1b2ffd13d5cc37784797dbc9e26b7c39310b49940995ce6e6ce1c218890b59506de99e2dd234abcde0be50d3de656741fee78f74e94ee73bd6d7162f0d2a8275e0a6125615ce223c21fe303d561d81b2681dce1c0b7061c5a347b2040e7b6c9210507527467dad005f3e38c47d4daa9d76c69f51ffeb2f81123fe54df14c6c02413e51ba63c35f11"], 0x0, 0x2be, &(0x7f0000000c80)="$eJzs3T1vI0UYAOB3Hcc2UNgFFUJiJSioTpdraRxQTjpwBXIBFHDiEgnFFlIiReJDOKloaSj5BUhIdLT8ABr+ARItEh0pIi3a9a6/4pgY4oSP52nyZmbemXc2E0cpPH7/+eHhkzQOzj77OVqtJGrd6MZ5Ep2oReU05nS/DADg3+w8y+K3bGydvCQiWpsrCwDYoLX//n+38ZIAgA176+133tjt9fbeTNNWPBx+cdLP/7PPv477dw/iwxjEftyPdlxEZBPj+GGWZaN6muvES8PRST/PHL73Yzn/7q8RRf5OtKNTNM3nP+rt7aRjM/mjvI6ny/W7ef6DaMezS9Z/1Nt7sCQ/+o14+cWZ+u9FO376ID6KQTwpipjmf76Tpq9lX/3+6bt5eXl+MjrpN4txU9nWLf9oAAAAAAAAAAAAAAAAAAAAAAD4D7tX3p3TjOL+nrypvH9n6yL/ZjvSSmf+fp5xflJNtHA/0CiLr6v7de6naZqVA6f59XiuHvW72TUAAAAAAAAAAAAAAAAAAAD8sxx//Mnh48Fg/6gIXs/KYNKyXlDdBlC9rf+vztOdtNSPXojVg5vTtWpluGLm2KrGJBEry8g38feexrWDp66q+Ztv152w9edjtqdrRad8GDe8r+p0HT5Olj/DZlQtreqQfD87phHXXKtxVVe21vFrLO1qr733xjNFMFrsytqTkxnJqsJe+WU8sGwpf6FOJ2MaxVNdmr5dBjPpC2djrfN8+bUiSW72tQcAAAAAAAAAAAAAAAAAAJg3fdPvks6zlam1rLmxsgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgVk0//38S1C+1LAajMnnc8sOrKwY34uj4jrcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8AfAQAA//9KVFrm") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0xd0, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffffff, 0xff000000, 0x0, 0xff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'bridge0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x62, 0x6, 0x7, 0x3}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@empty, @loopback, [0xffffff00, 0x0, 0xffffff00, 0x101ffff00], [0xff000000, 0xff, 0xff000000, 0xff], 'netpci0\x00', 'tunl0\x00', {}, {}, 0x8, 0x48, 0x2, 0x3}, 0x0, 0x180, 0x1b8, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x0, 0x0, [0x1, 0x8001, 0xffdf, 0x8, 0x2, 0x0, 0x8, 0x800, 0x800, 0x4, 0x8000, 0x7, 0xffff, 0x5, 0xd, 0x2e0], 0x8}}, @common=@srh1={{0x90}, {0x1d, 0x1, 0x4, 0xd6, 0xb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @dev={0xfe, 0x80, '\x00', 0xc}, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xff, 0xffffff00, 0xffffff00], [0x0, 0xff000000, 0xffffffff], 0x2804, 0x801}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x4}, {0xffffffffffffffff, 0x4, 0x1}, {0x3, 0x0, 0x1}, 0x3, 0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [0xff, 0xff, 0x0, 0xff], [0xffffff00, 0xff000000, 0x0, 0xff000000], 'ip_vti0\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x5, 0x2, 0x48}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x1, 0x2}, {0x4, 0x2, 0x4}, {0x3, 0x6, 0x1}, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3e8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001000010025bd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="102a0500000000000012800b00010062726964676500000400028000803fb3bb42f1d960a42cb8387666489bf2f96c0dcf37ccff8b247f033dd2e2d9a31802c0ac91fd8d221e41dfd3e86dffe389994fd500b27e939d0f5e9bb7df05e69fd5363dff457e2d7d59d5cc0363642cc33af353c054ac7d7271b384754099cdd477d432743d78c3171743320fff0d67ebbc"], 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000540)={@desc={0x1, 0x0, @desc3}}) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m41.076653855s ago: executing program 36 (id=1131): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c757466383d302c757466383d312c756e695f786c6174653d302c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c6e66733d6e6f7374616c655f726f2c756e695f786c6174653d312c73686f72746e616d653d77696e39352c646973636172642c004338cb8631b26441e86414f461975e105d02960776fcb7ddfd80b96c1b2ffd13d5cc37784797dbc9e26b7c39310b49940995ce6e6ce1c218890b59506de99e2dd234abcde0be50d3de656741fee78f74e94ee73bd6d7162f0d2a8275e0a6125615ce223c21fe303d561d81b2681dce1c0b7061c5a347b2040e7b6c9210507527467dad005f3e38c47d4daa9d76c69f51ffeb2f81123fe54df14c6c02413e51ba63c35f11"], 0x0, 0x2be, &(0x7f0000000c80)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0xd0, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffffff, 0xff000000, 0x0, 0xff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'bridge0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x62, 0x6, 0x7, 0x3}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@empty, @loopback, [0xffffff00, 0x0, 0xffffff00, 0x101ffff00], [0xff000000, 0xff, 0xff000000, 0xff], 'netpci0\x00', 'tunl0\x00', {}, {}, 0x8, 0x48, 0x2, 0x3}, 0x0, 0x180, 0x1b8, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x0, 0x0, [0x1, 0x8001, 0xffdf, 0x8, 0x2, 0x0, 0x8, 0x800, 0x800, 0x4, 0x8000, 0x7, 0xffff, 0x5, 0xd, 0x2e0], 0x8}}, @common=@srh1={{0x90}, {0x1d, 0x1, 0x4, 0xd6, 0xb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @dev={0xfe, 0x80, '\x00', 0xc}, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xff, 0xffffff00, 0xffffff00], [0x0, 0xff000000, 0xffffffff], 0x2804, 0x801}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x4}, {0xffffffffffffffff, 0x4, 0x1}, {0x3, 0x0, 0x1}, 0x3, 0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [0xff, 0xff, 0x0, 0xff], [0xffffff00, 0xff000000, 0x0, 0xff000000], 'ip_vti0\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x5, 0x2, 0x48}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x1, 0x2}, {0x4, 0x2, 0x4}, {0x3, 0x6, 0x1}, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3e8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001000010025bd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="102a0500000000000012800b00010062726964676500000400028000803fb3bb42f1d960a42cb8387666489bf2f96c0dcf37ccff8b247f033dd2e2d9a31802c0ac91fd8d221e41dfd3e86dffe389994fd500b27e939d0f5e9bb7df05e69fd5363dff457e2d7d59d5cc0363642cc33af353c054ac7d7271b384754099cdd477d432743d78c3171743320fff0d67ebbc"], 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000540)={@desc={0x1, 0x0, @desc3}}) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 35.714954969s ago: executing program 2 (id=1400): r0 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r5, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) r6 = syz_open_dev$mouse(0x0, 0x7f, 0x101000) ioctl$sock_inet_SIOCSARP(r6, 0x8955, 0x0) userfaultfd(0x801) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 35.599490526s ago: executing program 7 (id=1403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000001e0500000000000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000500)=ANY=[], 0x32600) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0xff, @mcast2, 0x9}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x0) 34.45299379s ago: executing program 2 (id=1405): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ptrace$getregset(0x4205, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x48) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000000)={'veth0_vlan\x00', 0x3ff}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2f3, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x5514, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2a, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x3, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffe0}, {0xa, 0xe}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x8440) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xffff}, {0xfff1, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket(0x10, 0x2, 0x0) 31.321835039s ago: executing program 2 (id=1411): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0xfc) close(r1) ioctl$DVB_DVR_DMX_DQBUF(r1, 0xc0186f40, &(0x7f0000000040)={0xb5, 0x200, 0x3, 0x200, 0x9, 0x3}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0fe6ffff0300008100000000000000000000000054a78cd80ce35e638ee93f09aa929f4a034b29dd310cfc52aa233d200b71ea386b618496bba76c10100a243d953159f361b7603ac879050add6567c4c3227b5bf395c5d8ac666e4ea1ef6f11a6c1140f77f9f71bb0e912d9c43bcbff5f02c931", @ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000faffffffffffffff0000000000000000000021002100000000"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000001eff2b692b00000000370000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000280)={0x1f, @none}, 0x8) listen(r4, 0x0) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0xffff}, {0xfff1}, {0xe, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1006, &(0x7f0000002080)=""/4102}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000080)) 31.318907951s ago: executing program 7 (id=1412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000400000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c0001"], 0x92fc}}, 0x0) 30.447725131s ago: executing program 2 (id=1414): socket$nl_route(0x10, 0x3, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getpriority(0x0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x30, r5, 0x1, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffe}]}]}, 0x30}}, 0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "b9738d1ea121dc96814ff23f18634eca73bdc210a3b32fef559a868a8d10a4735fdd3bcdc735d48c28f3e05340b1fbd9296fa0a69d2fa4fb3483e2e274492b4c89b3eb0d88dedc39e2c7e3ab9c3f01e92d24b1409b2c3cd309cc5e10b2193a1641964aab12f1f48fe7491ede0c6777637bf0afb4cf891993ff562e78f1e29cd70b6cfcb043a92dee889ec291a34b1cb0e5b110e614fba3c88de70bf7a6a7dfe5bb400edf80f5ad5fe2d0fce095a16b1d315f58887b9f3f21436b21b762671254279a40e6b07f71bb6051d83c52e70f1f8810fbd82789588ca403780923d16bd2cbf2e3517f6675b81f814ffa465060cc64aed4620daa7eda"}}}, 0x102) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad03010000000000bf000000000000006916a00000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='ns\x00') getdents64(r6, 0x0, 0x18) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001400e4382580128065f8cab595000000ac96fd8cbe3c775e47f1689731a6ddd7b77325770e9aae598a796cf09123a4c0d4b42ecd8f8e745faeed05734c1204a9fe189f0e33525ac2a2d451eb00fa18f79888a3f0cb0f2e51160bbca4a7c85c96922e3c0868c6aef769d9262abd416f01f5c4d45d108355402ab8643d0d2f7c00abbae38fcbe3200464e5304ca54cd475331b004c696549cc4d8e11", @ANYRES32=r7, @ANYBLOB="14000200ff0200000000000000000000000000010800080001050000"], 0x34}}, 0x0) 30.352008624s ago: executing program 7 (id=1415): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601026017413400000000030000000900020073797a31000000000500010007000000280007800c000180080001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) r5 = socket(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0x8, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff1, 0xc}, {0x5, 0xc}, {0x18, 0x10}}}, 0x24}}, 0x20040000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000008"], 0x50) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x4e26, @remote}, {0x2, 0x4ea3, @empty}, 0x3c7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0xc3a9, 0xa00}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r7], 0x1c}}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0xb) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) 30.258196549s ago: executing program 7 (id=1417): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r4, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4, 0x34}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x4) exit(0x5) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000040)=[0x0, 0xcc6f], 0x2) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}]}, 0x48}}, 0x4000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@uni_xlateno}, {}, {@uni_xlate}, {@fat=@usefree}, {@uni_xlateno}, {@fat=@nfs_nostale_ro}, {@utf8no}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@uni_xlateno}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") r7 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x11082, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff000000000900000085000000360000001801000020646c2500000000003020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000001700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f0000000240)="0100400871a7832e6b7303c3cd59", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x3225808, 0x0) read$FUSE(r7, &(0x7f0000002c00)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r6, 0x5, 0x0, 0x20000, {{}, {@void, @val={0xfffffe8e, 0x99, {0x82, 0x80}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x51cdaa2ad72b0a9}, 0x20000004) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x20, 0x25dfdbff, {0x60, 0x0, 0x0, r11, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_DIRECT_QLEN={0x1, 0x5, 0xfffffffc}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3ff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) 29.100140964s ago: executing program 2 (id=1421): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x800000fffc}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) 29.055153789s ago: executing program 7 (id=1422): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0x7, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7f}}], 0x18}}], 0x1, 0x4001c00) unshare(0x10880) syz_clone(0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0) 25.548227341s ago: executing program 2 (id=1427): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r0, &(0x7f0000004440)=""/4096, 0x1000) 25.390475217s ago: executing program 7 (id=1429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000001e05000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000500)=ANY=[], 0x32600) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0xff, @mcast2, 0x9}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 25.390000901s ago: executing program 37 (id=1429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000001e05000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000500)=ANY=[], 0x32600) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0xff, @mcast2, 0x9}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 5.060045425s ago: executing program 3 (id=1496): r0 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r5, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) r6 = syz_open_dev$mouse(0x0, 0x7f, 0x101000) ioctl$sock_inet_SIOCSARP(r6, 0x8955, 0x0) userfaultfd(0x801) fsmount(r0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 3.99686123s ago: executing program 3 (id=1498): r0 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r5, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) syz_open_dev$mouse(0x0, 0x7f, 0x101000) userfaultfd(0x801) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Ls1cYB+CTwEsoVCIiONhBMLg0KsRBh2SwEtMsRsSKFGfBQQfBwUFSorMf/4DiF4iL2NlRjCAKcZKM4lxQXDKltD6FtnZpiyl9ua4lnHPf59w5/J7A/1o8/NRsNmMhhGbi75/+7jQ/XuyZHJ2aDiEW5kII+a++/LUSizp+u/U8WpeidTGRqe3fjL2ctt/23ldTh/GofhEP4YcQwuLjUfLfvo3P31nuKrm+sVzYXM0tPBTWnobm+/PdW/mlneGDbHmmKzsbfVgX8dbMT9VGju+apefdtoFP1Vojcx31pWMfM5//1p/z3+us1CuNib6TlcF0R/2yvB3l/ip/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgg53lrpLrG8uFzdXcwkNh7Wlovj/fvZVf2hk+yJZnurKz8be+i3hr5qdqI8d3zdLzbtvAp2qtkbmO+tKxd0e/+fFj/hIt9HX4Y/57nZV6pTHRd7IymO6oX5a3o9xf3+cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCX8uPFnsnRqekQYmEuhPDt/fe9v+w3E2/1WNR3Hv2Wov1iIlPbvxl7OW2/7b2vpg4nEyEkfnfv4uNR8otWPoR/5OcAAAD//2wlhu4=") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) 3.935946809s ago: executing program 9 (id=1499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRESHEX=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000050000008500000083000000bf090000000000005509010000000000950001000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000020000008500000086000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xb) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket(0x8, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000540)={0xfffffff7, 0x200402, 0xe, 0xc6cf, 0x91, "0000080100000200800200000000000300", 0x7ff, 0x1fd}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0x1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x18, 0x2d, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 3.072430645s ago: executing program 8 (id=1500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRESHEX=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000050000008500000083000000bf090000000000005509010000000000950001000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000020000008500000086000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xb) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket(0x8, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000540)={0xfffffff7, 0x200402, 0xe, 0xc6cf, 0x91, "0000080100000200800200000000000300", 0x7ff, 0x1fd}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0x1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x18, 0x2d, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 2.988020631s ago: executing program 9 (id=1501): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff00000c000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 2.888223955s ago: executing program 9 (id=1502): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="916f0600c06a010064001280110001006272696467655f736c617665000000004c00058005001e00000000000500210000000300050009000000000005001b0001000000050019000200000008002200", @ANYRES8=r2], 0x84}}, 0x200088c2) 2.844643086s ago: executing program 3 (id=1503): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) listen(r3, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x54, r5, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r13) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) 2.835313649s ago: executing program 8 (id=1504): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0500000000000000000006000000080003e8", @ANYRES32=r5, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_read_part_table(0x1073, &(0x7f0000000000)="$eJzs0LFNA0EQBdC/ts9nGyQ6IKUNAhJEBq3QE6IkcqgAES+aW1knkQPJe8Hdzuzoj7ThX+027b7+8/VLX1QxnW+nzDnUoW3bV5KP7dLuV1N6n/drzNI/1udzxPR9LpPen8eWvL2fw9fs6j/ePT0cf+TUvmTXXm9GcVsDFyPnUDMtySk5bX7nTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgr30HAAD///8XHwI=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) 2.757480599s ago: executing program 9 (id=1505): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="080026006c09000008002700011000000800b700"], 0x34}}, 0x4004084) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/anycast6\x00') read$FUSE(r3, &(0x7f00000061c0)={0x2020}, 0x2020) pread64(r3, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0xff2e) ppoll(&(0x7f0000000040)=[{r4, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x48000) 2.755972447s ago: executing program 3 (id=1506): socket$nl_route(0x10, 0x3, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getpriority(0x0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x30, r5, 0x1, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffe}]}]}, 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = openat$vcs(0xffffffffffffff9c, 0x0, 0x1a240, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='ns\x00') getdents64(r7, 0x0, 0x18) socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001400e4382580128065f8cab595000000ac96fd8cbe3c775e47f1689731a6ddd7b77325770e9aae598a796cf09123a4c0d4b42ecd8f8e745faeed05734c1204a9fe189f0e33525ac2a2d451eb00fa18f79888a3f0cb0f2e51160bbca4a7c85c96922e3c0868c6aef769d9262abd416f01f5c4d45d108355402ab8643d0d2f7c00abbae38fcbe3200464e5304ca54cd475331b004c696549cc4d8e11", @ANYRES32=r8, @ANYBLOB="14000200ff0200000000000000000000000000010800080001050000"], 0x34}}, 0x0) 1.679714682s ago: executing program 3 (id=1507): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000080)={'pimreg1\x00', @ifru_data=&(0x7f0000000100)="e9aa264387fbe0c2ec6db2fd4813e9d1bb6733fa48ce81bfb448d05a1300"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xfffe}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x29, 0x12, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup(r4) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hoplimit={{0x14, 0x29, 0x34, 0xf}}], 0x18}, 0x0) 1.581160253s ago: executing program 8 (id=1508): r0 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r5, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) r6 = syz_open_dev$mouse(0x0, 0x7f, 0x101000) ioctl$sock_inet_SIOCSARP(r6, 0x8955, 0x0) userfaultfd(0x801) fsmount(r0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 1.416167078s ago: executing program 3 (id=1509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x6}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x6}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r3, &(0x7f0000000040)=""/60, 0x3c, 0x0, 0x0, 0x0) 1.409137154s ago: executing program 9 (id=1510): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000480), 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x8) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RREADLINK(r4, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f00000024c0)=ANY=[]) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 426.765169ms ago: executing program 8 (id=1511): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000005c0)={[{@grpjquota, 0x4a}, {@dax_inode}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@sysvgroups}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$eJzs3DtvHEUcAPD/rh+JSYxNeOYBMQSExcOOnWdBAwIpDRIIhEJpbCcKcRIUGymJLGwQCiXKJwBKJD4BFTQIqEC0IFqEFCE3CRRo0d7tOWff+fyIz0dyv5909uzu7M7Mzoy9M6O9ANrWQP4jidgZEb9GRF95c2mEgfKvmwuz438vzI4nkWVv/JWU4t1YmB2vRK2ct6PYGEwj0o+T2Fsn3enLV86OTU1NXiy2h2fOvTc8ffnK82fOjZ2ePD15fvT48cOHeo4dHT2yKeXszfO654ML+3afePvaq+Mnr73zw1d5frPi+PaaM/rXmUJHzZ6BGFh6L6s8tc6r/9/1VoWTzhZmhHXJW21eXV2l/t8XHXGr8vrilY9amjmgqbIsy7bV7F38XzafVUuS8gnAXSLRpaFNVf7R31jIR6qz49Xj+XZw/cUojYDyct8sPuUjnZHmY/j+8tioWR6IiJPz/3yWf2LZfAoAQDN8kz//PFd+7qh8ykfSeKgq3r3F2lB/RNwXEbsi4v7i+eXBiFLchyPikSVXn1s1/YFl27XPPz/3bLhwa5A//71QrG0tff5LK1H6O4qt3lL5u5JTZ6YmDxb3ZDC6tuXbI7WXXpxW+/blXz5dKf2Bque//JOnX3kWLPLxZ+eyCbqJsZmx2y13xfUPS1N6c7XlTxZXAvKRwe6I2LOB6+f37MwzX+6re7ByixuWv4FNWGfKvoh4ulz/87Gs/LnuIlR/fXLk2NHRI8PbY2ry4HClVdT68aerrxXBmqHE6vXfXHn937PY/su/y0cWVy77k+r12un1p3H1t09WHNNstP13J2+Wwt3FvktjMzMXRyK6k/na/aO3zr001rMkfl7+wQP1+/+uiH8/L87bGxF5I340Ih6LiP1F3h+PiCci4kCD8n//0pPv1qv7tZW/ufLyT9T9+7dS/a8/0HH2u69XSn9t9X+4FBos9kyMzdQu1y+z1gzezr0DAACAO8X+iNgZSTpUTMftjDQdGorYsTiDMj3z7KkL75+fKL8j0B9daWWmq69qPnSkmBvOt/OzRqu28+OHSvPGWZZlPaXtofELU72tLTq0vR0r9P/cH7WvtAB3m3Wto630RhtwR9r4Onq2qfkAtp73taF96f/Qvtbc/5v5JhzQEvX6/1zEzRZkBdhi9fr/Wy3IB7D1jP+hfen/0L5q+3/aknwAW+p23utvFNh1okGcpLM5ia4cSKPxtwD0R6zvgr+nEZuTw45NLWnPGup0e2xGWpGuGqezwRcxvF57w/PoW9Qk0q1tfo0D2yJilda72NjmKoErzc5Yq/8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbI7/AgAA//+7BdPO") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$rxrpc(0x21, 0x2, 0xa) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xc4, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x10800, 0x0, 0x7, 0x0, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, [@mark={0xc, 0x15, {0x35075a, 0x1000}}]}, 0xc4}}, 0x2c000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) mlock2(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) mlock2(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r6, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000000100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) pselect6(0x40, &(0x7f00000000c0)={0xffffffff, 0xd3a, 0x100000000, 0x10001, 0x4, 0xe, 0x7fffffff, 0x3ff}, &(0x7f0000000100)={0x0, 0x400, 0x5, 0xfffffffffffffff9, 0x2, 0xe, 0x7, 0xfffffffffffffff7}, &(0x7f0000000140)={0x6, 0x3ff, 0x9, 0x2, 0xfffffffffffffff9, 0x9, 0xed2b}, &(0x7f0000000180), &(0x7f0000000300)={&(0x7f00000002c0)={[0xfffffffffffffffc]}, 0x8}) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) 188.344792ms ago: executing program 8 (id=1512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000025000101"], 0x18}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0xff00, 0x0, 0x0, 0x0, 0x2}, 0x48) 187.300627ms ago: executing program 9 (id=1513): r0 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r5, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) userfaultfd(0x801) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) 0s ago: executing program 8 (id=1514): lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0xf9, 0x1, 0xfc, "dab82a11e5d57578f9392acc8d593f02", "004f13f09346dc512e78819951c6b4dc97a6942db89621af014785ba8e846799307661c0328b56a41b25c0be8930d24de26ab9172fa096f78f6acd437765beb9c40690573ffd6e0e6433f2e42a08b724d37139290d2304990597f51e50a44a3c31f5ed7a52b4ae44895bb1d632df01d82fc9642897362bb49e3cadc9be4ea35dd89575e039df09648c1cdfcf039ff7bde17e5bab34836d577fa19a690f17b8b47cbf7a0730cb9a00b1baf72efc74afdb71a61548c6b1ac0855d6d2fc2055b8378122cdffd9145f838375b87b9d41a49b88759597a9fb050b967d7baca8f7d141d19386b1"}, 0xf9, 0x1) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.advise\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x16, 0x3) r0 = userfaultfd(0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x101040, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0/file0\x00'}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x140b, 0x20, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc0010}, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000400)='net/raw\x00') r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) socket$inet(0x2, 0x3, 0x7) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0/file0\x00', 0x0, 0x4018, r5}, 0x18) readlinkat(r5, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600)=""/162, 0xa2) setxattr$trusted_overlay_opaque(&(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000780)={0xa, {0x1, 0x0, 0x2}}, 0xa) r10 = accept4$inet(r2, 0x0, &(0x7f00000007c0), 0x80800) getsockname(r10, &(0x7f0000000800)=@caif, &(0x7f0000000880)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f00000009c0)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000a00)={0x10, 0x5, {r4}, {r11}, 0x100, 0xb}) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000a40)) setxattr$incfs_size(&(0x7f0000000a80)='./file0/file0\x00', &(0x7f0000000ac0), &(0x7f0000000b00)=0x2, 0x8, 0x2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r9, 0x40189429, &(0x7f0000000b40)={0x0, 0x0, 0x2}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) splice(r9, &(0x7f0000000b80)=0x4, r0, &(0x7f0000000bc0)=0x4, 0xf1, 0x5) ioctl$NILFS_IOCTL_GET_CPINFO(r6, 0x80186e82, &(0x7f0000000cc0)={&(0x7f0000000c00)=[{0x0, 0x0, 0x7, 0xffffffff7fffffff, 0x8, 0x8, 0x9, 0x5}, {0x0, 0x0, 0x6, 0x1, 0xf98, 0x1, 0x10, 0x7}, {0x1, 0x0, 0x958, 0x8, 0x9, 0x3, 0xf9, 0x4}], 0x3, 0x38, 0x1, 0x3}) readlinkat(r6, &(0x7f0000000d00)='./file0/file0\x00', &(0x7f0000000d40)=""/73, 0x49) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x11, 0xa, &(0x7f0000000ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x0, 0x2, 0x4, 0x6, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffe0, 0xfffffffffffffffc}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}]}, &(0x7f0000000f40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x11, '\x00', r8, 0x0, r6, 0x8, &(0x7f0000000f80)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000fc0)={0x1, 0x10, 0x2, 0x16}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001000)=[0x1, r2, r6, r5, r7], &(0x7f0000001040)=[{0x2, 0x3, 0x3, 0x7}, {0x5, 0x3, 0x6, 0x2}, {0x3, 0x4, 0x3, 0xb}, {0x5, 0x3, 0x4, 0x9}, {0x4, 0x5, 0x2, 0xb}, {0x5, 0x1, 0xe}, {0x5, 0x1, 0xa}, {0x0, 0x3, 0x9, 0x8}], 0x10, 0x6}, 0x94) kernel console output (not intermixed with test programs): [ 137.227976][ T8138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.248056][ T8138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.258497][ T8138] team0: Port device team_slave_0 added [ 137.260698][ T8138] team0: Port device team_slave_1 added [ 137.268670][ T8138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.269999][ T8138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.274781][ T8138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.296266][ T8138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.297594][ T8138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.303503][ T8138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.317182][ T8138] hsr_slave_0: entered promiscuous mode [ 137.318596][ T8138] hsr_slave_1: entered promiscuous mode [ 137.320097][ T8138] debugfs: 'hsr0' already exists in 'hsr' [ 137.321112][ T8138] Cannot create hsr debugfs directory [ 137.543126][ T8168] netlink: 20 bytes leftover after parsing attributes in process `syz.7.896'. [ 137.691936][ T8138] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 137.730240][ T8138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 137.732070][ T8138] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 137.736619][ T8138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 137.738452][ T8138] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 137.741870][ T8138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 137.744087][ T8138] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 137.750304][ T8138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 137.759826][ T8138] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.759867][ T8138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.759993][ T8138] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.760032][ T8138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.766039][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.767335][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.787885][ T8138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.794273][ T8138] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.796248][ T6603] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.796278][ T6603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.934150][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.934197][ T6609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.555678][ T8138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.559170][ T8138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.652783][ T4721] Bluetooth: hci5: command tx timeout [ 138.666207][ T8138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.732120][ T8138] veth0_vlan: entered promiscuous mode [ 138.735395][ T8138] veth1_vlan: entered promiscuous mode [ 138.745559][ T8138] veth0_macvtap: entered promiscuous mode [ 138.747944][ T8138] veth1_macvtap: entered promiscuous mode [ 138.753522][ T8138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.756141][ T8138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.796378][ T6621] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.796440][ T6621] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.796478][ T6621] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.796503][ T6621] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.811851][ T8200] loop7: detected capacity change from 0 to 512 [ 138.831979][ T8200] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 138.832053][ T8200] System zones: 1-12 [ 138.838112][ T8200] EXT4-fs error (device loop7): dx_probe:791: inode #2: comm syz.7.899: Directory hole found for htree index block 0 [ 138.838154][ T8200] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 138.840165][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 138.840179][ C0] EXT4-fs (loop7): initial error at time 139: dx_probe:791: inode 2 [ 138.840194][ C0] EXT4-fs (loop7): last error at time 139: dx_probe:791: inode 2 [ 138.849183][ T8200] EXT4-fs (loop7): Remounting filesystem read-only [ 138.849240][ T8200] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117 [ 138.849306][ T8200] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 138.849777][ T8200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.861400][ T8200] netlink: 68 bytes leftover after parsing attributes in process `syz.7.899'. [ 138.889735][ T6609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.889771][ T6609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.906934][ T6609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.906966][ T6609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.952389][ T8211] loop3: detected capacity change from 0 to 8192 [ 139.954932][ T8211] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.973774][ T7821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.982618][ T8217] binder: 8216:8217 got reply transaction with no transaction stack [ 139.982656][ T8217] binder: 8216:8217 transaction reply to 0:0 failed 130/29201/-71, code 0 size 0-0 line 3139 [ 139.982681][ T8217] binder: 8216:8217 ioctl c0306201 20000380 returned -14 [ 139.983721][ T8217] binder: 8216:8217 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 139.983735][ T8217] binder: 8217 RLIMIT_NICE not set [ 140.100988][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.902'. [ 140.739235][ T4721] Bluetooth: hci5: command tx timeout [ 141.384073][ T8244] loop3: detected capacity change from 0 to 256 [ 142.438917][ T8249] random: crng reseeded on system resumption [ 142.769993][ T8251] loop2: detected capacity change from 0 to 512 [ 142.798954][ T8251] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 142.800627][ T4721] Bluetooth: hci5: command tx timeout [ 142.843596][ T8252] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 143.256958][ T8251] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.912: bad orphan inode 131083 [ 143.257039][ T8251] loop2: lost filesystem error report for type 5 error -117 [ 143.259131][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 143.259146][ C1] EXT4-fs (loop2): initial error at time 143: ext4_orphan_get:1423 [ 143.259163][ C1] EXT4-fs (loop2): last error at time 143: ext4_orphan_get:1423 [ 143.270953][ T8251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.714078][ T8257] loop8: detected capacity change from 0 to 256 [ 143.789383][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.826969][ T8263] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 143.964191][ T8272] netlink: 20 bytes leftover after parsing attributes in process `syz.8.913'. [ 144.140226][ T4417] block nbd1: Possible stuck request 000000009b8b58d5: control (read@0,4096B). Runtime 60 seconds [ 144.144146][ T8270] loop6: detected capacity change from 0 to 512 [ 144.171335][ T8270] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 144.171395][ T8270] System zones: 1-12 [ 144.173592][ T8270] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.917: Directory hole found for htree index block 0 [ 144.174387][ T8270] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 144.175761][ T8270] EXT4-fs (loop6): Remounting filesystem read-only [ 144.175828][ T8270] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 144.175879][ T8270] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 144.176360][ T8270] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.182981][ T8270] netlink: 68 bytes leftover after parsing attributes in process `syz.6.917'. [ 145.177417][ T4721] Bluetooth: hci5: command tx timeout [ 145.780365][ T7078] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.814313][ T8284] loop8: detected capacity change from 0 to 128 [ 145.833709][ T8284] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 146.977433][ T8305] loop3: detected capacity change from 0 to 256 [ 147.058525][ T8310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.067863][ T8310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.078053][ T8309] loop2: detected capacity change from 0 to 1024 [ 147.093295][ T8309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.100049][ T8309] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.927: missing EA_INODE flag [ 147.111607][ T8309] EXT4-fs (loop2): Remounting filesystem read-only [ 147.380911][ T8319] random: crng reseeded on system resumption [ 147.457614][ T8320] loop6: detected capacity change from 0 to 512 [ 147.466094][ T8320] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 147.483571][ T8320] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.926: bad orphan inode 131083 [ 147.483604][ T8320] loop6: lost filesystem error report for type 5 error -117 [ 147.486897][ T8320] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.531901][ T7078] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.599748][ T8337] loop3: detected capacity change from 0 to 256 [ 148.683645][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.516381][ T8355] random: crng reseeded on system resumption [ 149.530788][ T8355] loop2: detected capacity change from 0 to 512 [ 149.533192][ T8355] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.533641][ T8349] netlink: 268 bytes leftover after parsing attributes in process `syz.7.938'. [ 149.535361][ T8349] binder: 8348:8349 tried to acquire reference to desc 0, got 1 instead [ 149.537555][ T866] binder: release 8348:8349 transaction 135 out, still active [ 149.537586][ T866] binder: undelivered TRANSACTION_COMPLETE [ 149.545989][ T866] binder: send failed reply for transaction 135, target dead [ 149.667495][ T8355] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.939: bad orphan inode 131083 [ 149.667528][ T8355] loop2: lost filesystem error report for type 5 error -117 [ 149.669198][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 149.669214][ C0] EXT4-fs (loop2): initial error at time 150: ext4_orphan_get:1423 [ 149.669229][ C0] EXT4-fs (loop2): last error at time 150: ext4_orphan_get:1423 [ 150.030264][ T8355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.806672][ T8365] loop3: detected capacity change from 0 to 512 [ 150.821256][ T8365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.126840][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.187219][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.432022][ T8396] tmpfs: Bad value for 'mpol' [ 151.710099][ T8404] loop3: detected capacity change from 0 to 512 [ 152.579097][ T8404] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 152.725090][ T8404] EXT4-fs (loop3): 1 truncate cleaned up [ 152.729763][ T8404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.772298][ T8404] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.950: invalid indirect mapped block 4294901760 (level 0) [ 152.775160][ T8404] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.950: invalid indirect mapped block 4294967295 (level 1) [ 153.380467][ T8415] loop8: detected capacity change from 0 to 512 [ 153.450267][ T8415] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.454906][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.502767][ T8138] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.566242][ T8424] tipc: Enabling of bearer rejected, already enabled [ 153.655977][ T8430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.656169][ T8430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.658764][ T4721] Bluetooth: hci5: unknown advertising packet type: 0x17 [ 153.658783][ T4721] Bluetooth: hci5: Dropping invalid advertising data [ 153.658794][ T4721] Bluetooth: hci5: Malformed LE Event: 0x02 [ 153.884044][ T8437] random: crng reseeded on system resumption [ 153.895819][ T8437] loop3: detected capacity change from 0 to 512 [ 153.900379][ T8437] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 153.981108][ T8437] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.959: bad orphan inode 131083 [ 153.981153][ T8437] loop3: lost filesystem error report for type 5 error -117 [ 153.983628][ T8437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.457024][ T8445] syzkaller0: entered promiscuous mode [ 154.458730][ T8445] syzkaller0: entered allmulticast mode [ 154.886119][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.065750][ T8457] loop6: detected capacity change from 0 to 1024 [ 155.070574][ T8457] EXT4-fs (loop6): bad geometry: first data block is 0 with a 1k block and cluster size [ 155.140289][ T8459] loop6: detected capacity change from 0 to 1024 [ 155.151322][ T8461] random: crng reseeded on system resumption [ 155.154629][ T8459] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 155.171414][ T8461] loop3: detected capacity change from 0 to 512 [ 155.173217][ T8461] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 155.177732][ T8461] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.965: bad orphan inode 131083 [ 155.177782][ T8461] loop3: lost filesystem error report for type 5 error -117 [ 155.178719][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 155.178735][ C0] EXT4-fs (loop3): initial error at time 155: ext4_orphan_get:1423 [ 155.178750][ C0] EXT4-fs (loop3): last error at time 155: ext4_orphan_get:1423 [ 155.180147][ T8461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.181588][ T8459] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 3: comm syz.6.968: lblock 3 mapped to illegal pblock 3 (length 3) [ 155.188509][ T8459] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 155.188530][ T8459] EXT4-fs (loop6): This should not happen!! Data will be lost [ 155.188530][ T8459] [ 155.226716][ T8459] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.968: bg 0: block 112: padding at end of block bitmap is not set [ 155.236222][ T8459] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 28 [ 155.239496][ T8459] EXT4-fs (loop6): This should not happen!! Data will be lost [ 155.239496][ T8459] [ 155.239534][ T8459] EXT4-fs (loop6): Total free blocks count 0 [ 155.239550][ T8459] EXT4-fs (loop6): Free/Dirty block details [ 155.239587][ T8459] EXT4-fs (loop6): free_blocks=0 [ 155.239614][ T8459] EXT4-fs (loop6): dirty_blocks=64 [ 155.239628][ T8459] EXT4-fs (loop6): Block reservation details [ 155.274554][ T6606] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:16: lblock 8 mapped to illegal pblock 8 (length 8) [ 155.284144][ T7078] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 155.396851][ T8469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.970'. [ 155.407441][ T8469] loop2: detected capacity change from 0 to 512 [ 155.409776][ T8469] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 155.423223][ T8469] EXT4-fs (loop2): 1 truncate cleaned up [ 155.423703][ T8469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.455051][ T8469] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 155.455076][ T8469] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.455988][ T8469] vhci_hcd vhci_hcd.0: Device attached [ 155.459476][ T8471] vhci_hcd: connection closed [ 155.459702][ T6603] vhci_hcd vhci_hcd.2: stop threads [ 155.459734][ T6603] vhci_hcd vhci_hcd.2: release socket [ 155.459755][ T6603] vhci_hcd vhci_hcd.2: disconnect device [ 155.975024][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.770071][ T8489] loop2: detected capacity change from 0 to 1024 [ 157.770512][ T8489] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.837825][ T8489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.883355][ T8493] random: crng reseeded on system resumption [ 157.912471][ T8493] loop6: detected capacity change from 0 to 512 [ 157.914021][ T8493] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 157.917040][ T8493] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.976: bad orphan inode 131083 [ 157.917081][ T8493] loop6: lost filesystem error report for type 5 error -117 [ 157.919099][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 157.919112][ C1] EXT4-fs (loop6): initial error at time 158: ext4_orphan_get:1423 [ 157.919127][ C1] EXT4-fs (loop6): last error at time 158: ext4_orphan_get:1423 [ 157.919812][ T8493] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.046650][ T8501] tipc: Started in network mode [ 158.046688][ T8501] tipc: Node identity ac14143b, cluster identity 4711 [ 158.047801][ T8501] tipc: Enabled bearer , priority 10 [ 158.081932][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.093713][ T8506] binder: 8505:8506 tried to acquire reference to desc 0, got 1 instead [ 158.096210][ T8506] binder: 8505:8506 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 158.098340][ T8506] binder: 8506 RLIMIT_NICE not set [ 158.099391][ T8506] binder: 8506 RLIMIT_NICE not set [ 158.100620][ T8506] binder: 8506 RLIMIT_NICE not set [ 158.106966][ T866] binder: undelivered TRANSACTION_COMPLETE [ 158.106994][ T866] binder: undelivered transaction 141, process died. [ 158.109603][ T866] binder: undelivered TRANSACTION_COMPLETE [ 158.122247][ T8508] netlink: 'syz.3.980': attribute type 5 has an invalid length. [ 158.624631][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.687237][ T7078] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.781530][ T8530] netlink: 76 bytes leftover after parsing attributes in process `syz.6.989'. [ 159.158760][ T4835] tipc: Node number set to 2886997051 [ 159.177065][ T8538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.177266][ T8538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.199127][ T4721] Bluetooth: hci1: unknown advertising packet type: 0x17 [ 159.200334][ T4721] Bluetooth: hci1: Dropping invalid advertising data [ 159.200368][ T4721] Bluetooth: hci1: Malformed LE Event: 0x02 [ 159.335793][ T8547] loop3: detected capacity change from 0 to 1024 [ 159.336287][ T8547] EXT4-fs: inline encryption not supported [ 159.361841][ T8547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.374128][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.408787][ T8553] tap0: tun_chr_ioctl cmd 2147767521 [ 159.423947][ T8553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.688405][ T8571] binder: 8569:8571 got reply transaction with no transaction stack [ 159.688445][ T8571] binder: 8569:8571 transaction reply to 0:0 failed 142/29201/-71, code 0 size 0-0 line 3139 [ 159.689228][ T11] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.738109][ T8572] loop6: detected capacity change from 0 to 2048 [ 159.741561][ T8572] EXT4-fs: Ignoring removed i_version option [ 159.762426][ T8572] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.808138][ T7078] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.864038][ T8584] loop3: detected capacity change from 0 to 512 [ 159.864413][ T8584] EXT4-fs: Ignoring removed bh option [ 159.866292][ T8584] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.866325][ T8584] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 159.877118][ T8584] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 159.877350][ T8584] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 159.877910][ T8584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.893934][ T8591] tap0: tun_chr_ioctl cmd 2147767521 [ 159.900321][ T8591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.958637][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.127128][ T8600] binder: 8599:8600 got transaction to invalid handle, 1 [ 160.127162][ T8600] binder: 8599:8600 cannot find target node [ 160.127286][ T8600] binder: 8599:8600 transaction call to 0:0 failed 143/29201/-22, code 0 size 72-252 line 3236 [ 160.127625][ T4835] binder: undelivered TRANSACTION_ERROR: 29201 [ 160.498669][ T8608] netlink: 'syz.2.1014': attribute type 1 has an invalid length. [ 160.666292][ T8614] loop2: detected capacity change from 0 to 256 [ 160.869432][ T8618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1016'. [ 161.175520][ T8593] Set syz1 is full, maxelem 65536 reached [ 161.239371][ T8629] tap0: tun_chr_ioctl cmd 2147767521 [ 161.246308][ T8629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.272449][ T8632] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.272519][ T8632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.272705][ T8632] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.272755][ T8632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.273048][ T8632] bridge0: entered promiscuous mode [ 161.292933][ T8632] netpci0: entered promiscuous mode [ 161.293646][ T8632] netpci0: entered allmulticast mode [ 161.294299][ T8632] bridge0.1: entered promiscuous mode [ 161.294348][ T8632] bridge0.1: entered allmulticast mode [ 161.294774][ T8632] vti0: entered promiscuous mode [ 161.294785][ T8632] vti0: entered allmulticast mode [ 161.295337][ T8632] mac80211_hwsim hwsim17 wlan2: entered promiscuous mode [ 161.295352][ T8632] mac80211_hwsim hwsim17 wlan2: entered allmulticast mode [ 161.295747][ T8632] hsr1: entered promiscuous mode [ 161.296176][ T8632] hsr2: entered promiscuous mode [ 161.296187][ T8632] hsr2: entered allmulticast mode [ 161.579391][ T8637] pim6reg: entered allmulticast mode [ 161.591527][ T8637] loop2: detected capacity change from 0 to 256 [ 161.603352][ T8637] FAT-fs (loop2): Directory bread(block 64) failed [ 161.603389][ T8637] FAT-fs (loop2): Directory bread(block 65) failed [ 161.603417][ T8637] FAT-fs (loop2): Directory bread(block 66) failed [ 161.603430][ T8637] FAT-fs (loop2): Directory bread(block 67) failed [ 161.603453][ T8637] FAT-fs (loop2): Directory bread(block 68) failed [ 161.603464][ T8637] FAT-fs (loop2): Directory bread(block 69) failed [ 161.603486][ T8637] FAT-fs (loop2): Directory bread(block 70) failed [ 161.603496][ T8637] FAT-fs (loop2): Directory bread(block 71) failed [ 161.603519][ T8637] FAT-fs (loop2): Directory bread(block 72) failed [ 161.603530][ T8637] FAT-fs (loop2): Directory bread(block 73) failed [ 162.706584][ T8647] loop3: detected capacity change from 0 to 256 [ 163.775691][ T8685] input: syz1 as /devices/virtual/input/input7 [ 164.065595][ T8693] loop6: detected capacity change from 0 to 256 [ 164.889472][ T8698] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 164.889522][ T8698] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 165.120946][ T8703] Soft offlining pfn 0x148610 at process virtual address 0x20000000 [ 165.127072][ T8703] Soft offline: 0x148610: page migration failed 1, type 0x5ffc00000021d1c(referenced|uptodate|dirty|active|owner_priv_1|owner_2|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 165.147733][ T8693] FAT-fs (loop6): Directory bread(block 64) failed [ 165.147780][ T8693] FAT-fs (loop6): Directory bread(block 65) failed [ 165.147814][ T8693] FAT-fs (loop6): Directory bread(block 66) failed [ 165.147831][ T8693] FAT-fs (loop6): Directory bread(block 67) failed [ 165.147859][ T8693] FAT-fs (loop6): Directory bread(block 68) failed [ 165.147874][ T8693] FAT-fs (loop6): Directory bread(block 69) failed [ 165.147900][ T8693] FAT-fs (loop6): Directory bread(block 70) failed [ 165.147914][ T8693] FAT-fs (loop6): Directory bread(block 71) failed [ 165.147939][ T8693] FAT-fs (loop6): Directory bread(block 72) failed [ 165.147953][ T8693] FAT-fs (loop6): Directory bread(block 73) failed [ 165.281430][ T8710] loop2: detected capacity change from 0 to 8192 [ 165.297244][ T8707] FAULT_INJECTION: forcing a failure. [ 165.297244][ T8707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.300552][ T8707] CPU: 1 UID: 0 PID: 8707 Comm: syz.8.1048 Tainted: G L syzkaller #0 PREEMPT [ 165.300575][ T8707] Tainted: [L]=SOFTLOCKUP [ 165.300579][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 165.300585][ T8707] Call trace: [ 165.300588][ T8707] show_stack+0x2c/0x3c (C) [ 165.300611][ T8707] __dump_stack+0x30/0x40 [ 165.300625][ T8707] dump_stack_lvl+0xd8/0x12c [ 165.300635][ T8707] dump_stack+0x1c/0x28 [ 165.300645][ T8707] should_fail_ex+0x41c/0x590 [ 165.300656][ T8707] should_fail+0x14/0x24 [ 165.300664][ T8707] should_fail_usercopy+0x20/0x30 [ 165.300673][ T8707] simple_read_from_buffer+0xc4/0x238 [ 165.300684][ T8707] proc_fail_nth_read+0x1a8/0x248 [ 165.300691][ T8707] vfs_read+0x230/0x8c8 [ 165.300701][ T8707] ksys_read+0x12c/0x228 [ 165.300711][ T8707] __arm64_sys_read+0x7c/0x90 [ 165.300720][ T8707] invoke_syscall+0x98/0x244 [ 165.300730][ T8707] el0_svc_common+0xec/0x23c [ 165.300740][ T8707] do_el0_svc+0x4c/0x5c [ 165.300749][ T8707] el0_svc+0x64/0x260 [ 165.300757][ T8707] el0t_64_sync_handler+0x48/0x148 [ 165.300764][ T8707] el0t_64_sync+0x198/0x19c [ 165.321200][ T8710] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.324019][ T8708] loop3: detected capacity change from 0 to 256 [ 165.708615][ T8708] FAT-fs (loop3): Directory bread(block 64) failed [ 165.708648][ T8708] FAT-fs (loop3): Directory bread(block 65) failed [ 165.708937][ T8708] FAT-fs (loop3): Directory bread(block 66) failed [ 165.708956][ T8708] FAT-fs (loop3): Directory bread(block 67) failed [ 165.708986][ T8708] FAT-fs (loop3): Directory bread(block 68) failed [ 165.709002][ T8708] FAT-fs (loop3): Directory bread(block 69) failed [ 165.709029][ T8708] FAT-fs (loop3): Directory bread(block 70) failed [ 165.709043][ T8708] FAT-fs (loop3): Directory bread(block 71) failed [ 165.709071][ T8708] FAT-fs (loop3): Directory bread(block 72) failed [ 165.709085][ T8708] FAT-fs (loop3): Directory bread(block 73) failed [ 166.365717][ T8724] netlink: 'syz.3.1053': attribute type 12 has an invalid length. [ 166.365868][ T8724] netlink: 'syz.3.1053': attribute type 29 has an invalid length. [ 166.365974][ T8724] netlink: 'syz.3.1053': attribute type 7 has an invalid length. [ 166.366090][ T8724] netlink: 'syz.3.1053': attribute type 37 has an invalid length. [ 166.366199][ T8724] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1053'. [ 166.975481][ T8726] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 167.161260][ T8731] binder: 8728:8731 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 167.178142][ T8731] binder: 8731 RLIMIT_NICE not set [ 167.185237][ T8731] binder: 8728:8731 ioctl c0306201 200004c0 returned -14 [ 168.894210][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1060'. [ 168.895769][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1060'. [ 168.896042][ T8752] netlink: 'syz.8.1060': attribute type 2 has an invalid length. [ 168.896198][ T8752] netlink: 'syz.8.1060': attribute type 1 has an invalid length. [ 168.896359][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1060'. [ 169.028314][ T8750] fuse: Unknown parameter 'rootmod' [ 169.127593][ T8760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.129674][ T8760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.699592][ T8779] netlink: 'syz.3.1063': attribute type 1 has an invalid length. [ 170.717435][ T8781] FAULT_INJECTION: forcing a failure. [ 170.717435][ T8781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.717472][ T8781] CPU: 0 UID: 0 PID: 8781 Comm: syz.8.1068 Tainted: G L syzkaller #0 PREEMPT [ 170.717491][ T8781] Tainted: [L]=SOFTLOCKUP [ 170.717494][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 170.717499][ T8781] Call trace: [ 170.717502][ T8781] show_stack+0x2c/0x3c (C) [ 170.717522][ T8781] __dump_stack+0x30/0x40 [ 170.717532][ T8781] dump_stack_lvl+0xd8/0x12c [ 170.717542][ T8781] dump_stack+0x1c/0x28 [ 170.717551][ T8781] should_fail_ex+0x41c/0x590 [ 170.717561][ T8781] should_fail+0x14/0x24 [ 170.717569][ T8781] should_fail_usercopy+0x20/0x30 [ 170.717577][ T8781] simple_read_from_buffer+0xc4/0x238 [ 170.717587][ T8781] proc_fail_nth_read+0x1a8/0x248 [ 170.717594][ T8781] vfs_read+0x230/0x8c8 [ 170.717604][ T8781] ksys_read+0x12c/0x228 [ 170.717613][ T8781] __arm64_sys_read+0x7c/0x90 [ 170.717623][ T8781] invoke_syscall+0x98/0x244 [ 170.717633][ T8781] el0_svc_common+0xec/0x23c [ 170.717642][ T8781] do_el0_svc+0x4c/0x5c [ 170.717652][ T8781] el0_svc+0x64/0x260 [ 170.717660][ T8781] el0t_64_sync_handler+0x48/0x148 [ 170.717667][ T8781] el0t_64_sync+0x198/0x19c [ 170.742814][ T8785] vlan0: left allmulticast mode [ 170.744122][ T8785] team0: Device vlan0 is up. Set it down before adding it as a team port [ 170.831704][ T8789] netlink: 'syz.8.1072': attribute type 13 has an invalid length. [ 170.947899][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1072'. [ 170.981713][ T8798] loop2: detected capacity change from 0 to 4096 [ 171.740866][ T8800] loop6: detected capacity change from 0 to 1024 [ 171.741256][ T8800] EXT4-fs: Ignoring removed bh option [ 171.741299][ T8800] EXT4-fs: Ignoring removed bh option [ 171.747975][ T8800] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 171.754843][ T8798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.775010][ T8800] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.802343][ T8807] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 171.874072][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.875988][ T7078] EXT4-fs error (device loop6): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /92/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 171.880792][ T7078] EXT4-fs (loop6): Remounting filesystem read-only [ 171.885495][ T7078] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.028205][ T8813] loop6: detected capacity change from 0 to 512 [ 172.038327][ T8813] EXT4-fs: Ignoring removed bh option [ 172.047682][ T8813] EXT4-fs (loop6): 1 truncate cleaned up [ 172.828976][ T8813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.835951][ T8815] loop8: detected capacity change from 0 to 128 [ 173.317487][ T8813] Injecting memory failure for pfn 0x140d8b at process virtual address 0x20000000 [ 173.321981][ T8830] syzkaller0: entered promiscuous mode [ 173.322006][ T8830] syzkaller0: entered allmulticast mode [ 173.433140][ T8813] Memory failure: 0x140d8b: Sending SIGBUS to syz.6.1079:8813 due to hardware memory corruption [ 173.433420][ T8813] Memory failure: 0x140d8b: recovery action for dirty LRU page: Recovered [ 173.489989][ T8836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1085'. [ 173.490032][ T8836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1085'. [ 173.616715][ T7078] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.748279][ T8844] loop2: detected capacity change from 0 to 512 [ 173.756603][ T8844] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 174.378747][ T8847] loop6: detected capacity change from 0 to 2048 [ 174.529066][ T8847] Alternate GPT is invalid, using primary GPT. [ 174.529646][ T8847] loop6: p2 p3 p7 [ 174.725938][ T4417] block nbd1: Possible stuck request 000000009b8b58d5: control (read@0,4096B). Runtime 90 seconds [ 174.952577][ T8844] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1089: bg 0: block 104: invalid block bitmap [ 174.952630][ T8844] loop2: lost filesystem error report for type 5 error -117 [ 174.955061][ T8844] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 174.955112][ T8844] loop2: lost filesystem error report for type 5 error -117 [ 174.956231][ T8844] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1089: invalid indirect mapped block 1 (level 1) [ 174.956250][ T8844] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 174.956554][ T8844] EXT4-fs (loop2): 1 truncate cleaned up [ 174.957013][ T8844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.082014][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.100094][ T8852] loop3: detected capacity change from 0 to 256 [ 176.014770][ T8863] syzkaller0: entered promiscuous mode [ 176.014808][ T8863] syzkaller0: entered allmulticast mode [ 176.447816][ T8878] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1096'. [ 177.201379][ T5485] udevd[5485]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 177.604901][ T4693] udevd[4693]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 177.609785][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 177.634263][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 177.668059][ T5030] udevd[5030]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 177.670396][ T4693] udevd[4693]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 177.700237][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 177.702140][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 177.707491][ T8895] netlink: 'syz.8.1104': attribute type 1 has an invalid length. [ 177.710424][ T5485] udevd[5485]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 177.730315][ T8895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.965785][ T8900] netlink: 'syz.3.1102': attribute type 12 has an invalid length. [ 177.965871][ T8900] netlink: 'syz.3.1102': attribute type 29 has an invalid length. [ 177.965929][ T8900] netlink: 'syz.3.1102': attribute type 7 has an invalid length. [ 177.965963][ T8900] netlink: 'syz.3.1102': attribute type 37 has an invalid length. [ 177.966008][ T8900] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1102'. [ 178.807458][ T8908] loop8: detected capacity change from 0 to 256 [ 180.514056][ T8925] random: crng reseeded on system resumption [ 180.748961][ T8926] loop6: detected capacity change from 0 to 512 [ 181.279495][ T8926] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 182.217101][ T8927] loop2: detected capacity change from 0 to 8192 [ 182.308142][ T8926] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1111: bad orphan inode 131083 [ 182.308182][ T8926] loop6: lost filesystem error report for type 5 error -117 [ 182.313350][ T8926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.332522][ T8936] loop8: detected capacity change from 0 to 256 [ 182.356886][ T8923] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 182.356904][ T8923] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.357058][ T8923] vhci_hcd vhci_hcd.0: Device attached [ 182.391208][ T8927] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.049934][ T8929] vhci_hcd: connection closed [ 183.078477][ T6610] vhci_hcd vhci_hcd.2: stop threads [ 183.081175][ T6610] vhci_hcd vhci_hcd.2: release socket [ 183.082182][ T6610] vhci_hcd vhci_hcd.2: disconnect device [ 183.108889][ T4835] usb 6-1: new low-speed USB device number 2 using vhci_hcd [ 183.110306][ T4835] usb 6-1: enqueue for inactive port 0 [ 183.220625][ T4835] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 183.642746][ T7078] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.772980][ T8958] loop6: detected capacity change from 0 to 1024 [ 184.082714][ T8958] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.124993][ T8958] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 184.126599][ T8958] System zones: 0-1, 3-12 [ 184.132977][ T8958] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.172134][ T8968] loop3: detected capacity change from 0 to 256 [ 184.747612][ T7078] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.758297][ T8978] random: crng reseeded on system resumption [ 184.835714][ T8979] loop8: detected capacity change from 0 to 512 [ 184.856399][ T8979] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 184.938547][ T8979] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.1127: bad orphan inode 131083 [ 184.938625][ T8979] loop8: lost filesystem error report for type 5 error -117 [ 184.948734][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 184.948763][ C0] EXT4-fs (loop8): initial error at time 185: ext4_orphan_get:1423 [ 184.948789][ C0] EXT4-fs (loop8): last error at time 185: ext4_orphan_get:1423 [ 184.954693][ T8979] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.711092][ T8994] syzkaller0: entered promiscuous mode [ 185.711127][ T8994] syzkaller0: entered allmulticast mode [ 185.913030][ T8138] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.242344][ T9010] loop3: detected capacity change from 0 to 512 [ 186.291771][ T9010] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1134: iget: bad i_size value: 38620345925642 [ 186.291860][ T9010] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 186.295018][ T9010] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1134: couldn't read orphan inode 15 (err -117) [ 186.295077][ T9010] loop3: lost filesystem error report for type 5 error -117 [ 186.298717][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 186.298740][ C0] EXT4-fs (loop3): initial error at time 187: ext4_orphan_get:1397: inode 15 [ 186.298777][ C0] EXT4-fs (loop3): last error at time 187: ext4_orphan_get:1402 [ 186.311856][ T9010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.733848][ T9015] loop7: detected capacity change from 0 to 512 [ 186.769162][ T9015] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 186.769217][ T9015] System zones: 1-12 [ 186.769384][ T9015] EXT4-fs error (device loop7): dx_probe:791: inode #2: comm syz.7.1136: Directory hole found for htree index block 0 [ 186.769406][ T9015] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 186.773138][ T9015] EXT4-fs (loop7): Remounting filesystem read-only [ 186.773179][ T9015] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117 [ 186.773223][ T9015] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 186.794520][ T9015] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.809114][ T9015] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1136'. [ 186.871656][ T8964] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 186.937500][ T4710] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.938318][ T4710] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.938751][ T4710] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.939104][ T4710] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.939350][ T4710] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.600811][ T1592] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.601969][ T1592] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.635086][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1139'. [ 187.705316][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.757304][ T9039] loop2: detected capacity change from 0 to 1024 [ 187.763518][ T9039] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.793359][ T9039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.932325][ T9048] loop3: detected capacity change from 0 to 256 [ 188.042477][ T6601] bridge_slave_1: left allmulticast mode [ 188.042518][ T6601] bridge_slave_1: left promiscuous mode [ 188.042672][ T6601] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.043491][ T6601] bridge_slave_0: left allmulticast mode [ 188.043506][ T6601] bridge_slave_0: left promiscuous mode [ 188.043576][ T6601] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.451249][ T7821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.473386][ T9061] loop7: detected capacity change from 0 to 128 [ 188.475799][ T9061] EXT4-fs (loop7): Test dummy encryption mode enabled [ 188.480742][ T9061] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.499907][ T6601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.559746][ T6601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.865006][ T6601] bond0 (unregistering): Released all slaves [ 188.884902][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.898093][ T9058] syzkaller0: entered promiscuous mode [ 188.898125][ T9058] syzkaller0: entered allmulticast mode [ 188.978819][ T4721] Bluetooth: hci0: command tx timeout [ 189.351966][ T7821] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.431329][ T9100] netlink: 'syz.3.1150': attribute type 9 has an invalid length. [ 189.535028][ T9100] No buffer was provided with the request [ 190.109701][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1151'. [ 190.160967][ T9107] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 190.377730][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1153'. [ 190.388496][ T4395] 8021q: adding VLAN 0 to HW filter on device eth7 [ 190.422584][ T30] audit: type=1326 audit(191.162:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9114 comm="syz.3.1154" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5777b68 code=0x0 [ 191.093456][ T4721] Bluetooth: hci0: command tx timeout [ 191.106035][ T6601] hsr_slave_0: left promiscuous mode [ 191.108031][ T6601] hsr_slave_1: left promiscuous mode [ 191.109701][ T6601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.111738][ T6601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.584481][ T9131] fuse: Unknown parameter 'obj_user' [ 191.591906][ T9129] loop7: detected capacity change from 0 to 128 [ 191.612427][ T9135] netlink: 'syz.2.1162': attribute type 10 has an invalid length. [ 191.617050][ T9129] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.665534][ T9140] loop2: detected capacity change from 0 to 512 [ 191.670327][ T6601] team0 (unregistering): Port device team_slave_1 removed [ 191.685667][ T9140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.690827][ T6601] team0 (unregistering): Port device team_slave_0 removed [ 191.715971][ T9140] Invalid ELF header magic: != ELF [ 191.988258][ T7821] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.046369][ T9135] lo: left promiscuous mode [ 192.046416][ T9135] lo: left allmulticast mode [ 192.182716][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.557524][ T9171] tap0: tun_chr_ioctl cmd 2147767521 [ 192.605055][ T4395] 8021q: adding VLAN 0 to HW filter on device eth5 [ 192.612692][ T9171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.846841][ T30] audit: type=1400 audit(193.582:6): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lowerdir" requested=r pid=9196 comm="syz.3.1168" name="file1" dev="tmpfs" ino=1338 [ 192.963654][ T9026] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.966068][ T9026] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.967584][ T9026] bridge_slave_0: entered allmulticast mode [ 192.971006][ T9026] bridge_slave_0: entered promiscuous mode [ 192.976765][ T9026] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.981740][ T9026] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.993909][ T9026] bridge_slave_1: entered allmulticast mode [ 192.994546][ T9026] bridge_slave_1: entered promiscuous mode [ 193.004390][ T4395] 8021q: adding VLAN 0 to HW filter on device eth6 [ 193.138417][ T4721] Bluetooth: hci0: command tx timeout [ 193.209835][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1169'. [ 193.817587][ T9215] loop7: detected capacity change from 0 to 512 [ 193.817950][ T9215] EXT4-fs: Ignoring removed bh option [ 193.835125][ T9205] syzkaller0: entered promiscuous mode [ 193.835160][ T9205] syzkaller0: entered allmulticast mode [ 193.847872][ T9215] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.847895][ T9215] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 193.866375][ T9215] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 193.869982][ T9215] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 193.872464][ T9215] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.884406][ T9216] Bluetooth: MGMT ver 1.23 [ 193.969690][ T7821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.981731][ T9026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.014766][ T9026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.419982][ T9233] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1177'. [ 194.420027][ T9233] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1177'. [ 194.482597][ T9026] team0: Port device team_slave_0 added [ 194.483937][ T9026] team0: Port device team_slave_1 added [ 194.589995][ T9026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.592014][ T9026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.593131][ T9026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.594846][ T9026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.594869][ T9026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.594900][ T9026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.675865][ T9251] random: crng reseeded on system resumption [ 194.776665][ T9252] loop8: detected capacity change from 0 to 512 [ 194.785025][ T9252] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 194.820256][ T9252] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.1181: bad orphan inode 131083 [ 194.820339][ T9252] loop8: lost filesystem error report for type 5 error -117 [ 194.826353][ T9252] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.278876][ T4721] Bluetooth: hci0: command tx timeout [ 195.421264][ T9026] hsr_slave_0: entered promiscuous mode [ 195.421617][ T9026] hsr_slave_1: entered promiscuous mode [ 195.421841][ T9026] debugfs: 'hsr0' already exists in 'hsr' [ 195.421857][ T9026] Cannot create hsr debugfs directory [ 195.609334][ T4395] 8021q: adding VLAN 0 to HW filter on device eth4 [ 195.672098][ T9261] random: crng reseeded on system resumption [ 195.794317][ T9262] loop7: detected capacity change from 0 to 512 [ 195.801303][ T9262] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 195.824649][ T9262] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.1182: bad orphan inode 131083 [ 195.824713][ T9262] loop7: lost filesystem error report for type 5 error -117 [ 195.833148][ T9262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.324625][ T9026] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 196.327574][ T9026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.328072][ T9026] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 196.332142][ T8138] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.387468][ T9026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.392881][ T9026] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 196.609153][ T9026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.623707][ T9026] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 197.079585][ T9272] loop2: detected capacity change from 0 to 2048 [ 197.320023][ T7821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.369361][ T9026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 197.373406][ T9272] Alternate GPT is invalid, using primary GPT. [ 197.373516][ T9272] loop2: p2 p3 p7 [ 197.452985][ T9026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.491001][ T9026] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.500916][ T9026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.502550][ T9026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.532873][ T9286] bridge0: left allmulticast mode [ 197.572519][ T4340] Alternate GPT is invalid, using primary GPT. [ 197.572636][ T4340] loop2: p2 p3 p7 [ 197.756640][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 197.771788][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 197.773899][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 197.782177][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 197.782616][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 197.783413][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 197.790997][ T9286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.791687][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 197.792810][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 197.794712][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 197.801365][ T9286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.077100][ T6628] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.077158][ T6628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.077736][ T6628] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.077762][ T6628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.116661][ T6601] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.116724][ T6601] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.116767][ T6601] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.116794][ T6601] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.269263][ T9316] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1190'. [ 198.313256][ T9026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.657878][ T9339] random: crng reseeded on system resumption [ 198.712330][ T9339] loop7: detected capacity change from 0 to 512 [ 198.714246][ T9339] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 198.770230][ T9339] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.1193: bad orphan inode 131083 [ 198.770268][ T9339] loop7: lost filesystem error report for type 5 error -117 [ 198.773299][ T9339] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.666578][ T9342] tap0: tun_chr_ioctl cmd 2147767521 [ 199.684859][ T9342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.869847][ T9357] random: crng reseeded on system resumption [ 200.307937][ T9357] loop2: detected capacity change from 0 to 512 [ 200.318287][ T9357] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 200.429787][ T9357] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1195: bad orphan inode 131083 [ 200.429822][ T9357] loop2: lost filesystem error report for type 5 error -117 [ 200.435373][ T9357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.690521][ T7821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.898342][ T9026] veth0_vlan: entered promiscuous mode [ 201.706853][ T9370] loop8: detected capacity change from 0 to 2048 [ 201.718444][ T9026] veth1_vlan: entered promiscuous mode [ 201.729682][ T9026] veth0_macvtap: entered promiscuous mode [ 201.732257][ T9026] veth1_macvtap: entered promiscuous mode [ 201.735518][ T9370] Alternate GPT is invalid, using primary GPT. [ 201.735621][ T9370] loop8: p2 p3 p7 [ 201.737792][ T9026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.739258][ T9026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.137750][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.182890][ T6629] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.184516][ T6629] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.194122][ T6629] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.194171][ T6629] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.235530][ T9380] FAULT_INJECTION: forcing a failure. [ 202.235530][ T9380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.235566][ T9380] CPU: 0 UID: 0 PID: 9380 Comm: syz.3.1202 Tainted: G L syzkaller #0 PREEMPT [ 202.235582][ T9380] Tainted: [L]=SOFTLOCKUP [ 202.235586][ T9380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 202.235592][ T9380] Call trace: [ 202.235596][ T9380] show_stack+0x2c/0x3c (C) [ 202.235613][ T9380] __dump_stack+0x30/0x40 [ 202.235624][ T9380] dump_stack_lvl+0xd8/0x12c [ 202.235634][ T9380] dump_stack+0x1c/0x28 [ 202.235643][ T9380] should_fail_ex+0x41c/0x590 [ 202.235654][ T9380] should_fail+0x14/0x24 [ 202.235661][ T9380] should_fail_usercopy+0x20/0x30 [ 202.235670][ T9380] _inline_copy_from_user+0x3c/0x174 [ 202.235681][ T9380] binder_ioctl_write_read+0x12c/0x9828 [ 202.235690][ T9380] binder_ioctl+0x438/0x1c38 [ 202.235697][ T9380] __arm64_sys_ioctl+0x14c/0x1c4 [ 202.235708][ T9380] invoke_syscall+0x98/0x244 [ 202.235717][ T9380] el0_svc_common+0xec/0x23c [ 202.235727][ T9380] do_el0_svc+0x4c/0x5c [ 202.235736][ T9380] el0_svc+0x64/0x260 [ 202.235744][ T9380] el0t_64_sync_handler+0x48/0x148 [ 202.235752][ T9380] el0t_64_sync+0x198/0x19c [ 202.235778][ T9380] binder: 9379:9380 ioctl c0306201 200004c0 returned -14 [ 202.381397][ T9386] syzkaller0: entered promiscuous mode [ 202.382394][ T9386] syzkaller0: entered allmulticast mode [ 203.289309][ T9393] binder: 9388:9393 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 203.289346][ T9393] binder: 9393 RLIMIT_NICE not set [ 203.415837][ T6626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.415871][ T6626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.421233][ T6626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.421255][ T6626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.437019][ T9392] loop3: detected capacity change from 0 to 2048 [ 204.492424][ T9390] loop2: detected capacity change from 0 to 2048 [ 204.541657][ T9392] Alternate GPT is invalid, using primary GPT. [ 204.541773][ T9392] loop3: p2 p3 p7 [ 204.541967][ T9390] Alternate GPT is invalid, using primary GPT. [ 204.542063][ T9390] loop2: p2 p3 p7 [ 205.684245][ T4417] block nbd1: Possible stuck request 000000009b8b58d5: control (read@0,4096B). Runtime 120 seconds [ 205.700235][ T9416] loop8: detected capacity change from 0 to 2048 [ 205.847165][ T9416] Alternate GPT is invalid, using primary GPT. [ 205.847277][ T9416] loop8: p2 p3 p7 [ 205.995484][ T5485] udevd[5485]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 206.001141][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 206.017813][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 206.556838][ T9429] loop2: detected capacity change from 0 to 2048 [ 206.611863][ T9430] futex_wake_op: syz.3.1212 tries to shift op by 144; fix this program [ 206.703773][ T9433] random: crng reseeded on system resumption [ 207.071514][ T9429] loop2: unable to read partition table [ 207.071599][ T9429] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 207.077477][ T9433] loop7: detected capacity change from 0 to 512 [ 207.078092][ T9433] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 207.083782][ T9433] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.1210: bad orphan inode 131083 [ 207.083815][ T9433] loop7: lost filesystem error report for type 5 error -117 [ 207.086105][ T9433] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.777716][ T4340] Alternate GPT is invalid, using primary GPT. [ 207.777851][ T4340] loop2: p2 p3 p7 [ 208.414669][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 208.420966][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 208.423258][ T5485] udevd[5485]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 208.457279][ T9461] C: renamed from veth1_to_team (while UP) [ 208.462632][ T9461] netlink: 'syz.3.1217': attribute type 1 has an invalid length. [ 208.462663][ T9461] netlink: 'syz.3.1217': attribute type 8 has an invalid length. [ 208.462689][ T9461] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 208.483000][ T7821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.543590][ T9472] loop9: detected capacity change from 0 to 512 [ 208.545301][ T9472] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.550707][ T9470] loop7: detected capacity change from 0 to 4096 [ 208.558417][ T9472] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 208.560128][ T9470] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.563028][ T9472] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002] [ 208.563085][ T9472] System zones: 0-1, 15-15, 18-18, 34-34 [ 208.563232][ T9472] EXT4-fs (loop9): orphan cleanup on readonly fs [ 208.563274][ T9472] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0 [ 208.563319][ T9472] EXT4-fs warning (device loop9): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 208.563336][ T9472] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 208.574967][ T9470] netlink: 'syz.7.1218': attribute type 1 has an invalid length. [ 208.581947][ T9472] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1219: bg 0: block 40: padding at end of block bitmap is not set [ 208.581999][ T9472] loop9: lost filesystem error report for type 5 error -117 [ 208.587545][ T9472] EXT4-fs (loop9): Remounting filesystem read-only [ 208.587629][ T9472] EXT4-fs (loop9): 1 truncate cleaned up [ 208.595184][ T9472] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.601349][ T9470] bond1: (slave veth3): Enslaving as an active interface with a down link [ 208.618306][ T9478] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 208.622507][ T7821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.993323][ T9494] netlink: 'syz.3.1224': attribute type 12 has an invalid length. [ 208.993358][ T9494] netlink: 'syz.3.1224': attribute type 29 has an invalid length. [ 208.993380][ T9494] netlink: 'syz.3.1224': attribute type 7 has an invalid length. [ 208.993392][ T9494] netlink: 'syz.3.1224': attribute type 37 has an invalid length. [ 208.993404][ T9494] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1224'. [ 209.805050][ T9026] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.485141][ T9512] loop2: detected capacity change from 0 to 2048 [ 210.925890][ T9518] loop3: detected capacity change from 0 to 1024 [ 210.996040][ T4340] Alternate GPT is invalid, using primary GPT. [ 210.996146][ T4340] loop2: p2 p3 p7 [ 211.143606][ T9540] random: crng reseeded on system resumption [ 211.481884][ T9550] loop3: detected capacity change from 0 to 256 [ 211.486785][ T9506] loop9: detected capacity change from 0 to 512 [ 211.489907][ T9506] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 211.495742][ T9506] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.1229: bad orphan inode 131083 [ 211.495792][ T9506] loop9: lost filesystem error report for type 5 error -117 [ 211.496699][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 211.497559][ T9552] tap0: tun_chr_ioctl cmd 2147767521 [ 211.502506][ T9506] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.511821][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 211.592286][ T5485] udevd[5485]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 212.672044][ T9576] loop2: detected capacity change from 0 to 512 [ 212.811990][ T9576] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 212.850293][ T9571] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 212.850318][ T9571] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.852369][ T9571] vhci_hcd vhci_hcd.0: Device attached [ 212.861781][ T9576] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1243: bad orphan inode 131083 [ 212.861861][ T9576] loop2: lost filesystem error report for type 5 error -117 [ 212.868279][ T9576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.308981][ T4468] usb 8-1: new low-speed USB device number 3 using vhci_hcd [ 213.558349][ T9571] loop3: detected capacity change from 0 to 8192 [ 213.565852][ T9571] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.569204][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.587843][ T9580] macvlan1: entered promiscuous mode [ 213.597455][ T9580] ipvlan0: entered promiscuous mode [ 213.597914][ T9580] ipvlan0: left promiscuous mode [ 213.616014][ T9580] macvlan1: left promiscuous mode [ 213.729150][ T9581] vhci_hcd: connection reset by peer [ 213.777032][ T6628] vhci_hcd vhci_hcd.3: stop threads [ 213.777069][ T6628] vhci_hcd vhci_hcd.3: release socket [ 213.777111][ T6628] vhci_hcd vhci_hcd.3: disconnect device [ 213.815278][ T9604] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1248'. [ 213.832416][ T9604] vlan2: entered allmulticast mode [ 213.834545][ T9604] bridge1: entered allmulticast mode [ 214.364405][ T9614] loop8: detected capacity change from 0 to 2048 [ 215.142203][ T9621] loop7: detected capacity change from 0 to 1024 [ 215.160984][ T9621] EXT4-fs (loop7): bad geometry: first data block is 0 with a 1k block and cluster size [ 215.284306][ T9630] tap0: tun_chr_ioctl cmd 2147767521 [ 215.294143][ T9627] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 215.511201][ T9643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.513345][ T9643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.522584][ T9643] fuse: Bad value for 'fd' [ 215.784679][ T9026] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.817535][ T9651] netlink: 'syz.8.1257': attribute type 4 has an invalid length. [ 215.823264][ T9651] netlink: 17 bytes leftover after parsing attributes in process `syz.8.1257'. [ 215.855543][ T9653] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.855739][ T9653] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.899897][ T9655] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 215.899932][ T9655] overlayfs: failed to set xattr on upper [ 215.900359][ T9655] overlayfs: ...falling back to redirect_dir=nofollow. [ 215.900374][ T9655] overlayfs: ...falling back to metacopy=off. [ 215.900380][ T9655] overlayfs: ...falling back to index=off. [ 215.900386][ T9655] overlayfs: ...falling back to uuid=null. [ 216.072787][ T9653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.074937][ T9653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.312489][ T6603] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.312551][ T6603] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.312591][ T6603] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.312615][ T6603] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.414125][ T9660] loop2: detected capacity change from 0 to 256 [ 216.525311][ T9662] random: crng reseeded on system resumption [ 216.617589][ T9663] loop9: detected capacity change from 0 to 512 [ 216.623025][ T9663] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 216.710456][ T9663] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.1259: bad orphan inode 131083 [ 216.710497][ T9663] loop9: lost filesystem error report for type 5 error -117 [ 216.716961][ T9663] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.592117][ T9679] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 217.598337][ T9026] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.877310][ T9681] loop8: detected capacity change from 0 to 2048 [ 217.940775][ T9681] Alternate GPT is invalid, using primary GPT. [ 217.941249][ T9681] loop8: p2 p3 p7 [ 218.478776][ T4468] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 218.718498][ T9697] loop7: detected capacity change from 0 to 256 [ 218.720476][ T9699] loop8: detected capacity change from 0 to 256 [ 218.735829][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 218.740929][ T5485] udevd[5485]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 218.744381][ T5030] udevd[5030]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 219.031849][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 219.037401][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 219.045910][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 219.153863][ T9714] binder: 9713:9714 ioctl c0306214 200004c0 returned -22 [ 219.362728][ T9711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.366331][ T9711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.383799][ T9711] binder: 9710:9711 tried to acquire reference to desc 0, got 1 instead [ 219.387178][ T9711] binder: cannot allocate buffer: no space left [ 219.387392][ T9711] binder: 9710:9711 transaction async to 9710:0 failed 159/29201/-28, code 0 size 0-65530 line 3393 [ 219.391775][ T866] binder: undelivered TRANSACTION_ERROR: 29201 [ 219.831308][ T9733] loop2: detected capacity change from 0 to 128 [ 219.833217][ T9733] EXT4-fs (loop2): Test dummy encryption mode enabled [ 219.836899][ T9733] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 219.838501][ T9733] System zones: 1-3, 19-19, 35-36 [ 219.840534][ T9733] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 219.850929][ T9733] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 219.850954][ T9733] EXT4-fs: user quota file already specified [ 219.916971][ T9737] tipc: Enabled bearer , priority 10 [ 220.456743][ T9746] loop8: detected capacity change from 0 to 2048 [ 220.624124][ T9746] Alternate GPT is invalid, using primary GPT. [ 220.624716][ T9746] loop8: p2 p3 p7 [ 220.894564][ T9748] loop3: detected capacity change from 0 to 256 [ 220.922858][ T4340] Alternate GPT is invalid, using primary GPT. [ 220.922961][ T4340] loop8: p2 p3 p7 [ 221.312734][ T4714] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.395462][ T9761] syzkaller0: entered promiscuous mode [ 221.395500][ T9761] syzkaller0: entered allmulticast mode [ 221.419899][ T9763] loop2: detected capacity change from 0 to 128 [ 221.644964][ T9768] loop3: detected capacity change from 0 to 8192 [ 221.695721][ T9768] loop3: RDSK (0) [ 221.695721][ T9768] AHDI p2 p3 p4 [ 221.695939][ T9768] loop3: p2 start 4294967046 is beyond EOD, truncated [ 221.695969][ T9768] loop3: p3 size 67164644 extends beyond EOD, truncated [ 221.894142][ T9763] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.575431][ T4340] loop3: RDSK (0) [ 222.575431][ T4340] AHDI p2 p3 p4 [ 222.575547][ T4340] loop3: p2 start 4294967046 is beyond EOD, truncated [ 222.575582][ T4340] loop3: p3 size 67164644 extends beyond EOD, truncated [ 222.641832][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 222.650720][ T4714] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.659381][ T4693] udevd[4693]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 222.663364][ T5485] udevd[5485]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 222.702220][ T5030] udevd[5030]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 222.714445][ T9777] tap0: tun_chr_ioctl cmd 2147767521 [ 222.791191][ T9777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.021747][ T9793] random: crng reseeded on system resumption [ 223.098819][ T9793] loop2: detected capacity change from 0 to 512 [ 223.103187][ T9793] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 223.155462][ T9793] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1296: bad orphan inode 131083 [ 223.155499][ T9793] loop2: lost filesystem error report for type 5 error -117 [ 223.158733][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 223.158765][ C0] EXT4-fs (loop2): initial error at time 223: ext4_orphan_get:1423 [ 223.158791][ C0] EXT4-fs (loop2): last error at time 223: ext4_orphan_get:1423 [ 223.174046][ T9793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.121226][ T9806] loop3: detected capacity change from 0 to 4096 [ 224.502367][ T9808] loop8: detected capacity change from 0 to 2048 [ 224.925069][ T9806] overlayfs: failed to resolve './bus': -2 [ 224.941927][ T9811] syzkaller0: entered promiscuous mode [ 224.942969][ T9811] syzkaller0: entered allmulticast mode [ 225.060251][ T9808] loop8: unable to read partition table [ 225.060357][ T9808] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 225.078551][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.083597][ T4340] Alternate GPT is invalid, using primary GPT. [ 225.083699][ T4340] loop8: p2 p3 p7 [ 225.251853][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 225.268079][ T5485] udevd[5485]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 225.277453][ T5030] udevd[5030]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 226.275392][ T9830] tap0: tun_chr_ioctl cmd 2147767521 [ 226.276843][ T9830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.297967][ T9832] loop3: detected capacity change from 0 to 512 [ 226.302753][ T9832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 226.302822][ T9832] System zones: 1-12 [ 226.305465][ T9832] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.1309: Directory hole found for htree index block 0 [ 226.305507][ T9832] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 226.306069][ T9832] EXT4-fs (loop3): Remounting filesystem read-only [ 226.306125][ T9832] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 226.306156][ T9832] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 226.306650][ T9832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.265410][ T9832] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1309'. [ 228.816930][ T9854] random: crng reseeded on system resumption [ 228.895773][ T9855] loop9: detected capacity change from 0 to 512 [ 228.899903][ T9855] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 228.948748][ T9855] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.1313: bad orphan inode 131083 [ 228.948832][ T9855] loop9: lost filesystem error report for type 5 error -117 [ 228.966014][ T9855] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.329084][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.450199][ T9862] loop3: detected capacity change from 0 to 1024 [ 229.451707][ T9862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.472133][ T9863] syzkaller0: entered promiscuous mode [ 229.473194][ T9863] syzkaller0: entered allmulticast mode [ 229.494264][ T9862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.052296][ T9877] loop2: detected capacity change from 0 to 2048 [ 230.642216][ T9877] loop2: unable to read partition table [ 230.642317][ T9877] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 230.654417][ T4340] Alternate GPT is invalid, using primary GPT. [ 230.655543][ T4340] loop2: p2 p3 p7 [ 230.664834][ T9026] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.667361][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.711479][ T9883] loop3: detected capacity change from 0 to 256 [ 231.303168][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 231.304218][ T5485] udevd[5485]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 231.309695][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 231.343315][ T9900] tap0: tun_chr_ioctl cmd 2147767521 [ 231.348116][ T9900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.055832][ T9919] random: crng reseeded on system resumption [ 232.083407][ T9919] loop9: detected capacity change from 0 to 512 [ 232.086412][ T9919] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 232.112367][ T9919] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.1329: bad orphan inode 131083 [ 232.112417][ T9919] loop9: lost filesystem error report for type 5 error -117 [ 232.113921][ T9919] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.883757][ T9931] loop3: detected capacity change from 0 to 256 [ 232.886585][ T4721] Bluetooth: hci0: link tx timeout [ 232.886777][ T4721] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.901978][ T4710] Bluetooth: hci0: link tx timeout [ 232.902004][ T4710] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.911294][ T4710] Bluetooth: hci0: link tx timeout [ 232.911321][ T4710] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.928570][ T4710] Bluetooth: hci0: link tx timeout [ 232.928607][ T4710] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.931003][ T4710] Bluetooth: hci0: link tx timeout [ 232.932748][ T4710] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.934558][ T4710] Bluetooth: hci0: link tx timeout [ 232.934578][ T4710] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.058612][ T9026] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.860536][ T9949] bridge0: port 3(wlan1) entered blocking state [ 233.860599][ T9949] bridge0: port 3(wlan1) entered disabled state [ 233.860786][ T9949] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 233.861294][ T9949] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 233.875810][ T9949] loop7: detected capacity change from 0 to 512 [ 234.217354][ T9949] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.1338: iget: bad i_size value: 38620345925642 [ 234.217438][ T9949] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 234.217714][ T9949] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1338: couldn't read orphan inode 15 (err -117) [ 234.217727][ T9949] loop7: lost filesystem error report for type 5 error -117 [ 234.218284][ T9949] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.810047][ T9957] fuse: fd is not a fuse device [ 234.816648][ T9957] input: syz1 as /devices/virtual/input/input9 [ 234.842021][ T7821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.887666][ T4710] Bluetooth: hci0: link tx timeout [ 234.887695][ T4710] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 234.888321][ T4710] Bluetooth: hci0: link tx timeout [ 234.888335][ T4710] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 234.960145][ T4710] Bluetooth: hci0: command 0x0406 tx timeout [ 234.982079][ T9974] binder: 9973:9974 ioctl c0306201 0 returned -14 [ 234.982417][ T9974] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 234.982503][ T9974] SET target dimension over the limit! [ 235.020732][ T9979] loop7: detected capacity change from 0 to 128 [ 235.056567][ T9979] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.175958][ T9986] random: crng reseeded on system resumption [ 235.294168][ T9987] loop3: detected capacity change from 0 to 512 [ 235.354824][ T9987] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 235.392716][ T9987] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1347: bad orphan inode 131083 [ 235.392804][ T9987] loop3: lost filesystem error report for type 5 error -117 [ 235.400333][ T9987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.962492][ T7821] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.836883][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.984491][T10004] batadv_slave_0: entered promiscuous mode [ 236.987381][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1356'. [ 237.038554][ T4417] block nbd1: Possible stuck request 000000009b8b58d5: control (read@0,4096B). Runtime 150 seconds [ 237.051894][T10007] FAULT_INJECTION: forcing a failure. [ 237.051894][T10007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.051933][T10007] CPU: 0 UID: 0 PID: 10007 Comm: syz.9.1357 Tainted: G L syzkaller #0 PREEMPT [ 237.051948][T10007] Tainted: [L]=SOFTLOCKUP [ 237.051952][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 237.051958][T10007] Call trace: [ 237.051962][T10007] show_stack+0x2c/0x3c (C) [ 237.051979][T10007] __dump_stack+0x30/0x40 [ 237.051991][T10007] dump_stack_lvl+0xd8/0x12c [ 237.052001][T10007] dump_stack+0x1c/0x28 [ 237.052010][T10007] should_fail_ex+0x41c/0x590 [ 237.052020][T10007] should_fail+0x14/0x24 [ 237.052028][T10007] should_fail_usercopy+0x20/0x30 [ 237.052037][T10007] _copy_to_iter+0x18c/0x10f8 [ 237.052047][T10007] seq_read_iter+0x9f0/0xbe8 [ 237.052058][T10007] proc_reg_read_iter+0x1c4/0x224 [ 237.052067][T10007] vfs_read+0x498/0x8c8 [ 237.052077][T10007] ksys_read+0x12c/0x228 [ 237.052086][T10007] __arm64_sys_read+0x7c/0x90 [ 237.052095][T10007] invoke_syscall+0x98/0x244 [ 237.052105][T10007] el0_svc_common+0xec/0x23c [ 237.052115][T10007] do_el0_svc+0x4c/0x5c [ 237.052124][T10007] el0_svc+0x64/0x260 [ 237.052132][T10007] el0t_64_sync_handler+0x48/0x148 [ 237.052140][T10007] el0t_64_sync+0x198/0x19c [ 237.155015][T10004] batadv_slave_0: left promiscuous mode [ 237.167707][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 237.167737][T10018] openvswitch: netlink: Flow actions attr not present in new flow. [ 237.203740][T10020] netlink: 212864 bytes leftover after parsing attributes in process `syz.2.1361'. [ 238.233448][T10034] netlink: 'syz.3.1364': attribute type 26 has an invalid length. [ 238.559570][T10043] syzkaller0: entered promiscuous mode [ 238.559604][T10043] syzkaller0: entered allmulticast mode [ 239.949861][T10050] random: crng reseeded on system resumption [ 239.982119][T10050] loop7: detected capacity change from 0 to 512 [ 240.719198][T10050] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 240.748126][T10050] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.1365: bad orphan inode 131083 [ 240.748184][T10050] loop7: lost filesystem error report for type 5 error -117 [ 240.752646][T10050] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.898092][T10059] netlink: 'syz.9.1372': attribute type 5 has an invalid length. [ 240.957022][T10061] loop9: detected capacity change from 0 to 1024 [ 241.031995][ T7821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.102388][T10069] loop9: detected capacity change from 0 to 2048 [ 241.142328][T10069] GPT:first_usable_lbas don't match. [ 241.142357][T10069] GPT:34 != 290 [ 241.142379][T10069] GPT: Use GNU Parted to correct GPT errors. [ 241.142429][T10069] loop9: p1 p2 p3 [ 241.390537][T10073] loop7: detected capacity change from 0 to 8192 [ 241.483810][T10073] loop7: RDSK (0) [ 241.483810][T10073] AHDI p2 p3 p4 [ 241.484589][T10073] loop7: p2 start 4294967046 is beyond EOD, truncated [ 241.484670][T10073] loop7: p3 size 67164644 extends beyond EOD, truncated [ 242.430971][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 242.453410][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 242.454915][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 243.302147][T10091] netlink: 'syz.8.1377': attribute type 12 has an invalid length. [ 243.302249][T10091] netlink: 'syz.8.1377': attribute type 29 has an invalid length. [ 243.302313][T10091] netlink: 'syz.8.1377': attribute type 7 has an invalid length. [ 243.302366][T10091] netlink: 'syz.8.1377': attribute type 37 has an invalid length. [ 243.302419][T10091] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1377'. [ 243.340052][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 245.081092][T10101] netlink: 'syz.7.1382': attribute type 12 has an invalid length. [ 245.081154][T10101] netlink: 'syz.7.1382': attribute type 29 has an invalid length. [ 245.081187][T10101] netlink: 'syz.7.1382': attribute type 7 has an invalid length. [ 245.081208][T10101] netlink: 'syz.7.1382': attribute type 37 has an invalid length. [ 245.081224][T10101] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1382'. [ 246.232667][T10108] random: crng reseeded on system resumption [ 246.667802][ T4710] Bluetooth: hci1: command 0x0406 tx timeout [ 247.774434][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1390'. [ 247.998422][T10136] 9p: Bad value for 'wfdno' [ 248.602012][T10139] loop9: detected capacity change from 0 to 2048 [ 249.019541][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1393'. [ 249.079022][ T1592] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.079076][ T1592] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.108087][T10143] tap0: tun_chr_ioctl cmd 2147767521 [ 249.112973][T10143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.120813][T10139] loop9: unable to read partition table [ 249.120910][T10139] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 249.470217][T10147] loop3: detected capacity change from 0 to 8192 [ 249.551431][T10147] loop3: RDSK (0) [ 249.551431][T10147] AHDI p2 p3 p4 [ 249.552072][T10147] loop3: p2 start 4294967046 is beyond EOD, truncated [ 249.552142][T10147] loop3: p3 size 67164644 extends beyond EOD, truncated [ 250.069451][ T4340] Alternate GPT is invalid, using primary GPT. [ 250.069565][ T4340] loop9: p2 p3 p7 [ 251.247459][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 251.283208][T10164] loop9: detected capacity change from 0 to 128 [ 251.333228][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 251.336244][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 252.395795][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 252.616728][T10183] random: crng reseeded on system resumption [ 253.107468][T10184] loop2: detected capacity change from 0 to 128 [ 253.441179][T10164] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.452333][ T9026] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.476300][T10173] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1399'. [ 254.495007][T10190] loop7: detected capacity change from 0 to 512 [ 254.530169][T10190] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 254.540181][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1405'. [ 254.587617][T10190] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.1403: bad orphan inode 131083 [ 254.587685][T10190] loop7: lost filesystem error report for type 5 error -117 [ 254.591512][T10190] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.598569][ T7821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.615619][T10198] netlink: 'syz.2.1411': attribute type 4 has an invalid length. [ 255.615655][T10198] netlink: 'syz.2.1411': attribute type 17 has an invalid length. [ 255.698170][T10203] random: crng reseeded on system resumption [ 255.753079][T10203] loop9: detected capacity change from 0 to 512 [ 255.791867][T10203] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 255.941517][T10203] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.1409: bad orphan inode 131083 [ 255.941600][T10203] loop9: lost filesystem error report for type 5 error -117 [ 255.949295][T10203] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.402520][T10205] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1412'. [ 256.479487][T10207] tap0: tun_chr_ioctl cmd 2147767521 [ 256.480195][T10207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.667890][ T9026] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.810231][T10224] loop7: detected capacity change from 0 to 128 [ 256.822053][T10224] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1417'. [ 256.825168][T10224] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1417'. [ 256.845506][T10225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1420'. [ 257.753859][T10226] loop9: detected capacity change from 0 to 2048 [ 257.778821][T10226] Alternate GPT is invalid, using primary GPT. [ 257.778918][T10226] loop9: p2 p3 p7 [ 258.222641][T10229] random: crng reseeded on system resumption [ 258.320852][T10230] loop8: detected capacity change from 0 to 512 [ 258.730593][T10230] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 258.765882][T10230] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.1419: bad orphan inode 131083 [ 258.765968][T10230] loop8: lost filesystem error report for type 5 error -117 [ 258.773052][T10230] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.256753][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 259.271033][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 259.300180][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 259.306023][T10236] tipc: Enabled bearer , priority 0 [ 259.307977][T10236] syzkaller0: entered promiscuous mode [ 259.309086][T10236] syzkaller0: entered allmulticast mode [ 259.365416][ T8138] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.962247][T10239] loop9: detected capacity change from 0 to 2048 [ 260.117864][T10239] Alternate GPT is invalid, using primary GPT. [ 260.118338][T10239] loop9: p2 p3 p7 [ 260.386799][ T4340] Alternate GPT is invalid, using primary GPT. [ 260.388005][ T4340] loop9: p2 p3 p7 [ 260.391801][T10241] tipc: Resetting bearer [ 260.474548][T10235] tipc: Resetting bearer [ 260.481952][T10235] tipc: Disabling bearer [ 260.484409][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 260.494727][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 260.498191][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 260.498260][T10245] loop9: detected capacity change from 0 to 512 [ 260.707789][T10248] loop8: detected capacity change from 0 to 2048 [ 260.787411][T10248] Alternate GPT is invalid, using primary GPT. [ 260.787993][T10248] loop8: p2 p3 p7 [ 261.245353][T10245] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 261.268820][T10245] EXT4-fs (loop9): invalid journal inode [ 261.268899][T10245] EXT4-fs (loop9): can't get journal size [ 261.280271][ T4340] Alternate GPT is invalid, using primary GPT. [ 261.280406][ T4340] loop8: p2 p3 p7 [ 261.283513][T10245] EXT4-fs (loop9): 1 truncate cleaned up [ 261.283947][T10245] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.401551][ T5485] udevd[5485]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 261.414272][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 261.418494][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 261.478294][ T9026] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.485034][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 261.558046][T10260] tap0: tun_chr_ioctl cmd 2147767521 [ 261.558658][T10260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.621033][ T4710] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.621897][ T4710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.622754][ T4710] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.623145][ T4710] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.623368][ T4710] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 261.641748][ T4721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.645773][ T4721] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.646891][ T4721] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.647228][ T4721] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.647449][ T4721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 262.748020][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1438'. [ 263.535435][T10302] loop9: detected capacity change from 0 to 512 [ 263.572678][T10302] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.1436: iget: bad i_size value: 38620345925642 [ 263.572763][T10302] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 263.573378][T10302] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.1436: couldn't read orphan inode 15 (err -117) [ 263.573433][T10302] loop9: lost filesystem error report for type 5 error -117 [ 263.578991][T10302] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.713530][ T4707] Bluetooth: hci4: command tx timeout [ 263.715830][ T4721] Bluetooth: hci1: command tx timeout [ 263.820664][ T6610] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.820676][T10307] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1436'. [ 263.820693][ T6610] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.830286][T10299] bridge0: port 3(wlan1) entered blocking state [ 263.830659][T10299] bridge0: port 3(wlan1) entered disabled state [ 263.830821][T10299] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 263.831341][T10299] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 263.861306][T10310] loop3: detected capacity change from 0 to 256 [ 264.250521][ T6610] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.254309][ T6610] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.256213][ T9026] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.393370][ T6610] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.393417][ T6610] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.606958][T10334] loop9: detected capacity change from 0 to 2048 [ 264.688943][T10334] Alternate GPT is invalid, using primary GPT. [ 264.689629][T10334] loop9: p2 p3 p7 [ 265.169487][ T4395] 8021q: adding VLAN 0 to HW filter on device eth8 [ 265.188107][T10339] loop8: detected capacity change from 0 to 512 [ 265.203212][T10339] EXT4-fs (loop8): Invalid log cluster size: 31 [ 265.225129][ T4728] udevd[4728]: incorrect ext4 checksum on /dev/loop8 [ 265.244016][ T4728] udevd[4728]: incorrect ext4 checksum on /dev/loop8 [ 265.402633][T10351] loop8: detected capacity change from 0 to 512 [ 265.491060][T10351] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.525461][ T8138] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.128859][ T4707] Bluetooth: hci4: command tx timeout [ 266.130125][ T4721] Bluetooth: hci1: command tx timeout [ 266.334047][T10370] loop9: detected capacity change from 0 to 2048 [ 266.543023][ T4340] Alternate GPT is invalid, using primary GPT. [ 266.543133][ T4340] loop9: p2 p3 p7 [ 266.660302][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 266.664008][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 266.667851][ T4395] 8021q: adding VLAN 0 to HW filter on device eth11 [ 266.885863][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 266.929128][ T6610] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 266.929166][ T6610] mac80211_hwsim hwsim19 wlan1: left promiscuous mode [ 266.929256][ T6610] bridge0: port 3(wlan1) entered disabled state [ 266.936137][ T6610] bridge_slave_1: left allmulticast mode [ 266.938279][ T6610] bridge_slave_1: left promiscuous mode [ 266.941212][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.944893][ T6610] bridge_slave_0: left allmulticast mode [ 266.946198][ T6610] bridge_slave_0: left promiscuous mode [ 266.947635][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.318987][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.322553][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.412826][T10390] loop3: detected capacity change from 0 to 512 [ 268.146488][T10397] loop3: detected capacity change from 0 to 2048 [ 268.168863][ T4707] Bluetooth: hci1: command tx timeout [ 268.172296][ T4721] Bluetooth: hci4: command tx timeout [ 268.199001][T10397] Alternate GPT is invalid, using primary GPT. [ 268.199137][T10397] loop3: p2 p3 p7 [ 268.567815][ T4417] block nbd1: Possible stuck request 000000009b8b58d5: control (read@0,4096B). Runtime 180 seconds [ 268.594041][ T6610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.627375][ T6610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.656202][ T6610] bond0 (unregistering): Released all slaves [ 268.663285][T10400] binder: 10399:10400 tried to acquire reference to desc 0, got 1 instead [ 268.665251][T10400] binder: 10399:10400 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 268.667059][T10400] binder: 10400 RLIMIT_NICE not set [ 268.667091][T10400] binder: 10400 RLIMIT_NICE not set [ 268.667256][T10400] binder: 10400 RLIMIT_NICE not set [ 268.683925][ T4802] binder: undelivered TRANSACTION_COMPLETE [ 268.683963][ T4802] binder: undelivered transaction 166, process died. [ 268.684085][ T4802] binder: undelivered TRANSACTION_COMPLETE [ 268.693882][ T6610] bond1 (unregistering): (slave veth3): Releasing active interface [ 268.714888][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 268.716077][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 268.717127][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 268.723027][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 268.725063][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 268.745149][ T6610] bond1 (unregistering): Released all slaves [ 269.002402][T10405] loop3: detected capacity change from 0 to 2048 [ 269.115042][T10405] Alternate GPT is invalid, using primary GPT. [ 269.115650][T10405] loop3: p2 p3 p7 [ 269.581757][ T4340] Alternate GPT is invalid, using primary GPT. [ 269.581860][ T4340] loop3: p2 p3 p7 [ 269.693348][ T6610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.764202][ T6610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.791016][ T6610] bond0 (unregistering): Released all slaves [ 269.797332][ T6610] bond1 (unregistering): Released all slaves [ 269.808942][T10262] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.808987][T10262] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.809091][T10262] bridge_slave_0: entered allmulticast mode [ 269.809572][T10262] bridge_slave_0: entered promiscuous mode [ 269.843891][T10411] loop8: detected capacity change from 0 to 256 [ 269.851367][T10410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1456'. [ 269.852858][T10410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1456'. [ 269.867478][T10262] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.870286][T10262] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.873783][T10262] bridge_slave_1: entered allmulticast mode [ 269.876570][T10262] bridge_slave_1: entered promiscuous mode [ 269.915435][T10410] FAULT_INJECTION: forcing a failure. [ 269.915435][T10410] name failslab, interval 1, probability 0, space 0, times 0 [ 269.915476][T10410] CPU: 1 UID: 0 PID: 10410 Comm: syz.3.1456 Tainted: G L syzkaller #0 PREEMPT [ 269.915491][T10410] Tainted: [L]=SOFTLOCKUP [ 269.915495][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 269.915501][T10410] Call trace: [ 269.915504][T10410] show_stack+0x2c/0x3c (C) [ 269.915525][T10410] __dump_stack+0x30/0x40 [ 269.915537][T10410] dump_stack_lvl+0xd8/0x12c [ 269.915547][T10410] dump_stack+0x1c/0x28 [ 269.915556][T10410] should_fail_ex+0x41c/0x590 [ 269.915567][T10410] should_failslab+0xc4/0x120 [ 269.915576][T10410] kmem_cache_alloc_lru_noprof+0x94/0x618 [ 269.915585][T10410] __d_alloc+0x50/0x68c [ 269.915593][T10410] d_alloc+0x54/0x17c [ 269.915599][T10410] lookup_one_qstr_excl+0x9c/0x200 [ 269.915608][T10410] __start_dirop+0xb8/0xf4 [ 269.915615][T10410] start_dirop+0x38/0x4c [ 269.915622][T10410] simple_start_creating+0xcc/0x114 [ 269.915632][T10410] debugfs_start_creating+0xf8/0x1ac [ 269.915640][T10410] __debugfs_create_file+0x7c/0x36c [ 269.915648][T10410] debugfs_create_file_full+0x58/0x70 [ 269.915656][T10410] ref_tracker_dir_debugfs+0x174/0x2f0 [ 269.915664][T10410] alloc_netdev_mqs+0x1fc/0xee4 [ 269.915673][T10410] rtnl_create_link+0x2b0/0xb78 [ 269.915681][T10410] rtnl_newlink_create+0x210/0x764 [ 269.915691][T10410] rtnl_newlink+0xdc4/0x1144 [ 269.915700][T10410] rtnetlink_rcv_msg+0x66c/0x9bc [ 269.915709][T10410] netlink_rcv_skb+0x238/0x414 [ 269.915719][T10410] rtnetlink_rcv+0x28/0x38 [ 269.915728][T10410] netlink_unicast+0x600/0x7f8 [ 269.915737][T10410] netlink_sendmsg+0x648/0x948 [ 269.915747][T10410] __sock_sendmsg+0xc8/0x138 [ 269.915757][T10410] ____sys_sendmsg+0x3d0/0x6c8 [ 269.915764][T10410] ___sys_sendmsg+0x198/0x224 [ 269.915777][T10410] __sys_sendmsg+0x160/0x214 [ 269.915784][T10410] __arm64_sys_sendmsg+0x80/0x94 [ 269.915791][T10410] invoke_syscall+0x98/0x244 [ 269.915801][T10410] el0_svc_common+0xec/0x23c [ 269.915810][T10410] do_el0_svc+0x4c/0x5c [ 269.915819][T10410] el0_svc+0x64/0x260 [ 269.915828][T10410] el0t_64_sync_handler+0x48/0x148 [ 269.915835][T10410] el0t_64_sync+0x198/0x19c [ 270.087384][T10262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.090596][T10262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.100384][T10262] team0: Port device team_slave_0 added [ 270.103442][T10262] team0: Port device team_slave_1 added [ 270.155020][ T4395] 8021q: adding VLAN 0 to HW filter on device eth10 [ 270.159890][T10262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.159911][T10262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.160110][T10262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.161732][T10262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.161748][T10262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.162032][T10262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.173149][T10262] hsr_slave_0: entered promiscuous mode [ 270.173503][T10262] hsr_slave_1: entered promiscuous mode [ 270.174667][T10262] debugfs: 'hsr0' already exists in 'hsr' [ 270.175378][T10262] Cannot create hsr debugfs directory [ 270.239587][ T4707] Bluetooth: hci1: command tx timeout [ 270.239675][ T4721] Bluetooth: hci4: command tx timeout [ 270.550480][T10261] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.551900][T10261] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.553223][T10261] bridge_slave_0: entered allmulticast mode [ 270.554776][T10261] bridge_slave_0: entered promiscuous mode [ 270.565901][T10261] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.565973][T10261] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.566146][T10261] bridge_slave_1: entered allmulticast mode [ 270.570829][T10261] bridge_slave_1: entered promiscuous mode [ 270.856025][T10261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.924500][T10261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.930105][T10444] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1462'. [ 270.973980][T10261] team0: Port device team_slave_0 added [ 271.040577][T10261] team0: Port device team_slave_1 added [ 271.046523][T10261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.046533][T10261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.046546][T10261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.047078][T10261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.047085][T10261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.047097][T10261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.182955][ T6610] hsr_slave_0: left promiscuous mode [ 271.187276][ T6610] hsr_slave_1: left promiscuous mode [ 271.188935][ T6610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.193388][ T6610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.203375][ T6610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.204896][ T6610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.261594][ T6610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.262906][ T6610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.442275][T10468] loop8: detected capacity change from 0 to 2048 [ 271.713044][T10468] Alternate GPT is invalid, using primary GPT. [ 271.713614][T10468] loop8: p2 p3 p7 [ 272.240552][ T4340] Alternate GPT is invalid, using primary GPT. [ 272.240662][ T4340] loop8: p2 p3 p7 [ 272.511226][T10473] loop3: detected capacity change from 0 to 128 [ 273.468998][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1466'. [ 273.651877][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 273.659061][ T5485] udevd[5485]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 273.663331][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 273.703733][T10487] loop8: detected capacity change from 0 to 256 [ 273.751135][ T6610] team0 (unregistering): Port device team_slave_1 removed [ 273.757811][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 273.757877][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 273.758445][ T6610] team0 (unregistering): Port device team_slave_0 removed [ 273.765940][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 273.856635][ T6610] pim6reg (unregistering): left allmulticast mode [ 273.947467][ T6610] team0 (unregistering): Port device team_slave_1 removed [ 273.953741][ T6610] team0 (unregistering): Port device team_slave_0 removed [ 274.041934][ T4395] 8021q: adding VLAN 0 to HW filter on device eth9 [ 274.064807][T10261] hsr_slave_0: entered promiscuous mode [ 274.079458][T10261] hsr_slave_1: entered promiscuous mode [ 274.080901][T10261] debugfs: 'hsr0' already exists in 'hsr' [ 274.086337][T10261] Cannot create hsr debugfs directory [ 274.775599][T10503] loop8: detected capacity change from 0 to 2048 [ 274.831111][T10503] Alternate GPT is invalid, using primary GPT. [ 274.831450][T10503] loop8: p2 p3 p7 [ 275.351088][T10519] random: crng reseeded on system resumption [ 275.417097][T10520] loop9: detected capacity change from 0 to 512 [ 275.511870][T10520] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 275.621799][T10520] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.1475: bad orphan inode 131083 [ 275.621885][T10520] loop9: lost filesystem error report for type 5 error -117 [ 275.630515][T10520] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.258049][ T4395] 8021q: adding VLAN 0 to HW filter on device eth12 [ 276.362058][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 276.372502][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 276.386846][ T5030] udevd[5030]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 276.452049][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 276.551052][ T9026] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.712183][T10558] dummy0: entered promiscuous mode [ 276.713997][T10558] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 276.715448][T10558] debugfs: 'hsr1' already exists in 'hsr' [ 276.715464][T10558] Cannot create hsr debugfs directory [ 276.716334][T10558] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 276.716349][T10558] hsr1: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 276.716730][T10558] hsr1: entered allmulticast mode [ 276.716745][T10558] dummy0: entered allmulticast mode [ 276.716774][T10558] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 276.849377][ T4395] 8021q: adding VLAN 0 to HW filter on device eth13 [ 278.672488][T10571] loop3: detected capacity change from 0 to 2048 [ 278.784042][T10571] Alternate GPT is invalid, using primary GPT. [ 278.784648][T10571] loop3: p2 p3 p7 [ 278.976432][ T4340] Alternate GPT is invalid, using primary GPT. [ 278.976536][ T4340] loop3: p2 p3 p7 [ 279.403014][T10581] binder: 10580:10581 ioctl c0306201 0 returned -14 [ 279.403214][T10581] binder: 10580:10581 got transaction to invalid handle, 1 [ 279.403238][T10581] binder: 10580:10581 cannot find target node [ 279.403257][T10581] binder: 10580:10581 transaction call to 0:0 failed 167/29201/-22, code 0 size 0-0 line 3236 [ 279.403428][ T4817] binder: undelivered TRANSACTION_ERROR: 29201 [ 279.421262][T10578] loop9: detected capacity change from 0 to 2048 [ 279.487345][T10578] Alternate GPT is invalid, using primary GPT. [ 279.487743][T10578] loop9: p2 p3 p7 [ 280.280605][ T4340] Alternate GPT is invalid, using primary GPT. [ 280.280694][ T4340] loop9: p2 p3 p7 [ 280.308182][T10593] tap0: tun_chr_ioctl cmd 1074025675 [ 280.308216][T10593] tap0: persist disabled [ 280.355794][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 280.361289][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 280.379954][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 280.382819][ T5030] udevd[5030]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 280.389590][ T5485] udevd[5485]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 280.395897][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 280.447612][ T5030] udevd[5030]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 280.450380][ T4693] udevd[4693]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 280.453833][ T5485] udevd[5485]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 280.455701][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 280.955836][T10611] loop3: detected capacity change from 0 to 8192 [ 281.447509][T10597] loop9: detected capacity change from 0 to 32768 [ 281.471347][T10262] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 281.492557][T10611] loop3: RDSK (0) [ 281.492557][T10611] AHDI p2 p3 p4 [ 281.492701][T10611] loop3: p2 start 4294967046 is beyond EOD, truncated [ 281.492734][T10611] loop3: p3 size 67164644 extends beyond EOD, truncated [ 281.519749][T10597] loop9: p1 p9 p11 [ 281.574086][T10262] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 281.575881][T10262] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 281.590601][T10262] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 281.607222][T10262] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 281.634478][T10262] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 281.636379][T10262] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 281.643101][T10262] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 281.759932][T10639] binder: 10637:10639 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 281.759970][T10639] binder: 10639 RLIMIT_NICE not set [ 281.768669][T10639] binder: 10637:10639 ioctl c0306201 200004c0 returned -14 [ 281.801746][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1494'. [ 281.801786][T10644] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1494'. [ 281.801796][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1494'. [ 282.251831][T10652] loop3: detected capacity change from 0 to 2048 [ 282.316923][T10652] Alternate GPT is invalid, using primary GPT. [ 282.317279][T10652] loop3: p2 p3 p7 [ 282.691489][T10261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 282.698123][ T4340] Alternate GPT is invalid, using primary GPT. [ 282.699369][ T4340] loop3: p2 p3 p7 [ 282.761778][T10261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 282.853391][T10261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 282.882652][T10261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 282.883012][T10261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 282.896429][T10261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 282.924430][T10261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 282.940493][T10261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 283.020847][T10669] tap0: tun_chr_ioctl cmd 2147767521 [ 283.038974][T10669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.371252][T10682] loop3: detected capacity change from 0 to 2048 [ 283.429787][T10682] Alternate GPT is invalid, using primary GPT. [ 283.430266][T10682] loop3: p2 p3 p7 [ 283.853797][ T4340] Alternate GPT is invalid, using primary GPT. [ 283.853899][ T4340] loop3: p2 p3 p7 [ 283.884887][T10685] tap0: tun_chr_ioctl cmd 2147767521 [ 283.899276][T10685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.947908][T10262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.056663][T10262] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.081890][T10261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.087924][ T6623] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.087964][ T6623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.091743][T10696] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1502'. [ 284.118352][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.118399][ T6609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.185960][T10261] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.195779][T10261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 284.195803][T10261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.225622][ T6628] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.225665][ T6628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.250660][ T6628] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.250709][ T6628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.449879][T10714] loop8: detected capacity change from 0 to 8192 [ 284.529944][T10714] loop8: RDSK (0) [ 284.529944][T10714] AHDI p2 p3 p4 [ 284.530425][T10714] loop8: p2 start 4294967046 is beyond EOD, truncated [ 284.530447][T10714] loop8: p3 size 67164644 extends beyond EOD, truncated [ 285.160847][T10716] binder: 10705:10716 ioctl c0306201 0 returned -14 [ 285.467999][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 285.475525][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 285.815082][T10746] loop8: detected capacity change from 0 to 2048 [ 285.877312][T10746] Alternate GPT is invalid, using primary GPT. [ 285.877718][T10746] loop8: p2 p3 p7 [ 286.301622][T10751] netlink: 'syz.9.1510': attribute type 1 has an invalid length. [ 286.306628][ T4340] Alternate GPT is invalid, using primary GPT. [ 286.306724][ T4340] loop8: p2 p3 p7 [ 286.376947][T10751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.477827][T10262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.537626][T10751] bond1 (unregistering): Released all slaves [ 286.573967][T10764] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1511'. [ 286.638527][T10764] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1511'. [ 286.651871][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 286.663088][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 286.686281][T10262] veth0_vlan: entered promiscuous mode [ 286.694792][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 286.705027][T10262] veth1_vlan: entered promiscuous mode [ 286.714606][T10262] veth0_macvtap: entered promiscuous mode [ 286.717818][T10262] veth1_macvtap: entered promiscuous mode [ 286.725992][T10262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.733494][T10262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.754881][ T6625] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.759131][ T6626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.759220][ T6626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.759282][ T6626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.789428][ T9056] udevd[9056]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 286.843674][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 286.860334][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 287.215082][T10786] loop9: detected capacity change from 0 to 2048 [ 287.299634][T10786] Alternate GPT is invalid, using primary GPT. [ 287.300220][T10786] loop9: p2 p3 p7 [ 287.535366][ T31] INFO: task syz.1.804:7810 blocked for more than 143 seconds. [ 287.538163][ T31] Tainted: G L syzkaller #0 [ 287.540526][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.543146][ T31] task:syz.1.804 state:D stack:0 pid:7810 tgid:7807 ppid:4713 task_flags:0x400140 flags:0x00800001 [ 287.547594][ T31] Call trace: [ 287.549048][ T31] __switch_to+0x2b0/0x6e0 (T) [ 287.550654][ T31] __schedule+0x1c04/0x2db8 [ 287.552329][ T31] schedule+0x13c/0x20c [ 287.553877][ T31] schedule_preempt_disabled+0x18/0x2c [ 287.556193][ T31] __mutex_lock+0x4fc/0xed0 [ 287.557716][ T31] mutex_lock_nested+0x24/0x30 [ 287.559569][ T31] bdev_open+0xc4/0x880 [ 287.561142][ T31] blkdev_open+0x2d4/0x408 [ 287.562651][ T31] do_dentry_open+0x5c4/0xfb8 [ 287.564221][ T31] vfs_open+0x44/0x2dc [ 287.565705][ T31] path_openat+0x22d4/0x2b88 [ 287.567381][ T31] do_file_open+0x1c8/0x2e8 [ 287.573270][ T31] do_sys_openat2+0x114/0x1e8 [ 287.575257][ T31] do_sys_open+0xac/0xdc [ 287.576944][ T31] __arm64_sys_openat+0xa0/0xbc [ 287.578680][ T31] invoke_syscall+0x98/0x244 [ 287.581721][ T31] el0_svc_common+0xec/0x23c [ 287.583373][ T31] do_el0_svc+0x4c/0x5c [ 287.584965][ T31] el0_svc+0x64/0x260 [ 287.610013][ T31] el0t_64_sync_handler+0x48/0x148 [ 287.611802][ T31] el0t_64_sync+0x198/0x19c [ 287.623738][ T31] [ 287.623738][ T31] Showing all locks held in the system: [ 287.625114][ T31] 1 lock held by khungtaskd/31: [ 287.625939][ T31] #0: ffff800088bf70c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 287.629795][ T31] 1 lock held by udevd/4340: [ 287.630611][ T31] 2 locks held by getty/4489: [ 287.631384][ T31] #0: ffff0000cf66c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 287.634679][ T31] #1: ffff8000923ab2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf70 [ 287.634730][ T31] 1 lock held by udevd/4697: [ 287.634739][ T31] #0: ffff0000c7c1c350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880 [ 287.634800][ T31] 3 locks held by kworker/0:7/4817: [ 287.634816][ T31] 3 locks held by kworker/u8:26/6621: [ 287.634824][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 287.634865][ T31] #1: ffff80009bce7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 287.634905][ T31] #2: ffff800089cca300 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 287.634946][ T31] 2 locks held by kworker/u8:28/6623: [ 287.634955][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 287.634994][ T31] #1: ffff800095197c40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 287.635035][ T31] 3 locks held by kworker/u8:30/6625: [ 287.635043][ T31] #0: ffff0000cee45940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 287.635083][ T31] #1: ffff800095177c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 287.635123][ T31] #2: ffff800089cca300 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 287.635163][ T31] 1 lock held by syz.1.804/7810: [ 287.635171][ T31] #0: ffff0000c7c1c350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880 [ 287.635215][ T31] 1 lock held by syz-executor/10261: [ 287.635224][ T31] 3 locks held by syz-executor/10262: [ 287.635234][ T31] 2 locks held by sed/10785: [ 287.635243][ T31] [ 287.635249][ T31] ============================================= [ 287.635249][ T31] [ 287.635258][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 287.662509][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 287.663870][ T31] Tainted: [L]=SOFTLOCKUP [ 287.664491][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 287.665861][ T31] Call trace: [ 287.666313][ T31] show_stack+0x2c/0x3c (C) [ 287.666955][ T31] __dump_stack+0x30/0x40 [ 287.667579][ T31] dump_stack_lvl+0x30/0x12c [ 287.668386][ T31] dump_stack+0x1c/0x28 [ 287.669119][ T31] vpanic+0x594/0xaf8 [ 287.669714][ T31] vpanic+0x0/0xaf8 [ 287.670279][ T31] hung_task_panic+0x0/0x2c [ 287.670979][ T31] kthread+0x304/0x3d4 [ 287.671639][ T31] ret_from_fork+0x10/0x20 [ 287.672303][ T31] SMP: stopping secondary CPUs [ 287.673021][ T31] Kernel Offset: disabled [ 287.673650][ T31] CPU features: 0x0a000000,003c0008,27020501,5427fea7 [ 287.674644][ T31] Memory Limit: none [ 288.005953][ T31] Rebooting in 86400 seconds..