last executing test programs: 2m36.994627151s ago: executing program 0 (id=1706): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = memfd_secret(0x80000) r1 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x8, 0x2) write$FUSE_INIT(r1, &(0x7f0000002c00)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x6, 0x20000, 0x8, 0x4, 0x8000, 0x4, 0x0, 0x0, 0x20, 0x8}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000380)="88000000000000002a5b8b6ccd1a751d5378188aa558445d1f410adcbeeb7808a6d54372a9e6f4a1b7d3c92c30a8d877a191d62d854466111cfdf75bda8e16921c4f5bdf18e8fa46161dc579987ca7c5a569d9dbfb85bee1d69fd781666cb43652c9cd50de129f87b878dffd6e66636741ffcae9afc12fdc3cf2a9782c5a0c453f", 0x0, 0x3ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x38113, r0, 0x5c497000) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8) 2m35.98633384s ago: executing program 0 (id=1712): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0xfffffffc, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30000000}], 0x0, 0x0, 0x0}) 2m35.806476247s ago: executing program 0 (id=1714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x0, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 2m34.78178513s ago: executing program 0 (id=1715): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x110, 0xa}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)={[{@index_on}, {@metacopy_off}, {@index_off}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x80}}, {@subj_type={'subj_type', 0x3d, '!'}}, {@euid_gt={'euid>', r2}}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'syzkaller\x00'}}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000180)={0x0, 0xd, 0x0, "13ea57ffffffdfff018000000000000000000000000000088b0500", 0x30323953}) socket(0xa, 0x3, 0xff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1e003300a0300300ff0100000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f00000008c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe8, r9, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x410}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x476e}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x639}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff6f65}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3a5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffa50}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x20004804) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xf1c}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x1}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x50}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x10}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x9}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 2m34.617410663s ago: executing program 0 (id=1717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x0, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 2m34.222728025s ago: executing program 0 (id=1724): r0 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x100) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000080), 0x58, 0x0) r4 = fspick(r0, &(0x7f0000000300)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x9) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x121c3) ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m21.266702863s ago: executing program 4 (id=1801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x18}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0xc, '\x00', 0x40, 0xfffffffa, 0x1ff, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x884) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f00000001c0)=@xdp={0x2c, 0xa888, r9, 0xb}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)='f', 0x1}], 0x1}, 0x857) (fail_nth: 2) 2m21.095172153s ago: executing program 4 (id=1803): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m20.998798317s ago: executing program 4 (id=1804): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x80071c, &(0x7f0000000000), 0xfb, 0x4ae, &(0x7f0000000540)="$eJzs3E1sVNUeAPD/nWn5hvbxeLwHD7SKRuJHS8uHLFyo0cSFJia6wGVtCyIDNbQmQhqtxuDSkLg3Lk1cunLnxqgLY+JWjUtDQrQxobiquV9laGdKp7QMdH6/ZDrn3I855z/3nOmZe+beADpWX/onidgWET9HRE+evXmDvvxpdmZq5PrM1EgSc3Ov/JFk212bmRopNy3321pkDlYiKh8m8XSyuNyJCxfPDNdqY+eL/MDk2bcGJi5cfOL02eFTY6fGzg0dP37k8OCTx4aOthzT5gbL0riu7X13fN+eF167/NLIicuvf/dFWq3d+/P19XHc0vUGATXQl75rf85lFq57eNmF3Ru216WTrjZWhJZUIyI9XN1Z/++Jatw4eD3x/AdtrRywptL/TRubr56eA9axJNpdA6A9yn/06fff8nGHhh53havPRGwo0rMzUyOz8/F3RaVY3r2G5fdFxInpvz9NH9HqeQgAgBXIxjaPNxr/VWJ39pzPdewo5lB6I+JfEbEzIv4dEbsi4j8R2bb/jYj/5TvP9Syz/L4F+cXjn8qVhnVeJen476m6sd9sXfzFU2+1yG3P4u9OTp6ujR0q3pOD0b0xzQ8uUcbXz/30cbN19eO/9JGWX44Fiwpc6cpP0JXD1BgdnhxerTfh6vsRe7saxZ/MzwSkLWBPROxt7aV3lInTj36+r9lGt45/CaswzzT3WcQj+fGfjgXxl5Im85NpGz82dHRgU9TGDg2UrWKx73+89HKz8m8r/lWQHv8tN7f/BVv0/JXk87XdUauNnZ9ovYxLv3zU9DtNC+1/Xtr+NySvZnPWP7yRL3tneHLy/GDEhuTFLF92lmz50I19y3y5fRr/wQON+//OYp80/v9HRNqI90fsuC8i7i/q/kBEPBgRB5aI/9tnH3pzifiTSKKtx3+04efffPvvTern61eQqJ755qtmM+bLO/5HYjr7rM1ln3+3sNwK3ubbBwAAAPeESkRsi6TSn6f7tkWl0t+f/4Z/V2yp1MYnJh87Of72udH8GoHe6K6UZ7p66s6HDibTxSvm+aHiXHG5/nBx3viT6uYs3z8yXhttc+zQ6bbe3P+j7P+p36vtrh2w5prPoy1xaQCwLizs/5U21QO485bzOxrfBWB9atD/G91DA1iH3K8FOlej/v/egvyi8b8RAqwLi/v/bw1uWQesR8b/0Ln0f+hc+j90pNu5rn/lifJigZW/zqZlX+HfKYnyjhdrWdbmuLEkKrXa4V/vjtjXLBERX7ayV3Wt6pP2mDsbe90NhwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO5h/wQAAP//037k/Q==") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="0200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x108688d, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 2m20.890664831s ago: executing program 4 (id=1806): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0xfe, 0x1227, &(0x7f0000001280)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x800080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xccce, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xccce, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 2m20.667876178s ago: executing program 4 (id=1811): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000380)='./file0\x00', 0x800000, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16, @ANYRES16, @ANYRES8], 0x0, 0x1cc, &(0x7f0000000700)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000001c0)=""/79, 0x4f}, {&(0x7f0000000340)=""/82, 0x52}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/18, 0x12}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/165, 0xa5}], &(0x7f0000002800)=[0x81, 0x4, 0x7b, 0x7fff], 0x6}, 0x20) 2m20.269536797s ago: executing program 4 (id=1812): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0xefe, 0x0, 0x0, &(0x7f00000000c0), 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) (fail_nth: 10) 2m20.179512858s ago: executing program 32 (id=1812): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0xefe, 0x0, 0x0, &(0x7f00000000c0), 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) (fail_nth: 10) 2m19.190800281s ago: executing program 33 (id=1724): r0 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x100) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000080), 0x58, 0x0) r4 = fspick(r0, &(0x7f0000000300)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x9) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x121c3) ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m55.544554437s ago: executing program 2 (id=1984): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023893) socket$inet6_udp(0xa, 0x2, 0x0) r1 = memfd_secret(0x80000) r2 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x8, 0x2) write$FUSE_INIT(r2, &(0x7f0000002c00)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x6, 0x20000, 0x8, 0x4, 0x8000, 0x4, 0x0, 0x0, 0x20, 0x8}}, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000380)="88000000000000002a5b8b6ccd1a751d5378188aa558445d1f410adcbeeb7808a6d54372a9e6f4a1b7d3c92c30a8d877a191d62d854466111cfdf75bda8e16921c4f5bdf18e8fa46161dc579987ca7c5a569d9dbfb85bee1d69fd781666cb43652c9cd50de129f87b878dffd6e66636741ffcae9afc12fdc3cf2a9782c5a0c453f", 0x0, 0x3ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x38113, r1, 0x5c497000) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8) 1m54.672617698s ago: executing program 2 (id=1988): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file3\x00', 0x0, &(0x7f0000000100)={[{@errors_remount}, {}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x103040, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@alu={0x7, 0x1, 0x4, 0x0, 0x3, 0x80, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x9, 0x1) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000080)=0x7, 0x9, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x8000000, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xa, 0x900}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a1401"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = getpid() r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, 0xffffffffffffffff, &(0x7f0000000100)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)={0x40, r8, 0x1, 0xfffffffd, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0c5}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4880}, 0x10010) r11 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x5, 0x0, 0x7, 0x4}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0x36, "e4591c589581859fcb7e8c8e1f9dad9449162fc5fede9f7b507cfe0f9aac8b4a3deea4a4e1e52d4ca81157804a5eb06ffa8f5fa582c4"}, &(0x7f0000000380)=0x3e) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000400)={r12, 0x1, 0x8}, 0x8) syz_open_dev$vim2m(0x0, 0x47b, 0x2) 1m53.566418706s ago: executing program 2 (id=1994): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x2808008, &(0x7f0000000380)={[{@sysvgroups}, {@acl}, {@mb_optimize_scan}, {@nouser_xattr}, {@dax}, {@journal_async_commit}, {@abort}, {@bsdgroups}, {@minixdf}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x2, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x0, 0x2) getdents64(r1, &(0x7f0000000080)=""/72, 0x1c) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x210000, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000001000)=ANY=[@ANYBLOB="00000400aaaaaaaaaa3daaaaaaaaaa04000040000000bbbbbbbbbbbb"]) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 1m52.749692834s ago: executing program 2 (id=1996): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001701000002000000000000000000000018000000000000001401"], 0x30}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x158, 0x18c, 0x203, 0x0, 0x19030000, 0x248, 0x2e0, 0x2e0, 0x248, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {0xff}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xa8, 0xf0, 0x0, {0x1000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000"], 0x0, 0x42, 0x0, 0x3}, 0x28) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240), 0x1, 0x5b7, &(0x7f0000001380)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa0) getdents64(r2, &(0x7f0000001280)=""/4089, 0xff9) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 1m52.597951043s ago: executing program 2 (id=1997): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000, 0x80000000}]}, @union={0x9, 0x5, 0x0, 0x5, 0x1, 0xe0000000, [{0xc, 0x3, 0x5}, {0x8, 0x3, 0x406b81}, {0x8, 0x4, 0x8f}, {0x4, 0x2, 0x58000000}, {0xd, 0x2, 0x1000}]}]}}, &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x1}, 0x28) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x11}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000000000000300000d0000000000000000000000000b000000000000000600000003000000000000000000000d00000000000000000100001304"], 0x0, 0x6a, 0x0, 0x1}, 0x28) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 1m52.012620633s ago: executing program 2 (id=1999): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x321008a, &(0x7f0000000080)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d752c000000000000008074653d312c73686f77657865632c6e6f6e756d7461696c3d302c1746bfd6722c7574663800"/73], 0x4, 0x2c4, &(0x7f0000000100)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x4433, 0x80, 0x1024002, 0x4d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/169, 0xa9}, {&(0x7f0000000540)=""/123, 0x7b}, {&(0x7f00000005c0)=""/236, 0xec}, {&(0x7f00000006c0)}], 0x4) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x618, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc}}}, 0x0) syz_io_uring_complete(r3, r4) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000740)={0x2e, 0x5, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x1, 0x309, 0x0, 0x0, 0x1000, 0x2, r1, 0x0, 0x80}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b35, &(0x7f0000000040)={'wlan1\x00', @random="8dffffffffff"}) r10 = syz_open_dev$usbfs(&(0x7f0000000040), 0x4000000020001000, 0x301) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000300)={0xa3, 0xd, 0x37a, 0x6124, 0x0, 0x3, 0x0}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r11, r11, r11}, &(0x7f0000000100)=""/66, 0x8d, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) r12 = socket$packet(0x11, 0x3, 0x300) syz_open_procfs(r1, &(0x7f0000000400)='net/udplite6\x00') r13 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010003704030000000300000000000000", @ANYRES32=r14, @ANYBLOB="0b1b0500000000001c0012800b00010062726964676500000c0002800500070040000000d142624455b8686912aae765b08afa91fb22fe5ec58891dd194012c82400d206dbb549299da7a56cfd8be8c9734e5b43eb7f98bbd3a0e4380eb11ff9d6ed6818aed4bacffd45e0dd5592c585be1aa62b8ca5ca4252dd0bc42b3c23794939c1bc565efc083ea9eb2a46e08ac0c04f64c285c1b0b7628f985c1b170ae85cb59b6da3238d0600d8972f0507c0013a1729f21b038d830a6b68e5e0b675eb52a50d8f635164828c2d6691bc23209bbc4c47875344054ce94a01e7e56cb882d048b0c7"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r12, &(0x7f0000000200)="001a338568da3602a8b76fde0f0c", 0xe, 0x4, &(0x7f0000000180)={0x11, 0x8, r14, 0x1, 0xe9, 0x6, @local}, 0x14) 1m51.88242023s ago: executing program 34 (id=1999): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x321008a, &(0x7f0000000080)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d752c000000000000008074653d312c73686f77657865632c6e6f6e756d7461696c3d302c1746bfd6722c7574663800"/73], 0x4, 0x2c4, &(0x7f0000000100)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x4433, 0x80, 0x1024002, 0x4d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/169, 0xa9}, {&(0x7f0000000540)=""/123, 0x7b}, {&(0x7f00000005c0)=""/236, 0xec}, {&(0x7f00000006c0)}], 0x4) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x618, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc}}}, 0x0) syz_io_uring_complete(r3, r4) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000740)={0x2e, 0x5, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x1, 0x309, 0x0, 0x0, 0x1000, 0x2, r1, 0x0, 0x80}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b35, &(0x7f0000000040)={'wlan1\x00', @random="8dffffffffff"}) r10 = syz_open_dev$usbfs(&(0x7f0000000040), 0x4000000020001000, 0x301) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000300)={0xa3, 0xd, 0x37a, 0x6124, 0x0, 0x3, 0x0}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r11, r11, r11}, &(0x7f0000000100)=""/66, 0x8d, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) r12 = socket$packet(0x11, 0x3, 0x300) syz_open_procfs(r1, &(0x7f0000000400)='net/udplite6\x00') r13 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010003704030000000300000000000000", @ANYRES32=r14, @ANYBLOB="0b1b0500000000001c0012800b00010062726964676500000c0002800500070040000000d142624455b8686912aae765b08afa91fb22fe5ec58891dd194012c82400d206dbb549299da7a56cfd8be8c9734e5b43eb7f98bbd3a0e4380eb11ff9d6ed6818aed4bacffd45e0dd5592c585be1aa62b8ca5ca4252dd0bc42b3c23794939c1bc565efc083ea9eb2a46e08ac0c04f64c285c1b0b7628f985c1b170ae85cb59b6da3238d0600d8972f0507c0013a1729f21b038d830a6b68e5e0b675eb52a50d8f635164828c2d6691bc23209bbc4c47875344054ce94a01e7e56cb882d048b0c7"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r12, &(0x7f0000000200)="001a338568da3602a8b76fde0f0c", 0xe, 0x4, &(0x7f0000000180)={0x11, 0x8, r14, 0x1, 0xe9, 0x6, @local}, 0x14) 4.009088716s ago: executing program 3 (id=2824): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x800, 0xfffffffd) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fffffdb703000008000000b704000000fdff00850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) socket$unix(0x1, 0x1, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x5) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r6, 0x0) 3.082808435s ago: executing program 3 (id=2833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000ffff8000b702000014000000b7030000000000008500000005000000bf090000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.07522412s ago: executing program 3 (id=2834): syz_open_dev$vim2m(&(0x7f0000000280), 0x40003, 0x2) socket$inet(0xa, 0x801, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x87}, 0x48) 3.03785305s ago: executing program 1 (id=2835): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r0, 0x8995, &(0x7f0000000080)="ad6f3a") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f00000001c0)={[{@nogrpid}, {@mblk_io_submit}, {@jqfmt_vfsv1}, {@abort}, {@stripe={'stripe', 0x3d, 0x7fffffffffffffff}}, {@lazytime}, {@errors_remount}, {@stripe}, {@bh}, {@auto_da_alloc}], [{@pcr={'pcr', 0x3d, 0x3e}}]}, 0x1, 0x56f, &(0x7f0000000380)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @loopback, 0x200}, 0x1c) close(0x3) execve(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 2.966681902s ago: executing program 5 (id=2836): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x30000000}], 0x0, 0x0, 0x0}) 2.941753258s ago: executing program 5 (id=2837): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm0xAzyZTMpDQhixYR3ChaXAi66dpq3bn1x1b/CxfSUjUtVlxI5E5m2kkzk07a+VHI5wM3c8695+ac75z748zcy9wA9q3x9E8m4nBEfJREjFbnJxExUEn1R5zcKnd3Yz2XTklsbr75W1Ipc2djPRd166QOVjP/j4jv34s4ktlZb2l1bWGmUMgvV/OT5cXzk6XVtaPzizNz+bn80vGp6eljJ144cbx9sf7x09qhmx+/9uxXJ/9693/XP/ghiZNxqLqsPo52GY/x6nsykL6F27za7sp6LOl1A3gk6a7Zt7WXx+EYjb5KqonhbrYMAOiUTQBgH0qMAQBgn6l9D3BnYz1Xm3r7jUR33XolIg5sxV+7vrm1pL96ze5A5TroyJ1k25WRJCLG2lD/eMSHVyKuff7N29ei2g+upQHdcOlyRJwdG995/E923LOwV8/ttnBzqPIy/sDs/Xb+gV76Nh3/vNho/Je5N/6JBuOfoQb77qN4+P6fudGGappKx38v193bdrcu/qqxvmruX5Ux30Bybr6QT49t/46IiRgYSvNTlaKNR24Tt/++3az+NP507JdOv19554u0/vT1fonMjf6h7evMzpRnHjfumluXI57qbxR/cq//kybj39Mt1vH6S+9/1mxZGn8ab23aGX9nbV6NeKZh/9/vy2TX+xMnK5vDZG2jaODrnz8daVZ/ff+nU1p/7bNAN6T9P7J7/GNJ/f2apb3X8ePV0e+aLXt4/I23/8HkrUp6sDrv4ky5vDwVMZi8sXP+sfvr1vK18mn8E0833v+3qm28/aefCc+2GH//zV+/fPT4OyuNf3ZP/b/3xPW7C33N6m+t/6crqYnqnFaOf6028HHeOwAAAAAAAAAAAAAAAAAAAAAAAABoVSYiDkWSyd5LZzLZ7NYzvP8bI5lCsVQ+cq64sjQblWdlj8VApvZTl6N1v4c6Vf09/Ep+oJA/Vp+fL+Sfj4j/RMQnQ8OVfDZXLMz2OngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqDrY5Pn/qV+Get06AKBjDvS6AQBA1zn/A8D+s7fz/3DH2gEAdI/P/wCw/7R8/j/b2XYAAN3z4Pm/r1GhhjMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgJadPnUqnzT831nNpfvbC6spC8cLR2XxpIbu4ksvmisvns3PF4lwhn80VF7etnKlLX9p6KRSL56djaeXiZDlfKk+WVtfOLBZXlspn5hdn5vJn8gNdjQ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWlNaXVuYKRTyyxK7Jobb8X8Gex1F+xL98UQ0Q6JjifqjxHDvDlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT7h/AgAA///wSSzL") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x1214040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r1, 0x102, 0x1) getdents64(r1, 0xfffffffffffffffe, 0x29) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0xfffffeb1) 2.81999004s ago: executing program 5 (id=2838): r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000180)=ANY=[], 0xfc, 0x2d1, &(0x7f00000005c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x264091, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) signalfd4(r0, &(0x7f0000000200)={[0x9]}, 0x8, 0x80800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$evdev(&(0x7f000001fa80), 0x0, 0x43c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000a58000/0x3000)=nil, 0x3000, 0x6, 0x40010, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 2.546750169s ago: executing program 6 (id=2842): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000140)=""/228) r1 = userfaultfd(0x80801) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) mlock2(&(0x7f00003b0000/0x2000)=nil, 0x2000, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x7}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, 0xffffffffffffffff) 2.446756187s ago: executing program 6 (id=2843): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x800, 0xfffffffd) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fffffdb703000008000000b704000000feff00850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) socket$unix(0x1, 0x1, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x5) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r6, 0x0) 2.099821193s ago: executing program 1 (id=2846): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x80}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000340), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4f9, &(0x7f00000008c0)="$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") r4 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/218, 0xda}, {&(0x7f0000000040)=""/134, 0x86}, {&(0x7f0000000740)=""/179, 0xb3}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000000)=""/63, 0x3f}], 0x6}}], 0x1, 0x20, 0x0) write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2e0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000003000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x142, 0x0) dup(r6) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01002cbd7000fedbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x44080) fspick(0xffffffffffffffff, 0x0, 0xf9e0e0d80b8b4631) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x12) 2.088528286s ago: executing program 5 (id=2847): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00') getsockopt$bt_hci(r8, 0x84, 0x2, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x100b) r10 = socket(0xa, 0x3, 0x2) getsockopt$WPAN_SECURITY_LEVEL(r10, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x4) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x1, 0x9, @loopback, 0xd9b}, 0x1c) connect$unix(r10, &(0x7f0000000300)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x24, r12, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4, 0x4}]}]}, 0x24}}, 0x2400c090) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000d00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000600)={0x6b0, r12, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1bc, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x0, 0x1, 0x2, 0x8, 0x7fff, 0x8, 0x4c5]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x1, 0x30, 0x5, 0x9, 0xb, 0x6, 0x3, 0xb, 0x2, 0x4, 0x24, 0x24, 0x51, 0xb, 0x48, 0x6, 0x6c, 0x3, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1ff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0xb, 0x0, 0xd, 0x16, 0x5, 0x18, 0x36, 0x3, 0x0, 0x4, 0x24, 0x6, 0x30, 0x5, 0x16, 0x36, 0x5, 0x2, 0x24, 0x9, 0x9, 0x4, 0x9, 0x24, 0x32, 0x9, 0x2]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x5abf, 0x3ff, 0x8000, 0x0, 0x9, 0xfc00]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7fff, 0xfff, 0x7ff, 0x5, 0x1, 0x5, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x1}, {0x7, 0x2}, {0x1, 0x5}, {0x7, 0xa}, {0x2, 0x4}, {0x3, 0x8}, {0x7, 0x4}, {0x0, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x1, 0x7}, {}, {0x7, 0x2}, {0x2}, {0x1, 0x4}, {0x4, 0x6}, {0x1, 0x4}, {0x0, 0x5}, {0x5, 0xa}, {0x7, 0x5}, {0x0, 0x6}, {0x7, 0x7}, {0x4, 0x9}, {0x4, 0x5}, {0x7, 0x7}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0x5}, {0x4}, {0x0, 0xa}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x6}, {0x6, 0x9}, {0x2, 0x9}, {0x0, 0xa}, {0x1}, {0x7}, {0x3, 0x9}, {0x7, 0x9}, {0x2, 0x1}, {0x0, 0x9}, {0x3, 0x4}, {0x3, 0x1}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x6, 0x4}, {0x5, 0x8}, {0x1, 0x4}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xb, 0x7, 0x10, 0x7, 0x9, 0x6, 0xf830]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0x30, 0x12, 0x1, 0x18, 0x3, 0x36, 0x4a, 0x5, 0x38, 0x1b, 0x4, 0x1b, 0x17, 0x2, 0x29, 0x6c, 0x60, 0x16, 0x60, 0x12, 0x4, 0xb, 0x1, 0x9, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x4, 0x8, 0x7f, 0x4, 0x246d]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x2d}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x13}]}]}, @NL80211_ATTR_TID_CONFIG={0x2c0, 0x11d, 0x0, 0x1, [{0x2bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x62}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xf51b, 0x1, 0x8, 0xfff2, 0x3, 0x4, 0x37d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x6, 0x0, 0xae7a, 0xd16b, 0xa8, 0xd0, 0x4]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6f, 0x4, 0x4, 0x6, 0x30, 0x6c, 0x60, 0x5, 0xc, 0x30, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x53fc, 0x9, 0x9, 0x0, 0x5, 0x65, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x1, 0x6c, 0x16, 0xb, 0x6, 0x9, 0x16, 0x36, 0x4, 0x18, 0x24, 0x4, 0x9, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x1, 0x80, 0x28, 0x9, 0x3, 0x6]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x157, 0xf11, 0xc4, 0x2, 0x0, 0x7ff, 0x8]}}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x9, 0xffff, 0x66, 0x2, 0x41, 0x7fff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x7, 0x3, 0x6, 0x95, 0x4ba, 0x7ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x0, 0xa}, {0x2, 0x4}, {0x3, 0x8}, {0x3, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x2, 0x2}, {0x2}, {0x5, 0x4}, {0x4}, {0x7, 0xa}, {0x3}, {0x0, 0x5}, {0x2, 0xa}, {0x0, 0x1}, {0x3, 0x8}, {0x3, 0x7}, {0x6, 0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x8}, {0x5, 0xa}, {0x2}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x0, 0x3}, {0x0, 0xa}, {0x7, 0x3}, {0x2, 0x6}, {0x3, 0x8}, {0x2}, {0x3, 0x9}, {0x2, 0x2}, {0x7, 0x2}, {0x3, 0x2}, {0x5, 0x2}, {0x4}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x7, 0xa}, {0x6, 0x6}, {0x2}, {0x1, 0x1}, {0x6, 0x8}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x5}, {0x7, 0x8}, {0x7, 0x8}, {0x4, 0x1}, {0x3, 0x7}, {0x5, 0xa}, {0x0, 0x7}, {0x7, 0x8}, {0x4, 0xa}, {0x1, 0x1}, {0x6, 0x5}, {0x6, 0x7}, {0x0, 0x1}, {0x6, 0x9}, {0x3, 0x9}, {0x0, 0x1}, {0x6, 0x4}, {0x7, 0x8}, {0x5}, {0x1, 0xa}, {0x0, 0x9}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x4}, {0x0, 0x7}, {0x7, 0x6}, {0x1, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0x4, 0x4, 0x4, 0x3, 0x1b, 0x3, 0x60, 0x12, 0x1, 0x4, 0x18]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0xa}, {0x2, 0x6}, {0x3, 0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x7, 0x7}, {0x2, 0x3}, {0x7, 0x1a}, {0x3, 0x9}, {0x1, 0x5}, {0x1, 0x2}, {0x0, 0x3}, {0x5, 0x9}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x5}, {0x6, 0x2}, {0x0, 0xa}, {0x7, 0x5}, {0x4, 0x4}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x4}, {0x2, 0xa}, {0x7, 0x2}, {0x4, 0x9}, {0x4, 0x3}, {0x1, 0x2}, {0x7, 0x4}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x1}, {0x6, 0x7}, {0x5, 0x1}, {0x4, 0x9}, {0x0, 0x3}, {0x6, 0x7}, {0x4, 0x1}, {0x0, 0x7}, {0x2, 0x6}, {0x2, 0x9}, {0x6, 0x3}, {0x1, 0x2}, {0x1, 0x2}, {0x1, 0x3}, {0x3, 0x3}, {0x1, 0x4}, {0x3, 0x8}, {0x2}, {0x2, 0x6}, {0x4, 0x3}, {0x5, 0x1}, {0x2, 0x9}, {0x7, 0x5}, {0x4, 0x9}, {0x3, 0x6}, {0x7, 0x8}, {0x0, 0x1}, {0x6, 0x8}, {0x3, 0x5}, {0x6, 0x3}, {0x2, 0x7}, {0x5, 0x8}, {0x4, 0x2}, {0x7, 0x3}, {0x4}, {0x0, 0x3}, {0x7, 0xa}, {0x0, 0x5}, {0x4, 0x7}, {0x1, 0x2}, {0x5, 0x3}, {0x1}, {0x1, 0x7}, {0x6}, {0x0, 0x9}, {0x5, 0xa}, {0x4, 0x3}, {0x5, 0x9}, {0x2, 0x5}, {0x2}, {0x7, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x9, 0xe, 0x5, 0x4, 0xf352, 0x1ff, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x8, 0x8, 0x15e4, 0x55, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x5, 0x80, 0x9, 0x1, 0xfe01, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xfffd, 0xa, 0x6, 0x3, 0x2, 0x1, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x6}, {0x4, 0x2}, {}, {0x7, 0x7}, {0x0, 0x6}, {0x5, 0x6}, {0x1, 0x5}, {0x0, 0x3}, {0x4}, {0x4, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x5, 0x6}, {0x7, 0x9}, {0x2, 0x3}, {0x5, 0x8}, {0x4, 0x6}, {0x3, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x0, 0x3}, {0x6, 0x3}, {0x3, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x7, 0x8}, {0x1}, {0x4, 0x2}, {0x1, 0x9}, {0x5, 0x2}, {0x4, 0x2}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x9}, {0x4, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x7, 0x1}, {0x2, 0x2}, {0x6, 0x4}, {0x7, 0x2}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x2}, {0x2, 0x2}, {0x0, 0x8}, {0x5, 0xa}, {0x5, 0x8}, {0x2, 0x7}, {0x5, 0x1c}, {0x3, 0x3}, {0x1, 0x6}, {0x5, 0x4}, {0x4, 0xa}, {0x5, 0x4}, {0x5, 0x6}, {0x5, 0x8}, {0x5, 0x7}, {0x7, 0x4}, {0x7}, {0x3, 0x2}, {0x1, 0x9}, {0x7, 0x6}, {0x5, 0x3}, {0x0, 0x7}, {0x2, 0xa}, {0x6, 0x3}, {0x6}, {0x6, 0x3}, {0x1, 0x7}, {0x3, 0x9}, {0x2, 0x2}, {0x0, 0x2}, {0x5, 0xa}, {0x6, 0xa}, {0x3, 0x9}, {0x6, 0x5}, {0x2, 0x9}, {0x1, 0x2}, {0x1, 0x6}, {0x5}, {0x0, 0x9}, {0x1, 0x5}, {0x5, 0x6}, {0x6, 0x8}, {0x7}, {0x6}, {0x4, 0x6}, {0x3, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0x5}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x3}, {0x4, 0x3}, {0x1, 0x1}, {0x7, 0x8}, {0x7, 0x2}, {0x0, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x220, 0x11d, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbe}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x417bd15172006423}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x18, 0x6c, 0x16, 0x1b, 0x60, 0x5, 0x18, 0x48, 0x9, 0x16, 0xb, 0x1b, 0x4, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x5, 0x4}, {0x3, 0xa}, {0x2, 0x7}, {0x3, 0x4}, {0x6, 0xa}, {0x0, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x2, 0x4}, {0x5, 0x8}, {0x2}, {0x0, 0xa}, {0x3}, {0x1}, {0x7, 0x3}, {0x1, 0x7}, {0x2, 0x2}, {0x7, 0x9}, {0x4, 0x3}, {0x3, 0x7}, {0x4, 0x4}, {0x5, 0x7}, {0x6, 0xa}, {0x5, 0x2}, {0x4, 0x8}, {0x5}, {0x5, 0x7}, {0x0, 0x8}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x4}, {0x3, 0x7}, {0x2, 0x1}, {0x4, 0x6}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x3}, {0x0, 0x8}, {0x7, 0x5}, {0x4, 0x1}, {0x6, 0x2}, {0x1, 0x3}, {0x3, 0x6}, {0x2}, {0x5, 0x9}, {}, {0x1, 0x2}, {0x0, 0x2}, {0x2, 0x3}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x3}, {0x2, 0x5}, {0x1}, {0x2, 0x7}, {0x1}, {0x3, 0x2}, {0x5, 0x9}, {0x0, 0x3}, {0x5}, {0x5, 0x3}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x3, 0x3, 0x12, 0x9, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1ff, 0x9, 0x40, 0x1, 0x8, 0x0, 0xac6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x9}, {0x2}, {0x6, 0x8}, {0x1}, {0x0, 0x8}, {0x2, 0x6}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x1}, {0x2, 0x4}, {0x3, 0xa}, {0x5, 0x7}, {0x1, 0x5}, {0x6, 0x8}, {0x6, 0x8}, {0x5}, {0x7, 0x1}, {0x7, 0x2}, {0x3, 0x4}, {0x3, 0x5}, {0x0, 0xa}, {0x6, 0x1}, {0x3, 0x5}, {0x6, 0x5}, {0x3, 0xa}, {}, {0x3, 0x1}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0x9}, {0x7, 0x7}, {0x1, 0x2}, {0x3, 0x6}, {0x6, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x3}, {0x3, 0x8}, {0x6, 0x1}, {0x3, 0x1}, {0x2, 0x2}, {0x7, 0x5}, {0x0, 0x6}, {0x6, 0x9}, {0x3, 0x7}, {0x7, 0x3}, {0x4}, {0x4, 0x2}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x6}, {0x3}, {0x5, 0x8}, {0x0, 0x6}, {0x5, 0x1}, {0x1, 0x9}, {0x5, 0x5}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x6, 0x1, 0x4, 0x7ff, 0xb, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd643, 0x7, 0x1, 0x5, 0x2, 0x800, 0x10, 0x677]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x72}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x70}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x52}]}, {0x4}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x49}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x6b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$MRT_DEL_VIF(r10, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x0, 0xf, @vifc_lcl_addr=@loopback, @loopback}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) 1.963452858s ago: executing program 3 (id=2851): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x35, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="1125000000000000240012800c0001006d6163766c616e00140002800800030003000000080001001000000008000500", @ANYRES32=r5, @ANYBLOB="0c001f000a"], 0x6c}, 0x1, 0x0, 0x0, 0xc4}, 0x4040810) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xd8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x58, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_NAT={0x6c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', r7, 0x0, 0x41) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4c9c5238, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$SMC_PNETID_FLUSH(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1799060}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r9, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000085) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f00000009c0)={{&(0x7f0000000680)=[{0x81, 0x400, 0x9fc, {0xf, 0x401}, 0x7786, 0x800, 0x401}, {0x6, 0x6, 0xfffffffffffff3e0, {0x7, 0x8000000000000000}, 0x8, 0x8, 0x7}, {0x5, 0x3, 0x4, {0xc, 0x3ff}, 0x41, 0x0, 0xfe11}, {0x5f, 0x9, 0x6489, {0x5, 0x6}, 0x2, 0x7, 0xa}, {0x0, 0x101, 0x1, {0x1, 0x1}, 0x3, 0xffffffffffffffff, 0x81}], 0x5, 0x40, 0x1, 0x2}, {&(0x7f00000007c0)=[{0x100000000, 0x6}, {0x66c, 0x9}, {0x0, 0x8}, {0x71d, 0x1}, {0x3, 0x8000000000000000}], 0x5, 0x10, 0x0, 0xb6}, {&(0x7f0000000840)=[0xe107, 0x8b6, 0x4, 0x3], 0x4, 0x8, 0x7}, {&(0x7f0000000880)=[{0x80000000, 0x81, 0x3, 0x1, 0x7fff}, {0x1, 0x7fff, 0xf3e9, 0x3, 0xb06c}, {0x2, 0xc3f6, 0x80000000, 0x3, 0xd}, {0x3, 0x1, 0x5, 0x7599, 0xa5cf}], 0x4, 0x28, 0x2, 0x9}, {&(0x7f0000000940)=[0x0, 0xe0a, 0x5, 0x7f, 0x800, 0xfffffffffffffff8, 0x3, 0x4, 0x80000000], 0x9, 0x8, 0x7, 0x93}}) 1.637171986s ago: executing program 5 (id=2852): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080), &(0x7f00000000c0)) (async, rerun: 64) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000100)=@raw=[@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0xa727, 0x1d, &(0x7f00000001c0)=""/29, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x48d, 0x1}, 0x10, 0x10a54, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0x1, 0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x3, 0xc}, {0x1, 0x2, 0x8, 0xa}], 0x10, 0xfffffff8}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0x57, 0x98, &(0x7f0000000380)="43e56c317cde4008187a7027e836825a742d7212b076e054e613991f1fd8b3dba35ca9aacf739c5965c436cfcf85bf97722c40af3ef9598dd0a3a3ca5f70352fa6dc94e99591d24c663e5796bea1391a5b86e386e9bdc6", &(0x7f0000000400)=""/152, 0x7ff, 0x0, 0xd, 0x37, &(0x7f00000004c0)="e1653c5d4d5ca09f2692a00eb9", &(0x7f0000000500)="a16a64fd9287820dbf0c7d1085478dd13f0f183f230806ca98d062d6dcd006512a973a36da8e22896dffb1871f51a0e521e57deed75237", 0x0, 0x0, 0x100}, 0x50) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x2, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000005c0), &(0x7f0000000600)=0x4) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000a40)={0x2, 0x0, 0x8, 0xe, 0x4d, &(0x7f0000000640)="35616f33fa1e36f6b9a00dd44a6f2db8e29fe6da8dbc81f4192a248d2dd746a5687ad274e15d96f31097014c1da2e976665ceada70fe64ebc695e51f17beb453ba894c06c03dd4ef28a8597f8c7c13582395b62e45dd009e21e9200ba5f2915b52aec1770677bf8b241d5ff2d96e6b28a0c40a6f2c19d7e026d7c049fd5d0f5485711ad11b0a8fca37e090814ea24e8f6a8ff94a2adbfeff87a789f8c6d8e855271d901f92ff06bf424f4861e11a6d1799f37605c36f2924efcd1a72aa0069265b6afd42679f3adcc900bb84faa1de508787414cdae9b828c1cf719f2f3fe25050f50e64e336690c8c77d81822a53fe9d7217bdc946d5f6a70f912b3769c79e0ac0952312e480c322bc9faed898373c40f887312e1c608c661ed51eea7c8c31fe42b8dc8ab04e955e4be3d11dcf425e3fc80bb9779e3dc69a8baf6d1eee9858bfadd3ae429bc394db3b46639d7bb2615438deaa349a5aa056b07e9619806ed3a40591710a3724f134e98ca75f2b98bb07a2a619d1b6220695a97b9b9589da53bf82684a1e15859861e1f314e19a000dab3f5a64a78f79e785fc9b2dde78cfae44e0cc813a6b0bf85e8446dfa715e935574ff0fb19cd60de7247fad96be82ba93a93901304bc2a6ca8e54cbadfa2c0d2833d97a828af47179ece140df8d006c7620e95e1d1ce13ae3c0fb054b2d51c94f4f017d2eb6831c8af20a66af6b5909765b8c9feeea348a7211b2dd9ab2a33eea304e39761270c0b4990605b1808e6da551b145092fea655fde7bf4206b6ca26acbb677a89524134fd69ee4854db663acff8aa802041aa0c59100e336fdfe61374bc634bd1bac16ac0d6ad2321333a75b76b2c0e5c2809c63a679db33d0c5bfcfd92634a5cc2467683e7225f74d385ef32b4c9e42fab15530015ce4d75b41140b97e300f59f4644201c043e490ccef4bb6300fb66884ce7c620b8483f59fbe41d79043b0ef0a74ee06f095012ec02b9e603367715285c623105847187042aaa5a58b3a92e4a22a3cca24f9dc80a098192994dab958c1abea85a7c628f82dc90d6061a3489f81be0c18b49f4cc2316a6f16ce0210f2dbd435eda3b6b48cad870a369d291635e14587a3f2c25889a1bca9a542e91a0164c4d8ab5548a00535fdff42d93fe20f3e813272e501b23604ebdf260d91b5adffe319fc7aeb6062a8ca03acd7a673c6f648410bea3b359d377df0d409df8620627df427608585bb687f7b7e3eac5a2acca46fe50f76783fb94e5a4fb67efdfaab67a4c277c8401ec721b5a74e6e41825d71bfeebf72dd2c1e1cd0ee9d2c72ab1d893f7d5833e160432e337484da3450c325252ce091ae146463525779115de8140bb9d78397f42cb78b3341164d3927849c6bcc9bf3ec924aa65a381dd548a86a3a9c2ebd39db6690ae334884098238d2b921e720d594a1c7cc0de"}) (async) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80), 0x20981, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000b00)={0x3, 0x0, &(0x7f0000000ac0)=[0x0, 0x0, 0x0]}) (async) r5 = add_key$keyring(&(0x7f0000000c40), &(0x7f0000000c80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r6 = add_key$fscrypt_v1(&(0x7f0000000b40), &(0x7f0000000b80)={'fscrypt:', @desc4}, &(0x7f0000000bc0)={0x0, "1c9587c6396bf5341800bfd5ffdd8bb01a012dccd322349b4875299d0cf4dd07d1defb8924a92e5e215f3403fcc66d695270fad696c39c3d66fd1261105c7a14", 0x10}, 0x48, r5) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000cc0)='.pending_reads\x00', 0x280100, 0xc) write$9p(r7, &(0x7f0000000d00)="3365c6a895f9ccaa3d", 0x9) (async) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000d40), 0x101, 0x0) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000d80)={0x2, {0x2, 0x45, 0xa3c, 0x14, 0x7, 0x1}}) (async) recvfrom$inet(r7, &(0x7f0000000dc0)=""/69, 0x45, 0x40, 0x0, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x20, 0x70bd25, 0x8, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$AUTOFS_IOC_EXPIRE(r9, 0x810c9365, &(0x7f0000000f40)={{0x10001, 0x2}, 0x100, './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES2(r7, 0xd, &(0x7f0000001240)={0x2, 0x1, 0x0, &(0x7f00000011c0)=[{&(0x7f00000010c0)=""/88, 0x58}, {&(0x7f0000001140)=""/105, 0x69}], &(0x7f0000001200)=[0x5, 0x23f]}, 0x20) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001280)) (async) r11 = accept(r10, 0x0, &(0x7f00000012c0)) recvmsg(r11, &(0x7f0000001800)={&(0x7f0000001300)=@nfc, 0x80, &(0x7f0000001700)=[{&(0x7f0000001380)=""/65, 0x41}, {&(0x7f0000001400)=""/68, 0x44}, {&(0x7f0000001480)=""/223, 0xdf}, {&(0x7f0000001580)=""/166, 0xa6}, {&(0x7f0000001640)=""/51, 0x33}, {&(0x7f0000001680)=""/127, 0x7f}], 0x6, &(0x7f0000001780)=""/119, 0x77}, 0x40000003) (async) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r12, 0x84, 0x8, &(0x7f0000001840)=0x4, 0x4) r13 = add_key(&(0x7f0000001880)='pkcs7_test\x00', &(0x7f00000018c0)={'syz', 0x1}, 0x0, 0x0, r6) keyctl$reject(0x13, r13, 0x9, 0x5, r6) 1.558599362s ago: executing program 6 (id=2853): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x2808008, &(0x7f0000000380)={[{@sysvgroups}, {@acl}, {@mb_optimize_scan}, {@nouser_xattr}, {@dax}, {@journal_async_commit}, {@abort}, {@bsdgroups}, {@minixdf}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x210000, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000001000)=ANY=[@ANYBLOB="00000400aaaaaaaaaa3daaaaaaaaaa04000040000000bbbbbbbbbbbb"]) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 1.127191188s ago: executing program 1 (id=2855): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$COMEDI_POLL(0xffffffffffffffff, 0x640f) (async) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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") (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000010180)=@newtaction={0x45c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x448, 0x1, [@m_police={0x444, 0x1, 0x0, 0x0, {{0xb}, {0x418, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x100000, 0x2, 0x0, 0x5, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x7f, 0x1, 0x1, 0x4, 0xffffffda, 0x8, 0x2, 0x76ccfa5f, 0x5, 0x8, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0x2, 0xa, 0x1, 0x8, 0x7, 0x5, 0x8, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xffffff01, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x637, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0xab5, 0x0, 0x66ab6d08, 0xd, 0x8, 0x17ffe, 0x2, 0xfffffff7, 0x9, 0x1eb, 0x7, 0xd43, 0x9, 0x6, 0x7, 0x7, 0x4, 0x4, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x3, 0xaa2, 0x400, 0x40, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x7, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x7ff, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x10000000, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x1ff, 0x8, 0x2, 0x5, 0xffffffff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x9, 0xfffffffd, 0x7, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0xfffffffe, 0x5, 0x7, 0x10001, 0x2, 0x8, 0x5, 0x14, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x1, 0x1, 0x1, 0xd0c0, 0xfffff33c, 0xc974, 0x3, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x7, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0xffffffe4, 0x9, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0x10000, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x6, 0x9, 0x9, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x9, 0x9, 0x0, 0x81, 0x4, 0x7f8000, 0x9, 0x0, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x401, 0x40, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x45c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000005000b000100000008000d000d000000080009000900000008000a"], 0x4c}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) (async) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="8605000000000000050207ffc910ff0252f830c955d49da8c8a6a2079d1800000000000000000000000000010106000000000000c2040000"], 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r5) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) (async) listen(r6, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r8 = accept(r6, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="130000000000f3ffffff08000500000020000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r8}, 0x47) (async) shutdown(r8, 0x0) (async) recvfrom$unix(r8, 0x0, 0x59ea5bdad75e44ff, 0x20, 0x0, 0x0) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@acquire={0x134, 0x17, 0x1, 0x70bd27, 0x25dfdbfe, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0xff}, @in=@private=0xa010102, {@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x100, 0x4e20, 0x3, 0x2, 0xe0, 0x20, 0x3c, 0x0, 0xffffffffffffffff}, {{@in=@multicast2, @in=@broadcast, 0x4e21, 0x9, 0x4e22, 0x83, 0xa, 0x0, 0x0, 0xc}, {0x7f, 0xec2b, 0x5, 0xa, 0xd5, 0x6, 0x6, 0xb}, {0x800000000000007, 0xa0, 0x200000000009, 0x200000000000000}, 0xba, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x3, 0x1, 0x200, 0x70bd29}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x7e}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x4008810) (async) r11 = socket(0x2b, 0x3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r11, 0x11e, 0x1, 0x0, 0x20000000) 1.014719558s ago: executing program 1 (id=2856): syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030040000000000000000000730115000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079a04000000000007b0a00fe000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, 0x0, &(0x7f0000000940)) read$eventfd(r0, &(0x7f0000000040), 0x8) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) (async) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) 1.01392933s ago: executing program 3 (id=2857): r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000180)=ANY=[], 0xfc, 0x2d1, &(0x7f00000005c0)="$eJzs3E9rG0cYx/GfZMn6Y2zpVGihdGgv7WWx1Vcgig2lghbXKm0PhXW9aoW2ktGqCgoh9i3kltdhcswtEOcN+JJb7iEXEwjk4kPwBu9qLVk2seJoLcf+fsDs4515dmalsXkk2Nn//cF/jZpn1eyOklmjpLStA6l4FPUllAqOySCe1bBtfTf35vmXv/7x50/lSmV51ZiV8tr3JWPMwldPbt15+PXTztxvjxYeZ7RX/Gv/denF3md7n+8frkVXb3WMbdZbrY697jpmo+41LGN+cR3bc0y96TntE+01t7W52TN2c2M+v9l2PM/YzZ5pOD3TaZlOu2fsf+x601iWZebzumlmPjijurO6apdjmQymITd6ov93Zs+EjQklhlurO5c3NQAAcFWMV/+HJln//1v3TN0zzfPq/6So/+MT1P+Hp4pGXB9pSe2ynR98FhhC/Q8AAAAAAAAAAAAAAAAAAAAAwKfgwPcLvu8XomP0k5GUlRT9Pu15Ih4XeP8TU5wuJmzowb2s5N7rVrvV8Bi2l2uqy5WjxbT0NlgPfWG88mNledEEitp1t/r5wUOCmSg/Ujw7fynMN0P5W91qWvnj8RMplcLnDs/KL43kpyV1q7P69puh+Vsq6NnfasnVRnCdQf7dJWN++LkyMn4u6AcAAAAAwHVgmWPFk59/w90kLctE24aMtIcnB98PqHDO9wNGu7Ma5Kf0RWp69w0AAAAAwE3i9W43bNd12keBUlLbz0nHZyYfzMV25VNBRlJsQ4y8dCPB/Y8eIj3W5HPx3eAZgZUNF817O/u+v6WJvPJJSZe3Wk4EryRd+qDtowUb6xAv/w/fwHE6T/O/EgAAAIA4DIr+ac8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICba9zNw6L+F9l7bGi4mencJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA1vAsAAP//xfoRSg==") syz_mount_image$fuse(0x0, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x264091, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) signalfd4(r0, &(0x7f0000000200)={[0x9]}, 0x8, 0x80800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$evdev(&(0x7f000001fa80), 0x0, 0x43c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000a58000/0x3000)=nil, 0x3000, 0x6, 0x40010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 966.308949ms ago: executing program 1 (id=2858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x0, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\a', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 720.462241ms ago: executing program 5 (id=2859): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="d8000000190081054e81f782db4cb9040a1d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775010016a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920726f9a941", 0xd8}], 0x1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x98, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x168, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x6, 0x4}, {0x3, 0x1}}}}, {{@ip={@remote, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x6, 0x2, 0x2, 0x2, 0x1], 0x1, 0x2}, {0x2, [0x2, 0x3, 0x1, 0x0, 0x0, 0x7], 0x0, 0x2b96a497dd949b72}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711812000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000040)={0x0, 0x40, 0x0, 0x80, 0x0, 0x1}) madvise(&(0x7f0000105000/0x2000)=nil, 0x2000, 0x4) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18e5ffff00000000000000000000000095d0e56184a90b5ca4cd2de306e84d96d8fa08f1840ddb5f9112818dcbff48e2c74b485c678eb0d872e565ff7b7e6aa05528a7f2ec723bd6435a4aea87204337cba7ed6f4c8e0ece1222e7e2133d23213622dfe835206cdd5758dab8e5de62c1c71ffb64cf593de891ee5b55c7aa47bc8bc4040e9710195c2705f8c503d0b79ef09a366be38b157ea7e3"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0xffffffff, 0x8000003a, 0xffe, 0x7, 0x7ff, 0xab, 0x6}, 0x1c) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) getpid() 607.445343ms ago: executing program 6 (id=2860): unshare(0x28000600) (async) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) 562.771404ms ago: executing program 7 (id=2861): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b3feff0095"], &(0x7f00000002c0)='GPL\x00', 0x1, 0xde, &(0x7f0000003e40)=""/222, 0x41100, 0x73}, 0x94) 552.219744ms ago: executing program 7 (id=2862): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x2f}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 518.024056ms ago: executing program 6 (id=2863): syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600201006a78000005020000"], 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x2, 0x0, 0x4e}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) fsopen(&(0x7f0000000180)='coda\x00', 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0x9360, 0x0) ioctl$UBLK_U_CMD_GET_FEATURES(r5, 0x80207513, &(0x7f0000000700)={0x0, 0xffff, 0x8, &(0x7f00000006c0)}) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r7) keyctl$search(0xa, r7, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) r8 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000040)={'wg1\x00', {0x2, 0x4e22, @empty}}) recvfrom$inet(r10, 0x0, 0x0, 0x12102, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0xfffffffd, 0x9, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x3, 0xe, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x20000, 0x0, 0xfffffffd, 0x0, 0x8, 0x1, 0x0, 0x9, 0x3, 0xffffffff, 0x0, 0x4, 0x80, 0x20, 0x6, 0x8000005, 0x0, 0x0, 0x0, 0x7, 0x3, 0xfffffffd, 0x5, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x2000000, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x800000, 0xbc9f], [0x11, 0xfffeffff, 0x8007, 0x0, 0xffffffff, 0x9, 0xad9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x4f3, 0x0, 0x4, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x8001, 0xfffffffe, 0x40, 0xf790, 0x40, 0x10000, 0xec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x8, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x18c, 0x0, 0xfffffffd, 0x4000002, 0x5, 0x0, 0x47, 0x0, 0x100000, 0x1b8, 0x0, 0x4, 0x9dd, 0x80, 0x8000, 0x40000004, 0x6, 0x3, 0x8f, 0x7], [0xe, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0xfff, 0xffff7fff, 0xfffffffd, 0x0, 0x6cd7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x420, 0xc, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffc, 0x7, 0xfffffffc, 0x2af, 0xfffffff9, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x8, 0x401, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0xff, 0x4000005, 0xfffffffd, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x1, 0xd, 0xffffffdb], [0x2, 0x0, 0x4, 0x6, 0x0, 0x401, 0x1000, 0x215, 0x4, 0x7ff, 0x100, 0x3, 0x8, 0x3, 0x80, 0x0, 0x3, 0x0, 0x7d, 0x2, 0x7fff, 0x9, 0x1d, 0x71, 0x0, 0xfffffffe, 0x0, 0x0, 0x5d66, 0x1, 0x1, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x4, 0x4, 0x3, 0x0, 0xfffffffd, 0x1, 0xffffffff, 0x100, 0x2, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0xfffffffc, 0x0, 0x5, 0x400, 0x7, 0xd, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x5, 0x400]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) syz_emit_ethernet(0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x60, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x6, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/94, 0x5e, 0x1, 0x12}, @flat=@binder={0x73622a85, 0x1101, 0x1}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}, @register_looper, @enter_looper, @dead_binder_done], 0xe5, 0x0, &(0x7f0000000580)="1869b481f07ca55d1b2da57eb2b8c1f1a4a889c1097cac5490d76858dbdce769a2b462ffbf3383e4f3030ea9d4c12ae7f876201dd20dd74f3e83ee23b9f43c5c3fa30601316978e0ce15800beeae44ecc36f019e2108ebacb77c89ee03707a3bcf0af3bf7a6dbdf77cc0be9e336fdca691ae8bc9955253f114be9ecf32164fc95fd7898b6fe9ab9d22c79ad43cd2f7e8a61c3613c84ecdb129ca79bda7b66e15f936ec202231b1f7c8cbc716c3510fad1edb725796c889f6ae4dfb9eacbac12957290f2f5f4111dc9d6f37cc18186953f312e3091f31ef32a2b4f92968cef6046d4be129b3"}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r8, 0x89f7, &(0x7f0000000400)={'sit0\x00', 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r12, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000d80)=ANY=[@ANYRESOCT=r6, @ANYRES16=r11, @ANYRESDEC=r5], 0x2c}}, 0x4) 450.806715ms ago: executing program 7 (id=2864): r0 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2500}], 0x0, 0xa}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) 448.288105ms ago: executing program 1 (id=2865): openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x100) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000080), 0x58, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1900}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 387.554792ms ago: executing program 7 (id=2866): sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c80000273a20c69354c3bbcf124fb7d5d83d26a4ef2e2746f413a1e91c6ecc8782549697f5472bd75acf0b5e2a400bd9d89dbe3bd42faf06dd903010d8310b97cd042f0d0af9e6011aeee289b58b44730c4929a935318f4a3df8fd65648d2235a30185fccd74fea72d3609f40dd256e7e117f1ec6b711c3cd2c4af9368521996ae0129acebf9995a96e5b12acce634b2a52e487cfb89778cd391351977dc9ce086cfb6bb2c74c1554d68ae0c8f495f4e49fdb835eb4aba679abf596ed4b65c9cef939ed718045988031cfd2c617870ee03ec0c1d2014b", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf2504000000050005004f00000008000300050000000800020007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8004) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000340)=0x8a, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 335.362393ms ago: executing program 7 (id=2867): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff, 0x0, 0x0, 0x0, 0x0}, 0x30000000}], 0x0, 0x0, 0x0}) 30.436301ms ago: executing program 6 (id=2868): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000d3", @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180040003000800", @ANYRES8], 0x44}}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c040002) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="070000000000fedbdf2505000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=ANY=[], 0x50) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) 25.079509ms ago: executing program 7 (id=2869): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000001000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000300), &(0x7f0000000200)=@tcp6, 0x3}, 0x20) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x775fd9bc, @loopback}, 0x1c) sendmmsg$sock(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="db", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000140)="bd", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="7585", 0x2}], 0x1}}], 0x3, 0x0) (async) shutdown(r1, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0xeb, 0x250000) (async) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r4, 0x40106e80, &(0x7f0000000540)={0x7ff}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x28, r6, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5}]}]}, 0x28}}, 0x0) (async, rerun: 64) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 64) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x7c, r8, 0x315d9efa3ce6576a, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4140}, 0x800) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="070000000100f7", 0x7) 0s ago: executing program 3 (id=2870): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x2808008, &(0x7f0000000380)={[{@sysvgroups}, {@acl}, {@mb_optimize_scan}, {@nouser_xattr}, {@dax}, {@journal_async_commit}, {@abort}, {@bsdgroups}, {@minixdf}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x210000, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000001000)=ANY=[@ANYBLOB="00000400aaaaaaaaaa3daaaaaaaaaa04000040000000bbbbbbbbbbbb"]) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.385371][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.395208][ T39] bond0 (unregistering): Released all slaves [ 285.472178][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.495617][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.505140][ T39] bond0 (unregistering): Released all slaves [ 285.512612][T11764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.531238][T11753] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.538093][T11764] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.560036][ T9852] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.560085][ T9852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.563239][ T9852] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.563275][ T9852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.574682][ T39] tipc: Left network mode [ 285.582120][ T9852] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.582186][ T9852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.585307][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.585511][ T9852] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.585549][ T9852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.593866][ T39] tipc: Left network mode [ 285.641197][T11753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.675027][T11973] loop2: detected capacity change from 0 to 4096 [ 285.677171][T11973] ext4: Unknown parameter 'nouser_xattr' [ 286.036706][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4 [ 286.212511][T11764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.291697][T11753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.404189][ T4724] Bluetooth: hci0: command tx timeout [ 286.437164][T11753] veth0_vlan: entered promiscuous mode [ 286.447139][T12077] loop2: detected capacity change from 0 to 1024 [ 286.462659][T11753] veth1_vlan: entered promiscuous mode [ 286.483307][T12077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 286.489935][T12077] EXT4-fs error (device loop2): ext4_readdir:265: inode #12: block 80: comm syz.2.1996: path /: bad entry in directory: directory entry overrun - offset=296, inode=0, rec_len=1024, size=1024 fake=0 [ 286.508429][ T39] hsr_slave_1: left promiscuous mode [ 286.508696][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.508707][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.509895][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.509907][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.524076][ T39] hsr_slave_0: left promiscuous mode [ 286.529801][ T4716] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /353/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 286.535220][ T4716] EXT4-fs error (device loop2): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /353/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 286.538905][ T39] hsr_slave_1: left promiscuous mode [ 286.540657][ T4716] EXT4-fs error (device loop2): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 286.545068][ T4716] EXT4-fs error (device loop2): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /353/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 286.548752][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.548768][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.549503][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.549515][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.556716][ T4716] EXT4-fs error (device loop2): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 286.557715][ T4716] EXT4-fs error (device loop2): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /353/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 286.564310][ T4724] Bluetooth: hci4: command tx timeout [ 286.564651][ T4716] EXT4-fs error (device loop2): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 286.564982][ T4716] EXT4-fs error (device loop2): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /353/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 286.565221][ T4716] EXT4-fs error (device loop2): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 286.580647][ T39] veth1_macvtap: left promiscuous mode [ 286.581731][ T39] veth0_macvtap: left promiscuous mode [ 286.582694][ T39] veth1_vlan: left promiscuous mode [ 286.583727][ T39] veth0_vlan: left promiscuous mode [ 286.585756][ T39] veth1_macvtap: left promiscuous mode [ 286.586741][ T39] veth0_macvtap: left promiscuous mode [ 286.587802][ T39] veth1_vlan: left promiscuous mode [ 286.588920][ T39] veth0_vlan: left promiscuous mode [ 286.750455][ T39] team0 (unregistering): Port device team_slave_1 removed [ 286.756429][ T39] team0 (unregistering): Port device team_slave_0 removed [ 286.882755][ T39] team0 (unregistering): Port device team_slave_1 removed [ 286.888031][ T39] team0 (unregistering): Port device team_slave_0 removed [ 286.994659][T11794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 286.997721][T11794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 286.999398][T11794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 287.005426][T11794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 287.007140][T11794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 287.011749][T11794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 287.037935][T11794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 287.043022][T11794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 287.044987][ T4724] Bluetooth: hci1: command tx timeout [ 287.068843][T11764] veth0_vlan: entered promiscuous mode [ 287.083525][T11753] veth0_macvtap: entered promiscuous mode [ 287.112138][T11794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.116574][T11764] veth1_vlan: entered promiscuous mode [ 287.131786][T11794] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.135502][ T5187] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 287.139837][T11753] veth1_macvtap: entered promiscuous mode [ 287.149132][ T842] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.149189][ T842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.153890][T11764] veth0_macvtap: entered promiscuous mode [ 287.162617][T11764] veth1_macvtap: entered promiscuous mode [ 287.171898][ T9865] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.171949][ T9865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.188285][T11753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.198856][T11753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.208816][T11764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.209890][T11764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.220727][ T9852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.220811][ T9852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.220846][ T9852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.220868][ T9852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.220889][ T9852] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.220909][ T9852] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.220928][ T9852] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.220944][ T9852] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.330320][ T9854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.330361][ T9854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.357997][ T4726] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.362113][ T6023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.362155][ T6023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.368771][ T4726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.370806][ T4726] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.371229][ T6023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.371249][ T6023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.377530][ T4726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.379272][ T4726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.400592][ T9854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.400626][ T9854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.509086][T12127] binder: 12126:12127 tried to acquire reference to desc 0, got 1 instead [ 287.512628][T12127] binder_alloc: 12126: binder_alloc_buf size 805306368 failed, no address space [ 287.514387][T12127] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 287.516007][T12127] binder: cannot allocate buffer: no space left [ 287.516051][T12127] binder: 12126:12127 transaction call to 12126:0 failed 112/29201/-28, code 0 size 0-0 line 3393 [ 287.534159][ T4961] binder: undelivered TRANSACTION_ERROR: 29201 [ 287.613706][T11794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.770087][T11794] veth0_vlan: entered promiscuous mode [ 287.780507][T11794] veth1_vlan: entered promiscuous mode [ 287.813770][T12148] loop1: detected capacity change from 0 to 4096 [ 287.949629][T12148] EXT4-fs: inline encryption not supported [ 288.058831][T12148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.064495][T12148] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 288.064549][T12148] System zones: 0-5 [ 288.069795][T12148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.099717][T11794] veth0_macvtap: entered promiscuous mode [ 288.112784][T11794] veth1_macvtap: entered promiscuous mode [ 288.200278][T11753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.459856][T11794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.460932][T11794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.464353][ T6023] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.464562][ T6023] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.464700][ T6023] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.465445][ T6023] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.488452][ T4726] Bluetooth: hci0: command tx timeout [ 288.580688][T12112] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.580741][T12112] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.580894][T12112] bridge_slave_0: entered allmulticast mode [ 288.581380][T12112] bridge_slave_0: entered promiscuous mode [ 288.582123][T12112] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.582153][T12112] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.582251][T12112] bridge_slave_1: entered allmulticast mode [ 288.582655][T12112] bridge_slave_1: entered promiscuous mode [ 288.625534][T12112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.630411][T12112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.644369][ T4726] Bluetooth: hci4: command tx timeout [ 288.676258][ T842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.676290][ T842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.703448][T12112] team0: Port device team_slave_0 added [ 288.720695][T12112] team0: Port device team_slave_1 added [ 288.756498][T12112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.756542][T12112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.756557][T12112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.758027][ T9853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.758042][ T9853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.827050][T12112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.827089][T12112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.827109][T12112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.892675][T12112] hsr_slave_0: entered promiscuous mode [ 288.893040][T12112] hsr_slave_1: entered promiscuous mode [ 288.893244][T12112] debugfs: 'hsr0' already exists in 'hsr' [ 288.893254][T12112] Cannot create hsr debugfs directory [ 288.926988][T12181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.097814][T12112] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 289.102797][T12112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 289.105974][T12112] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 289.109665][T12112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 289.111479][T12112] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 289.115153][T12112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 289.117978][T12112] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 289.122004][T12112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 289.124531][ T4726] Bluetooth: hci1: command tx timeout [ 289.182039][T12193] Soft offlining pfn 0x13fc2d at process virtual address 0x20000000 [ 289.249618][T12194] netlink: 'syz.3.1974': attribute type 10 has an invalid length. [ 289.360075][T12194] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.361017][T12194] bond0: (slave team0): Enslaving as an active interface with an up link [ 289.392369][T12112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.401920][T12112] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.407503][ T9854] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.407549][ T9854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.412804][ T9853] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.412841][ T9853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.444130][ T4726] Bluetooth: hci3: command tx timeout [ 289.545838][T12211] syzkaller0: entered promiscuous mode [ 289.545877][T12211] syzkaller0: entered allmulticast mode [ 289.550104][T12112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.631362][T12112] veth0_vlan: entered promiscuous mode [ 289.634862][T12112] veth1_vlan: entered promiscuous mode [ 289.647246][T12112] veth0_macvtap: entered promiscuous mode [ 289.650154][T12112] veth1_macvtap: entered promiscuous mode [ 289.657739][T12112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.663832][T12112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.669184][ T39] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.671293][ T39] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.673204][ T39] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.675402][ T39] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.760621][ T9854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.760655][ T9854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.777200][ T9854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.777229][ T9854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.166862][T12232] loop6: detected capacity change from 0 to 1024 [ 290.418917][T12232] __quota_error: 32 callbacks suppressed [ 290.418957][T12232] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 290.418990][T12232] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 290.419005][T12232] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2021: Failed to acquire dquot type 0 [ 290.419021][T12232] loop6: lost filesystem error report for type 5 error -5 [ 290.424087][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 290.424102][ C0] EXT4-fs (loop6): initial error at time 290: ext4_acquire_dquot:7034 [ 290.424115][ C0] EXT4-fs (loop6): last error at time 290: ext4_acquire_dquot:7034 [ 290.434477][T12232] EXT4-fs (loop6): 1 truncate cleaned up [ 290.436159][T12232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.569029][ T4726] Bluetooth: hci3: command tx timeout [ 291.669883][T12245] loop7: detected capacity change from 0 to 2048 [ 291.803224][T10955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.915274][T12254] binder: 12253:12254 tried to acquire reference to desc 0, got 1 instead [ 291.915470][T12254] binder_alloc: 12253: binder_alloc_buf size 805306368 failed, no address space [ 291.915493][T12254] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 291.915514][T12254] binder: cannot allocate buffer: no space left [ 291.915928][T12254] binder: 12253:12254 transaction call to 12253:0 failed 117/29201/-28, code 0 size 0-0 line 3393 [ 291.916172][ T4797] binder: undelivered TRANSACTION_ERROR: 29201 [ 291.941880][T12250] syzkaller0: entered promiscuous mode [ 291.941912][T12250] syzkaller0: entered allmulticast mode [ 292.363626][T12273] syzkaller0: entered promiscuous mode [ 292.365306][T12273] syzkaller0: entered allmulticast mode [ 292.375106][T12273] tipc: Started in network mode [ 292.375144][T12273] tipc: Node identity 7a1e9339421b, cluster identity 4711 [ 292.375725][T12273] tipc: Enabled bearer , priority 0 [ 292.413403][T12277] tipc: Started in network mode [ 292.413445][T12277] tipc: Node identity ac1414aa, cluster identity 4711 [ 292.413669][T12277] tipc: Enabled bearer , priority 10 [ 292.416391][T12272] tipc: Resetting bearer [ 292.431298][T12272] tipc: Disabling bearer [ 292.519587][T12283] loop3: detected capacity change from 0 to 512 [ 292.537722][T12283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.552005][T11794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.566072][T12287] FAULT_INJECTION: forcing a failure. [ 292.566072][T12287] name failslab, interval 1, probability 0, space 0, times 0 [ 292.566110][T12287] CPU: 1 UID: 0 PID: 12287 Comm: syz.5.2036 Tainted: G L syzkaller #0 PREEMPT [ 292.566125][T12287] Tainted: [L]=SOFTLOCKUP [ 292.566130][T12287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 292.566136][T12287] Call trace: [ 292.566140][T12287] show_stack+0x2c/0x3c (C) [ 292.566164][T12287] __dump_stack+0x30/0x40 [ 292.566176][T12287] dump_stack_lvl+0xd8/0x12c [ 292.566185][T12287] dump_stack+0x1c/0x28 [ 292.566195][T12287] should_fail_ex+0x41c/0x590 [ 292.566205][T12287] should_failslab+0xc4/0x120 [ 292.566213][T12287] __kmalloc_cache_noprof+0x8c/0x624 [ 292.566222][T12287] alloc_bprm+0x8c/0x484 [ 292.566232][T12287] do_execveat_common+0x17c/0x52c [ 292.566242][T12287] __arm64_sys_execveat+0xdc/0x104 [ 292.566252][T12287] invoke_syscall+0x98/0x244 [ 292.566262][T12287] el0_svc_common+0xec/0x23c [ 292.566271][T12287] do_el0_svc+0x4c/0x5c [ 292.566280][T12287] el0_svc+0x64/0x260 [ 292.566289][T12287] el0t_64_sync_handler+0x48/0x148 [ 292.566296][T12287] el0t_64_sync+0x198/0x19c [ 292.750193][T12294] loop1: detected capacity change from 0 to 4096 [ 292.750601][T12294] EXT4-fs: inline encryption not supported [ 292.752219][T12294] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 292.754643][T12294] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 292.754702][T12294] System zones: 0-5 [ 292.755570][T12294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.812233][T12301] loop3: detected capacity change from 0 to 4096 [ 292.812673][T12301] ext4: Bad value for 'sb' [ 292.821177][ T4804] hid_parser_main: 30 callbacks suppressed [ 292.826027][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2041'. [ 292.826064][T12302] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2041'. [ 292.834167][ T4804] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 292.839094][ T4804] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 292.918390][T12304] loop6: detected capacity change from 0 to 512 [ 292.959620][T12304] EXT4-fs (loop6): 1 orphan inode deleted [ 292.960121][T12304] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.975925][ T39] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 292.978079][ T39] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 293.089890][T12304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.524352][ T4797] tipc: Node number set to 2886997162 [ 293.594654][T11753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.604468][ T4726] Bluetooth: hci3: command tx timeout [ 293.651897][T12325] syzkaller0: entered promiscuous mode [ 293.653152][T12325] syzkaller0: entered allmulticast mode [ 293.722542][T10955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.124819][T12332] loop1: detected capacity change from 0 to 1024 [ 294.236240][T12343] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2051'. [ 295.379805][T12351] xt_addrtype: ipv6 does not support BROADCAST matching [ 295.458690][T12362] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2057'. [ 295.467388][T12362] loop5: detected capacity change from 0 to 1024 [ 295.534356][T12362] EXT4-fs error (device loop5): __ext4_fill_super:5596: comm syz.5.2057: inode #2: comm syz.5.2057: iget: illegal inode # [ 295.534402][T12362] loop5: lost filesystem error report for type 5 error -117 [ 295.537517][T12362] EXT4-fs (loop5): get root inode failed [ 295.537550][T12362] EXT4-fs (loop5): mount failed [ 295.551783][T12367] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2059'. [ 295.563253][T12364] tipc: Started in network mode [ 295.568552][T12364] tipc: Node identity 5a0fa47681c3, cluster identity 4711 [ 295.568650][T12364] tipc: Enabled bearer , priority 0 [ 295.569177][T12364] syzkaller0: entered promiscuous mode [ 295.569196][T12364] syzkaller0: entered allmulticast mode [ 295.600968][T12364] tipc: Resetting bearer [ 295.612411][T12367] loop6: detected capacity change from 0 to 1024 [ 295.627954][T12367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.631620][T12367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.681358][T12363] tipc: Resetting bearer [ 295.693844][T12363] tipc: Disabling bearer [ 295.695306][ T4726] Bluetooth: hci3: command tx timeout [ 295.740270][T12378] loop6: detected capacity change from 0 to 512 [ 295.789449][T12378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.827273][T10955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.193048][T12392] netlink: 'syz.5.2064': attribute type 4 has an invalid length. [ 296.193944][T12392] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2064'. [ 296.332727][T12403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2069'. [ 296.810666][T12420] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2077'. [ 296.849391][T12426] FAULT_INJECTION: forcing a failure. [ 296.849391][T12426] name failslab, interval 1, probability 0, space 0, times 0 [ 296.849434][T12426] CPU: 0 UID: 0 PID: 12426 Comm: syz.5.2079 Tainted: G L syzkaller #0 PREEMPT [ 296.849450][T12426] Tainted: [L]=SOFTLOCKUP [ 296.849455][T12426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 296.849460][T12426] Call trace: [ 296.849463][T12426] show_stack+0x2c/0x3c (C) [ 296.849483][T12426] __dump_stack+0x30/0x40 [ 296.849496][T12426] dump_stack_lvl+0xd8/0x12c [ 296.849506][T12426] dump_stack+0x1c/0x28 [ 296.849515][T12426] should_fail_ex+0x41c/0x590 [ 296.849526][T12426] should_failslab+0xc4/0x120 [ 296.849534][T12426] __kmalloc_cache_noprof+0x8c/0x624 [ 296.849543][T12426] tcf_block_get_ext+0x254/0x1150 [ 296.849553][T12426] tcf_block_get+0x64/0xa0 [ 296.849561][T12426] hfsc_change_class+0x92c/0x1094 [ 296.849570][T12426] tc_ctl_tclass+0xa0c/0x11bc [ 296.849578][T12426] rtnetlink_rcv_msg+0x630/0x9bc [ 296.849587][T12426] netlink_rcv_skb+0x238/0x414 [ 296.849597][T12426] rtnetlink_rcv+0x28/0x38 [ 296.849606][T12426] netlink_unicast+0x600/0x7f8 [ 296.849615][T12426] netlink_sendmsg+0x648/0x948 [ 296.849625][T12426] __sock_sendmsg+0xc8/0x138 [ 296.849635][T12426] ____sys_sendmsg+0x3d0/0x6c8 [ 296.849642][T12426] ___sys_sendmsg+0x198/0x224 [ 296.849649][T12426] __sys_sendmsg+0x160/0x214 [ 296.849656][T12426] __arm64_sys_sendmsg+0x80/0x94 [ 296.849663][T12426] invoke_syscall+0x98/0x244 [ 296.849673][T12426] el0_svc_common+0xec/0x23c [ 296.849682][T12426] do_el0_svc+0x4c/0x5c [ 296.849692][T12426] el0_svc+0x64/0x260 [ 296.849700][T12426] el0t_64_sync_handler+0x48/0x148 [ 296.849707][T12426] el0t_64_sync+0x198/0x19c [ 297.657737][ T4723] Bluetooth: hci0: Invalid connection link type handle 0x00c9 [ 297.678165][T12438] binder: 12437:12438 tried to acquire reference to desc 0, got 1 instead [ 297.679992][T12438] binder_alloc: 12437: binder_alloc_buf size 805306368 failed, no address space [ 297.680016][T12438] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 297.680039][T12438] binder: cannot allocate buffer: no space left [ 297.680063][T12438] binder: 12437:12438 transaction call to 12437:0 failed 122/29201/-28, code 0 size 0-0 line 3393 [ 297.680293][ T4804] binder: undelivered TRANSACTION_ERROR: 29201 [ 297.724625][T12442] syzkaller0: entered promiscuous mode [ 297.724656][T12442] syzkaller0: entered allmulticast mode [ 297.734184][T12442] tipc: Enabled bearer , priority 0 [ 297.771406][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2087'. [ 297.785055][T12449] loop1: detected capacity change from 0 to 1024 [ 297.795580][T12449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.812078][T12441] tipc: Resetting bearer [ 297.817014][T11753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.826964][T12441] tipc: Disabling bearer [ 297.878728][T12457] tipc: Enabled bearer , priority 10 [ 297.914885][T12461] loop1: detected capacity change from 0 to 4096 [ 297.918280][T12461] EXT4-fs: inline encryption not supported [ 297.920166][T12461] EXT4-fs (loop1): Test dummy encryption mode enabled [ 297.922256][T12461] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 297.923739][T12461] System zones: 0-5 [ 297.933138][T12461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.941377][T12460] EXT4-fs (loop1): shut down requested (2) [ 298.185690][T11753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.324168][ T4726] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 298.489234][ T4723] Bluetooth: hci7: command 0x1003 tx timeout [ 298.493641][ T4724] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 299.004541][ T4961] tipc: Node number set to 3687621750 [ 299.339600][T12483] netlink: 4172 bytes leftover after parsing attributes in process `syz.5.2097'. [ 299.360170][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2098'. [ 299.424152][T12484] loop3: detected capacity change from 0 to 512 [ 299.544535][T12484] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 299.548572][T12484] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2098: bad orphan inode 131083 [ 299.548614][T12484] loop3: lost filesystem error report for type 5 error -117 [ 299.554012][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 299.554045][ C0] EXT4-fs (loop3): initial error at time 299: ext4_orphan_get:1423 [ 299.554070][ C0] EXT4-fs (loop3): last error at time 299: ext4_orphan_get:1423 [ 299.558824][T12484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.690619][T12497] loop1: detected capacity change from 0 to 1024 [ 299.691071][T12497] EXT4-fs: Ignoring removed mblk_io_submit option [ 299.803210][T12497] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 299.818468][T12497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.823585][T12499] trusted_key: encrypted_key: keyword 'ld' not recognized [ 299.833371][T12499] random: crng reseeded on system resumption [ 299.885330][T11794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.934883][T12509] sctp: [Deprecated]: syz.3.2103 (pid 12509) Use of int in max_burst socket option. [ 299.934883][T12509] Use struct sctp_assoc_value instead [ 299.948015][T12510] syzkaller0: entered promiscuous mode [ 299.948053][T12510] syzkaller0: entered allmulticast mode [ 299.967895][T12510] tipc: Enabled bearer , priority 0 [ 299.969518][T12513] loop6: detected capacity change from 0 to 1024 [ 299.974551][T12513] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 299.974601][T12513] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 299.974611][T12513] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2105: Failed to acquire dquot type 0 [ 299.974624][T12513] loop6: lost filesystem error report for type 5 error -5 [ 299.975159][T12513] EXT4-fs (loop6): 1 truncate cleaned up [ 299.975602][T12513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.047004][T12506] tipc: Resetting bearer [ 300.053840][T12506] tipc: Disabling bearer [ 300.060799][T12517] netlink: 'syz.7.2107': attribute type 10 has an invalid length. [ 300.063724][T12517] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2107'. [ 300.401847][T11753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.416441][T12523] loop7: detected capacity change from 0 to 4096 [ 300.420011][T12523] ext4: Unknown parameter 'nouser_xattr' [ 300.839795][T10955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.146712][T12556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2114'. [ 301.329429][ T4375] block nbd0: Possible stuck request 0000000012111839: control (read@0,4096B). Runtime 60 seconds [ 301.440797][T12580] syzkaller0: entered promiscuous mode [ 301.441990][T12580] syzkaller0: entered allmulticast mode [ 301.475659][T12580] tipc: Started in network mode [ 301.479165][T12580] tipc: Node identity 169141da90ba, cluster identity 4711 [ 302.223877][T12587] loop5: detected capacity change from 0 to 512 [ 302.384236][T12580] tipc: Enabled bearer , priority 0 [ 302.471888][T12578] tipc: Resetting bearer [ 302.482810][T12594] loop1: detected capacity change from 0 to 128 [ 302.483144][T12594] vfat: Unknown parameter '' [ 302.528122][T12578] tipc: Disabling bearer [ 302.608988][T12603] input: syz0 as /devices/virtual/input/input6 [ 302.637905][T12605] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 302.676649][T12610] loop3: detected capacity change from 0 to 2048 [ 302.737464][T12610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.783356][T11794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.936147][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2128'. [ 303.219229][T12626] FAULT_INJECTION: forcing a failure. [ 303.219229][T12626] name failslab, interval 1, probability 0, space 0, times 0 [ 303.221769][T12626] CPU: 0 UID: 0 PID: 12626 Comm: syz.6.2130 Tainted: G L syzkaller #0 PREEMPT [ 303.221795][T12626] Tainted: [L]=SOFTLOCKUP [ 303.221799][T12626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 303.221806][T12626] Call trace: [ 303.221810][T12626] show_stack+0x2c/0x3c (C) [ 303.221835][T12626] __dump_stack+0x30/0x40 [ 303.221849][T12626] dump_stack_lvl+0xd8/0x12c [ 303.221860][T12626] dump_stack+0x1c/0x28 [ 303.221869][T12626] should_fail_ex+0x41c/0x590 [ 303.221880][T12626] should_failslab+0xc4/0x120 [ 303.221889][T12626] kmem_cache_alloc_noprof+0x8c/0x610 [ 303.221899][T12626] vm_area_alloc+0x2c/0x144 [ 303.221910][T12626] create_init_stack_vma+0x184/0x7c4 [ 303.221918][T12626] alloc_bprm+0x34c/0x484 [ 303.221928][T12626] do_execveat_common+0x17c/0x52c [ 303.221938][T12626] __arm64_sys_execveat+0xdc/0x104 [ 303.221948][T12626] invoke_syscall+0x98/0x244 [ 303.221958][T12626] el0_svc_common+0xec/0x23c [ 303.221967][T12626] do_el0_svc+0x4c/0x5c [ 303.221977][T12626] el0_svc+0x64/0x260 [ 303.221985][T12626] el0t_64_sync_handler+0x48/0x148 [ 303.221993][T12626] el0t_64_sync+0x198/0x19c [ 304.314165][T12637] syzkaller0: entered promiscuous mode [ 304.314203][T12637] syzkaller0: entered allmulticast mode [ 304.368556][T12637] tipc: Enabled bearer , priority 0 [ 304.424779][T12635] tipc: Resetting bearer [ 304.450306][T12635] tipc: Disabling bearer [ 304.488508][T12642] loop6: detected capacity change from 0 to 512 [ 304.500417][T12642] EXT4-fs (loop6): orphan cleanup on readonly fs [ 304.501088][T12642] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.2135: corrupted in-inode xattr: invalid size in ea xattr [ 304.501109][T12642] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 304.501349][T12642] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2135: couldn't read orphan inode 15 (err -117) [ 304.501367][T12642] loop6: lost filesystem error report for type 5 error -117 [ 304.504019][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 304.504031][ C0] EXT4-fs (loop6): initial error at time 304: ext4_iget_extra_inode:5128: inode 15 [ 304.504046][ C0] EXT4-fs (loop6): last error at time 304: ext4_orphan_get:1402 [ 304.505937][T12642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 304.663931][ T9852] Bluetooth: hci7: Frame reassembly failed (-84) [ 304.725321][ T4726] Bluetooth: hci6: command 0x1003 tx timeout [ 304.774158][ T4724] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 304.864302][T10955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.920957][T12659] loop6: detected capacity change from 0 to 4096 [ 304.922913][T12659] EXT4-fs: inline encryption not supported [ 304.924998][T12659] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 304.930055][T12659] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 304.930115][T12659] System zones: 0-5 [ 304.934718][T12659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.900388][T12688] loop5: detected capacity change from 0 to 4096 [ 305.910468][T12688] ext4: Unknown parameter 'nouser_xattr' [ 305.913801][T10955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.911848][ T4723] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 307.631792][T12696] syzkaller0: entered promiscuous mode [ 307.631837][T12696] syzkaller0: entered allmulticast mode [ 307.730262][T12696] loop6: detected capacity change from 0 to 2048 [ 307.772123][T12696] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.791066][T12715] syzkaller0: entered promiscuous mode [ 307.804762][T12715] syzkaller0: entered allmulticast mode [ 307.992446][T12724] tipc: Enabling of bearer rejected, already enabled [ 308.036804][T10955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.087985][T12727] loop5: detected capacity change from 0 to 128 [ 308.105024][T12727] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.211704][T12735] loop1: detected capacity change from 0 to 1024 [ 308.219569][T11764] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 308.527477][T12752] fuse: Bad value for 'user_id' [ 308.527505][T12752] fuse: Bad value for 'user_id' [ 308.874586][ T1452] Bluetooth: hci6: Frame reassembly failed (-84) [ 308.878152][ T9853] Bluetooth: hci6: Frame reassembly failed (-84) [ 309.018946][T12766] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 309.018969][T12766] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 309.021142][T12766] vhci_hcd vhci_hcd.0: Device attached [ 309.133688][T12770] loop7: detected capacity change from 0 to 256 [ 309.199912][T12770] FAT-fs (loop7): Directory bread(block 64) failed [ 309.199955][T12770] FAT-fs (loop7): Directory bread(block 65) failed [ 309.200160][T12770] FAT-fs (loop7): Directory bread(block 66) failed [ 309.200247][T12770] FAT-fs (loop7): Directory bread(block 67) failed [ 309.200277][T12770] FAT-fs (loop7): Directory bread(block 68) failed [ 309.200292][T12770] FAT-fs (loop7): Directory bread(block 69) failed [ 309.200368][T12770] FAT-fs (loop7): Directory bread(block 70) failed [ 309.200453][T12770] FAT-fs (loop7): Directory bread(block 71) failed [ 309.200605][T12770] FAT-fs (loop7): Directory bread(block 72) failed [ 309.200650][T12770] FAT-fs (loop7): Directory bread(block 73) failed [ 309.363037][T12770] syz.7.2162: attempt to access beyond end of device [ 309.363037][T12770] loop7: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 310.056143][T12767] vhci_hcd: connection closed [ 310.112429][ T9865] vhci_hcd vhci_hcd.7: stop threads [ 310.115313][ T9865] vhci_hcd vhci_hcd.7: release socket [ 310.117045][ T9865] vhci_hcd vhci_hcd.7: disconnect device [ 310.188679][T12774] binder: 12773:12774 tried to acquire reference to desc 0, got 1 instead [ 310.190652][T12774] binder_alloc: 12773: binder_alloc_buf size 805306368 failed, no address space [ 310.192451][T12774] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 310.194559][T12774] binder: cannot allocate buffer: no space left [ 310.194586][T12774] binder: 12773:12774 transaction call to 12773:0 failed 128/29201/-28, code 0 size 0-0 line 3393 [ 310.198027][ T4804] binder: undelivered TRANSACTION_ERROR: 29201 [ 310.244830][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.244882][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.636142][T12790] netlink: 'syz.7.2169': attribute type 6 has an invalid length. [ 310.636242][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2169'. [ 310.664820][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 310.765469][T12796] fuse: root generation should be zero [ 310.771347][T12796] sch_fq: defrate 3 ignored. [ 310.817322][ T4816] usb usb17-port1: attempt power cycle [ 310.884235][ T4724] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 310.893767][T12799] loop5: detected capacity change from 0 to 4096 [ 310.894511][T12799] ext4: Unknown parameter 'nouser_xattr' [ 310.977407][T12802] loop7: detected capacity change from 0 to 256 [ 311.982863][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 312.434541][T12810] fuse: Bad value for 'user_id' [ 312.434577][T12810] fuse: Bad value for 'user_id' [ 312.458782][T12817] sit0: entered promiscuous mode [ 312.468125][ T4816] usb usb17-port1: unable to enumerate USB device [ 312.471534][T12817] netlink: 'syz.6.2179': attribute type 1 has an invalid length. [ 312.559373][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2181'. [ 313.731882][T12857] netlink: 'syz.5.2188': attribute type 1 has an invalid length. [ 313.762961][T12857] bond1: entered promiscuous mode [ 313.764707][T12857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 313.928725][T12872] loop5: detected capacity change from 0 to 4096 [ 313.929134][T12872] ext4: Unknown parameter 'nouser_xattr' [ 315.022804][T12879] loop6: detected capacity change from 0 to 512 [ 317.468957][T12900] netlink: 'syz.7.2196': attribute type 8 has an invalid length. [ 317.961667][T12919] tipc: Enabled bearer , priority 0 [ 317.962934][T12910] syzkaller0: entered promiscuous mode [ 317.962949][T12910] syzkaller0: entered allmulticast mode [ 317.973908][T12910] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 318.009598][T12910] Bluetooth: MGMT ver 1.23 [ 318.015309][T12910] tipc: Resetting bearer [ 318.019446][T12906] tipc: Resetting bearer [ 318.058010][T12906] tipc: Disabling bearer [ 318.090669][T12925] syzkaller0: entered promiscuous mode [ 318.090709][T12925] syzkaller0: entered allmulticast mode [ 318.101891][T12926] loop7: detected capacity change from 0 to 4096 [ 318.103653][T12926] EXT4-fs: inline encryption not supported [ 318.107552][T12926] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 318.109993][T12926] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 318.110054][T12926] System zones: 0-5 [ 318.113105][T12926] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.926834][T12950] tipc: Enabling of bearer rejected, already enabled [ 319.916949][T12112] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.124290][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 321.610319][T12984] syzkaller0: entered promiscuous mode [ 321.610363][T12984] syzkaller0: entered allmulticast mode [ 321.775682][T13001] loop1: detected capacity change from 0 to 512 [ 321.852351][T13006] loop5: detected capacity change from 0 to 256 [ 322.074345][T13001] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 322.086967][T13001] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.2220: bad orphan inode 131083 [ 322.087001][T13001] loop1: lost filesystem error report for type 5 error -117 [ 322.094397][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 322.094450][ C0] EXT4-fs (loop1): initial error at time 322: ext4_orphan_get:1423 [ 322.094479][ C0] EXT4-fs (loop1): last error at time 322: ext4_orphan_get:1423 [ 322.095068][T13001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.522732][T11753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.963720][T13032] syzkaller0: entered promiscuous mode [ 322.964944][T13032] syzkaller0: entered allmulticast mode [ 322.969056][T13048] syzkaller0: entered promiscuous mode [ 322.969093][T13048] syzkaller0: entered allmulticast mode [ 324.081030][T13075] loop5: detected capacity change from 0 to 128 [ 324.092870][T13075] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 326.418646][T13098] syzkaller0: entered promiscuous mode [ 326.419981][T13098] syzkaller0: entered allmulticast mode [ 326.426087][T13100] syzkaller0: entered promiscuous mode [ 326.428926][T13100] syzkaller0: entered allmulticast mode [ 326.438778][T13102] binder: 13101:13102 tried to acquire reference to desc 0, got 1 instead [ 326.442862][T13102] binder_alloc: 13101: binder_alloc_buf size 805306368 failed, no address space [ 326.442896][T13102] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 326.442924][T13102] binder: cannot allocate buffer: no space left [ 326.442947][T13102] binder: 13101:13102 transaction call to 13101:0 failed 133/29201/-28, code 0 size 0-0 line 3393 [ 326.444145][ T4816] binder: undelivered TRANSACTION_ERROR: 29201 [ 326.493437][T13100] tipc: Enabled bearer , priority 0 [ 326.508510][T13098] tipc: Enabled bearer , priority 0 [ 326.529067][T13105] syzkaller0: entered promiscuous mode [ 326.530186][T13105] syzkaller0: entered allmulticast mode [ 326.535227][T13099] tipc: Resetting bearer [ 326.547449][T13099] tipc: Disabling bearer [ 326.570752][T13097] tipc: Resetting bearer [ 326.602661][T13097] tipc: Disabling bearer [ 326.619715][T13108] syzkaller0: entered promiscuous mode [ 326.619756][T13108] syzkaller0: entered allmulticast mode [ 326.624937][T13108] tipc: Enabled bearer , priority 0 [ 326.673003][T13107] tipc: Resetting bearer [ 326.679604][T13115] loop6: detected capacity change from 0 to 128 [ 326.695377][T13107] tipc: Disabling bearer [ 326.712630][T13115] FAT-fs (loop6): Directory bread(block 32) failed [ 326.712672][T13115] FAT-fs (loop6): Directory bread(block 33) failed [ 326.712709][T13115] FAT-fs (loop6): Directory bread(block 34) failed [ 326.712722][T13115] FAT-fs (loop6): Directory bread(block 35) failed [ 326.712746][T13115] FAT-fs (loop6): Directory bread(block 36) failed [ 326.712758][T13115] FAT-fs (loop6): Directory bread(block 37) failed [ 326.712780][T13115] FAT-fs (loop6): Directory bread(block 38) failed [ 326.712791][T13115] FAT-fs (loop6): Directory bread(block 39) failed [ 326.712812][T13115] FAT-fs (loop6): Directory bread(block 40) failed [ 326.712823][T13115] FAT-fs (loop6): Directory bread(block 41) failed [ 326.972599][T13115] FAT-fs (loop6): Filesystem has been set read-only [ 326.982049][T13115] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 326.986054][T13115] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 327.915466][T13142] syzkaller0: entered promiscuous mode [ 327.916576][T13142] syzkaller0: entered allmulticast mode [ 328.052744][T13151] netlink: 'syz.1.2260': attribute type 12 has an invalid length. [ 328.176434][T13158] binder: 13157:13158 tried to acquire reference to desc 0, got 1 instead [ 328.178309][T13158] binder_alloc: 13157: binder_alloc_buf size 805306368 failed, no address space [ 328.225572][T13158] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 328.225880][T13158] binder: cannot allocate buffer: no space left [ 328.226096][T13158] binder: 13157:13158 transaction call to 13157:0 failed 138/29201/-28, code 0 size 0-0 line 3393 [ 328.295671][ T4838] binder: undelivered TRANSACTION_ERROR: 29201 [ 328.461276][T13163] syzkaller0: entered promiscuous mode [ 328.462586][T13163] syzkaller0: entered allmulticast mode [ 328.472862][T13163] tipc: Enabled bearer , priority 0 [ 328.530267][T13162] tipc: Resetting bearer [ 328.540316][T13162] tipc: Disabling bearer [ 328.935284][T13172] loop3: detected capacity change from 0 to 2048 [ 329.379495][T13177] loop6: detected capacity change from 0 to 4096 [ 329.434054][T13177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.415788][T13194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.415989][T13194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.821614][T13194] IPv6: Can't replace route, no match found [ 331.187330][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2273'. [ 331.189296][T13194] netlink: 'syz.7.2273': attribute type 7 has an invalid length. [ 331.193362][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2273'. [ 331.364379][ T4375] block nbd0: Possible stuck request 0000000012111839: control (read@0,4096B). Runtime 90 seconds [ 331.796767][T13218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2279'. [ 331.819543][T13218] netlink: 588 bytes leftover after parsing attributes in process `syz.3.2279'. [ 331.821957][T13218] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.822917][T13218] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 331.884451][T13222] loop3: detected capacity change from 0 to 512 [ 331.900557][T13222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.907686][T13223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.907912][T13223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.918190][T13222] Quota error (device loop3): do_check_range: Getting block 3550937091 out of range 1-5 [ 331.918241][T13222] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 331.918255][T13222] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2281: Failed to acquire dquot type 1 [ 331.921125][T13222] overlayfs: failed to resolve './bus': -2 [ 332.059515][T13222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2281'. [ 332.059585][T13222] netem: invalid attributes len -17 [ 332.059593][T13222] netem: change failed [ 332.374271][T11794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.404123][T13235] loop6: detected capacity change from 0 to 512 [ 332.407120][T13235] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 332.514953][T13239] SET target dimension over the limit! [ 334.454919][T13251] loop6: detected capacity change from 0 to 4096 [ 334.456604][T13251] ext4: Unknown parameter 'nouser_xattr' [ 335.542763][ T30] audit: type=1326 audit(335.530:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13219 comm="syz.5.2280" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92577b68 code=0x7fc00000 [ 335.842991][T13271] binder: 13269:13271 tried to acquire reference to desc 0, got 1 instead [ 335.843556][T13271] binder_alloc: 13269: binder_alloc_buf size 805306368 failed, no address space [ 335.843589][T13271] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 335.843613][T13271] binder: cannot allocate buffer: no space left [ 335.843637][T13271] binder: 13269:13271 transaction call to 13269:0 failed 143/29201/-28, code 0 size 0-0 line 3393 [ 335.917505][ T4893] binder: undelivered TRANSACTION_ERROR: 29201 [ 336.046419][T13291] tipc: Enabled bearer , priority 10 [ 336.098145][T13294] syzkaller0: entered promiscuous mode [ 336.098185][T13294] syzkaller0: entered allmulticast mode [ 336.135063][T13298] fuse: Unknown parameter 'r¹gçootmode' [ 336.177470][T13284] tipc: Enabled bearer , priority 0 [ 336.182872][ T9853] Bluetooth: hci6: Frame reassembly failed (-84) [ 336.190159][T13303] loop6: detected capacity change from 0 to 512 [ 336.197219][T13303] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.2302: bad orphan inode 15 [ 336.199403][T13303] loop6: lost filesystem error report for type 5 error -117 [ 336.199766][T13303] ext4_test_bit(bit=14, block=18) = 1 [ 336.202456][T13303] is_bad_inode(inode)=0 [ 336.203266][T13303] NEXT_ORPHAN(inode)=1023 [ 336.204163][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 336.204174][ C1] EXT4-fs (loop6): initial error at time 336: ext4_orphan_get:1423 [ 336.204189][ C1] EXT4-fs (loop6): last error at time 336: ext4_orphan_get:1423 [ 336.210421][T13276] tipc: Resetting bearer [ 336.212341][T13303] max_ino=32 [ 336.213233][T13303] i_nlink=0 [ 336.218345][T13303] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #15: comm syz.6.2302: corrupted xattr block 19: invalid header [ 336.221132][T13303] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 336.221388][T13303] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 336.223746][T13303] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 336.228130][T13303] EXT4-fs error (device loop6): ext4_search_dir:1474: inode #2: block 3: comm syz.6.2302: bad entry in directory: directory entry overrun - offset=60, inode=458767, rec_len=4096, size=4096 fake=0 [ 336.293891][T10955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 336.308385][T13276] tipc: Disabling bearer [ 336.721094][T13324] sctp: [Deprecated]: syz.1.2307 (pid 13324) Use of int in max_burst socket option deprecated. [ 336.721094][T13324] Use struct sctp_assoc_value instead [ 336.722778][T13325] mmap: syz.1.2307 (13325) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 336.726723][T13323] sctp: [Deprecated]: syz.1.2307 (pid 13323) Use of int in max_burst socket option deprecated. [ 336.726723][T13323] Use struct sctp_assoc_value instead [ 336.812331][T13329] loop1: detected capacity change from 0 to 4096 [ 336.813441][T13329] ext4: Unknown parameter 'nouser_xattr' [ 337.832462][ T24] tipc: Node number set to 2250981850 [ 338.244176][ T4724] Bluetooth: hci6: command 0x1003 tx timeout [ 338.245438][ T4723] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 339.082177][T13354] IPVS: set_ctl: invalid protocol: 102 0.0.0.0:20003 [ 339.121070][T13351] loop5: detected capacity change from 0 to 4096 [ 339.121488][T13351] EXT4-fs: inline encryption not supported [ 339.122277][T13351] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 339.150454][T13351] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 339.150516][T13351] System zones: 0-5 [ 339.151611][T13351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.155056][T11764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.207527][T13391] syzkaller0: entered promiscuous mode [ 340.208742][T13391] syzkaller0: entered allmulticast mode [ 340.210706][T13395] tipc: Enabling of bearer rejected, already enabled [ 340.225429][T13390] syzkaller0: entered promiscuous mode [ 340.225468][T13390] syzkaller0: entered allmulticast mode [ 340.247562][T13391] tipc: Enabled bearer , priority 0 [ 340.258597][T13401] loop5: detected capacity change from 0 to 4096 [ 340.260086][T13401] EXT4-fs: inline encryption not supported [ 340.275833][T13401] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 340.280976][T13401] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 340.281238][T13389] tipc: Resetting bearer [ 340.286461][T13401] System zones: 0-5 [ 340.292384][T13401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.299466][T13389] tipc: Disabling bearer [ 340.352263][T13403] syzkaller0: entered promiscuous mode [ 340.353411][T13403] syzkaller0: entered allmulticast mode [ 341.318427][T13426] syzkaller0: entered promiscuous mode [ 341.319616][T13426] syzkaller0: entered allmulticast mode [ 341.354431][T13426] tipc: Enabled bearer , priority 0 [ 341.401584][T13428] binder: BINDER_SET_CONTEXT_MGR already set [ 341.401615][T13428] binder: 13427:13428 ioctl 4018620d 200002c0 returned -16 [ 341.407391][T13428] binder: tried to use weak ref as strong ref [ 341.408774][T13428] binder: 13427:13428 Acquire 1 refcount change on invalid ref 0 ret -22 [ 341.410709][T13428] binder: 13427:13428 got transaction to invalid handle, 1 [ 341.412119][T13428] binder: 13427:13428 cannot find target node [ 341.412159][T13428] binder: 13427:13428 transaction call to 0:0 failed 146/29201/-22, code 0 size 0-0 line 3236 [ 341.417091][ T4893] binder: undelivered TRANSACTION_ERROR: 29201 [ 341.437553][T13425] tipc: Resetting bearer [ 341.458291][T13425] tipc: Disabling bearer [ 342.639086][T13438] loop7: detected capacity change from 0 to 4096 [ 342.639503][T13438] EXT4-fs: inline encryption not supported [ 342.640549][T13438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 342.668509][T13438] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 342.668564][T13438] System zones: 0-5 [ 342.672306][T13438] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.898280][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2330'. [ 343.900756][T13447] block nbd1: Unsupported socket: should be TCP or UNIX. [ 343.909886][T12112] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.037981][T13452] syz_tun: entered allmulticast mode [ 344.040931][T13452] syz_tun: left allmulticast mode [ 344.083564][T13454] xt_hashlimit: size too large, truncated to 1048576 [ 344.245796][T11764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.369132][T13468] loop3: detected capacity change from 0 to 512 [ 344.369519][T13468] EXT4-fs: Ignoring removed orlov option [ 344.388896][T13468] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0102] [ 344.388960][T13468] System zones: 0-2, 18-18, 34-35 [ 344.390009][T13468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.395800][T13468] syzkaller0: entered promiscuous mode [ 344.395828][T13468] syzkaller0: entered allmulticast mode [ 344.402303][T13475] syzkaller0: entered promiscuous mode [ 344.402336][T13475] syzkaller0: entered allmulticast mode [ 344.433726][T13475] tipc: Enabled bearer , priority 0 [ 344.457128][T13474] tipc: Resetting bearer [ 344.468666][T13474] tipc: Disabling bearer [ 344.490930][T11794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.651112][T13488] syzkaller0: entered promiscuous mode [ 344.653193][T13488] syzkaller0: entered allmulticast mode [ 344.738567][T13488] tipc: Enabled bearer , priority 0 [ 344.760154][T13492] loop3: detected capacity change from 0 to 4096 [ 345.193474][T13492] EXT4-fs: inline encryption not supported [ 345.234707][T13487] tipc: Resetting bearer [ 345.239935][T13492] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 345.243217][T13492] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 345.243266][T13492] System zones: 0-5 [ 345.261286][T13487] tipc: Disabling bearer [ 345.385019][T13492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.595249][T13501] No source specified [ 345.721499][T13517] syzkaller0: entered promiscuous mode [ 345.721530][T13517] syzkaller0: entered allmulticast mode [ 345.750928][T13517] tipc: Enabled bearer , priority 0 [ 345.999720][T13516] tipc: Resetting bearer [ 346.049735][T11794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.058300][T13516] tipc: Disabling bearer [ 346.076654][T13524] tipc: Enabling of bearer rejected, already enabled [ 346.101469][T13526] syzkaller0: entered promiscuous mode [ 346.102713][T13526] syzkaller0: entered allmulticast mode [ 346.259235][T13531] syzkaller0: entered promiscuous mode [ 346.259267][T13531] syzkaller0: entered allmulticast mode [ 347.150119][T13531] netlink: 'syz.3.2354': attribute type 4 has an invalid length. [ 349.577382][T13561] loop1: detected capacity change from 0 to 1024 [ 349.610588][T13561] ext4: Unknown parameter 'noacl' [ 349.640156][T13560] netlink: 'syz.1.2363': attribute type 1 has an invalid length. [ 349.809524][T13571] loop6: detected capacity change from 0 to 512 [ 349.823942][T13574] loop7: detected capacity change from 0 to 128 [ 349.830551][T13571] EXT4-fs (loop6): 1 truncate cleaned up [ 349.831030][T13571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.851525][T13574] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 349.862401][T13574] FAT-fs (loop7): Directory bread(block 524322) failed [ 349.862433][T13574] FAT-fs (loop7): Directory bread(block 524323) failed [ 349.862459][T13574] FAT-fs (loop7): Directory bread(block 524324) failed [ 349.862478][T13574] FAT-fs (loop7): Directory bread(block 524325) failed [ 349.862496][T13574] FAT-fs (loop7): Directory bread(block 524326) failed [ 349.862513][T13574] FAT-fs (loop7): Directory bread(block 524327) failed [ 349.862529][T13574] FAT-fs (loop7): Directory bread(block 524328) failed [ 349.862543][T13574] FAT-fs (loop7): Directory bread(block 524329) failed [ 349.884739][T13574] FAT-fs (loop7): Directory bread(block 524322) failed [ 349.886837][T13574] FAT-fs (loop7): Directory bread(block 524323) failed [ 349.930895][T10955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.055094][T13588] loop1: detected capacity change from 0 to 1024 [ 350.056825][T13588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.092876][T13588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.322775][T13603] loop6: detected capacity change from 0 to 4096 [ 350.323187][T13603] ext4: Unknown parameter 'nouser_xattr' [ 351.574681][ T182] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 352.443296][T13660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2380'. [ 352.768958][T13666] binder: 13665:13666 tried to acquire reference to desc 0, got 1 instead [ 352.769179][T13666] binder_alloc: 13665: binder_alloc_buf size 805306368 failed, no address space [ 352.769189][T13666] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 352.769205][T13666] binder: cannot allocate buffer: no space left [ 352.769223][T13666] binder: 13665:13666 transaction call to 13665:0 failed 151/29201/-28, code 48 size 0-0 line 3393 [ 352.769436][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 352.808481][T13670] netlink: 'syz.7.2383': attribute type 1 has an invalid length. [ 352.867360][T13675] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2383'. [ 352.874999][T13675] syzkaller1: entered promiscuous mode [ 352.875034][T13675] syzkaller1: entered allmulticast mode [ 352.893899][T13674] tipc: Enabled bearer , priority 0 [ 352.895819][T13674] syzkaller0: entered promiscuous mode [ 352.895832][T13674] syzkaller0: entered allmulticast mode [ 352.905443][T13674] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 352.937635][T11753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.959308][T13674] tipc: Resetting bearer [ 352.967616][T13673] tipc: Resetting bearer [ 352.989670][T13673] tipc: Disabling bearer [ 353.025835][T13689] syzkaller0: entered promiscuous mode [ 353.026911][T13689] syzkaller0: entered allmulticast mode [ 353.764069][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 354.783898][T13712] loop3: detected capacity change from 0 to 4096 [ 354.798011][T13712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.835918][T11794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.153042][T13730] syzkaller0: entered promiscuous mode [ 355.153084][T13730] syzkaller0: entered allmulticast mode [ 356.088302][T13754] loop7: detected capacity change from 0 to 512 [ 356.099126][T13754] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.139293][T12112] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.237082][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2415'. [ 356.248924][T13766] loop1: detected capacity change from 0 to 512 [ 357.412546][T13785] loop6: detected capacity change from 0 to 512 [ 357.415201][T13785] EXT4-fs: Ignoring removed nobh option [ 357.424155][T13785] EXT4-fs (loop6): invalid inodes per group: 32 [ 357.424155][T13785] [ 357.462993][T13790] loop6: detected capacity change from 0 to 512 [ 357.495089][T13790] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.528765][T10955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.010118][T13805] syzkaller0: entered promiscuous mode [ 358.010164][T13805] syzkaller0: entered allmulticast mode [ 358.012659][T13808] tipc: Enabling of bearer rejected, failed to enable media [ 358.068235][T13823] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2426'. [ 358.113942][T13826] netlink: 'syz.3.2425': attribute type 6 has an invalid length. [ 358.242225][T13831] syzkaller0: entered promiscuous mode [ 358.242262][T13831] syzkaller0: entered allmulticast mode [ 358.255378][T13845] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2435'. [ 359.167944][T13851] loop3: detected capacity change from 0 to 8192 [ 359.265130][T13867] syzkaller0: entered promiscuous mode [ 359.265174][T13867] syzkaller0: entered allmulticast mode [ 359.280114][T13869] loop1: detected capacity change from 0 to 1024 [ 359.286539][T13851] loop3: p1 < > p2 < > p3 p4 < > [ 359.287885][T13851] loop3: partition table partially beyond EOD, truncated [ 359.294077][T13851] loop3: p1 start 67108864 is beyond EOD, truncated [ 360.040843][T13871] loop7: detected capacity change from 0 to 4096 [ 360.045106][T13851] loop3: p3 start 100859904 is beyond EOD, truncated [ 360.056687][T13867] tipc: Enabled bearer , priority 0 [ 360.063678][T13869] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 360.063737][T13869] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 360.063754][T13869] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.2444: Failed to acquire dquot type 0 [ 360.063772][T13869] loop1: lost filesystem error report for type 5 error -5 [ 360.065861][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 360.065877][ C1] EXT4-fs (loop1): initial error at time 360: ext4_acquire_dquot:7034 [ 360.065892][ C1] EXT4-fs (loop1): last error at time 360: ext4_acquire_dquot:7034 [ 360.075799][T13869] EXT4-fs (loop1): 1 truncate cleaned up [ 360.076301][T13869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.085065][T13871] ext4: Unknown parameter 'uid<00000000000000000000' [ 360.163261][T13866] tipc: Resetting bearer [ 360.181530][ T30] audit: type=1326 audit(360.170:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13870 comm="syz.7.2445" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb77b68 code=0x0 [ 360.190484][T13866] tipc: Disabling bearer [ 360.277964][T13880] loop5: detected capacity change from 0 to 512 [ 360.415418][T13880] loop5: detected capacity change from 0 to 1024 [ 360.417079][T13880] EXT4-fs: Ignoring removed bh option [ 360.420233][T13880] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 360.442279][T13880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.457446][T11753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.558128][T13891] binder: 13890:13891 tried to acquire reference to desc 0, got 1 instead [ 360.560130][T13891] binder_alloc: 13890: binder_alloc_buf size 805306368 failed, no address space [ 360.562940][T13891] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 360.566987][T13891] binder: cannot allocate buffer: no space left [ 360.567072][T13891] binder: 13890:13891 transaction call to 13890:0 failed 156/29201/-28, code 805306368 size 0-0 line 3393 [ 360.572997][ T4893] binder: undelivered TRANSACTION_ERROR: 29201 [ 360.579549][T11764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.715205][T13903] loop1: detected capacity change from 0 to 4096 [ 360.718073][T13903] EXT4-fs: inline encryption not supported [ 360.734556][T13903] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 360.734583][T13903] EXT4-fs (loop1): Test dummy encryption mode enabled [ 360.741258][T13903] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 360.741321][T13903] System zones: 0-5 [ 360.750521][T13903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.752910][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 360.777358][ T7333] udevd[7333]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 360.966013][T13910] loop6: detected capacity change from 0 to 512 [ 361.171854][T13910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.448399][ T4375] block nbd0: Possible stuck request 0000000012111839: control (read@0,4096B). Runtime 120 seconds [ 361.813425][T13909] loop5: detected capacity change from 0 to 4096 [ 361.835735][T13909] ext4: Unknown parameter 'nouser_xattr' [ 361.854808][T10955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.875914][T11753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.769069][T13922] syzkaller0: entered promiscuous mode [ 362.769109][T13922] syzkaller0: entered allmulticast mode [ 362.916691][T13922] tipc: Enabled bearer , priority 0 [ 362.926531][T13940] loop3: detected capacity change from 0 to 1024 [ 362.930570][T13916] syzkaller0: entered promiscuous mode [ 362.930621][T13916] syzkaller0: entered allmulticast mode [ 362.946312][T13940] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 362.946386][T13940] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 362.946398][T13940] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2460: Failed to acquire dquot type 0 [ 362.946412][T13940] loop3: lost filesystem error report for type 5 error -5 [ 362.954007][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 362.954040][ C0] EXT4-fs (loop3): initial error at time 362: ext4_acquire_dquot:7034 [ 362.954072][ C0] EXT4-fs (loop3): last error at time 362: ext4_acquire_dquot:7034 [ 362.972788][T13940] EXT4-fs (loop3): 1 truncate cleaned up [ 362.973287][T13940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.419910][T13921] tipc: Resetting bearer [ 363.441800][T13921] tipc: Disabling bearer [ 363.551992][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2462'. [ 363.553814][T13973] netlink: 'syz.6.2462': attribute type 25 has an invalid length. [ 363.559322][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2462'. [ 363.610010][T13978] loop6: detected capacity change from 0 to 128 [ 363.611674][T13978] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 363.687938][T13980] syzkaller0: entered promiscuous mode [ 363.689180][T13980] syzkaller0: entered allmulticast mode [ 363.832518][T11794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.852675][T13985] loop1: detected capacity change from 0 to 1024 [ 363.853054][T13985] EXT4-fs: Ignoring removed orlov option [ 363.856973][T13985] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 363.888580][T13986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2465'. [ 364.893395][T13978] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 364.893429][T13978] FAT-fs (loop6): Filesystem has been set read-only [ 364.970306][T14000] tipc: Enabling of bearer rejected, already enabled [ 365.014953][T10955] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 365.031794][T14005] loop1: detected capacity change from 0 to 128 [ 365.034994][T14005] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 365.039326][T14005] FAT-fs (loop1): Directory bread(block 524322) failed [ 365.039366][T14005] FAT-fs (loop1): Directory bread(block 524323) failed [ 365.039429][T14005] FAT-fs (loop1): Directory bread(block 524324) failed [ 365.039448][T14005] FAT-fs (loop1): Directory bread(block 524325) failed [ 365.039467][T14005] FAT-fs (loop1): Directory bread(block 524326) failed [ 365.039484][T14005] FAT-fs (loop1): Directory bread(block 524327) failed [ 365.039500][T14005] FAT-fs (loop1): Directory bread(block 524328) failed [ 365.039516][T14005] FAT-fs (loop1): Directory bread(block 524329) failed [ 365.065499][T14005] FAT-fs (loop1): Directory bread(block 524322) failed [ 365.065541][T14005] FAT-fs (loop1): Directory bread(block 524323) failed [ 365.101331][T14007] syzkaller0: entered promiscuous mode [ 365.101367][T14007] syzkaller0: entered allmulticast mode [ 365.306762][ T842] Bluetooth: hci6: Frame reassembly failed (-84) [ 365.312026][T14017] netlink: 'syz.6.2476': attribute type 39 has an invalid length. [ 365.321755][T14019] loop3: detected capacity change from 0 to 1024 [ 365.330891][T14019] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 365.330934][T14019] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 365.330957][T14019] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2477: Failed to acquire dquot type 0 [ 365.330974][T14019] loop3: lost filesystem error report for type 5 error -5 [ 365.334573][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 365.334585][ C0] EXT4-fs (loop3): initial error at time 365: ext4_acquire_dquot:7034 [ 365.334597][ C0] EXT4-fs (loop3): last error at time 365: ext4_acquire_dquot:7034 [ 365.344292][T14019] EXT4-fs (loop3): 1 truncate cleaned up [ 365.345856][T14019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.939820][T14033] syzkaller0: entered promiscuous mode [ 365.941067][T14033] syzkaller0: entered allmulticast mode [ 366.075107][ T1291] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 366.109694][T14038] tipc: Enabled bearer , priority 0 [ 366.116672][T14043] tipc: Enabling of bearer rejected, already enabled [ 366.450670][T11794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.506872][T14051] loop1: detected capacity change from 0 to 4096 [ 366.508625][T14051] ext4: Unknown parameter 'nouser_xattr' [ 366.533564][T14053] can0: slcan on ttyS3. [ 366.594890][T14053] can0 (unregistered): slcan off ttyS3. [ 366.986781][T14032] tipc: Resetting bearer [ 367.015294][T14032] tipc: Disabling bearer [ 367.364586][ T4724] Bluetooth: hci6: command 0x1003 tx timeout [ 367.364684][ T4723] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 367.530867][T14109] syzkaller0: entered promiscuous mode [ 367.530901][T14109] syzkaller0: entered allmulticast mode [ 367.978241][T14117] syzkaller0: entered promiscuous mode [ 367.978277][T14117] syzkaller0: entered allmulticast mode [ 368.008129][T14117] tipc: Enabled bearer , priority 0 [ 368.024706][T14116] tipc: Resetting bearer [ 368.044443][T14116] tipc: Disabling bearer [ 368.077382][T14119] loop6: detected capacity change from 0 to 128 [ 368.127461][T14119] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 368.148540][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2495'. [ 368.199508][T14128] loop7: detected capacity change from 0 to 512 [ 368.217549][T14128] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 368.244954][T10955] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 368.255666][T14128] Quota error (device loop7): do_check_range: Getting block 196613 out of range 1-5 [ 368.255726][T14128] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 368.255754][T14128] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.2496: Failed to acquire dquot type 1 [ 368.255771][T14128] loop7: lost filesystem error report for type 5 error -117 [ 368.264012][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 368.264051][ C0] EXT4-fs (loop7): last error at time 368: ext4_acquire_dquot:7034 [ 368.269034][T14128] EXT4-fs (loop7): 1 truncate cleaned up [ 368.269524][T14128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 368.283375][T14128] bridge0: port 3(hsr0) entered blocking state [ 368.283436][T14128] bridge0: port 3(hsr0) entered disabled state [ 368.283625][T14128] hsr0: entered allmulticast mode [ 368.283641][T14128] hsr_slave_0: entered allmulticast mode [ 368.283658][T14128] hsr_slave_1: entered allmulticast mode [ 368.298869][T14128] hsr0: entered promiscuous mode [ 368.299202][T14128] bridge0: port 3(hsr0) entered blocking state [ 368.299251][T14128] bridge0: port 3(hsr0) entered forwarding state [ 368.601310][T12112] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 368.638199][T14145] syzkaller0: entered promiscuous mode [ 368.638237][T14145] syzkaller0: entered allmulticast mode [ 368.661816][T14145] tipc: Enabled bearer , priority 0 [ 368.715508][T14144] tipc: Resetting bearer [ 368.730704][T14144] tipc: Disabling bearer [ 368.881476][T14153] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 368.881519][T14153] overlayfs: failed to set xattr on upper [ 368.881524][T14153] overlayfs: ...falling back to redirect_dir=nofollow. [ 368.881530][T14153] overlayfs: ...falling back to uuid=null. [ 368.881535][T14153] overlayfs: ...falling back to xino=off. [ 368.884698][T14153] loop5: detected capacity change from 0 to 512 [ 368.890623][T14153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 369.180970][T14153] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2502: bad orphan inode 16 [ 369.181014][T14153] loop5: lost filesystem error report for type 5 error -117 [ 369.181485][T14153] ext4_test_bit(bit=15, block=18) = 1 [ 369.181515][T14153] is_bad_inode(inode)=0 [ 369.181539][T14153] NEXT_ORPHAN(inode)=83886080 [ 369.181554][T14153] max_ino=32 [ 369.181568][T14153] i_nlink=0 [ 369.184093][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 369.184134][ C1] EXT4-fs (loop5): initial error at time 369: ext4_orphan_get:1423 [ 369.184168][ C1] EXT4-fs (loop5): last error at time 369: ext4_orphan_get:1423 [ 369.207412][T14153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.237049][ T15] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 369.237103][ T15] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 369.239458][T11764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.301714][T14165] loop1: detected capacity change from 0 to 256 [ 369.317524][T14165] FAT-fs (loop1): Directory bread(block 64) failed [ 369.319021][T14165] FAT-fs (loop1): Directory bread(block 65) failed [ 369.320469][T14165] FAT-fs (loop1): Directory bread(block 66) failed [ 369.321863][T14165] FAT-fs (loop1): Directory bread(block 67) failed [ 369.323105][T14165] FAT-fs (loop1): Directory bread(block 68) failed [ 369.324437][T14165] FAT-fs (loop1): Directory bread(block 69) failed [ 369.325727][T14165] FAT-fs (loop1): Directory bread(block 70) failed [ 369.327113][T14165] FAT-fs (loop1): Directory bread(block 71) failed [ 369.328397][T14165] FAT-fs (loop1): Directory bread(block 72) failed [ 369.329692][T14165] FAT-fs (loop1): Directory bread(block 73) failed [ 369.431939][T14171] loop6: detected capacity change from 0 to 128 [ 369.537939][T14174] overlayfs: failed to resolve './bus': -2 [ 369.687917][T14188] loop7: detected capacity change from 0 to 1024 [ 369.693325][T14188] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 369.693369][T14188] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 369.693390][T14188] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.2514: Failed to acquire dquot type 0 [ 369.693407][T14188] loop7: lost filesystem error report for type 5 error -5 [ 369.695475][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 369.695488][ C0] EXT4-fs (loop7): initial error at time 369: ext4_acquire_dquot:7034 [ 369.695500][ C0] EXT4-fs (loop7): last error at time 369: ext4_acquire_dquot:7034 [ 369.707634][T14188] EXT4-fs (loop7): 1 truncate cleaned up [ 369.709341][T14188] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.175482][T14202] loop5: detected capacity change from 0 to 128 [ 370.178708][T14202] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 370.182599][T14202] FAT-fs (loop5): Directory bread(block 524322) failed [ 370.186080][T14202] FAT-fs (loop5): Directory bread(block 524323) failed [ 370.186422][T14202] FAT-fs (loop5): Directory bread(block 524324) failed [ 370.186446][T14202] FAT-fs (loop5): Directory bread(block 524325) failed [ 370.186464][T14202] FAT-fs (loop5): Directory bread(block 524326) failed [ 370.186476][T14202] FAT-fs (loop5): Directory bread(block 524327) failed [ 370.186488][T14202] FAT-fs (loop5): Directory bread(block 524328) failed [ 370.186500][T14202] FAT-fs (loop5): Directory bread(block 524329) failed [ 370.194312][T14202] FAT-fs (loop5): Directory bread(block 524322) failed [ 370.194330][T14202] FAT-fs (loop5): Directory bread(block 524323) failed [ 370.297257][T14215] openvswitch: netlink: Key type 240 is out of range max 32 [ 370.315930][T14218] loop1: detected capacity change from 0 to 512 [ 370.327045][T14218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.345792][T11753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.460968][T14236] loop3: detected capacity change from 0 to 1024 [ 370.466434][T14236] EXT4-fs: Ignoring removed bh option [ 370.466480][T14236] EXT4-fs: Ignoring removed bh option [ 370.485520][T14236] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 370.590685][ T9855] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 370.593519][T12112] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.698679][T14249] nfs: Unknown parameter 'smackfstransmuteC' [ 370.698893][T14251] nfs: Unknown parameter 'smackfstransmuteC' [ 370.800995][T14259] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2532'. [ 370.816848][T14262] loop5: detected capacity change from 0 to 128 [ 370.822513][T14262] FAT-fs (loop5): bogus logical sector size 0 [ 370.825686][T14262] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 370.825724][T14262] FAT-fs (loop5): Can't find a valid FAT filesystem [ 370.939993][T14268] loop7: detected capacity change from 0 to 2048 [ 370.948415][T14268] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.962708][T14271] loop3: detected capacity change from 0 to 1024 [ 370.978235][T14271] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 370.978278][T14271] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 370.978297][T14271] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2537: Failed to acquire dquot type 0 [ 370.978313][T14271] loop3: lost filesystem error report for type 5 error -5 [ 370.980868][T14268] overlayfs: failed to set xattr on upper [ 370.980878][T14268] overlayfs: ...falling back to redirect_dir=nofollow. [ 370.984133][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 370.984144][ C1] EXT4-fs (loop3): initial error at time 370: ext4_acquire_dquot:7034 [ 370.984160][ C1] EXT4-fs (loop3): last error at time 370: ext4_acquire_dquot:7034 [ 370.992920][T14271] EXT4-fs (loop3): 1 truncate cleaned up [ 370.993418][T14271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.013509][T12112] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.423646][T14278] ipt_REJECT: ECHOREPLY no longer supported. [ 371.516766][T14283] loop5: detected capacity change from 0 to 128 [ 371.519950][T14283] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 371.520286][T14283] FAT-fs (loop5): Directory bread(block 524322) failed [ 371.520300][T14283] FAT-fs (loop5): Directory bread(block 524323) failed [ 371.520311][T14283] FAT-fs (loop5): Directory bread(block 524324) failed [ 371.520322][T14283] FAT-fs (loop5): Directory bread(block 524325) failed [ 371.520333][T14283] FAT-fs (loop5): Directory bread(block 524326) failed [ 371.520343][T14283] FAT-fs (loop5): Directory bread(block 524327) failed [ 371.520353][T14283] FAT-fs (loop5): Directory bread(block 524328) failed [ 371.520364][T14283] FAT-fs (loop5): Directory bread(block 524329) failed [ 371.523891][T14283] FAT-fs (loop5): Directory bread(block 524322) failed [ 371.523910][T14283] FAT-fs (loop5): Directory bread(block 524323) failed [ 371.685110][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.685172][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.763942][T14300] netlink: 'syz.6.2544': attribute type 1 has an invalid length. [ 371.790168][T14300] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.803148][T14300] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2544'. [ 371.826144][T11794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.829250][T14300] bond1: entered promiscuous mode [ 371.829296][T14300] bond1: entered allmulticast mode [ 371.860623][T14300] bond1: (slave dummy0): making interface the new active one [ 371.862398][T14300] dummy0: entered promiscuous mode [ 371.864541][T14300] dummy0: entered allmulticast mode [ 371.866352][T14300] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 371.879420][ T15] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 371.903213][T14308] tipc: Enabling of bearer rejected, already enabled [ 371.962422][T14313] loop7: detected capacity change from 0 to 128 [ 371.966504][T14313] EXT4-fs (loop7): Test dummy encryption mode enabled [ 371.969373][T14313] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 371.994526][T12112] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.029939][T14317] loop5: detected capacity change from 0 to 4096 [ 372.046939][T14317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.335491][T11764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.373203][T14347] loop5: detected capacity change from 0 to 128 [ 372.374247][T14347] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 372.374516][T14347] FAT-fs (loop5): Directory bread(block 524322) failed [ 372.374529][T14347] FAT-fs (loop5): Directory bread(block 524323) failed [ 372.374540][T14347] FAT-fs (loop5): Directory bread(block 524324) failed [ 372.374551][T14347] FAT-fs (loop5): Directory bread(block 524325) failed [ 372.374562][T14347] FAT-fs (loop5): Directory bread(block 524326) failed [ 372.374572][T14347] FAT-fs (loop5): Directory bread(block 524327) failed [ 372.374582][T14347] FAT-fs (loop5): Directory bread(block 524328) failed [ 372.374593][T14347] FAT-fs (loop5): Directory bread(block 524329) failed [ 372.379538][T14347] FAT-fs (loop5): Directory bread(block 524322) failed [ 372.379553][T14347] FAT-fs (loop5): Directory bread(block 524323) failed [ 372.733935][ T9866] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 372.769677][T14358] loop5: detected capacity change from 0 to 256 [ 372.847904][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2566'. [ 372.851718][T14371] loop7: detected capacity change from 0 to 128 [ 372.854741][T14368] vfat: Unknown parameter 'wlan0' [ 372.927558][T14379] syzkaller0: entered promiscuous mode [ 372.927595][T14379] syzkaller0: entered allmulticast mode [ 372.949266][T14379] tipc: Enabled bearer , priority 0 [ 372.976677][T14378] tipc: Resetting bearer [ 372.986928][T14378] tipc: Disabling bearer [ 372.991490][T14386] EXT4-fs: inline encryption not supported [ 372.994232][T14386] EXT4-fs: quotafile must be on filesystem root [ 373.008446][T14386] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.052524][T11753] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.159282][T14395] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 373.162324][T14395] FAT-fs (loop1): Directory bread(block 524322) failed [ 373.163947][T14395] FAT-fs (loop1): Directory bread(block 524323) failed [ 373.167587][T14395] FAT-fs (loop1): Directory bread(block 524324) failed [ 373.169085][T14395] FAT-fs (loop1): Directory bread(block 524325) failed [ 373.170614][T14395] FAT-fs (loop1): Directory bread(block 524326) failed [ 373.172126][T14395] FAT-fs (loop1): Directory bread(block 524327) failed [ 373.173428][T14395] FAT-fs (loop1): Directory bread(block 524328) failed [ 373.175151][T14395] FAT-fs (loop1): Directory bread(block 524329) failed [ 373.179397][T14395] FAT-fs (loop1): Directory bread(block 524322) failed [ 373.179427][T14395] FAT-fs (loop1): Directory bread(block 524323) failed [ 373.396883][ T15] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 373.423700][T14415] squashfs image failed sanity check [ 373.591011][T14424] syzkaller0: entered promiscuous mode [ 373.591046][T14424] syzkaller0: entered allmulticast mode [ 373.601613][T14424] tipc: Enabled bearer , priority 0 [ 373.844083][ T4723] Bluetooth: hci5: command tx timeout [ 374.372761][T14423] tipc: Resetting bearer [ 374.395281][T14423] tipc: Disabling bearer [ 374.650188][ T4797] hid (null): global environment stack underflow [ 374.650236][ T4797] hid (null): invalid report_count -619413450 [ 374.650259][ T4797] hid (null): bogus close delimiter [ 374.650271][ T4797] hid (null): unknown global tag 0xbe [ 374.650280][ T4797] hid (null): unknown global tag 0xd [ 374.650288][ T4797] hid (null): bogus close delimiter [ 374.650296][ T4797] hid (null): global environment stack underflow [ 374.650301][ T4797] hid (null): unknown global tag 0xe [ 374.650317][ T4797] hid (null): unknown global tag 0xc [ 374.650669][ T4797] hid (null): usage index exceeded [ 374.650779][ T4797] hid (null): invalid report_size -21908514 [ 374.651247][ T4797] hid (null): report_id 4244337754 is invalid [ 374.651253][ T4797] hid (null): invalid report_size -1367213496 [ 374.651259][ T4797] hid (null): unknown global tag 0xc [ 374.651269][ T4797] hid (null): global environment stack underflow [ 374.651274][ T4797] hid (null): unknown global tag 0xc [ 374.651287][ T4797] hid (null): unknown global tag 0xfc [ 374.651300][ T4797] hid (null): unknown global tag 0xc0 [ 374.651316][ T4797] hid (null): unknown global tag 0xc [ 374.651326][ T4797] hid (null): bogus close delimiter [ 374.651331][ T4797] hid (null): global environment stack underflow [ 374.651341][ T4797] hid (null): unknown global tag 0xd [ 374.651349][ T4797] hid (null): unknown global tag 0xc [ 374.651357][ T4797] hid (null): unknown global tag 0xc [ 374.651363][ T4797] hid (null): unknown global tag 0xd [ 374.651379][ T4797] hid (null): invalid report_count -298583959 [ 374.651385][ T4797] hid (null): report_id 0 is invalid [ 374.651392][ T4797] hid (null): unknown global tag 0x91 [ 374.651400][ T4797] hid (null): report_id 61381 is invalid [ 374.651417][ T4797] hid (null): unknown global tag 0xd [ 374.651428][ T4797] hid (null): unknown global tag 0xc [ 374.651436][ T4797] hid (null): unknown global tag 0xa5 [ 374.664659][ T4797] hid-generic 0008:057D:0007.0004: unknown main item tag 0x6 [ 374.664675][ T4797] hid-generic 0008:057D:0007.0004: unknown main item tag 0x1 [ 374.664685][ T4797] hid-generic 0008:057D:0007.0004: unknown main item tag 0x1 [ 374.664694][ T4797] hid-generic 0008:057D:0007.0004: unexpected long global item [ 374.664848][ T4797] hid-generic 0008:057D:0007.0004: probe with driver hid-generic failed with error -22 [ 374.708114][T14449] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2591'. [ 374.887870][T14462] tipc: Enabling of bearer rejected, already enabled [ 376.418200][T14481] set_capacity_and_notify: 5 callbacks suppressed [ 376.419637][T14481] loop5: detected capacity change from 0 to 1024 [ 376.441095][T14481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.470916][T11764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.903524][T14498] ext2: block size(16384) > page size(4096) not supported by filesystem [ 377.961725][T14509] random: crng reseeded on system resumption [ 378.533796][T14532] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 378.553430][T14529] netlink: 'syz.5.2610': attribute type 12 has an invalid length. [ 378.553470][T14529] netlink: 'syz.5.2610': attribute type 29 has an invalid length. [ 378.553493][T14529] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2610'. [ 378.554889][T14535] loop5: detected capacity change from 0 to 128 [ 378.696287][T14535] EXT4-fs (loop5): Test dummy encryption mode enabled [ 378.832686][T14541] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2612'. [ 378.835416][T14535] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 378.939011][T14551] loop3: detected capacity change from 0 to 512 [ 379.195069][T11764] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 379.196062][T14551] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2614: inode has both inline data and extents flags [ 379.196084][T14551] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 379.196241][T14551] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2614: couldn't read orphan inode 15 (err -117) [ 379.196256][T14551] loop3: lost filesystem error report for type 5 error -117 [ 379.196774][T14551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.217112][T14559] loop6: detected capacity change from 0 to 128 [ 379.217872][T14559] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 379.218132][T14559] FAT-fs (loop6): Directory bread(block 524322) failed [ 379.218152][T14559] FAT-fs (loop6): Directory bread(block 524323) failed [ 379.218165][T14559] FAT-fs (loop6): Directory bread(block 524324) failed [ 379.218177][T14559] FAT-fs (loop6): Directory bread(block 524325) failed [ 379.218188][T14559] FAT-fs (loop6): Directory bread(block 524326) failed [ 379.218199][T14559] FAT-fs (loop6): Directory bread(block 524327) failed [ 379.218210][T14559] FAT-fs (loop6): Directory bread(block 524328) failed [ 379.218220][T14559] FAT-fs (loop6): Directory bread(block 524329) failed [ 379.219866][T14559] FAT-fs (loop6): Directory bread(block 524322) failed [ 379.219881][T14559] FAT-fs (loop6): Directory bread(block 524323) failed [ 379.246549][T14557] batman_adv: batadv0: Adding interface: gretap1 [ 379.246581][T14557] batman_adv: batadv0: The MTU of interface gretap1 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.246603][T14557] batman_adv: batadv0: Interface activated: gretap1 [ 379.257868][T14551] ipip0: entered allmulticast mode [ 379.365541][T14563] binder: BINDER_SET_CONTEXT_MGR already set [ 379.372037][T14563] binder: 14561:14563 ioctl 4018620d 200002c0 returned -16 [ 379.372372][T14563] binder: 14561:14563 got transaction to invalid handle, 1 [ 379.372391][T14563] binder: 14561:14563 cannot find target node [ 379.372411][T14563] binder: 14561:14563 transaction call to 0:0 failed 159/29201/-22, code 0 size 0-0 line 3236 [ 379.379612][ T1041] binder: undelivered TRANSACTION_ERROR: 29201 [ 379.420881][T11794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.910030][T14593] overlayfs: failed to clone upperpath [ 380.922972][T14598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2624'. [ 380.927070][T14598] sock: sock_timestamping_bind_phc: sock not bind to device [ 381.027514][T14603] loop5: detected capacity change from 0 to 512 [ 381.032877][T14603] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2626: corrupted in-inode xattr: invalid ea_ino [ 381.032918][T14603] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 381.035550][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 381.035563][ C1] EXT4-fs (loop5): initial error at time 381: ext4_iget_extra_inode:5128: inode 15 [ 381.035583][ C1] EXT4-fs (loop5): last error at time 381: ext4_iget_extra_inode:5128: inode 15 [ 381.096170][ T30] audit: type=1326 audit(381.090:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14581 comm="syz.3.2624" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8177b68 code=0x0 [ 381.287803][T14603] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2626: couldn't read orphan inode 15 (err -117) [ 381.287843][T14603] loop5: lost filesystem error report for type 5 error -117 [ 381.290623][T14603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.306807][T11764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.333591][ T9857] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 381.392842][T14613] bond0: (slave bond_slave_1): Releasing backup interface [ 381.773165][T14627] loop3: detected capacity change from 0 to 256 [ 381.999373][T14641] syzkaller0: entered promiscuous mode [ 381.999591][T14641] syzkaller0: entered allmulticast mode [ 382.007993][T14641] tipc: Enabled bearer , priority 0 [ 382.044708][T14640] tipc: Resetting bearer [ 382.055330][T14640] tipc: Disabling bearer [ 382.339185][T14671] tmpfs: Unknown parameter 'nr_blo' [ 382.436515][T14681] syzkaller0: entered promiscuous mode [ 382.436557][T14681] syzkaller0: entered allmulticast mode [ 382.459780][T14681] tipc: Enabled bearer , priority 0 [ 382.475428][T14680] tipc: Resetting bearer [ 382.493162][T14680] tipc: Disabling bearer [ 382.617277][T14696] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 382.886917][T14718] syzkaller0: entered promiscuous mode [ 382.886950][T14718] syzkaller0: entered allmulticast mode [ 382.898145][T14718] tipc: Enabled bearer , priority 0 [ 382.905309][T14717] tipc: Resetting bearer [ 383.159470][T14717] tipc: Disabling bearer [ 383.699958][T14735] bridge_slave_0: left allmulticast mode [ 383.700013][T14735] bridge_slave_0: left promiscuous mode [ 383.700094][T14735] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.703092][T14735] bridge_slave_1: left allmulticast mode [ 383.703107][T14735] bridge_slave_1: left promiscuous mode [ 383.703186][T14735] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.708295][T14735] bond0: (slave bond_slave_0): Releasing backup interface [ 383.729994][ T4804] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 383.878580][T14737] netlink: 'syz.7.2670': attribute type 10 has an invalid length. [ 383.879196][T14735] team0: Port device team_slave_0 removed [ 383.884803][T14735] team0: Port device team_slave_1 removed [ 383.885498][T14735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.885512][T14735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.887047][T14735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.887057][T14735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.888447][T14735] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 383.897251][T14737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.900423][T14737] team0: Port device bond0 added [ 384.004474][ T4726] Bluetooth: hci6: command 0x1003 tx timeout [ 384.005891][ T4723] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 384.014044][ T4723] Bluetooth: hci5: command 0x0406 tx timeout [ 384.354770][ T4797] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.532707][T14779] Injecting memory failure for pfn 0x1535f8 at process virtual address 0x20000000 [ 384.542195][T14779] Memory failure: 0x1535f8: Sending SIGBUS to syz.7.2684:14779 due to hardware memory corruption [ 384.542390][T14779] Memory failure: 0x1535f8: recovery action for dirty LRU page: Recovered [ 384.542646][T14779] Injecting memory failure for pfn 0x21959e at process virtual address 0x20001000 [ 384.542679][T14779] Memory failure: 0x21959e: Sending SIGBUS to syz.7.2684:14779 due to hardware memory corruption [ 384.542691][T14779] Memory failure: 0x21959e: recovery action for already poisoned page: Failed [ 384.788601][T14793] loop6: detected capacity change from 0 to 1024 [ 384.806852][T14793] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 384.806903][T14793] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 384.806913][T14793] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2689: Failed to acquire dquot type 0 [ 384.806926][T14793] loop6: lost filesystem error report for type 5 error -5 [ 384.807936][T14793] EXT4-fs (loop6): 1 truncate cleaned up [ 384.819999][T14793] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.254490][T14805] loop3: detected capacity change from 0 to 8192 [ 385.319513][T14809] loop5: detected capacity change from 0 to 512 [ 385.337218][T14809] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2695: bg 0: block 5: invalid block bitmap [ 385.337258][T14809] loop5: lost filesystem error report for type 5 error -117 [ 385.340045][T14809] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 385.340085][T14809] loop5: lost filesystem error report for type 5 error -117 [ 385.344935][T14809] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2695: invalid indirect mapped block 3 (level 2) [ 385.345876][T14809] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 385.349120][T14809] EXT4-fs (loop5): 2 truncates cleaned up [ 385.349608][T14809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.350331][T14805] loop3: AHDI p1 p2 p3 [ 385.350417][T14805] loop3: p1 size 16383 extends beyond EOD, truncated [ 385.352272][T14809] EXT4-fs (loop5): shut down requested (2) [ 385.355826][T14809] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 385.398874][T11764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.690832][T14831] pim6reg: entered allmulticast mode [ 385.691211][T14832] pim6reg: left allmulticast mode [ 385.839596][T10955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.902434][ T7333] udevd[7333]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 385.941330][T14836] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2703'. [ 385.967174][T14843] netlink: 'syz.7.2704': attribute type 3 has an invalid length. [ 385.968987][T14843] netlink: 'syz.7.2704': attribute type 1 has an invalid length. [ 385.970758][T14843] netlink: 112865 bytes leftover after parsing attributes in process `syz.7.2704'. [ 385.972696][T14843] nbd: couldn't find device at index 16 [ 386.758634][T14869] loop3: detected capacity change from 0 to 1024 [ 386.770852][T14869] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 386.770903][T14869] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 386.770925][T14869] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2712: Failed to acquire dquot type 0 [ 386.770945][T14869] loop3: lost filesystem error report for type 5 error -5 [ 386.774624][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 386.774639][ C0] EXT4-fs (loop3): initial error at time 386: ext4_acquire_dquot:7034 [ 386.774652][ C0] EXT4-fs (loop3): last error at time 386: ext4_acquire_dquot:7034 [ 386.785858][T14869] EXT4-fs (loop3): 1 truncate cleaned up [ 386.789758][T14869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.233760][T14881] capability: warning: `syz.7.2716' uses 32-bit capabilities (legacy support in use) [ 387.346015][T14892] loop1: detected capacity change from 0 to 2048 [ 387.346442][T14892] EXT4-fs: Ignoring removed bh option [ 387.346460][T14892] EXT4-fs: quotafile must be on filesystem root [ 387.627903][T11794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.795185][T14925] syz.5.2723 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 387.828518][T14928] loop3: detected capacity change from 0 to 128 [ 387.836488][T14928] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 387.864329][T11794] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.882782][T14932] syzkaller0: entered promiscuous mode [ 387.882821][T14932] syzkaller0: entered allmulticast mode [ 387.926941][T14932] tipc: Enabled bearer , priority 0 [ 387.943448][T14936] netlink: 352 bytes leftover after parsing attributes in process `syz.5.2731'. [ 387.944286][T14936] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2731'. [ 387.944319][T14936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2731'. [ 387.946315][T14931] tipc: Resetting bearer [ 387.959885][T14931] tipc: Disabling bearer [ 388.058035][T14947] syzkaller0: entered promiscuous mode [ 388.058071][T14947] syzkaller0: entered allmulticast mode [ 388.077472][T14947] tipc: Enabled bearer , priority 0 [ 388.116832][T14945] tipc: Resetting bearer [ 388.135504][T14945] tipc: Disabling bearer [ 388.138820][T14950] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 388.139967][T14950] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 388.657379][T14967] tipc: Enabling of bearer rejected, already enabled [ 388.831499][T14981] syzkaller0: entered promiscuous mode [ 388.833559][T14981] syzkaller0: entered allmulticast mode [ 388.844606][T14974] syzkaller0: entered promiscuous mode [ 388.845904][T14974] syzkaller0: entered allmulticast mode [ 388.891337][T14981] tipc: Enabled bearer , priority 0 [ 388.930200][T14980] tipc: Resetting bearer [ 388.946497][T14980] tipc: Disabling bearer [ 389.980395][T14999] tipc: Invalid UDP bearer configuration [ 389.980439][T14999] tipc: Enabling of bearer rejected, failed to enable media [ 390.007428][T15006] loop1: detected capacity change from 0 to 128 [ 390.453030][T15036] syzkaller0: entered promiscuous mode [ 390.453071][T15036] syzkaller0: entered allmulticast mode [ 390.500497][T15045] tipc: Enabling of bearer rejected, already enabled [ 390.527197][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2765'. [ 390.527228][T15047] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2765'. [ 390.527245][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2765'. [ 390.532580][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2765'. [ 390.532594][T15047] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2765'. [ 390.533182][ T6023] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.533223][ T6023] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.533290][ T6023] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.533306][ T6023] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.539745][T15047] loop6: detected capacity change from 0 to 512 [ 390.556303][ T6023] Bluetooth: hci6: Frame reassembly failed (-84) [ 390.563188][T15047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.565511][T15047] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.2765: corrupted xattr block 32: invalid size in ea xattr [ 390.565765][T15047] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.2765: corrupted xattr block 32: invalid size in ea xattr [ 390.565922][T15047] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.2765: corrupted xattr block 32: invalid size in ea xattr [ 390.566081][T15047] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.2765: corrupted xattr block 32: invalid size in ea xattr [ 390.602516][T10955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.229502][T15071] loop3: detected capacity change from 0 to 4096 [ 391.231256][T15071] ext4: Unknown parameter 'nouser_xattr' [ 391.525411][ T4375] block nbd0: Possible stuck request 0000000012111839: control (read@0,4096B). Runtime 150 seconds [ 391.577515][T15087] block nbd5: shutting down sockets [ 391.599844][T15093] binder: BINDER_SET_CONTEXT_MGR already set [ 391.599872][T15093] binder: 15092:15093 ioctl 4018620d 200002c0 returned -16 [ 391.600077][T15093] binder: tried to use weak ref as strong ref [ 391.600085][T15093] binder: 15092:15093 Acquire 1 refcount change on invalid ref 0 ret -22 [ 391.600236][T15093] binder: 15092:15093 got transaction to invalid handle, 1 [ 391.600246][T15093] binder: 15092:15093 cannot find target node [ 391.600261][T15093] binder: 15092:15093 transaction call to 0:0 failed 162/29201/-22, code 0 size 0-0 line 3236 [ 391.600509][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 391.731151][T15112] tipc: Enabled bearer , priority 10 [ 391.822107][T15125] loop6: detected capacity change from 0 to 128 [ 391.830029][T15125] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 391.833125][T15125] FAT-fs (loop6): Directory bread(block 524322) failed [ 391.840162][T15125] FAT-fs (loop6): Directory bread(block 524323) failed [ 391.840211][T15125] FAT-fs (loop6): Directory bread(block 524324) failed [ 391.840235][T15125] FAT-fs (loop6): Directory bread(block 524325) failed [ 391.840259][T15125] FAT-fs (loop6): Directory bread(block 524326) failed [ 391.840281][T15125] FAT-fs (loop6): Directory bread(block 524327) failed [ 391.840302][T15125] FAT-fs (loop6): Directory bread(block 524328) failed [ 391.840322][T15125] FAT-fs (loop6): Directory bread(block 524329) failed [ 391.854806][T15125] FAT-fs (loop6): Directory bread(block 524322) failed [ 391.854844][T15125] FAT-fs (loop6): Directory bread(block 524323) failed [ 392.285506][ T6021] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 392.372317][T15153] netlink: 'syz.6.2786': attribute type 1 has an invalid length. [ 392.387614][T15153] bond2: entered promiscuous mode [ 392.387829][T15153] 8021q: adding VLAN 0 to HW filter on device bond2 [ 392.392705][T15154] 8021q: adding VLAN 0 to HW filter on device bond2 [ 392.393369][T15154] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 392.393382][T15154] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 392.393823][T15154] bond2: (slave gre1): Opening slave failed [ 392.545952][T15164] binder: 15163:15164 tried to acquire reference to desc 0, got 1 instead [ 392.546375][T15164] binder_alloc: 15163: binder_alloc_buf size 805306368 failed, no address space [ 392.546791][T15164] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 392.546960][T15164] binder: cannot allocate buffer: no space left [ 392.546992][T15164] binder: 15163:15164 transaction call to 15163:0 failed 167/29201/-28, code 0 size 0-0 line 3393 [ 392.548000][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 392.564340][ T4723] Bluetooth: hci6: command 0x1003 tx timeout [ 392.566525][ T4724] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 392.601686][T15166] loop6: detected capacity change from 0 to 512 [ 392.608532][T15166] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 392.626541][T15166] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2789: bg 0: block 104: invalid block bitmap [ 392.626588][T15166] loop6: lost filesystem error report for type 5 error -117 [ 392.633992][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 392.634023][ C0] EXT4-fs (loop6): initial error at time 392: ext4_validate_block_bitmap:432 [ 392.634059][ C0] EXT4-fs (loop6): last error at time 392: ext4_validate_block_bitmap:432 [ 392.641940][T15166] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 392.641977][T15166] loop6: lost filesystem error report for type 5 error -117 [ 392.644301][T15166] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2789: invalid indirect mapped block 1 (level 1) [ 392.644329][T15166] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 392.649317][T15166] EXT4-fs (loop6): 1 truncate cleaned up [ 392.658979][T15166] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.696231][T15166] EXT4-fs (loop6): shut down requested (2) [ 392.702976][T15166] overlayfs: failed to resolve 'smackfsroot=‘*å¤Xr': -2 [ 392.708828][T15166] overlayfs: failed to get redirect (-5) [ 392.731181][T10955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.825239][T15179] geneve2: entered promiscuous mode [ 392.854539][ T24] tipc: Node number set to 1079302793 [ 392.901899][T15183] SET target dimension over the limit! [ 392.985428][T15185] pim6reg: entered allmulticast mode [ 392.995264][T15185] pim6reg: left allmulticast mode [ 393.250045][T15192] loop6: detected capacity change from 0 to 512 [ 393.269776][T15192] x_tables: duplicate underflow at hook 1 [ 393.401118][T15201] Injecting memory failure for pfn 0x137e12 at process virtual address 0x20000000 [ 393.564364][T15201] Memory failure: 0x137e12: Sending SIGBUS to syz.6.2797:15201 due to hardware memory corruption [ 393.564429][T15201] Memory failure: 0x137e12: recovery action for dirty LRU page: Recovered [ 393.564457][T15201] Injecting memory failure for pfn 0x159001 at process virtual address 0x20001000 [ 393.571602][T15201] Memory failure: 0x159001: recovery action for dirty LRU page: Recovered [ 393.722744][T15221] tap0: tun_chr_ioctl cmd 1074025677 [ 393.722854][T15221] tap0: linktype set to 780 [ 393.797739][T15227] loop6: detected capacity change from 0 to 4096 [ 393.799389][T15227] ext4: Unknown parameter 'nouser_xattr' [ 393.832182][T15230] Invalid ELF header magic: != ELF [ 394.814286][T15277] rdma_rxe: rxe_newlink: failed to add bond0 [ 394.983129][T15294] loop5: detected capacity change from 0 to 8192 [ 394.988579][T15294] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 395.052864][T15303] __nla_validate_parse: 1 callbacks suppressed [ 395.052901][T15303] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2819'. [ 395.210365][T15307] loop5: detected capacity change from 0 to 256 [ 395.210752][T15307] vfat: Unknown parameter '@' [ 395.604278][T15335] tipc: Enabling of bearer rejected, already enabled [ 396.028238][T15345] loop5: detected capacity change from 0 to 512 [ 396.051657][T15345] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.156592][T11764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.197230][T15357] loop1: detected capacity change from 0 to 1024 [ 396.198443][T15357] EXT4-fs: Ignoring removed mblk_io_submit option [ 396.198473][T15357] ext2: Bad value for 'stripe' [ 396.198837][T15361] binder: 15360:15361 tried to acquire reference to desc 0, got 1 instead [ 396.199021][T15361] binder_alloc: 15360: binder_alloc_buf size 805306368 failed, no address space [ 396.199030][T15361] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 396.199046][T15361] binder: cannot allocate buffer: no space left [ 396.199062][T15361] binder: 15360:15361 transaction call to 15360:0 failed 172/29201/-28, code 0 size 0-0 line 3393 [ 396.199476][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 396.291323][T15364] loop5: detected capacity change from 0 to 2048 [ 396.312233][T15364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.323873][T15362] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 396.352378][T11764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.420844][T15369] loop5: detected capacity change from 0 to 128 [ 396.423066][T15369] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 396.425145][T15369] FAT-fs (loop5): Directory bread(block 524322) failed [ 396.425161][T15369] FAT-fs (loop5): Directory bread(block 524323) failed [ 396.425173][T15369] FAT-fs (loop5): Directory bread(block 524324) failed [ 396.425185][T15369] FAT-fs (loop5): Directory bread(block 524325) failed [ 396.425196][T15369] FAT-fs (loop5): Directory bread(block 524326) failed [ 396.425207][T15369] FAT-fs (loop5): Directory bread(block 524327) failed [ 396.425218][T15369] FAT-fs (loop5): Directory bread(block 524328) failed [ 396.425228][T15369] FAT-fs (loop5): Directory bread(block 524329) failed [ 396.445536][T15369] FAT-fs (loop5): Directory bread(block 524322) failed [ 396.445557][T15369] FAT-fs (loop5): Directory bread(block 524323) failed [ 396.820005][T15387] xt_hashlimit: max too large, truncated to 1048576 [ 396.821821][T15387] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 397.054874][T15389] xt_hashlimit: max too large, truncated to 1048576 [ 397.055077][T15389] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 397.091727][ T15] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 397.144391][T15396] syzkaller0: entered promiscuous mode [ 397.144433][T15396] syzkaller0: entered allmulticast mode [ 397.163006][T15403] loop1: detected capacity change from 0 to 512 [ 397.225107][T15403] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.2846: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 397.225157][T15403] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 397.225344][T15403] EXT4-fs error (device loop1): ext4_quota_enable:7228: comm syz.1.2846: Bad quota inode: 4, type: 1 [ 397.225364][T15403] loop1: lost filesystem error report for type 5 error -117 [ 397.225484][T15403] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 397.231536][T15403] EXT4-fs (loop1): mount failed [ 397.234010][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 397.234030][ C1] EXT4-fs (loop1): initial error at time 397: ext4_ext_check_inode:521: inode 4 [ 397.234047][ C1] EXT4-fs (loop1): last error at time 397: ext4_quota_enable:7228 [ 397.248767][T15408] binder: 15407:15408 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 397.248804][T15408] binder: 15408 RLIMIT_NICE not set [ 397.505920][T15410] binder: 15407:15410 BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch 0000000000000000 != 000000000000232d [ 397.505964][T15410] binder: 15407:15410 ioctl c0306201 20000640 returned -22 [ 397.511515][T15410] netlink: 'syz.3.2851': attribute type 31 has an invalid length. [ 397.511544][T15410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2851'. [ 397.525875][T15403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2846'. [ 397.529089][T15410] binder: 15407:15410 ioctl 40786e88 200009c0 returned -22 [ 397.607830][T15417] ext4: Unknown parameter 'nouser_xattr' [ 398.171902][T15465] set_capacity_and_notify: 1 callbacks suppressed [ 398.171944][T15465] loop3: detected capacity change from 0 to 128 [ 398.255868][T15465] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 398.294604][T15465] FAT-fs (loop3): Directory bread(block 524322) failed [ 398.294670][T15465] FAT-fs (loop3): Directory bread(block 524323) failed [ 398.294701][T15465] FAT-fs (loop3): Directory bread(block 524324) failed [ 398.294720][T15465] FAT-fs (loop3): Directory bread(block 524325) failed [ 398.294737][T15465] FAT-fs (loop3): Directory bread(block 524326) failed [ 398.294752][T15465] FAT-fs (loop3): Directory bread(block 524327) failed [ 398.294767][T15465] FAT-fs (loop3): Directory bread(block 524328) failed [ 398.294782][T15465] FAT-fs (loop3): Directory bread(block 524329) failed [ 398.310742][T15465] FAT-fs (loop3): Directory bread(block 524322) failed [ 398.310776][T15465] FAT-fs (loop3): Directory bread(block 524323) failed [ 398.524424][T15476] syzkaller0: entered promiscuous mode [ 398.524464][T15476] syzkaller0: entered allmulticast mode [ 398.718353][T15522] loop1: detected capacity change from 0 to 1024 [ 398.727007][T15522] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 398.729933][T15522] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 398.731890][T15522] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.2865: Failed to acquire dquot type 0 [ 398.734123][T15522] loop1: lost filesystem error report for type 5 error -5 [ 398.734853][T15522] EXT4-fs (loop1): 1 truncate cleaned up [ 398.739757][T15522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.799523][T15528] netlink: 'syz.7.2866': attribute type 10 has an invalid length. [ 398.799979][T15528] syz_tun: entered promiscuous mode [ 398.802897][T15528] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 398.822141][T15526] binder: 15514:15526 got reply transaction with no transaction stack [ 398.823855][T15526] binder: 15514:15526 transaction reply to 0:0 failed 175/29201/-71, code 0 size 96-24 line 3139 [ 399.169950][ T182] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 399.205478][ T31] INFO: task syz.0.172 ** replaying previous printk message ** [ 399.205478][ T31] INFO: task syz.0.1724:10568 blocked for more than 145 seconds. [ 399.205515][ T31] Tainted: G L syzkaller #0 [ 399.205539][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.205550][ T31] task:syz.0.1724 state:D stack:0 pid:10568 tgid:10564 ppid:4715 task_flags:0x400140 flags:0x00800001 [ 399.205577][ T31] Call trace: [ 399.205586][ T31] __switch_to+0x2b0/0x6e0 (T) [ 399.205609][ T31] __schedule+0x1c04/0x2db8 [ 399.205625][ T31] schedule+0x13c/0x20c [ 399.205639][ T31] schedule_preempt_disabled+0x18/0x2c [ 399.205653][ T31] __mutex_lock+0x4fc/0xed0 [ 399.205668][ T31] mutex_lock_nested+0x24/0x30 [ 399.205683][ T31] bdev_open+0xc4/0x880 [ 399.205699][ T31] blkdev_open+0x2d4/0x408 [ 399.205710][ T31] do_dentry_open+0x5c4/0xfb8 [ 399.205725][ T31] vfs_open+0x44/0x2dc [ 399.205738][ T31] path_openat+0x22d4/0x2b88 [ 399.205750][ T31] do_file_open+0x1c8/0x2e8 [ 399.205762][ T31] do_sys_openat2+0x114/0x1e8 [ 399.205776][ T31] do_sys_open+0xac/0xdc [ 399.205789][ T31] __arm64_sys_openat+0xa0/0xbc [ 399.205802][ T31] invoke_syscall+0x98/0x244 [ 399.205817][ T31] el0_svc_common+0xec/0x23c [ 399.205831][ T31] do_el0_svc+0x4c/0x5c [ 399.205845][ T31] el0_svc+0x64/0x260 [ 399.205856][ T31] el0t_64_sync_handler+0x48/0x148 [ 399.205868][ T31] el0t_64_sync+0x198/0x19c [ 399.205909][ T31] [ 399.205909][ T31] Showing all locks held in the system: [ 399.205917][ T31] 1 lock held by khungtaskd/31: [ 399.205926][ T31] #0: ffff800088bf70c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 399.205974][ T31] 2 locks held by kworker/u8:4/182: [ 399.205982][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 399.206025][ T31] #1: ffff800092557c40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 399.206071][ T31] 2 locks held by getty/4491: [ 399.206079][ T31] #0: ffff0000cb5fd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 399.207231][ T31] #1: ffff8000923ab2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf70 [ 399.207321][ T31] 1 lock held by udevd/7331: [ 399.208194][ T31] #0: ffff0000c8ba0350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880 [ 399.208225][ T31] 1 lock held by udevd/7333: [ 399.208431][ T31] 1 lock held by syz.0.1724/10568: [ 399.208442][ T31] #0: ffff0000c8ba0350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880 [ 399.208479][ T31] 2 locks held by syz.3.2870/15544: [ 399.208485][ T31] [ 399.208488][ T31] ============================================= [ 399.208488][ T31] [ 399.208494][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 399.252307][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 399.254129][ T31] Tainted: [L]=SOFTLOCKUP [ 399.254884][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 399.256520][ T31] Call trace: [ 399.257039][ T31] show_stack+0x2c/0x3c (C) [ 399.257856][ T31] __dump_stack+0x30/0x40 [ 399.258679][ T31] dump_stack_lvl+0x30/0x12c [ 399.259494][ T31] dump_stack+0x1c/0x28 [ 399.260211][ T31] vpanic+0x594/0xaf8 [ 399.260881][ T31] vpanic+0x0/0xaf8 [ 399.261500][ T31] hung_task_panic+0x0/0x2c [ 399.262315][ T31] kthread+0x304/0x3d4 [ 399.263008][ T31] ret_from_fork+0x10/0x20 [ 399.263750][ T31] SMP: stopping secondary CPUs [ 399.264539][ T31] Kernel Offset: disabled [ 399.265221][ T31] CPU features: 0x0a000000,003c0008,27020501,5427fea7 [ 399.266367][ T31] Memory Limit: none [ 399.601898][ T31] Rebooting in 86400 seconds..