last executing test programs: 1m23.139145222s ago: executing program 3 (id=134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x1, 0xfd, 0x9}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1fb69, 0x51247}}, 0x20}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040) 1m23.061906499s ago: executing program 3 (id=137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2000}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0xa64c0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000080)=0x8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}}}, &(0x7f0000000380)=0xe8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc7f1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f7ee81c7142cf36447ab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f2d050000000000003bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b5267288949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0x5, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0x8, 0x0, 0x80000, 0x8000, 0x0, 0x0, r6, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, r3, r6}, 0xc) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x8, 0x2}]}) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fallocate(r0, 0x52, 0x7, 0x1) r8 = socket$key(0xf, 0x3, 0x2) accept4(r8, 0x0, 0x0, 0x0) r9 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x1a16, 0x100, 0x1, 0x4}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r13 = syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x0, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r16 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r13, 0x2) syz_ublk_setup_queues(r16, r15, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r9}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x330, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x20, 0x0, 0x2db, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r16, 0xc0107525, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r14, '\x00', {0x3, 0xb55, 0x100104, 0x0}}, &(0x7f0000001fc0)) r17 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r17}}) syz_ublk_setup_queues(r2, r15, &(0x7f0000000400)={0x0, 0x85d4, 0x10, 0x2, 0x32c, 0x0, r2}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x830c, 0x80000, 0x2, 0xe8, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd179, 0x400, 0x2, 0x2f7, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8fb1, 0x2400, 0x2, 0x34f, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc7d, 0x20000, 0x2, 0x175, 0x0, r2}}], 0x4, &(0x7f0000001700)={0x2e, 0x9, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, r17, '\x00', {0x2, 0xb5e, 0x0, &(0x7f0000000700)=@buf_max_buf="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"}}, &(0x7f0000001780)) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd01000000000014000000600000000008"], 0xfdef) 1m22.665654102s ago: executing program 3 (id=140): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x8000, 0x604080) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000040)={0xffffffc0, 0xffffffff}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x110, r3, 0xd8fc8000) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000001a240)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x8080}, 0x40) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, &(0x7f0000000080)=[{&(0x7f0000000000)='&', 0x1}], 0x1, 0x8, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1m22.484040039s ago: executing program 3 (id=147): truncate(0x0, 0x7) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000780)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_win95}, {@fat=@dmask={'dmask', 0x3d, 0x7fffffff}}, {@numtail}, {@utf8}, {@utf8}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_win95}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$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") syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) umount2(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xe) lsetxattr$security_smack_transmute(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580), &(0x7f00000005c0), 0x4, 0x3) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) ptrace(0x10, r2) ptrace(0x11, r2) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) splice(r3, 0x0, r1, &(0x7f00000002c0), 0x2, 0x2) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000600)={0xe, {0x8, 0x81, 0x3, 0x71, "89c0036b2fe39a9e998a24c991d55cd14b9305ea87230395af36c1706c5cb21fc23fcaaf7984a04ca45812025b14d1819f19bc76cba13659f25107f1399f93498002ab807c02b1737f940fd8179ab139444df685534b5f4383cc0319d29b3745be7634ef706347014ac95448212aabcc66"}}, 0x7d) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, 0x0, &(0x7f0000000800)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000180)={0x2018}) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1b}, "88b44c2cd1527acc52898a1abb2ec40f86af553575d081491054e3"}, 0x1f) 1m21.575075308s ago: executing program 3 (id=162): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) connect$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500fdffffff000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fdffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_emit_vhci(0x0, 0x0) 1m20.977548786s ago: executing program 3 (id=168): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mq_open(&(0x7f0000001380)='\a\x05\x00\x00', 0xa167ad740cb9a351, 0x3c, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000340)=0x32, 0x4) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f00000002c0)=0xcaf8, 0x4) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) fsopen(&(0x7f0000000000)='fuse\x00', 0x1) 1m20.977263903s ago: executing program 32 (id=168): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mq_open(&(0x7f0000001380)='\a\x05\x00\x00', 0xa167ad740cb9a351, 0x3c, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000340)=0x32, 0x4) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f00000002c0)=0xcaf8, 0x4) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) fsopen(&(0x7f0000000000)='fuse\x00', 0x1) 59.280738729s ago: executing program 2 (id=433): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000010000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18010000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000002000000a00000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac14140c000000000000000000000000fc000000000000000000000000000001e00000010000000000000000ffffff80fe8000000000000000000000000000aa6c040000ffffffff0a4f0a0000000000000000000000ffff7f000001fc020000000000000000000000000000fc020000000400000000000001000001fc0200000000000008000000000000003c000000000000000a000a002c001300"], 0x118}}, 0x0) 59.168467597s ago: executing program 2 (id=438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x2000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2e}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xdc}}, 0x0) 58.884212972s ago: executing program 2 (id=439): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x50}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x10000000, 0x400}, [@TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x3}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x1000, 0x2, 0x5, 0xde, 0x5}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x24048050) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000080000000000000009000000731105850000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 58.828591865s ago: executing program 2 (id=443): syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000001c0)='./file0\x00', 0x204987, &(0x7f0000000400)=ANY=[@ANYBLOB="756e695f786c6174653d302c64656275672c756e695f786c6174653d312c757365667265652c756e695f786c6174653d302c636865636b3d6e6f726d616c2c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030343332342c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c7379735f696d6d757461626c652c00c4614c8b4cf2c20a70d08876eb459fcd2cb4e55eb9d372787be7066b35c0e2a7743a60886c9dadcd7857ee54c9be597e8f14f73b4fdd56356660bc81be70a9e8def4d6"], 0x1, 0x2a3, &(0x7f0000002b40)="$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") r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x800000000, 0x4001) ioctl$EVIOCSREP(r0, 0x80004506, 0xffffffffffffffff) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000500)={0x16, 0xa0, &(0x7f0000000340)="09345e834b8a8e77c47aabd8949b6fa65df191d23e680517f98892ff84f2f18b59d6d482352ba90729ff67323abea6694969b2274b60694a3f90608054112aecc90f9f0fdc142d7131d75ebf714b8d405b18e9ca6c212f0893a98990aad970f0de1d7d74368f7daccd6c30218dfaf8268ab781ac862312085e2c1637987ff610c716f3b6ce4940dcdfd0cf859384c23cf604264ef629041c8943eeda6b1fa06f"}) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',dflt', @ANYRESHEX=0xee01, @ANYBLOB, @ANYBLOB]) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40044) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r4, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{{0x4, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1}, {0x1, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x18) 58.787389896s ago: executing program 2 (id=446): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 58.213455879s ago: executing program 2 (id=456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) pipe2$9p(0x0, 0x0) tee(r6, 0xffffffffffffffff, 0x4e, 0x5) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 58.169118951s ago: executing program 33 (id=456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) pipe2$9p(0x0, 0x0) tee(r6, 0xffffffffffffffff, 0x4e, 0x5) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 11.522202003s ago: executing program 5 (id=986): socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x40000, 0x0, 0x4}, 0x18) r3 = syz_open_dev$video(&(0x7f0000000040), 0xf, 0x40) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x44, 0xb, 0x4, 0x10, 0x1, {}, {0x3, 0x8, 0x5, 0x3, 0x6, 0x0, "3fa077d2"}, 0x3, 0x2, {0x0}, 0x8f8}) openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80801, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'nicvf0\x00'}) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x24, &(0x7f0000000280)={0x0, 0xa49, 0x0, 0x0, 0x1bd}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x2, 0x247, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r10, &(0x7f0000000180)={0x0, 0xc22f, 0x10, 0x1, 0x16f, 0x0, r6}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd35, 0x4, 0x20000000, 0x364, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x262f, 0x4, 0x2, 0x92, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9360, 0x2, 0x3, 0x42}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc264, 0x8, 0x1, 0xf4, 0x0, r6}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x3, 0xb46, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r10, &(0x7f0000000700)={0x0, 0x0, 0x1000, 0x0, 0x1ea}, &(0x7f0000000dc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x1}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8, 0x801, 0x800000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1c6c, 0x0, 0x0, 0x27f, 0x0, r6}}], 0x1, &(0x7f0000000900)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) socket$inet6_tcp(0xa, 0x1, 0x0) 10.467317309s ago: executing program 5 (id=994): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)=0xffffffffffffffff) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000001c0)=@multiplanar_fd={0x4, 0x7, 0x4, 0x800000, 0xc6b, {r3, r4/1000+10000}, {0x2, 0xc, 0x7, 0x9, 0x52, 0x7, "cdba0a52"}, 0x8, 0x4, {&(0x7f0000000100)=[{0x2, 0x4, {}, 0x33}, {0x6, 0x101, {}, 0x8}]}, 0x8, 0x0, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x2b}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0xa001}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r8, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r9, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r10 = openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000500)) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9cae}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x92e8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x8810) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r11, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfff}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe184}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xad26}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x708829a1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_FILTER={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048010}, 0x810) syz_genetlink_get_family_id$nbd(&(0x7f0000000780), r8) pipe2$watch_queue(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000004, 0x10, r12, 0x598cc000) connect$pppl2tp(r13, &(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb}}}, 0x3a) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000840)={0x7fffffff, "88d13fb67c22c9cc80ecc0c3be9ff1744306dbddb28fd0844e5cf702e379e511", 0x1, 0x2, 0x9, 0x2, 0x4}) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f00000008c0)) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r6) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r13, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r14, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe06}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1172}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd7c}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) syz_usb_connect(0x2, 0x7db, &(0x7f0000000a80)={{0x12, 0x1, 0x200, 0x83, 0x67, 0xb1, 0x10, 0x12d1, 0x1404, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c9, 0x3, 0x98, 0xf, 0x60, 0x12, "", [{{0x9, 0x4, 0x87, 0x1, 0x0, 0x7a, 0x36, 0x97, 0xba, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "5457d8b8c6"}, {0x5, 0x24, 0x0, 0x4d8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x800, 0x8001, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x40, 0x4}]}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0x3c}, [@extension_unit={0x9, 0x24, 0x8, 0x2, 0x2, 0x1, "76b3"}, @selector_unit={0x6, 0x24, 0x5, 0x2, 0x6, 'W'}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x1, 0x4, [0x6, 0x9, 0x7, 0x6], 0x2}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x6, 0x2, [0xa, 0x6], 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x302, 0x4, 0x3, 0x99}]}]}}, {{0x9, 0x4, 0x0, 0xa, 0x3, 0x1a, 0xd0, 0x71, 0x4, [], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0x9, 0x4, 0x4, [@generic={0x8, 0xf, "aade6ce94f69"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x9, 0x81, 0x3, [@generic={0x5f, 0xf, "2ab63786f2db6bfd189cac70e0a87124fa94ecec85757fad96346c803d32e800039f7165e80b14d88d6b3a4916c3ce58a8a50a484b03c0e5794d9d25b9efe4a0c2dd72191ef14bad34a9ef61085d9ef7f645c9f76a7c5849cef35a823f"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x48, 0x80}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x8, 0x8, 0x3, [@generic={0x9f, 0x4, "97abf8a21aaa5a58a2907cf052b96bdf30c58c690224a734a539b4cdd30523e0b914ea8789e1385ab921ce798caa9c3b07e72f3dfbf010308521e774e4cbfee74bc44428956e07245cae113826923b4252af307991c26bc06cdcaae6c7e9726d48ef44912d437fbb0b975f94d2c9b3a9d2e3f88035f72d02ea5c8f5e37e41d83546d4b322e45fff8927cc4640a8fbc6e569f49cbb4aafb894e0e43ef86"}, @generic={0x5, 0x6, "662301"}]}}]}}, {{0x9, 0x4, 0xd7, 0x89, 0xf, 0xff, 0xff, 0xff, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x7f, 0x45}, [@mixer_unit={0x7, 0x24, 0x4, 0x3, 0x5, "02a7"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x202, 0x3, 0x6, 0x9, 0x0, 0x9}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x0, "bd91f55891"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x4, 0x4, 0xe5}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x400, 0x1, 0x5, 0xe8a, 0x80, 0x9}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x4, 0x6, "90d2"}]}, @uac_control={{0xa, 0x24, 0x1, 0x4, 0x36}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x1, 0x5, 0xf1}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x7, 0x1f, "061c9269fc"}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x0, 0xf, "7feeb066"}, @processing_unit={0xc, 0x24, 0x7, 0x4, 0x2, 0x1e, "097e0d0465"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x8, 0x0, 0x4}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x8f, 0x47, 0x7, [@generic={0x63, 0x4, "44d8f13dbb5599ff40b0c158ac76f3be14eb96e53b6fb7a98c06985c789cb7cd6c201f777b5ad0fff4efb0b9803c7b15f7bf325a28f1d4d7f357b5f331770451efe552334ceee219b476de02826ce782296724181f63ec970dcde558b1c9f14bd8"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x6}]}}, {{0x9, 0x5, 0x5, 0x3, 0x3bf, 0x97, 0x37, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x3}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x7f, 0x7, 0xd1}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x9, 0x81, 0x3, [@generic={0x100, 0x1, "246c24a278f36c8ca5105946382d83aecd4a417b9965e00c813abb1486706da4f13bbbcea40f243b0a0af4a78b97b197f993d65e3a62ff1d2539878f20826a84c32a51d12dd565594383be498069301edb8f245d1a988b9146b4176f63090909648055c54adba0294883130da4c2f660dd1a12ed64c6cc1e5b17c01dd535a664c665d7b0c72d4eb7f7ba7bd917c5efbf21ec2e73c56f7680cb900652185c1f437ea2f54aaa18c3447c127c8743fff59e67ad38576689c1f77d477d53cb50d02412e7c46d9df52db1b90965202885070bef1fdb949c4b395c687a94e6b1e7823b9ca8266d3240027690ad38fd8db54bb7f7080fba22457e5463079c68f450"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x8, 0x9, 0x6, [@generic={0x15, 0x9, "0182a58fee7aa957372975faee6f7e3ee3910b"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0xf, 0x8, 0x7, [@generic={0x9c, 0x0, "5be487e9292b882e28145d589b4319195817af347491e88fb4926603d9ad0ce473b8b9899105ac79b16203968778c6613c3fc03e028f7e344e6d2e73154cd80bb4a079a128aa88bc2ea8dbf482db2a0bb3d537af19f99c9afe1678c9005fa0f775d4a0ea1a1fd990f1e50f9caa6aebd81eb57dc4b1b6b8751d85feacd696b8d0b633ae9fa6f5b7f2b364f8e6c44284a76e61fa696a7cbefd8511"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x5, 0x9, 0xd, [@generic={0xc3, 0x6, "9eccd51badde461145bd37f147d6a157dd6e6c95c6a1652b367b89beb605a7fc307a9cbd6e5f5d5deb3ecd893ff900dadedf34dea129660bb4d7ca3aec713fe3672a971161f9aa81d2328c9160060a29797d6848282ec865c291683baa4f196d22b386bd49526a0218a00dcbbe9c5aaa6444bd7c6c4b90e8cb68ac96d69c8a26a7fb31e6006911103064e48e91f1edbc96b5092a902f9eff4343134d755df263e5e4331518558d7564d53cc346998bd6a521975853eeb3d87ee5a5ae4dfdd0ba7f"}, @generic={0x20, 0x23, "14407985ee5ba890d81fdd136c652e737ff5ff39dc9ea4ebed03f0b41595"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x7, 0x3, 0x8, [@generic={0x1b, 0x22, "1a6dc2516224d4e10bccb9daae90f79359c26a8808c5f0a832"}, @generic={0x49, 0x6, "643ea489e6c553b5766f177f31bc21ed479568ce2f2fba591138a9b08bb9ca4b38b40cf4962f7cc09a2015a6281902583a1714ad62b253ca03f7e352f9c863282a509c12b2a200"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x8, 0x9, 0x4}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x6, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x5}, @generic={0xf9, 0x9, "4a7238e38a954f12dc80b985f89708b2e4844880e1ddd0fd231de3f3ad31745b8856c65ef91048097948879b2894d74e7377da64e8527a229d1de950af9398bacc2474af5a6e38210d22da8ae64a3a0fa5840b5a599f09e7aaec48a712efb204c743590932db0890aa73af92a1445b8c4086ac0caf3451a29cd943905bfd8f98d68338126ca120d60e663eaa88bc4f4408fec5eb14028388da1114a905ed1c277b7253d9cab2dc5b07ab65d2de1960d8fa91f5821af878f42f2e2d5fdcb87e69cf278016ae6f1160c4fe75d2449cce754ad75ecbeb52186f8baa495b86e198771b0b2b8cd53499b817619483bdc680df499daabb0a7739"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0x1, 0x7, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x80, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0xfe00}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x6, 0x79, 0xc}}, {{0x9, 0x5, 0xc, 0x3, 0x10, 0x6, 0x3, 0x8, [@generic={0x53, 0x22, "ade5e63176ecc42891bfbd97fe88c528e5777f473f7fe9be1ac9aee6d50c0789eacdd477aeabbda914e15af6ca727323438299ba73c22be7bb018ba5dcdc07e3a773b067dc012588d0db7ea78e6689160b"}, @generic={0x53, 0x22, "345bd514502dd02b2700c2bb52f533d92c08bd9cc01fbaf75d4b0d6e5d423d135d31152353d540c7614dcd8c04242727c3c6f54ee60946ec70ac4af3e72ba1312680f3cd366a96689e49507b7035bdfc60"}]}}]}}]}}]}}, &(0x7f0000001500)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x300, 0xd, 0x7f, 0x2, 0x40, 0x5}, 0x5, &(0x7f00000012c0)={0x5, 0xf, 0x5}, 0x5, [{0x95, &(0x7f0000001300)=@string={0x95, 0x3, "1f13125c229b8c4844ac2bc5facc2d71f55908a8986337c865de4b9e2bbdbe727ca19d6dab58cbd82295419faf0ed14a6b4aa4e139986bacf1d1d9e6496694aa6270c0d68811cecd43d60753b63c681cc474fb3b25feb3a9ef8e49eec464c7c0ff92e7a26c74dd67df861c08fcd734ef0f850663deaa9214d19ebb907d2e863abdde61c23178a9437e01ca7498adfddf3fffe6"}}, {0x6b, &(0x7f00000013c0)=@string={0x6b, 0x3, "ecdf6506e751716b41bc0dcda2bca5674877fb3d9e64e8259d950a921d5c531d4a3c979d0b57b64b7a8206d566ae85a1942a1e8514294d1f91e32249e790c3d44243f093c6724ff9ecccefab4b4de6134961571a827ff1057e8ed93692c9211a7cfa265b2d336963f4"}}, {0x14, &(0x7f0000001440)=@string={0x14, 0x3, "8486e96c92ae68f7a2da9066eb4d1f88e4d1"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x457}}]}) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r15, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x20, r14, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}}, 0x8040) 9.537829529s ago: executing program 5 (id=1000): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c00018008000140000000044400"], 0xf0}, 0x1, 0x0, 0x48000000}, 0x0) 9.469494022s ago: executing program 5 (id=1002): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x182049, 0xffffffffffffffff, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x9) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000500), 0x80, r4, 0x0, 0x7}, 0x38) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='\\0x0000 2', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/file0\x00', 0x1ff) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001fe80000000000000000000000000000fffff0000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00040000000000000c00000000000000000000000000000000000000000000000180000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001000000000000004400050000000000000000000000ffff7f000001000000003c00000002000000ffffffff000000000000000000000000060000000c01000000719aa7f0d85b97ea093bcc"], 0xfc}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket(0xa, 0x3, 0xff) 8.272031676s ago: executing program 5 (id=1007): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="c3ceffff000b010100000000e1500fe54a68000000000152fe0240000000055104034000000001b676b8e31519a6fcffacc789008f6efb26d6cd0ab704eb467fdf27a995c7ecd4c3b995"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x200000d0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x25, &(0x7f0000000000)=""/4079, &(0x7f0000001040)=0xfef) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000001000)=0x10000, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) r7 = accept$inet6(r1, &(0x7f0000001080)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f00000010c0)=0x1c) r8 = open$dir(&(0x7f0000001140)='./file0\x00', 0xa00, 0x1) openat(r8, &(0x7f0000001180)='./file0\x00', 0x80040, 0x109) sendmmsg$inet(r7, &(0x7f0000001100), 0x0, 0x24000084) 7.357432995s ago: executing program 5 (id=1015): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000240)=0xf, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) (async) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0xf, 0xd0e, 0x7fffffff, 0x8, 0x6}, 0x14) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0x4, &(0x7f0000003100)=[{&(0x7f0000000480)=""/89, 0x59}], 0x10000000000000e1, 0x0, 0x1, {0x0, 0x0, 0xfc, '\x00', 0x0}}) io_uring_enter(r2, 0x708f, 0xfffffffd, 0x81, 0x0, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={r7, &(0x7f0000000300), &(0x7f0000000600)=""/86}, 0x20) 7.230451252s ago: executing program 34 (id=1015): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000240)=0xf, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) (async) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0xf, 0xd0e, 0x7fffffff, 0x8, 0x6}, 0x14) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0x4, &(0x7f0000003100)=[{&(0x7f0000000480)=""/89, 0x59}], 0x10000000000000e1, 0x0, 0x1, {0x0, 0x0, 0xfc, '\x00', 0x0}}) io_uring_enter(r2, 0x708f, 0xfffffffd, 0x81, 0x0, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={r7, &(0x7f0000000300), &(0x7f0000000600)=""/86}, 0x20) 3.425546556s ago: executing program 1 (id=1061): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x60) 3.423223015s ago: executing program 1 (id=1063): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x200028, &(0x7f0000006540)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@i_version}], [{@obj_user={'obj_user', 0x3d, '^'}}, {@fowner_lt}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000006600)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x5e) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000002240), 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000006280)=[{{&(0x7f00000021c0)=@nl=@unspec, 0x80, &(0x7f0000003700), 0x8}, 0x100000a}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003780)=""/161, 0xa1}, {&(0x7f0000003840)=""/222, 0xde}, {&(0x7f0000003940)=""/80, 0x50}], 0x3, &(0x7f0000003a00)=""/48, 0x30}, 0x487}, {{&(0x7f0000003a40)=@ax25={{0x3, @netrom}, [@bcast, @default, @netrom, @default, @remote, @null, @bcast]}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003ac0)=""/233, 0xe9}, {&(0x7f0000003bc0)=""/74, 0x4a}, {&(0x7f0000003c40)=""/6, 0x6}, {&(0x7f0000003c80)=""/88, 0x58}], 0x4, &(0x7f0000003d40)=""/34, 0x22}, 0x7}, {{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000006740)=""/4103, 0x1007}, {&(0x7f0000004d80)=""/157, 0x9d}, {&(0x7f0000004e40)=""/6, 0x6}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000005e80)=""/235, 0xeb}, {&(0x7f0000005f80)=""/222, 0xde}, {&(0x7f0000006080)=""/162, 0xa2}], 0x7, &(0x7f00000061c0)=""/174, 0xae}, 0x3}], 0x4, 0x10122, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002140)={0x50, 0x0, r6, {0x7, 0x8, 0xfffffff6, 0x238d117e517ca573, 0x4, 0x4, 0x85, 0x4, 0xc00, 0x0, 0x4}}, 0x50) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) writev(r7, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)="84d87b38", 0x4}], 0x2) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r8 = io_uring_setup(0x4c7d, &(0x7f0000002280)={0x0, 0x14af, 0x1000, 0x1, 0xfffffff8, 0x0, r7}) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002300)=ANY=[@ANYBLOB="9c010000120001000000000000000000ac1414bb0000000000000000ac1414260000000000000000000000000000000000000000000030000000000092", @ANYRES32=0x0, @ANYRESDEC=r8, @ANYBLOB="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"], 0x19c}}, 0x0) 2.712046829s ago: executing program 6 (id=1072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@broadcast, @loopback, r2}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@bridge_getlink={0x44, 0x12, 0x10, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r2, 0x19000, 0x5010}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}, @IFLA_ALT_IFNAME={0x14, 0x35, 'sit0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x28d5e}]}, 0x44}}, 0x0) 2.633289176s ago: executing program 6 (id=1074): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1ff, 0x80000001, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000018c0), &(0x7f0000001900), 0x10000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$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") 2.225804677s ago: executing program 1 (id=1078): clock_gettime(0x0, &(0x7f0000000040)) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x67, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x96, 0x0, 0x4000000000000000}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xfffe, 0x2, 0x8, 0xb3, 0xb, "155ba2b909ad5581"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x9) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x280, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x80503d0a, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}], 0x1) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, 0x0) dup(0xffffffffffffffff) 1.87538734s ago: executing program 1 (id=1079): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={0x0}, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x4c, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x40, 0x8000, 0xfffffffd, 0xc40000}}) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x4, 0x200000) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fff, 0x3a, '\\.@+', 0x3a, '}-\\-', 0x3a, './file1'}, 0x2f) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000015c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/4096, 0x1000, 0x1, &(0x7f0000001540)=""/127, 0x7f}, &(0x7f0000001600)=0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e88a8", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.76228905s ago: executing program 1 (id=1081): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) connect$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000201000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fdffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_emit_vhci(0x0, 0x0) 1.65068044s ago: executing program 0 (id=1083): r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0xffffffff, 0x20000000, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x84, 0x68, 0x8, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x1, 0x0, 0x12}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@mcast1}, @NHA_GROUP_TYPE={0x6, 0x3, 0x2}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x983}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7}]}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x804}, 0x40100) 1.404928241s ago: executing program 0 (id=1084): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000100000000000000029000000", @ANYRES32=r0], 0x28}, 0x4004000) 1.244531533s ago: executing program 0 (id=1087): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x7000000, &(0x7f00000000c0)={[{}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$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") 1.196037121s ago: executing program 0 (id=1089): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc051}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 707.775392ms ago: executing program 1 (id=1090): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x210006, &(0x7f0000000000), 0x1, 0x56e, &(0x7f0000000e40)="$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") socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x406) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) getpgid(0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x4}, @sack_perm, @window={0x3, 0x7, 0x5}, @timestamp, @window={0x3, 0x4, 0x401}, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x1) 707.537324ms ago: executing program 4 (id=1091): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300, 0x0, 0x840}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x2, 0x1, &(0x7f0000000080)=""/65, &(0x7f0000000100)=""/80, &(0x7f0000000180)=""/27, 0xffff1000}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x20007788) 665.110165ms ago: executing program 4 (id=1092): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) 657.085384ms ago: executing program 6 (id=1093): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f0000000100)=':@+$\x00', 0x80, &(0x7f0000000240)={@_ha_fsid, {0xffff, 0x10, 0x5, 0xfff}}, 0x7a19, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0xfffffffc}) connect$can_bcm(r2, &(0x7f00000003c0), 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800c000}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0xfffffffffffffffc}, 0xfffffecd) (async) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) (async) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) close(r4) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xc3b, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x8, 0x5, 0x9, 0x64, 0x5, ' \x00'}, 0xfffffff7, 0x1, {}, 0x2}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) (async) r8 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r9 = socket$can_bcm(0x1d, 0x2, 0x2) accept$unix(r9, 0x0, 0x0) (async) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6gre0\x00', r7, 0x2f, 0x7, 0x6, 0xfffffff4, 0x1, @mcast1, @mcast2, 0x40, 0x10, 0xb4a, 0x7fffffff}}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001d00)=@newtfilter={0x2138, 0x11, 0x111, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x74, r7, {0x6, 0xc}, {0x6, 0x10}, {0xd, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0xd}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @filter_kind_options=@f_basic={{0xa}, {0x1bc4, 0x2, [@TCA_BASIC_ACT={0x1034, 0x3, [@m_pedit={0x1030, 0x7, 0x0, 0x0, {{0xa}, {0x4}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BASIC_EMATCHES={0x56c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2ec, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xc, 0x3, 0x9}, {0x4, 0x4, 0x9, 0x5}}}, @TCF_EM_IPT={0x34, 0x3, 0x0, 0x0, {{0x3, 0x9, 0x7f}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x10}, {{0x1, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7, 0x2, 0xe}, {0x6, 0x5, 0x0, "16d2ee1204"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8000, 0x8, 0x1000}, {0x3, 0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xf, 0x3, 0x7}, {0x7ff, 0x4, 0x2, 0x40}}}, @TCF_EM_CONTAINER={0xd0, 0x1, 0x0, 0x0, {{0xf001, 0x0, 0x8}, "89c21f46b6a59c7772660d631644fc443aa222988273cd9104dee3d111af3ac181e210175cdb97d12edab283dc722ce13d99b1f0add7bef1612f12d84499489b765ef62900691f0e92f2aa647bfaff6513618671107ce6e8667a5d93db8aaeeaa4aa49922fbb37ec9a5615ecec400dbf48218bdce1ddde0a8488aabce86b39cb6ea24d0715b06beb1c875f4fe8bccdece3badf241f9a8bb90fb04ea9b0dd2e50782eea8136d7467249c3e2ddd9fa59cd483282758d94f6a2a2fc8abfccc58c64b9fb0b"}}, @TCF_EM_CONTAINER={0xfc, 0x3, 0x0, 0x0, {{0x400, 0x0, 0x6}, "1e8d3a2d27e6fc310c19ca0efeef747e5732917401255d243beb2f260e678ad704e7f34e7c8a0f0c92ce1f6828015a2ecbe4fb95f32679aef8c6ad75b6621e65243b58d62919156a566c239416d96bfa18c0c18fddd1046cb68d9b4fa799c28ff2807ebacc28410ebf81496855967115c46a2e6faba5f43e137be946b613b3a44557cfb12053f3c4981f828cfe5b97d622e32d30b660568d3a74c1d0843c275080185b4e7aca3523d78e6964112d246065d780974bf63f35e977d2a4a690b680c500e29f6a4731b3b74cf930fe290bc5d7169946b56e25a26246d943488d5e4ecd064cd1a1ea3e2898e42d8f40"}}, @TCF_EM_META={0x74, 0x1, 0x0, 0x0, {{0x1, 0x4, 0xa}, [@TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="88e61b", @TCF_META_TYPE_VAR="2ecd29b7d8cdca48", @TCF_META_TYPE_VAR="88f8cb85008ae8"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="99e5f4", @TCF_META_TYPE_VAR="890e3a3ddd", @TCF_META_TYPE_VAR="54d360374a", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_VAR="88f3f08ff15b99da", @TCF_META_TYPE_VAR="1a2af7a0899171", @TCF_META_TYPE_VAR="922a236070d06d", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="f4"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0xbb}, {0x2, 0x6, 0x4}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2, 0x7, 0x2}, {{0x4, 0x0, 0x0, 0x1}, {0x2, 0x1}}}}, @TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x26ca, 0x0, 0xfffe}, "ba98b172"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3c, 0x2, 0x0, 0x0, {{0x9e, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xa0}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CONTAINER={0x48, 0x3ff8, 0x0, 0x0, {{0x4, 0x0, 0x5}, "74bebf5c493546970b19fa1c231d4179378e2c30462ee9ff3629d770f98382b30a253e3ec1d801af500850dd359719a0f0cc1b2db1cf25692779"}}]}, @TCA_EMATCH_TREE_LIST={0x18c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x84, 0x1, 0x0, 0x0, {{0x22bc, 0x4, 0x8c}, [@TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="e8a05409939d8b", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="d8b01a9482", @TCF_META_TYPE_VAR="48ca368e8fd7df9c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xa550, 0x4}, {0x8, 0x8}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xb3}, {0x2}}}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="2f91", @TCF_META_TYPE_VAR='3', @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="d44a2964d0", @TCF_META_TYPE_VAR='~', @TCF_META_TYPE_VAR="a88ee35e4e78"]}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_VAR="cd", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="c8922093", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="1dc800eadf1b8d", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='n']}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7, 0x1, 0x9}, {0x100, 0x1, 0x0, 0x0, 0x2}}}, @TCF_EM_META={0xc8, 0x3, 0x0, 0x0, {{0xc, 0x4, 0x6780}, [@TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_VAR="b9ec24c9", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="bb0ea795", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="684576d29e5f333d03a0", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x2b, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="c78637cfae0d87ae06ea", @TCF_META_TYPE_VAR="47893cc25ab6f7ec", @TCF_META_TYPE_VAR='7', @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="26dc", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR='\\Q', @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="2bb5794c"]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="de06bc262768edb8", @TCF_META_TYPE_VAR="ee4790bf"]}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="a515", @TCF_META_TYPE_VAR="35299376b4adac070e", @TCF_META_TYPE_VAR="87963657222a11d37425"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xfe}, {0x8001, 0x9, 0x2}}}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x80, 0x2, 0x2}, {0x7, 0x1, 0x1, "80"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x8}, {0x2, 0x4, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff01}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}]}, @TCA_BASIC_ACT={0x1f8, 0x3, [@m_ct={0xc0, 0xe, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_MARK={0x8, 0x5, 0x5}, @TCA_CT_LABELS_MASK={0x14, 0x8, "7e5b82db7fd4d1a84219eedd9370ccb8"}, @TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfffffffd, 0x6, 0xff, 0x3d96124d}}, @TCA_CT_PARMS={0x18, 0x1, {0x6, 0x5, 0x10000000, 0x4, 0x2}}]}, {0x44, 0x6, "eadf11fb76603e05071635fee693be2882a7fb307f0a069d80736fd9d4683d1c74faadcfa65e908cd0d5319f3c1504e492044ec7000f1ba84b0d9fe9860963c7"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x134, 0x1a, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x80000000, 0x5, 0x800, 0x7}, 0x3, r10}}]}, {0xe5, 0x6, "a3aeb62fca6a44548415d4bce35c274466386c3b31ed9d613048fb9bfd48d7950c959823f56941589d5d3ea74c6b57d97c1c642c7003ed317168ee16c937bbd762d3680cb802687c7a7d9b64f2d6e2f839d5443a7cdc3ff549a03a6c283aa5ea2a20ef1c70a580e94891eebb6420dbd7b3ad0b97c9d8b15e4bdb71b55e6f6a3eb6a203068e4c33ed620b10b9e2811019aaefa19df7797ff7fa503e57a43f015c9f4da297ae29541af7f181a9bae8f4558d6337b973684b969ce3067b9a77d2f69b5a6cae12afb03e2b7788b1a77c88bee3ce1ef857c0d1d3a2cb478db030054bee"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_POLICE={0x10, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x510c}]}, @TCA_BASIC_POLICE={0x418, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0xd, 0x2, 0x6, 0x1, 0x7, 0x7, 0x3, 0x28, 0x2, 0x4, 0x401, 0xffffffff, 0x9, 0xa, 0x7f, 0x4b4, 0x7, 0x7f, 0x5, 0xee84, 0x7, 0xff, 0x7ff, 0x7fffffff, 0x5, 0xbd8, 0x10001, 0xe, 0x885, 0xfffffffd, 0x9, 0x2, 0xb96, 0x0, 0x5, 0x4, 0x5, 0x5, 0x5, 0xa, 0x5, 0x9, 0x2220, 0x1, 0x8, 0x3, 0x8, 0x5, 0x10000, 0xc, 0x10001, 0x219, 0x549, 0x1, 0x5, 0x1, 0xff, 0x0, 0x4, 0xeb, 0x4, 0x16, 0x1, 0x4, 0x326, 0x8, 0x800, 0x6, 0x5, 0x8, 0x7, 0xae, 0x800, 0x6, 0x1ff, 0xfffffff7, 0x1, 0x3, 0xb858, 0x72e03564, 0x3, 0xffffffff, 0x9, 0x2, 0x7ff, 0x0, 0x2, 0xf, 0x4, 0x2, 0x4, 0x4, 0x7, 0xd89, 0xc, 0x5, 0x4, 0x1, 0x0, 0x81, 0x10001, 0x40, 0x400, 0xfffffffb, 0x6, 0x3ff, 0x1, 0x9, 0x6, 0x0, 0x3, 0x694c, 0x8, 0x4, 0x4, 0x5, 0x2, 0x8, 0xfa8, 0xf, 0x2, 0x0, 0xfffffffc, 0x0, 0x8, 0x6, 0x7fffffff, 0x5, 0x0, 0x80000001, 0x3, 0x1, 0x191, 0x0, 0x100, 0x7, 0x2, 0x1, 0x10, 0x3ff, 0x200, 0x401, 0x0, 0x1b0f, 0x8, 0x3, 0x6, 0x0, 0x1, 0xc9a, 0x7fff, 0x1, 0xffffffff, 0x7, 0x2, 0x7fffffff, 0x0, 0x0, 0x6, 0x1, 0xef, 0x5, 0x6, 0x9, 0xa0, 0x1, 0x4, 0x0, 0x463, 0xc4000000, 0x87e, 0x8, 0x6, 0x8, 0x1000, 0x9, 0x0, 0x8, 0xbb, 0x9, 0x1, 0x9, 0x8, 0x0, 0x2, 0xc, 0xd7, 0x507, 0x2, 0x0, 0x680, 0xd120ae3, 0x7, 0x3800, 0x7, 0x81, 0x80, 0x9, 0x7, 0xffffffff, 0xa, 0x4, 0xff, 0x5, 0x7, 0x4, 0xfe, 0xd, 0x4, 0x8, 0x10, 0x0, 0x8, 0x2, 0x8, 0x9, 0x401, 0x489, 0x6, 0x0, 0x7fff, 0x8, 0x4, 0x1, 0x5, 0x100, 0xc, 0x0, 0xfff, 0xfffffffe, 0x9, 0x75e, 0x1200000, 0xffffe000, 0x3e, 0x3, 0x308, 0xffffffff, 0x1, 0x0, 0x4, 0x6, 0x9, 0xb, 0x6, 0x9, 0x6, 0x0, 0x8594, 0x100, 0x3, 0x9, 0xfffffeff, 0x2, 0x5b]}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_fw={{0x7}, {0x4c8, 0x2, [@TCA_FW_POLICE={0x414, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x60f, 0x0, 0x9, 0x401, 0x2, 0xf0, 0x80, 0x9, 0x8, 0x7, 0x1, 0x101, 0x1ff, 0x5b90, 0x2, 0x5, 0x49, 0x9, 0x6, 0x8, 0x8533, 0x0, 0x6, 0x100, 0x80000000, 0x0, 0x4d, 0x8, 0x4, 0x5, 0x9, 0x0, 0x7, 0xffff, 0x4, 0x7, 0x1, 0xf, 0x4, 0x19, 0xe, 0xfffffff8, 0x7fff, 0x3, 0x81, 0x4, 0x800100, 0x40, 0x7, 0x9, 0x8, 0x7, 0x8, 0x8000, 0x5, 0x55, 0x781, 0xe955fe8e, 0xee, 0x93, 0x1, 0xfffffff8, 0x4, 0xfffffffa, 0x9, 0x8, 0x400, 0x6, 0xf, 0x0, 0x0, 0xfffffffc, 0x2, 0x6, 0x3, 0x40, 0x8, 0x5a, 0x3, 0x1000, 0xffffd7fb, 0x3, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1000, 0x4, 0x8, 0x2e88, 0x1ff, 0x2, 0xffff58c8, 0x6, 0x46, 0x0, 0xffff, 0x8, 0x401, 0x8, 0xaca, 0x4fd, 0xa, 0x200, 0x1000, 0x3, 0x6, 0x0, 0x7, 0x0, 0x4, 0x4, 0x3, 0x4, 0x0, 0x80, 0x1, 0x7, 0x3, 0xd36, 0x8, 0x9, 0x1, 0x6, 0x7f, 0x7, 0x5, 0x1, 0x8, 0x8, 0x8, 0x3ff, 0x7, 0x2, 0x40000000, 0x3, 0x3, 0x1e72, 0x7, 0x7, 0x8, 0x7ff, 0x571e, 0x9, 0x8, 0x34, 0xdef, 0x2, 0x6, 0x401, 0x0, 0x7fff, 0x2, 0xb822, 0x0, 0x401, 0x7, 0x8de, 0x7, 0xff, 0x5, 0x1, 0xd4, 0xc08, 0x5, 0x6, 0x4, 0x8, 0x7fff, 0x9, 0x661d00f0, 0x80000001, 0xff, 0x5, 0x7, 0x1, 0x8, 0xfffffffc, 0x80, 0x8001, 0x1, 0x7f, 0x1, 0x9, 0x1, 0x81, 0x3ff, 0x2, 0x7, 0xb31, 0x1, 0x40, 0x9, 0xb2, 0x4, 0x1, 0x90, 0x88, 0x8000, 0x7, 0x9, 0xc79, 0x4, 0xb, 0xc, 0x8, 0x0, 0x8, 0x2, 0x40, 0x8, 0xd, 0x5, 0x7, 0x1, 0x1, 0x2, 0x4, 0x800, 0x8, 0x7, 0x1, 0x5, 0x427, 0x3, 0x2, 0xb, 0x4, 0xfffffffa, 0xdf, 0x2, 0x5, 0x4, 0x2, 0x1, 0x6, 0x4, 0x8b5, 0x800, 0x2, 0x4, 0x0, 0x1, 0x7fff, 0x100, 0x40, 0x10, 0xfffffffc, 0x8, 0x8001, 0xe, 0x8000, 0x10001, 0xfff, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1d90}]}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0xa}}, @TCA_FW_MASK={0x8, 0x5, 0x7f}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @TCA_FW_POLICE={0x4}, @TCA_FW_ACT={0x6c, 0x4, [@m_tunnel_key={0x68, 0x4, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}]}, {0x23, 0x6, "5b0e9f78ea323babb3440b2775a779cc85283612078793be240fa47ff91fb5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe0, 0xc}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xff}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0xa2}]}}]}, 0x2138}, 0x1, 0xf0ffffffffffff, 0x0, 0x20048110}, 0xc0c4) 565.581941ms ago: executing program 7 (id=1096): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffa40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) 564.800165ms ago: executing program 7 (id=1097): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 529.44818ms ago: executing program 4 (id=1098): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x45, 0x0, 0x2}, {}, {0x0, 0x8}, {0x20, 0xe4, 0x1, 0x4}, {0x6}, {0x3, 0x7, 0x9, 0x3}, {0x6, 0xc, 0x2, 0xfffffff9}, {0x19d5, 0xa4, 0x7, 0x5}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2100, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x20) (async) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) setresuid(0x0, 0xee00, 0xee00) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e0001000000000000f4ffffff02"], 0x1c}}, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 519.736819ms ago: executing program 6 (id=1099): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000010000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18010000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000002000000a00000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac14140c000000000000000000000000fc000000000000000000000000000001e0000001000000000000000000000000fe8000000000000000020000000000aa6c040000ffffffff0a4f0a0000000000000000000000ffff7f000001fc020000000000000000000000000000fc020000000400000000000001000001fc0200000000000008000000000000003c000000000000000a000a002c001300"], 0x118}}, 0x0) 461.583021ms ago: executing program 6 (id=1100): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x400000, &(0x7f00000000c0)={[{}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$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") 451.631642ms ago: executing program 7 (id=1101): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, 0x0, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 431.2665ms ago: executing program 6 (id=1102): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) connect$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000102000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fdffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_emit_vhci(0x0, 0x0) 373.051403ms ago: executing program 4 (id=1103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x80000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2e}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xdc}}, 0x0) 285.441741ms ago: executing program 7 (id=1104): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf250600000008000300", @ANYRES32=r0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x24004001}, 0x40408c0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000640)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r3, {0xffe0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0xe}}]}}]}, 0x48}}, 0x24040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x4c, 0x18, 0xfafcfec6d6759198, 0x0, 0x2, {0x2, 0x0, 0x10, 0x4, 0xfd, 0x0, 0x0, 0x2, 0x1400}, [@RTA_ENCAP_TYPE={0x6}, @RTA_MULTIPATH={0xc, 0x9, {0x200, 0x30, 0x5, r3}}, @RTA_UID={0x8, 0x19, 0xee00}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x18, 0x8, r3}}, @RTA_SRC={0x8, 0x2, @broadcast}]}, 0x4c}}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc00}}, 0x1c}}, 0x8c0) 285.132861ms ago: executing program 7 (id=1105): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) (async) r1 = userfaultfd(0x80001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440), 0x1000a) (async) unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0xa080, 0x0, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002500)={0x50, 0xffffffffffffffda, r3, {0x7, 0x2d, 0x2, 0x8806800, 0x1ff, 0x4, 0x5, 0x9, 0x0, 0x0, 0x20, 0x5}}, 0x50) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x10800, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40e402, 0x100) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) write(r0, &(0x7f0000000040), 0xffffff4a) 120.770541ms ago: executing program 0 (id=1106): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xc6}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x100000}]}}}]}]}], {0x14}}, 0x8c}}, 0x24008000) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000280)={&(0x7f00000000c0)=[{0x2, 0x0, 0x2, 0x6c, 0x3, 0xae, 0x6, 0x7}, {0x1, 0x0, 0x3, 0x7, 0xdd, 0x0, 0x1, 0x10000}, {0x2, 0x0, 0x3, 0x1, 0x7dfd3893, 0x5, 0x3}, {0x2, 0x0, 0x8, 0x9, 0x746f, 0x8, 0x7}, {0x2, 0x0, 0x0, 0x5, 0x3, 0xf, 0x6, 0x401}, {0x0, 0x0, 0x4, 0x5, 0x9, 0xffffffffffffffff, 0x6, 0x8}, {0x2, 0x0, 0x3, 0x0, 0x0, 0x8, 0x9, 0x5}], 0x7, 0x38, 0x0, 0xdc}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x3010000, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x39}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 77.489515ms ago: executing program 4 (id=1107): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x80}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x31a, &(0x7f00000001c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "c98694", 0x2e4, 0x2c, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x3b, 0x10, '\x00', [@pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0x9, 0x21d6, [0x7, 0x2, 0x9689, 0xd4, 0x7, 0x4]}}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0x7, [0x8000000000000000, 0x8, 0x6, 0x8000000000000001, 0x3ff835f, 0xffffffff, 0xfa7]}}]}, @routing={0x89, 0xc, 0x0, 0x6, 0x0, [@empty, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @local}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @dstopts={0x2f, 0x8, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0xd929}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0x8001, [0x7, 0x7]}}, @pad1, @jumbo={0xc2, 0x4, 0xa}, @ra={0x5, 0x2, 0x7}]}, @fragment={0x16, 0x0, 0x1, 0x1, 0x0, 0x6, 0x65}, @dstopts={0x0, 0x17, '\x00', [@hao={0xc9, 0x10, @private1}, @jumbo={0xc2, 0x4, 0x5}, @generic={0xc, 0x83, "898ff43548e429122b8392c924f3be93f79a968882bc7f068dd23817973320a2981bf6f284726ba58c97dec115020bcd1b2e55ab0b635461a18f59d2798d8bb118c6ae538a8a755df0f68e3530d46e295536ecfe6f7ebc59dfa8abf4be1fe192a99e2ce49a93c031f31910bea8b41495c0d37a44ab26a4c32c199b7d8eca0cf3fb5c84"}, @pad1, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x4}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}]}], "c66619645bb4549ce162646a8fd318079136ae06c8389c88ad93fa614fcdfb447f627cdd340412a6860f7cba253cf1e6b31957508bb0903c491e572725609e144fb650ad088b3f1a0b00b25f898c2540e45f0de3db8cf3c3279f5c0003c90c2de76815022b6ba60e60e93aff6aef605fc2aa2b42db55c0fdd9c29ec318c67c1dd5725dffe85c671b3841f32699b1c33aee23b3d14ff8029e2b63fdefe3275388139e08b3a78dc5c196b71e76d3694e6042441621e6dc42476613d4cc00170d3e4b107fc0d1e492764ee67c5f"}}}}}, 0x0) r1 = syz_open_dev$video(&(0x7f0000002e00), 0x8, 0x2000) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000000)={0x800, 0x2, 0x6, 0x800, 0x3070, 0x3, 0xc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write$sysctl(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 9.61312ms ago: executing program 7 (id=1108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x3, 0x3, 0x301, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x0, 0x2, 0x4}, {0x44, 0x1, 0x9, 0x8016}, {0x4, 0x9, 0x7, 0x5}, {0x6, 0x9, 0xd, 0x5}]}) 905.953µs ago: executing program 4 (id=1109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x6c, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x51, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x1}, @TCA_CODEL_ECN={0x8, 0x4, 0xfffffffe}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}, @TCA_CODEL_CE_THRESHOLD={0x0, 0x5, 0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x8000}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x6}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x6c}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x16) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1110): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000791812000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x80000001, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}, 0x4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x0) fchdir(r6) close(r6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%ps \x00'}, 0x20) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000001080)={0xa0c8, 0x5, 0x75dd, 0x30a, 0x5}) write$uinput_user_dev(r10, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000200)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe7c, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x9, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0xb5}], &(0x7f00000002c0)='syzkaller\x00', 0x24b7, 0x3, &(0x7f0000000300)=""/3, 0x41100, 0x22, '\x00', 0x0, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000500)=[r6, r7, r9, r10, 0x1], &(0x7f0000000540)=[{0x2, 0x2, 0x10, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x4, 0x4, 0x6}, {0x2, 0x1, 0x10, 0x8}, {0x3, 0x3, 0x9}, {0x5, 0x3, 0x5}], 0x10, 0x3}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r1, 0x4) kernel console output (not intermixed with test programs): e '/devices/virtual/bluetooth/hci3/hci3:201' [ 45.123438][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT [ 45.123453][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 45.123459][ T50] Workqueue: hci3 hci_rx_work [ 45.123475][ T50] Call trace: [ 45.123479][ T50] show_stack+0x2c/0x3c (C) [ 45.123497][ T50] __dump_stack+0x30/0x40 [ 45.123511][ T50] dump_stack_lvl+0xd8/0x12c [ 45.123523][ T50] dump_stack+0x1c/0x28 [ 45.123534][ T50] sysfs_warn_dup+0x9c/0xb8 [ 45.123547][ T50] sysfs_create_dir_ns+0x190/0x1f4 [ 45.123558][ T50] kobject_add_internal+0x290/0x6f0 [ 45.123568][ T50] kobject_add_varg+0x9c/0xe8 [ 45.123576][ T50] kobject_add+0x110/0x1c8 [ 45.123584][ T50] device_add+0x394/0x9e0 [ 45.123593][ T50] hci_conn_add_sysfs+0xbc/0x1e8 [ 45.123604][ T50] le_conn_complete_evt+0xc68/0x10f8 [ 45.123614][ T50] hci_le_enh_conn_complete_evt+0x114/0x3d8 [ 45.123623][ T50] hci_le_meta_evt+0x2b0/0x46c [ 45.123635][ T50] hci_event_packet+0x4c0/0x9c8 [ 45.123645][ T50] hci_rx_work+0x2f4/0xd78 [ 45.123652][ T50] process_scheduled_works+0x788/0x10b8 [ 45.123663][ T50] worker_thread+0x798/0xbd0 [ 45.123673][ T50] kthread+0x304/0x3d4 [ 45.123682][ T50] ret_from_fork+0x10/0x20 [ 45.124595][ T50] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 45.124624][ T50] Bluetooth: hci3: failed to register connection device [ 45.258223][ T4817] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 45.382352][ T5345] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 45.382382][ T5345] FAT-fs (loop1): bogus number of directory entries (1) [ 45.382403][ T5345] FAT-fs (loop1): Can't find a valid FAT filesystem [ 45.441703][ T5347] capability: warning: `syz.1.149' uses 32-bit capabilities (legacy support in use) [ 45.442184][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 45.442192][ T30] audit: type=1400 audit(45.430:128): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=rw pid=5346 comm="syz.1.149" name="video7" dev="devtmpfs" ino=836 [ 45.469716][ T5351] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.473668][ T5351] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 45.474248][ T5351] System zones: 1-12 [ 45.474809][ T5351] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 207 vs 220 free clusters [ 45.475131][ T5351] EXT4-fs (loop4): 1 truncate cleaned up [ 45.475587][ T5351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.491908][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.505666][ T5359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 45.507888][ T5359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 45.508052][ T5359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 45.508264][ T5359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 45.581737][ T5367] netlink: 428 bytes leftover after parsing attributes in process `syz.1.157'. [ 45.581771][ T5367] netlink: 32 bytes leftover after parsing attributes in process `syz.1.157'. [ 45.648004][ T5376] bond1: entered promiscuous mode [ 45.650092][ T5376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.978412][ T5340] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 45.980353][ T5340] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 45.984467][ T5340] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 45.987262][ T5340] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 45.988193][ T5340] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 45.990225][ T5340] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 45.992242][ T5340] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 45.992600][ T5340] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 45.994899][ T5340] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 45.996552][ T5340] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 45.996755][ T5340] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 45.999892][ T5340] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 46.001875][ T5340] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 46.003668][ T5340] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 46.003871][ T5340] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 46.006340][ T5340] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 46.026248][ T4717] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 46.028726][ T4717] FAT-fs (loop3): Filesystem has been set read-only [ 46.029046][ T4717] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 46.604287][ T1188] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.878040][ T1188] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.895369][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.898009][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.900353][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.902743][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.905019][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.910923][ T5409] set_capacity_and_notify: 10 callbacks suppressed [ 46.910956][ T5409] loop0: detected capacity change from 0 to 512 [ 46.925152][ T5409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.946067][ T1188] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.955885][ T4847] hid-generic 0005:0C45:1010.0001: unknown main item tag 0x0 [ 47.006542][ T4847] hid-generic 0005:0C45:1010.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 47.055000][ T1188] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.064382][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.102276][ T5430] tipc: Started in network mode [ 47.102319][ T5430] tipc: Node identity 4, cluster identity 4711 [ 47.102532][ T5430] tipc: Node number set to 4 [ 47.115606][ T5423] fido_id[5423]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 47.134623][ T5437] binder: 5436:5437 tried to acquire reference to desc 0, got 1 instead [ 47.136621][ T5437] binder: 5436:5437 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 47.140314][ T5437] binder: 5437 RLIMIT_NICE not set [ 47.140353][ T5437] binder: 5437 RLIMIT_NICE not set [ 47.142566][ T5437] binder: release 5436:5437 transaction 30 in, still active [ 47.142597][ T5437] binder: send failed reply for transaction 30 to 5436:5437 [ 47.142878][ T4817] binder: release 5436:5437 transaction 31 out, still active [ 47.166198][ T5441] loop4: detected capacity change from 0 to 512 [ 47.191772][ T5441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.208307][ T4718] Bluetooth: hci0: command 0x0c1a tx timeout [ 47.214666][ T5439] syzkaller0: create flow: hash 1542823013 index 1 [ 47.233763][ T39] syzkaller0: tun_net_xmit 76 [ 47.233856][ T39] syzkaller0: tun_net_xmit 48 [ 47.251283][ T5441] netlink: 76 bytes leftover after parsing attributes in process `syz.4.179'. [ 47.259917][ T5438] syzkaller0: delete flow: hash 1542823013 index 1 [ 47.589293][ T5448] syzkaller0: entered promiscuous mode [ 47.589329][ T5448] syzkaller0: entered allmulticast mode [ 47.596402][ T5449] tipc: Enabled bearer , priority 0 [ 47.599093][ T5452] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 47.607360][ T5455] tipc: Resetting bearer [ 47.611091][ T1188] bridge_slave_1: left allmulticast mode [ 47.611136][ T1188] bridge_slave_1: left promiscuous mode [ 47.611579][ T1188] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.615535][ T1188] bridge_slave_0: left allmulticast mode [ 47.615559][ T1188] bridge_slave_0: left promiscuous mode [ 47.616133][ T1188] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.747495][ T5461] loop0: detected capacity change from 0 to 512 [ 47.761738][ T5461] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.765505][ T1188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.772847][ T5461] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 47.772920][ T5461] System zones: 1-12 [ 47.773319][ T5461] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 207 vs 220 free clusters [ 47.773680][ T5461] EXT4-fs (loop0): 1 truncate cleaned up [ 47.774130][ T5461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.799465][ T1188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.008256][ T4718] Bluetooth: hci4: command 0x0c1a tx timeout [ 48.008355][ T4718] Bluetooth: hci2: command 0x0c1a tx timeout [ 48.008431][ T4718] Bluetooth: hci1: command 0x0c1a tx timeout [ 48.029034][ T1188] bond0 (unregistering): Released all slaves [ 48.029511][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.062559][ T5440] tipc: Resetting bearer [ 48.067330][ T5440] tipc: Disabling bearer [ 48.096840][ T5475] ip6gre1: entered allmulticast mode [ 48.101334][ T1188] tipc: Left network mode [ 48.101442][ T5404] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.101495][ T5404] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.101641][ T5404] bridge_slave_0: entered allmulticast mode [ 48.102136][ T5404] bridge_slave_0: entered promiscuous mode [ 48.102858][ T5404] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.102882][ T5404] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.102942][ T5404] bridge_slave_1: entered allmulticast mode [ 48.103364][ T5404] bridge_slave_1: entered promiscuous mode [ 48.115118][ T5404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.116122][ T5404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.126400][ T5479] binder: 5478:5479 ioctl c0306201 20000480 returned -22 [ 48.131302][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 48.148952][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.158495][ T5404] team0: Port device team_slave_0 added [ 48.161747][ T5404] team0: Port device team_slave_1 added [ 48.181029][ T5482] loop0: detected capacity change from 0 to 512 [ 48.186585][ T5482] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.214363][ T5482] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 48.214440][ T5482] System zones: 1-12 [ 48.220269][ T5482] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 207 vs 220 free clusters [ 48.223439][ T5482] EXT4-fs (loop0): 1 truncate cleaned up [ 48.223970][ T5482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.262748][ T5404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.262780][ T5404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.262810][ T5404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.264819][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.346125][ T5404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.346158][ T5404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.346185][ T5404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.377689][ T5485] syzkaller0: create flow: hash 1542823013 index 1 [ 48.378752][ T4853] syzkaller0: tun_net_xmit 76 [ 48.378826][ T4853] syzkaller0: tun_net_xmit 48 [ 48.409236][ T4309] syzkaller0: tun_net_xmit 76 [ 48.458199][ T1001] syzkaller0: tun_net_xmit 76 [ 48.464886][ T5484] syzkaller0: delete flow: hash 1542823013 index 1 [ 48.630582][ T5519] loop2: detected capacity change from 0 to 2048 [ 48.648875][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 48.658919][ T5519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.807347][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 48.850210][ T5518] netlink: 'syz.2.195': attribute type 2 has an invalid length. [ 48.852841][ T5519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 48.900599][ T1188] hsr_slave_0: left promiscuous mode [ 48.902846][ T1188] hsr_slave_1: left promiscuous mode [ 48.904695][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.906642][ T1188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.908247][ T1188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.911080][ T1188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.912538][ T1188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.919640][ T1188] veth1_macvtap: left promiscuous mode [ 48.920963][ T1188] veth0_macvtap: left promiscuous mode [ 48.921997][ T1188] veth1_vlan: left promiscuous mode [ 48.922457][ T1188] veth0_vlan: left promiscuous mode [ 48.959908][ T5527] netlink: 428 bytes leftover after parsing attributes in process `syz.2.197'. [ 48.968205][ T50] Bluetooth: hci3: command tx timeout [ 49.055819][ T5529] ublk_ctrl_add_dev: dev id not match 4294967295 5 [ 49.298178][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 49.325839][ T5535] binder: 5533:5535 ioctl c0306201 20000480 returned -22 [ 49.374623][ T5540] loop4: detected capacity change from 0 to 512 [ 49.410283][ T5540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.421171][ T5540] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.202: corrupted xattr block 33: invalid header [ 49.448498][ T1188] team0 (unregistering): Port device team_slave_1 removed [ 49.451562][ T5540] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.202: corrupted xattr block 33: invalid header [ 49.454571][ T5540] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.202: corrupted xattr block 33: invalid header [ 49.463800][ T5540] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.202: corrupted xattr block 33: invalid header [ 49.473804][ T5540] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 49.474427][ T1188] team0 (unregistering): Port device team_slave_0 removed [ 49.748325][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.761184][ T5404] hsr_slave_0: entered promiscuous mode [ 49.763603][ T5404] hsr_slave_1: entered promiscuous mode [ 49.763846][ T5404] debugfs: 'hsr0' already exists in 'hsr' [ 49.763857][ T5404] Cannot create hsr debugfs directory [ 49.834852][ T4853] syzkaller0: tun_net_xmit 76 [ 49.834955][ T4853] syzkaller0: tun_net_xmit 48 [ 49.847002][ T5550] syzkaller0: create flow: hash 1542823013 index 1 [ 49.858494][ T4817] syzkaller0: tun_net_xmit 76 [ 49.864607][ T5549] syzkaller0: delete flow: hash 1542823013 index 1 [ 50.098363][ T4711] Bluetooth: hci4: command 0x0c1a tx timeout [ 50.102543][ T4718] Bluetooth: hci2: command 0x0c1a tx timeout [ 50.103742][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 50.109676][ T5568] loop2: detected capacity change from 0 to 7 [ 50.112921][ T5568] Dev loop2: unable to read RDB block 7 [ 50.112956][ T5568] loop2: AHDI p1 p2 p3 [ 50.112982][ T5568] loop2: partition table partially beyond EOD, truncated [ 50.113090][ T5568] loop2: p3 start 335544320 is beyond EOD, truncated [ 50.360076][ T4399] 8021q: adding VLAN 0 to HW filter on device eth1 [ 50.403776][ T5404] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 50.407171][ T5404] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.410430][ T5404] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 50.415038][ T5404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.417929][ T5404] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 50.428595][ T5404] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.428991][ T5404] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.437421][ T5404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.540330][ T4399] 8021q: adding VLAN 0 to HW filter on device eth2 [ 50.546377][ T5404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.774967][ T5404] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.779082][ T1354] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.779132][ T1354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.783954][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.784001][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.833303][ T5602] binder_user_error: 6 callbacks suppressed [ 50.833342][ T5602] binder: 5601:5602 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 50.835954][ T5602] binder: 5601:5602 ioctl c0306201 20000480 returned -22 [ 50.902036][ T30] audit: type=1326 audit(50.890:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5611 comm="syz.4.213" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf781a8 code=0x7ffe0000 [ 50.979618][ T4399] 8021q: adding VLAN 0 to HW filter on device eth3 [ 51.048930][ T50] Bluetooth: hci3: command tx timeout [ 51.096652][ T5404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.265897][ T5404] veth0_vlan: entered promiscuous mode [ 51.274649][ T5404] veth1_vlan: entered promiscuous mode [ 51.295193][ T5404] veth0_macvtap: entered promiscuous mode [ 51.299417][ T5404] veth1_macvtap: entered promiscuous mode [ 51.309093][ T5404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.313911][ T5404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.344138][ T1354] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.344255][ T1354] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.344300][ T1354] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.344327][ T1354] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.368526][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 51.423330][ T4853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.423366][ T4853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.450176][ T4853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.450215][ T4853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.584955][ T5659] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 51.640328][ T5661] binder: 5660:5661 tried to acquire reference to desc 0, got 1 instead [ 51.643648][ T5661] binder: 5660:5661 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 51.646561][ T5661] binder: 5661 RLIMIT_NICE not set [ 51.646606][ T5661] binder: 5661 RLIMIT_NICE not set [ 51.649794][ T5661] binder_debug: 9 callbacks suppressed [ 51.649825][ T5661] binder: release 5660:5661 transaction 50 in, still active [ 51.652772][ T5661] binder: send failed reply for transaction 50 to 5660:5661 [ 51.656349][ T4309] binder: release 5660:5661 transaction 51 out, still active [ 51.656392][ T4309] binder: undelivered TRANSACTION_COMPLETE [ 51.656413][ T4309] binder: undelivered TRANSACTION_ERROR: 29189 [ 51.656427][ T4309] binder: undelivered TRANSACTION_COMPLETE [ 51.671559][ T4309] binder: send failed reply for transaction 51, target dead [ 52.168211][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 52.169681][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 52.169741][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 52.209839][ T5691] loop2: detected capacity change from 0 to 8 [ 52.479953][ T5698] netlink: 'syz.5.231': attribute type 1 has an invalid length. [ 52.488012][ T5698] __nla_validate_parse: 1 callbacks suppressed [ 52.488054][ T5698] netlink: 28 bytes leftover after parsing attributes in process `syz.5.231'. [ 52.488244][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 52.492188][ T5698] ip_vti0: entered promiscuous mode [ 52.548656][ T5698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.231'. [ 52.551191][ T5698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.231'. [ 52.553583][ T5698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.231'. [ 52.556392][ T5698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.231'. [ 52.579908][ T5703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.233'. [ 52.582148][ T5703] erspan0: entered promiscuous mode [ 52.583241][ T5703] erspan0: left promiscuous mode [ 53.020531][ T5720] loop1: detected capacity change from 0 to 512 [ 53.068728][ T5720] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 53.068866][ T5720] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.080487][ T5720] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 53.080555][ T5720] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 53.080579][ T5720] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.240: Failed to acquire dquot type 1 [ 53.080600][ T5720] loop1: lost filesystem error report for type 5 error -5 [ 53.088103][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 53.088136][ C1] EXT4-fs (loop1): initial error at time 53: ext4_acquire_dquot:7041 [ 53.088172][ C1] EXT4-fs (loop1): last error at time 53: ext4_acquire_dquot:7041 [ 53.088345][ T5720] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.240: bg 0: block 40: padding at end of block bitmap is not set [ 53.088366][ T5720] loop1: lost filesystem error report for type 5 error -117 [ 53.100771][ T5720] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 53.100818][ T5720] loop1: lost filesystem error report for type 5 error -117 [ 53.104417][ T5720] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.240: data will be lost [ 53.104523][ T5720] EXT4-fs (loop1): 1 truncate cleaned up [ 53.120492][ T5720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.126709][ T5720] netlink: 'syz.1.240': attribute type 5 has an invalid length. [ 53.128302][ T4718] Bluetooth: hci3: command tx timeout [ 53.133507][ T4718] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 53.149564][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.165530][ T5727] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 53.292008][ T5732] tipc: Started in network mode [ 53.293210][ T5732] tipc: Node identity 3e4b27d0f713, cluster identity 4711 [ 53.294717][ T5732] tipc: Enabled bearer , priority 0 [ 53.296647][ T5732] syzkaller0: entered promiscuous mode [ 53.297853][ T5732] syzkaller0: entered allmulticast mode [ 53.305814][ T5706] Injecting memory failure for pfn 0x133200 at process virtual address 0x20000000 [ 53.307872][ T5732] tipc: Resetting bearer [ 53.310386][ T5730] tipc: Resetting bearer [ 53.311124][ T5706] Memory failure: 0x133200: Sending SIGBUS to syz.4.234:5706 due to hardware memory corruption [ 53.311464][ T5706] Memory failure: 0x133200: recovery action for unsplit thp: Failed [ 53.313763][ T5706] x_tables: ip_tables: osf match: only valid for protocol 6 [ 53.321951][ T5730] tipc: Disabling bearer [ 53.707936][ T5749] loop4: detected capacity change from 0 to 2048 [ 53.760221][ T5749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.867030][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.377312][ T5773] binder: 5772:5773 tried to acquire reference to desc 0, got 1 instead [ 54.377874][ T5773] binder: 5772:5773 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 54.377903][ T5773] binder: 5773 RLIMIT_NICE not set [ 54.377921][ T5773] binder: 5773 RLIMIT_NICE not set [ 54.378032][ T5773] binder: release 5772:5773 transaction 56 in, still active [ 54.378050][ T5773] binder: send failed reply for transaction 56 to 5772:5773 [ 54.378301][ T4309] binder: release 5772:5773 transaction 57 out, still active [ 54.612173][ T5795] loop0: detected capacity change from 0 to 8 [ 54.613267][ T5795] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 54.613291][ T5795] unable to read xattr id index table [ 54.786469][ T5806] loop2: detected capacity change from 0 to 7 [ 54.787671][ T5806] Dev loop2: unable to read RDB block 7 [ 54.787690][ T5806] loop2: AHDI p1 p2 p3 [ 54.787699][ T5806] loop2: partition table partially beyond EOD, truncated [ 54.787975][ T5806] loop2: p3 start 335544320 is beyond EOD, truncated [ 54.893408][ T5812] loop2: detected capacity change from 0 to 7 [ 54.895252][ T5812] Dev loop2: unable to read RDB block 7 [ 54.895271][ T5812] loop2: AHDI p1 p2 p3 [ 54.895281][ T5812] loop2: partition table partially beyond EOD, truncated [ 54.895360][ T5812] loop2: p3 start 335544320 is beyond EOD, truncated [ 54.998626][ T5813] loop2: detected capacity change from 0 to 8 [ 55.208505][ T4718] Bluetooth: hci3: command tx timeout [ 55.279716][ T5817] random: crng reseeded on system resumption [ 55.289561][ T5817] Restarting kernel threads ... [ 55.291268][ T5817] Done restarting kernel threads. [ 55.294277][ T5817] dlm: non-version read from control device 25 [ 55.318697][ T5819] loop1: detected capacity change from 0 to 8 [ 55.334555][ T5819] SQUASHFS error: Failed to read block 0x0: -5 [ 55.334589][ T5819] unable to read squashfs_super_block [ 55.720124][ T5830] loop0: detected capacity change from 0 to 512 [ 55.822302][ T5830] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 55.822333][ T5830] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 55.822371][ T5830] System zones: 0-1, 15-15, 18-18, 34-34 [ 55.822527][ T5830] EXT4-fs (loop0): orphan cleanup on readonly fs [ 55.822566][ T5830] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 55.822609][ T5830] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 55.822624][ T5830] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 55.824175][ T5830] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.278: bad orphan inode 16 [ 55.824196][ T5830] loop0: lost filesystem error report for type 5 error -117 [ 55.825599][ T5830] ext4_test_bit(bit=15, block=18) = 1 [ 55.825612][ T5830] is_bad_inode(inode)=0 [ 55.825616][ T5830] NEXT_ORPHAN(inode)=0 [ 55.825620][ T5830] max_ino=32 [ 55.825624][ T5830] i_nlink=2 [ 55.826107][ T5830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.848419][ T4796] IPVS: starting estimator thread 0... [ 55.938228][ T5833] IPVS: using max 60 ests per chain, 144000 per kthread [ 56.223848][ T5846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 56.303401][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.778349][ T5860] loop4: detected capacity change from 0 to 4096 [ 56.785363][ T5860] EXT4-fs (loop4): Test dummy encryption mode enabled [ 56.800717][ T5860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.808208][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 56.817306][ T5860] Quota error (device loop4): do_check_range: Getting block 150994949 out of range 1-5 [ 56.820526][ T5860] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 56.820563][ T5860] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.286: Failed to acquire dquot type 0 [ 56.826030][ T5860] EXT4-fs (loop4): Remounting filesystem read-only [ 56.846048][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.884938][ T5867] binder: 5866:5867 tried to acquire reference to desc 0, got 1 instead [ 56.885248][ T5867] binder: 5866:5867 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 56.885260][ T5867] binder: 5867 RLIMIT_NICE not set [ 56.885271][ T5867] binder: 5867 RLIMIT_NICE not set [ 56.885360][ T5867] binder_debug: 4 callbacks suppressed [ 56.885366][ T5867] binder: release 5866:5867 transaction 62 in, still active [ 56.885375][ T5867] binder: send failed reply for transaction 62 to 5866:5867 [ 56.885644][ T4795] binder: release 5866:5867 transaction 63 out, still active [ 56.885654][ T4795] binder: undelivered TRANSACTION_COMPLETE [ 56.885663][ T4795] binder: undelivered TRANSACTION_ERROR: 29189 [ 56.885669][ T4795] binder: undelivered TRANSACTION_COMPLETE [ 56.907304][ T4796] binder: send failed reply for transaction 63, target dead [ 57.133309][ T5880] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 57.781724][ T5899] loop1: detected capacity change from 0 to 1024 [ 57.912750][ T5899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.934437][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 57.934908][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 58.081991][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.117403][ T5917] netlink: 428 bytes leftover after parsing attributes in process `syz.1.304'. [ 58.117441][ T5917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.304'. [ 58.139705][ T5919] loop1: detected capacity change from 0 to 512 [ 58.151956][ T5919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.165074][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.306'. [ 58.243813][ T5929] fuse: Unknown parameter 'gæo³ù³ô00000000000000000000' [ 58.249185][ T5929] loop5: detected capacity change from 0 to 1024 [ 58.249560][ T5929] EXT4-fs: Ignoring removed bh option [ 58.252598][ T5929] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 58.258392][ T5927] ip6gre2: entered promiscuous mode [ 58.259632][ T5927] ip6gre2: entered allmulticast mode [ 58.260071][ T5929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.327114][ T5932] loop2: detected capacity change from 0 to 8 [ 58.534007][ T5929] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 7: comm syz.5.308: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 58.550076][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.550537][ T5929] EXT4-fs (loop5): Remounting filesystem read-only [ 58.604173][ T5404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.670789][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 58.743822][ T5948] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 58.791540][ T5954] vhci_hcd vhci_hcd.0: remove, state 4 [ 58.793438][ T5954] usb usb3: USB disconnect, device number 1 [ 58.820334][ T714] vhci_hcd vhci_hcd.0: stop threads [ 58.820370][ T714] vhci_hcd vhci_hcd.0: release socket [ 58.820425][ T714] vhci_hcd vhci_hcd.0: disconnect device [ 58.824295][ T714] vhci_hcd vhci_hcd.0: stop threads [ 58.825565][ T714] vhci_hcd vhci_hcd.0: release socket [ 58.825584][ T714] vhci_hcd vhci_hcd.0: disconnect device [ 58.828789][ T714] vhci_hcd vhci_hcd.0: stop threads [ 58.830362][ T714] vhci_hcd vhci_hcd.0: release socket [ 58.830389][ T714] vhci_hcd vhci_hcd.0: disconnect device [ 58.833041][ T714] vhci_hcd vhci_hcd.0: stop threads [ 58.833071][ T714] vhci_hcd vhci_hcd.0: release socket [ 58.833101][ T714] vhci_hcd vhci_hcd.0: disconnect device [ 58.833490][ T714] vhci_hcd vhci_hcd.0: stop threads [ 58.833497][ T714] vhci_hcd vhci_hcd.0: release socket [ 58.833506][ T714] vhci_hcd vhci_hcd.0: disconnect device [ 58.833553][ T714] vhci_hcd vhci_hcd.0: stop threads [ 58.833558][ T714] vhci_hcd vhci_hcd.0: release socket [ 58.833567][ T714] vhci_hcd vhci_hcd.0: disconnect device [ 58.833654][ T714] vhci_hcd vhci_hcd.0: stop threads [ 58.833665][ T714] vhci_hcd vhci_hcd.0: release socket [ 58.833676][ T714] vhci_hcd vhci_hcd.0: disconnect device [ 58.834068][ T714] vhci_hcd vhci_hcd.0: stop threads [ 58.834079][ T714] vhci_hcd vhci_hcd.0: release socket [ 58.834088][ T714] vhci_hcd vhci_hcd.0: disconnect device [ 58.834121][ T5954] vhci_hcd vhci_hcd.0: USB bus 3 deregistered [ 58.837288][ T5954] vhci_hcd vhci_hcd.0: remove, state 4 [ 58.837311][ T5954] usb usb2: USB disconnect, device number 1 [ 59.153243][ T714] vhci_hcd vhci_hcd.0: stop threads [ 59.153294][ T714] vhci_hcd vhci_hcd.0: release socket [ 59.153326][ T714] vhci_hcd vhci_hcd.0: disconnect device [ 59.154466][ T714] vhci_hcd vhci_hcd.0: stop threads [ 59.154474][ T714] vhci_hcd vhci_hcd.0: release socket [ 59.154484][ T714] vhci_hcd vhci_hcd.0: disconnect device [ 59.160991][ T714] vhci_hcd vhci_hcd.0: stop threads [ 59.161017][ T714] vhci_hcd vhci_hcd.0: release socket [ 59.161044][ T714] vhci_hcd vhci_hcd.0: disconnect device [ 59.164082][ T714] vhci_hcd vhci_hcd.0: stop threads [ 59.164105][ T714] vhci_hcd vhci_hcd.0: release socket [ 59.164123][ T714] vhci_hcd vhci_hcd.0: disconnect device [ 59.167456][ T714] vhci_hcd vhci_hcd.0: stop threads [ 59.167474][ T714] vhci_hcd vhci_hcd.0: release socket [ 59.167495][ T714] vhci_hcd vhci_hcd.0: disconnect device [ 59.169740][ T1354] vhci_hcd vhci_hcd.0: stop threads [ 59.169752][ T1354] vhci_hcd vhci_hcd.0: release socket [ 59.169762][ T1354] vhci_hcd vhci_hcd.0: disconnect device [ 59.169821][ T1354] vhci_hcd vhci_hcd.0: stop threads [ 59.169831][ T1354] vhci_hcd vhci_hcd.0: release socket [ 59.169846][ T1354] vhci_hcd vhci_hcd.0: disconnect device [ 59.169893][ T1354] vhci_hcd vhci_hcd.0: stop threads [ 59.169899][ T1354] vhci_hcd vhci_hcd.0: release socket [ 59.169908][ T1354] vhci_hcd vhci_hcd.0: disconnect device [ 59.169935][ T5954] vhci_hcd vhci_hcd.0: USB bus 2 deregistered [ 59.219801][ T5971] binder: BINDER_SET_CONTEXT_MGR already set [ 59.219830][ T5971] binder: 5970:5971 ioctl 4018620d 20004a80 returned -16 [ 59.220329][ T5971] binder: 5970:5971 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 59.220339][ T5971] binder: 5970:5971 ioctl c0306201 20000480 returned -22 [ 59.276036][ T5977] netlink: 60 bytes leftover after parsing attributes in process `syz.5.324'. [ 59.408354][ T5994] 9p: Bad value for 'wfdno' [ 59.504253][ T6001] binder: BINDER_SET_CONTEXT_MGR already set [ 59.504279][ T6001] binder: 5999:6001 ioctl 4018620d 20004a80 returned -16 [ 59.504494][ T6001] binder: 5999:6001 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 59.504510][ T6001] binder: 5999:6001 ioctl c0306201 20000480 returned -22 [ 59.929968][ T6014] loop2: detected capacity change from 0 to 8 [ 59.931685][ T6014] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 59.931715][ T6014] unable to read xattr id index table [ 59.937612][ T6008] slcan: can't register candev [ 59.995253][ T6021] input: syz0 as /devices/virtual/input/input5 [ 60.017081][ T6023] loop0: detected capacity change from 0 to 128 [ 60.031772][ T6023] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.039465][ T6021] binder: 6020:6021 got reply transaction with no transaction stack [ 60.039504][ T6021] binder: 6020:6021 transaction reply to 0:0 failed 68/29201/-71, code 0 size 0-0 line 3155 [ 60.061289][ T4719] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.107195][ T4795] binder: undelivered TRANSACTION_ERROR: 29201 [ 60.553530][ T6035] syzkaller0: entered promiscuous mode [ 60.553571][ T6035] syzkaller0: entered allmulticast mode [ 60.574017][ T6040] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 60.607163][ T6043] binder: 6042:6043 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 60.607197][ T6043] binder: 6042:6043 ioctl c0306201 20000480 returned -22 [ 60.819798][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.349'. [ 60.951727][ T6066] binder: 6065:6066 tried to acquire reference to desc 0, got 1 instead [ 60.953898][ T6066] binder: 6065:6066 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 60.956800][ T6066] binder: release 6065:6066 transaction 76 in, still active [ 61.007398][ T6071] bridge1: entered promiscuous mode [ 61.007433][ T6071] bridge1: entered allmulticast mode [ 61.288277][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 61.396210][ T6082] binder: 6081:6082 ioctl c0306201 20000480 returned -22 [ 61.814775][ T6140] loop2: detected capacity change from 0 to 7 [ 61.816782][ T6140] Dev loop2: unable to read RDB block 7 [ 61.816823][ T6140] loop2: AHDI p1 p2 p3 [ 61.816845][ T6140] loop2: partition table partially beyond EOD, truncated [ 61.816935][ T6140] loop2: p3 start 335544320 is beyond EOD, truncated [ 62.154689][ T6152] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 62.278308][ T6152] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 62.607716][ T6187] binder_user_error: 4 callbacks suppressed [ 62.607749][ T6187] binder: 6186:6187 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 62.608028][ T6187] binder: 6186:6187 ioctl c0306201 20000480 returned -22 [ 64.447059][ T6093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 64.485169][ T4817] binder_debug: 7 callbacks suppressed [ 64.485207][ T4817] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.490101][ T24] cfg80211: failed to load regulatory.db [ 64.494620][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.494672][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.569521][ T6223] binder: BINDER_SET_CONTEXT_MGR already set [ 64.571076][ T6223] binder: 6219:6223 ioctl 4018620d 20004a80 returned -16 [ 64.573595][ T6223] binder: 6219:6223 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 64.575198][ T6223] binder: 6219:6223 ioctl c0306201 20000480 returned -22 [ 64.725573][ T6236] netlink: 60 bytes leftover after parsing attributes in process `syz.4.390'. [ 64.885480][ T6235] netlink: 48 bytes leftover after parsing attributes in process `syz.2.387'. [ 64.909962][ T6240] trusted_key: encrypted_key: insufficient parameters specified [ 65.576118][ T6260] netlink: 'syz.2.399': attribute type 1 has an invalid length. [ 65.576240][ T6263] netlink: 'syz.2.399': attribute type 1 has an invalid length. [ 65.584929][ T6259] loop2: detected capacity change from 0 to 1024 [ 65.589833][ T6259] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 65.589833][ T6259] [ 65.592347][ T6259] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 65.729391][ T6269] overlayfs: missing 'lowerdir' [ 66.744937][ T6276] ublk_ctrl_add_dev: dev id not match 4294967295 5 [ 66.944159][ T6295] binder: 6293:6295 tried to acquire reference to desc 0, got 1 instead [ 66.946368][ T6295] binder: 6293:6295 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 66.954277][ T6295] binder: 6295 RLIMIT_NICE not set [ 66.955319][ T6295] binder: 6295 RLIMIT_NICE not set [ 66.960424][ T6295] binder: release 6293:6295 transaction 90 in, still active [ 66.961915][ T6295] binder: send failed reply for transaction 90 to 6293:6295 [ 66.964514][ T4795] binder: release 6293:6295 transaction 91 out, still active [ 66.964540][ T4795] binder: undelivered TRANSACTION_COMPLETE [ 66.964563][ T4795] binder: undelivered TRANSACTION_ERROR: 29189 [ 66.964578][ T4795] binder: undelivered TRANSACTION_COMPLETE [ 66.985371][ T6300] netlink: 'syz.5.415': attribute type 1 has an invalid length. [ 66.986323][ T4817] binder: send failed reply for transaction 91, target dead [ 67.029219][ T6300] bond1: entered promiscuous mode [ 67.029364][ T6300] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.385879][ T30] audit: type=1326 audit(67.370:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6319 comm="syz.4.421" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf781a8 code=0x0 [ 67.674786][ T6326] ublk_ctrl_add_dev: dev id not match 4294967295 5 [ 67.819284][ T6328] loop2: detected capacity change from 0 to 8 [ 68.281527][ T6346] binder: 6344:6346 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 68.282573][ T6346] binder: 6344:6346 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 68.282585][ T6346] binder: 6344:6346 ioctl c0306201 20000480 returned -22 [ 68.416488][ T6349] binder: 6348:6349 tried to acquire reference to desc 0, got 1 instead [ 68.419986][ T6349] binder: 6348:6349 got transaction with invalid offset (64, min 48 max 104) or object. [ 68.420095][ T6349] binder: 6348:6349 transaction call to 6348:0 failed 98/29201/-22, code 0 size 104-24 line 3524 [ 68.420132][ T6349] binder: 6348:6349 ioctl c0306201 20000180 returned -14 [ 68.425407][ T4796] binder: undelivered TRANSACTION_ERROR: 29201 [ 68.761779][ T6376] binder: 6375:6376 tried to acquire reference to desc 0, got 1 instead [ 68.764077][ T6376] binder: 6375:6376 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 68.764117][ T6376] binder: 6376 RLIMIT_NICE not set [ 68.764130][ T6376] binder: 6376 RLIMIT_NICE not set [ 68.784298][ T6381] loop2: detected capacity change from 0 to 128 [ 68.793755][ T6380] binder: 6379:6380 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 68.797246][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 68.797924][ T6380] binder: 6379:6380 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 68.797940][ T6380] binder: 6379:6380 ioctl c0306201 20000480 returned -22 [ 68.802432][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 68.817095][ T4710] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 68.817218][ T4710] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 68.852552][ T6388] netlink: 'syz.4.448': attribute type 10 has an invalid length. [ 68.854355][ T6388] syz_tun: entered promiscuous mode [ 68.858599][ T6388] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 68.938009][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.452'. [ 69.123504][ T6405] loop4: detected capacity change from 0 to 8 [ 69.388038][ T4853] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.467946][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.470370][ T4718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.472278][ T4718] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.474422][ T4718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.476145][ T4718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.539537][ T4853] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.662378][ T4853] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.823048][ T4853] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.896225][ T30] audit: type=1326 audit(69.880:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6445 comm="syz.0.468" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb781a8 code=0x0 [ 69.973197][ T6457] syzkaller0: entered promiscuous mode [ 69.973235][ T6457] syzkaller0: entered allmulticast mode [ 70.020405][ T6457] loop1: detected capacity change from 0 to 512 [ 70.024695][ T6457] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.033052][ T6457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 70.033109][ T6457] System zones: 1-12 [ 70.034342][ T6457] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 207 vs 220 free clusters [ 70.035101][ T6457] EXT4-fs (loop1): 1 truncate cleaned up [ 70.035557][ T6457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.052704][ T4853] bridge_slave_1: left allmulticast mode [ 70.052739][ T4853] bridge_slave_1: left promiscuous mode [ 70.052827][ T4853] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.055101][ T4853] bridge_slave_0: left allmulticast mode [ 70.055114][ T4853] bridge_slave_0: left promiscuous mode [ 70.055226][ T4853] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.214963][ T4853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.245230][ T4853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.279391][ T4853] bond0 (unregistering): Released all slaves [ 70.287052][ T4399] 8021q: adding VLAN 0 to HW filter on device eth4 [ 70.584033][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.691963][ T6497] loop4: detected capacity change from 0 to 512 [ 70.696010][ T6497] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.478: iget: bad i_size value: 38620345925642 [ 70.696047][ T6497] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.698369][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 70.698385][ C0] EXT4-fs (loop4): initial error at time 70: ext4_orphan_get:1399: inode 15 [ 70.698402][ C0] EXT4-fs (loop4): last error at time 70: ext4_orphan_get:1399: inode 15 [ 70.704427][ T6497] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.478: couldn't read orphan inode 15 (err -117) [ 70.704466][ T6497] loop4: lost filesystem error report for type 5 error -117 [ 70.707206][ T6497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.823379][ T6505] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.478: bg 0: block 5: invalid block bitmap [ 70.827607][ T6505] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 70.831693][ T6505] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.831693][ T6505] [ 70.831739][ T6505] EXT4-fs (loop4): Total free blocks count 0 [ 70.831755][ T6505] EXT4-fs (loop4): Free/Dirty block details [ 70.831773][ T6505] EXT4-fs (loop4): free_blocks=0 [ 70.831789][ T6505] EXT4-fs (loop4): dirty_blocks=4172 [ 70.831801][ T6505] EXT4-fs (loop4): Block reservation details [ 70.831812][ T6505] EXT4-fs (loop4): i_reserved_data_blocks=4172 [ 70.850388][ T4399] 8021q: adding VLAN 0 to HW filter on device eth5 [ 70.851966][ T6414] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.852044][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.852124][ T6414] bridge_slave_0: entered allmulticast mode [ 70.852588][ T6414] bridge_slave_0: entered promiscuous mode [ 70.853335][ T6414] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.853364][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.853435][ T6414] bridge_slave_1: entered allmulticast mode [ 70.863356][ T6414] bridge_slave_1: entered promiscuous mode [ 71.088535][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28 [ 71.121665][ T4708] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 71.176846][ T4853] hsr_slave_0: left promiscuous mode [ 71.178522][ T4853] hsr_slave_1: left promiscuous mode [ 71.178787][ T4853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.178813][ T4853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.183101][ T4853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.183122][ T4853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.192627][ T4853] veth1_macvtap: left promiscuous mode [ 71.193909][ T4853] veth0_macvtap: left promiscuous mode [ 71.195098][ T4853] veth1_vlan: left promiscuous mode [ 71.196134][ T4853] veth0_vlan: left promiscuous mode [ 71.268636][ T6536] netlink: 112 bytes leftover after parsing attributes in process `syz.0.487'. [ 71.276943][ T6538] loop4: detected capacity change from 0 to 512 [ 71.277823][ T6538] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.281561][ T6538] EXT4-fs (loop4): 1 truncate cleaned up [ 71.282200][ T6538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.392663][ T4853] team0 (unregistering): Port device team_slave_1 removed [ 71.403332][ T4853] team0 (unregistering): Port device team_slave_0 removed [ 71.470388][ T6414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.471956][ T6414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.514182][ T6414] team0: Port device team_slave_0 added [ 71.521378][ T6414] team0: Port device team_slave_1 added [ 71.530649][ T50] Bluetooth: hci2: command tx timeout [ 71.535900][ T6414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.537578][ T6414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.542725][ T6414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.545790][ T6414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.547354][ T6414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.553288][ T6414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.623582][ T6414] hsr_slave_0: entered promiscuous mode [ 71.624663][ T6414] hsr_slave_1: entered promiscuous mode [ 71.625656][ T6414] debugfs: 'hsr0' already exists in 'hsr' [ 71.625672][ T6414] Cannot create hsr debugfs directory [ 71.798954][ T6566] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 71.851557][ T6566] loop0: detected capacity change from 0 to 512 [ 71.882093][ T6566] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.882123][ T6566] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 71.999092][ T6564] binder: BINDER_SET_CONTEXT_MGR already set [ 71.999121][ T6564] binder: 6563:6564 ioctl 4018620d 20004a80 returned -16 [ 71.999360][ T6564] binder_debug: 7 callbacks suppressed [ 71.999367][ T6564] binder: 6563:6564 cannot find target node [ 71.999381][ T6564] binder: 6563:6564 transaction call to 0:0 failed 111/29201/-22, code 0 size 0-0 line 3252 [ 72.013143][ T4399] 8021q: adding VLAN 0 to HW filter on device eth6 [ 72.056141][ T6414] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 72.059194][ T6414] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.064223][ T6414] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 72.065885][ T6569] binder: 6563:6569 cannot find target node [ 72.067211][ T6569] binder: 6563:6569 transaction call to 0:0 failed 112/29201/-22, code 33554432 size 0-0 line 3252 [ 72.071232][ T6414] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.073283][ T6414] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 72.078389][ T6414] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.080341][ T6414] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 72.082999][ T6414] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.113155][ T6414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.121004][ T6414] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.125087][ T4853] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.125150][ T4853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.131332][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.131397][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.138790][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.177568][ T6414] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.177610][ T6414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.258526][ T6587] loop4: detected capacity change from 0 to 512 [ 72.259785][ T6587] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.280683][ T6587] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 72.280753][ T6587] System zones: 1-12 [ 72.281258][ T6587] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 207 vs 220 free clusters [ 72.281582][ T6587] EXT4-fs (loop4): 1 truncate cleaned up [ 72.282040][ T6587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.306192][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.307704][ T4399] 8021q: adding VLAN 0 to HW filter on device eth7 [ 72.381927][ T6414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.429732][ T6622] 9p: Bad value for 'wfdno' [ 72.430909][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.499'. [ 72.435717][ T6622] macvlan2: entered promiscuous mode [ 72.435937][ T6622] macvlan2: entered allmulticast mode [ 72.567358][ T6628] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 72.722342][ T1001] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.722381][ T1001] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.725725][ T6632] netlink: 428 bytes leftover after parsing attributes in process `syz.0.501'. [ 72.725745][ T6632] netlink: 32 bytes leftover after parsing attributes in process `syz.0.501'. [ 72.750862][ T6636] loop1: detected capacity change from 0 to 256 [ 72.858207][ T6641] bond2: option lacp_rate: invalid value (128) [ 72.862617][ T6641] bond2 (unregistering): Released all slaves [ 73.099963][ T6655] loop1: detected capacity change from 0 to 512 [ 73.103084][ T6655] ext2: Unexpected value for 'sysvgroups' [ 73.467990][ T6414] veth0_vlan: entered promiscuous mode [ 73.471044][ T6414] veth1_vlan: entered promiscuous mode [ 73.544473][ T6414] veth0_macvtap: entered promiscuous mode [ 73.562147][ T6680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.517'. [ 73.566168][ T6414] veth1_macvtap: entered promiscuous mode [ 73.609087][ T50] Bluetooth: hci2: command tx timeout [ 73.826722][ T6414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.829298][ T6414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.838625][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.838675][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.838693][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.838709][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.877534][ T4853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.877628][ T4853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.909314][ T4853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.909353][ T4853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.004093][ T6697] binder_user_error: 4 callbacks suppressed [ 74.004237][ T6697] binder: 6696:6697 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 74.005070][ T6697] binder: 6696:6697 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 74.005080][ T6697] binder: 6696:6697 ioctl c0306201 20000480 returned -22 [ 74.020310][ T6699] netlink: 428 bytes leftover after parsing attributes in process `syz.0.522'. [ 74.020348][ T6699] netlink: 32 bytes leftover after parsing attributes in process `syz.0.522'. [ 74.031655][ T4817] kernel read not supported for file bpf-prog (pid: 4817 comm: kworker/0:6) [ 74.181831][ T6717] loop0: detected capacity change from 0 to 512 [ 74.184987][ T6717] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.189407][ T6717] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 74.191050][ T6717] System zones: 1-12 [ 74.192329][ T6717] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 207 vs 220 free clusters [ 74.195635][ T6717] EXT4-fs (loop0): 1 truncate cleaned up [ 74.197362][ T6717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.207749][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.556472][ T6729] binder: 6728:6729 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 74.598628][ T6733] loop4: detected capacity change from 0 to 512 [ 74.604456][ T6733] EXT4-fs (loop4): Invalid default hash set in the superblock [ 74.799819][ T6749] 0: reclassify loop, rule prio 0, protocol 03 [ 75.329112][ T6765] binder: 6764:6765 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 75.332678][ T6767] binder: 6766:6767 tried to acquire reference to desc 0, got 1 instead [ 75.332985][ T6767] binder: 6766:6767 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 75.332997][ T6767] binder: 6767 RLIMIT_NICE not set [ 75.333007][ T6767] binder: 6767 RLIMIT_NICE not set [ 75.333094][ T6767] binder: release 6766:6767 transaction 120 in, still active [ 75.333103][ T6767] binder: send failed reply for transaction 120 to 6766:6767 [ 75.333432][ T4795] binder: release 6766:6767 transaction 121 out, still active [ 75.333442][ T4795] binder: undelivered TRANSACTION_COMPLETE [ 75.369422][ T1001] kernel read not supported for file bpf-prog (pid: 1001 comm: kworker/0:2) [ 75.417306][ T6776] netlink: 'syz.4.550': attribute type 7 has an invalid length. [ 75.417932][ T6773] netlink: 'syz.4.550': attribute type 7 has an invalid length. [ 75.721148][ T50] Bluetooth: hci2: command tx timeout [ 75.744945][ T6794] binder: 6793:6794 tried to acquire reference to desc 0, got 1 instead [ 75.745266][ T6794] binder: 6793:6794 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 76.359406][ T6803] syzkaller0: entered promiscuous mode [ 76.359445][ T6803] syzkaller0: entered allmulticast mode [ 76.361898][ T6803] 9p: Bad value for 'wfdno' [ 76.504811][ T6804] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 76.699645][ T6810] loop1: detected capacity change from 0 to 256 [ 76.733554][ T6810] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 76.735502][ T6810] FAT-fs (loop1): Filesystem has been set read-only [ 76.736965][ T6810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 77.112325][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.6.568'. [ 77.129827][ T6826] netlink: 128 bytes leftover after parsing attributes in process `syz.6.568'. [ 77.155408][ T6830] binder_debug: 10 callbacks suppressed [ 77.155441][ T6830] binder: release 6829:6830 transaction 134 in, still active [ 77.158600][ T6830] binder: send failed reply for transaction 134 to 6829:6830 [ 77.159207][ T1001] binder: release 6829:6830 transaction 135 out, still active [ 77.159239][ T1001] binder: undelivered TRANSACTION_COMPLETE [ 77.159251][ T1001] binder: undelivered TRANSACTION_ERROR: 29189 [ 77.159259][ T1001] binder: undelivered TRANSACTION_COMPLETE [ 77.164598][ T1001] binder: send failed reply for transaction 135, target dead [ 77.649985][ T6837] loop4: detected capacity change from 0 to 128 [ 77.673166][ T6837] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.769344][ T50] Bluetooth: hci2: command tx timeout [ 78.079454][ T6855] Bluetooth: MGMT ver 1.23 [ 78.097819][ T6858] syzkaller0: entered promiscuous mode [ 78.097866][ T6858] syzkaller0: entered allmulticast mode [ 78.106152][ T6858] 9p: Bad value for 'wfdno' [ 78.112952][ T6861] xt_cluster: you have exceeded the maximum number of cluster nodes (128 > 32) [ 78.116110][ T30] audit: type=1326 audit(78.100:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6860 comm="syz.6.579" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff965781a8 code=0x0 [ 78.244623][ T6870] 9p: Bad value for 'rfdno' [ 78.852879][ T4708] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.892765][ T6881] loop5: detected capacity change from 0 to 1024 [ 78.895555][ T6881] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.912124][ T6881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.943476][ T6886] overlayfs: upper fs does not support tmpfile. [ 78.950345][ T5404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.973795][ T6891] syz.5.587 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.117076][ T6910] binder_user_error: 7 callbacks suppressed [ 79.117357][ T6910] binder: 6909:6910 tried to acquire reference to desc 0, got 1 instead [ 79.121341][ T6910] binder: 6909:6910 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 79.121379][ T6910] binder: 6910 RLIMIT_NICE not set [ 79.121398][ T6910] binder: 6910 RLIMIT_NICE not set [ 79.121510][ T6910] binder: release 6909:6910 transaction 140 in, still active [ 79.121526][ T6910] binder: send failed reply for transaction 140 to 6909:6910 [ 79.127015][ T4824] binder: send failed reply for transaction 141 to 6909:6910 [ 79.127026][ T4824] binder: Unexpected reply error: 29189 [ 79.208312][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 79.219049][ T6917] binder: 6914:6917 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 79.235561][ T6915] binder: 6914:6915 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 79.235594][ T6915] binder: 6915 RLIMIT_NICE not set [ 79.313344][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a57ff808: rx timeout, send abort [ 79.512843][ T6911] loop0: detected capacity change from 0 to 512 [ 79.517950][ T6911] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.524497][ T6911] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 79.524549][ T6911] System zones: 1-12 [ 79.540117][ T6911] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 207 vs 220 free clusters [ 79.541912][ T6911] EXT4-fs (loop0): 1 truncate cleaned up [ 79.542364][ T6911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.565800][ T6928] loop6: detected capacity change from 0 to 512 [ 79.572471][ T6928] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 79.575712][ T6928] EXT4-fs (loop6): 1 truncate cleaned up [ 79.576214][ T6928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.595264][ T6931] loop5: detected capacity change from 0 to 512 [ 79.595930][ T6931] EXT4-fs: inline encryption not supported [ 79.596224][ T6931] EXT4-fs (loop5): Test dummy encryption mode enabled [ 79.596240][ T6931] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 79.719959][ T6414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.814139][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a57ff808: abort rx timeout. Force session deactivation [ 79.817108][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c39d688f: rx timeout, send abort [ 79.957124][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.958428][ T6948] netlink: 'syz.6.605': attribute type 7 has an invalid length. [ 79.958442][ T6948] netlink: 'syz.6.605': attribute type 8 has an invalid length. [ 80.317148][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c39d688f: abort rx timeout. Force session deactivation [ 80.344633][ T6966] loop6: detected capacity change from 0 to 256 [ 80.345042][ T6966] vfat: Bad value for 'check' [ 80.629974][ T6977] netlink: 56 bytes leftover after parsing attributes in process `syz.5.613'. [ 80.796440][ T6983] loop6: detected capacity change from 0 to 512 [ 80.805083][ T6983] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 80.814267][ T6983] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 80.814339][ T6983] System zones: 1-12 [ 80.828160][ T6983] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 207 vs 220 free clusters [ 80.831604][ T6983] EXT4-fs (loop6): 1 truncate cleaned up [ 80.835308][ T6983] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.939814][ T6414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.210276][ T7001] erspan0: entered promiscuous mode [ 81.345000][ T7012] 0: reclassify loop, rule prio 0, protocol 03 [ 81.552195][ T7015] loop9: detected capacity change from 0 to 7 [ 81.688451][ T7015] Dev loop9: unable to read RDB block 7 [ 81.688525][ T7015] loop9: unable to read partition table [ 81.688623][ T7015] loop9: partition table beyond EOD, truncated [ 81.688670][ T7015] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 82.281914][ T7036] netlink: 'syz.0.634': attribute type 5 has an invalid length. [ 82.284466][ T7032] loop5: detected capacity change from 0 to 2048 [ 82.390920][ T7040] netlink: 'syz.6.633': attribute type 1 has an invalid length. [ 82.395237][ T7032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 82.705867][ T7032] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 82.718880][ T7032] EXT4-fs (loop5): Remounting filesystem read-only [ 82.858483][ T7057] netlink: 'syz.1.639': attribute type 1 has an invalid length. [ 82.883812][ T7057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.909371][ T7057] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96 [ 82.986158][ T7066] bond2: (slave geneve2): making interface the new active one [ 82.990232][ T7066] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 83.296796][ T7082] netlink: 40 bytes leftover after parsing attributes in process `syz.4.642'. [ 83.365185][ T5404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 83.632829][ T7055] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.632867][ T7055] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 83.663837][ T7055] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.665628][ T7055] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 83.763232][ T7055] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 83.763274][ T7055] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 84.065502][ T7055] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 84.065538][ T7055] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 84.392808][ T7055] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 84.394195][ T7055] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 84.869642][ T7162] syz_tun: refused to change device tx_queue_len [ 84.872160][ T7162] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 84.880279][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 84.885178][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 84.887982][ T7162] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 84.895561][ T7162] syz_tun: refused to change device tx_queue_len [ 84.896986][ T7162] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 85.791594][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 85.922516][ T7226] loop5: detected capacity change from 0 to 128 [ 86.075892][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.670'. [ 86.416101][ T7238] netlink: 36 bytes leftover after parsing attributes in process `syz.5.672'. [ 86.418163][ T7238] netlink: 16 bytes leftover after parsing attributes in process `syz.5.672'. [ 86.420263][ T7238] netlink: 36 bytes leftover after parsing attributes in process `syz.5.672'. [ 86.577044][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.674'. [ 86.665462][ T7253] loop4: detected capacity change from 0 to 256 [ 86.770027][ T7258] binder: BINDER_SET_CONTEXT_MGR already set [ 86.770148][ T7258] binder: 7256:7258 ioctl 4018620d 20004a80 returned -16 [ 86.770949][ T7258] binder: 7256:7258 got transaction to invalid handle, 1 [ 86.770961][ T7258] binder_debug: 3 callbacks suppressed [ 86.770968][ T7258] binder: 7256:7258 cannot find target node [ 86.770982][ T7258] binder: 7256:7258 transaction call to 0:0 failed 144/29201/-22, code 0 size 0-0 line 3252 [ 86.771348][ T7258] binder: 7256:7258 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 86.771363][ T7258] binder: 7258 RLIMIT_NICE not set [ 86.826400][ T7265] binder: 7256:7265 got transaction to invalid handle, 1 [ 86.826535][ T7265] binder: 7256:7265 cannot find target node [ 86.826549][ T7265] binder: 7256:7265 transaction call to 0:0 failed 145/29201/-22, code 0 size 0-0 line 3252 [ 87.014241][ T7280] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 87.266804][ T7290] loop1: detected capacity change from 0 to 256 [ 87.302244][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.686'. [ 87.355794][ T7290] syz.1.684: attempt to access beyond end of device [ 87.355794][ T7290] loop1: rw=2049, sector=1768, nr_sectors = 32 limit=256 [ 87.356687][ T7290] syz.1.684: attempt to access beyond end of device [ 87.356687][ T7290] loop1: rw=2049, sector=1832, nr_sectors = 32 limit=256 [ 87.356740][ T7290] syz.1.684: attempt to access beyond end of device [ 87.356740][ T7290] loop1: rw=2049, sector=1896, nr_sectors = 32 limit=256 [ 87.356808][ T7290] syz.1.684: attempt to access beyond end of device [ 87.356808][ T7290] loop1: rw=2049, sector=1960, nr_sectors = 40 limit=256 [ 87.560646][ T4309] binder: undelivered TRANSACTION_ERROR: 29201 [ 87.560691][ T4309] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.005938][ T4824] kernel write not supported for file bpf-prog (pid: 4824 comm: kworker/1:5) [ 89.060729][ T7349] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 89.090862][ T7349] loop5: detected capacity change from 0 to 512 [ 89.092140][ T7349] EXT4-fs: inline encryption not supported [ 89.094390][ T7349] EXT4-fs (loop5): Test dummy encryption mode enabled [ 89.094403][ T7349] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 89.173517][ T7358] loop1: detected capacity change from 0 to 8192 [ 89.443551][ T7366] ublk_ctrl_add_dev: dev id not match 4294967295 5 [ 89.599041][ T7363] netlink: 'syz.5.699': attribute type 2 has an invalid length. [ 89.600806][ T7363] netlink: 'syz.5.699': attribute type 11 has an invalid length. [ 89.602454][ T7363] netlink: 132 bytes leftover after parsing attributes in process `syz.5.699'. [ 89.618379][ T7358] loop1: AHDI p1 p2 p3 p4 [ 89.619416][ T7358] loop1: p1 size 67109119 extends beyond EOD, truncated [ 89.625920][ T7358] loop1: p3 start 1671679 is beyond EOD, truncated [ 89.627461][ T7358] loop1: p4 start 16383999 is beyond EOD, truncated [ 89.885064][ T7394] loop4: detected capacity change from 0 to 512 [ 90.143439][ T7394] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.705: inode has both inline data and extents flags [ 90.143489][ T7394] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 90.146526][ T7394] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.705: couldn't read orphan inode 15 (err -117) [ 90.146562][ T7394] loop4: lost filesystem error report for type 5 error -117 [ 90.148455][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 90.148469][ C1] EXT4-fs (loop4): initial error at time 90: ext4_orphan_get:1399: inode 15 [ 90.148484][ C1] EXT4-fs (loop4): last error at time 90: ext4_orphan_get:1404 [ 90.149330][ T7394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.180228][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 90.183230][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 90.229034][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.385066][ T7424] binder: 7422:7424 tried to acquire reference to desc 0, got 1 instead [ 90.389679][ T7424] binder: 7422:7424 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 90.389713][ T7424] binder: 7424 RLIMIT_NICE not set [ 90.389765][ T7424] binder: 7424 RLIMIT_NICE not set [ 90.393520][ T7424] binder: release 7422:7424 transaction 150 in, still active [ 90.393535][ T7424] binder: send failed reply for transaction 150 to 7422:7424 [ 90.416016][ T1001] binder: send failed reply for transaction 151 to 7422:7424 [ 90.416141][ T1001] binder: Unexpected reply error: 29189 [ 90.416196][ T1001] binder: undelivered TRANSACTION_COMPLETE [ 90.443273][ T7431] loop4: detected capacity change from 0 to 512 [ 90.472410][ T7431] EXT4-fs error (device loop4): ext4_get_journal_inode:5900: comm syz.4.709: inode #2147418112: comm syz.4.709: iget: illegal inode # [ 90.481230][ T7431] loop4: lost filesystem error report for type 5 error -117 [ 90.481418][ T7431] EXT4-fs (loop4): no journal found [ 90.481435][ T7431] EXT4-fs (loop4): can't get journal size [ 90.485271][ T7431] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 90.488254][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 90.488278][ C1] EXT4-fs (loop4): initial error at time 90: ext4_get_journal_inode:5900 [ 90.488306][ C1] EXT4-fs (loop4): last error at time 90: ext4_get_journal_inode:5900 [ 90.496855][ T7431] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 90.501197][ T7431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.514342][ T7431] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.709: inode has both inline data and extents flags [ 90.527224][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 90.544339][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 91.273315][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.311470][ T7491] Injecting memory failure for pfn 0x134603 at process virtual address 0x20003000 [ 91.336206][ T7491] Memory failure: 0x134603: recovery action for dirty LRU page: Recovered [ 91.731031][ T7503] loop1: detected capacity change from 0 to 1024 [ 91.733254][ T7503] EXT4-fs: Ignoring removed bh option [ 91.756864][ T7503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.769112][ T7503] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.717: corrupted in-inode xattr: overlapping e_value [ 91.772971][ T7503] EXT4-fs (loop1): Remounting filesystem read-only [ 91.803916][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.868603][ T7513] binder: BINDER_SET_CONTEXT_MGR already set [ 91.868732][ T7513] binder: 7510:7513 ioctl 4018620d 20004a80 returned -16 [ 91.869577][ T7513] binder: 7510:7513 got transaction to invalid handle, 1 [ 91.869589][ T7513] binder_debug: 2 callbacks suppressed [ 91.869595][ T7513] binder: 7510:7513 cannot find target node [ 91.869609][ T7513] binder: 7510:7513 transaction call to 0:0 failed 154/29201/-22, code 0 size 0-0 line 3252 [ 91.869986][ T7513] binder: 7510:7513 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 91.870000][ T7513] binder: 7513 RLIMIT_NICE not set [ 91.944175][ T7519] binder: 7510:7519 got transaction to invalid handle, 1 [ 91.944211][ T7519] binder: 7510:7519 cannot find target node [ 91.944242][ T7519] binder: 7510:7519 transaction call to 0:0 failed 155/29201/-22, code 0 size 0-0 line 3252 [ 92.255050][ T7527] loop4: detected capacity change from 0 to 8 [ 92.262759][ T7527] Page size > filesystem block size (512). This is currently not supported! [ 92.464728][ T7531] loop0: detected capacity change from 0 to 8 [ 92.888420][ T4309] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.890122][ T4309] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.998253][ T7550] loop1: detected capacity change from 0 to 128 [ 93.099035][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.732'. [ 93.106660][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 93.187747][ T7556] vlan2: entered allmulticast mode [ 93.189479][ T7556] bridge1: entered allmulticast mode [ 93.193537][ T7556] bridge1: port 1(erspan0) entered blocking state [ 93.195202][ T7556] bridge1: port 1(erspan0) entered disabled state [ 93.197806][ T7556] erspan0: entered allmulticast mode [ 93.200299][ T7556] erspan0: entered promiscuous mode [ 93.202031][ T7556] bridge1: port 1(erspan0) entered blocking state [ 93.202073][ T7556] bridge1: port 1(erspan0) entered forwarding state [ 94.284524][ T7583] Set syz1 is full, maxelem 256 reached [ 94.285887][ T7584] Set syz1 is full, maxelem 256 reached [ 94.341733][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.357774][ T4817] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.433468][ T7597] xt_SECMARK: invalid mode: 2 [ 94.433785][ T7597] syzkaller1: entered promiscuous mode [ 94.433813][ T7597] syzkaller1: entered allmulticast mode [ 94.505802][ T7603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.748'. [ 94.505931][ T7603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.748'. [ 94.508774][ T7603] loop1: detected capacity change from 0 to 128 [ 94.519117][ T7605] netlink: 52 bytes leftover after parsing attributes in process `syz.4.750'. [ 94.535237][ T7603] EXT4-fs (loop1): Test dummy encryption mode enabled [ 94.587745][ T7603] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.601115][ T7603] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 94.626217][ T7603] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 94.638514][ T7612] netlink: 28 bytes leftover after parsing attributes in process `syz.5.752'. [ 94.644177][ T7612] netlink: 'syz.5.752': attribute type 6 has an invalid length. [ 94.707073][ T7619] binder: 7618:7619 tried to acquire reference to desc 0, got 1 instead [ 94.710189][ T7619] binder: 7618:7619 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 94.712683][ T7619] binder: 7619 RLIMIT_NICE not set [ 94.713800][ T7619] binder: 7619 RLIMIT_NICE not set [ 94.715067][ T7619] binder: release 7618:7619 transaction 160 in, still active [ 94.716717][ T7619] binder: send failed reply for transaction 160 to 7618:7619 [ 94.735119][ T1001] binder: send failed reply for transaction 161 to 7618:7619 [ 94.735249][ T1001] binder: Unexpected reply error: 29189 [ 94.735296][ T1001] binder: undelivered TRANSACTION_COMPLETE [ 94.739484][ T4709] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.094940][ T7631] loop4: detected capacity change from 0 to 128 [ 95.118406][ T7631] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 95.265126][ T7640] fuse: Bad value for 'fd' [ 95.267636][ T7641] netlink: 16 bytes leftover after parsing attributes in process `syz.5.761'. [ 95.407918][ T7649] netlink: 40 bytes leftover after parsing attributes in process `syz.5.763'. [ 95.433171][ T7649] loop5: detected capacity change from 0 to 4096 [ 95.447115][ T7649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.474643][ T7649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.477988][ T4708] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.507160][ T7649] EXT4-fs (loop5): shut down requested (2) [ 95.685352][ T7667] loop4: detected capacity change from 0 to 512 [ 95.700454][ T7667] EXT4-fs: inline encryption not supported [ 95.700517][ T7667] EXT4-fs: Ignoring removed i_version option [ 95.720195][ T7667] EXT4-fs (loop4): 1 orphan inode deleted [ 95.727536][ T7667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.801866][ T7678] loop6: detected capacity change from 0 to 512 [ 95.803486][ T7678] EXT4-fs: Ignoring removed nobh option [ 95.811761][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.824524][ T7678] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 95.827486][ T5404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.835280][ T7678] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 95.854198][ T7678] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec119, mo2=0002] [ 95.854473][ T7678] System zones: 1-12 [ 95.854576][ T7678] EXT4-fs (loop6): orphan cleanup on readonly fs [ 95.854704][ T7678] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.771: Block bitmap for bg 0 marked uninitialized [ 95.854717][ T7678] loop6: lost filesystem error report for type 5 error -117 [ 95.858167][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 95.858181][ C0] EXT4-fs (loop6): initial error at time 95: ext4_read_block_bitmap_nowait:517 [ 95.858194][ C0] EXT4-fs (loop6): last error at time 95: ext4_read_block_bitmap_nowait:517 [ 95.876022][ T7678] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.771: Block bitmap for bg 0 marked uninitialized [ 95.876200][ T7678] loop6: lost filesystem error report for type 5 error -117 [ 95.887167][ T7678] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.771: Block bitmap for bg 0 marked uninitialized [ 95.887241][ T7678] loop6: lost filesystem error report for type 5 error -117 [ 95.891760][ T7678] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.771: Block bitmap for bg 0 marked uninitialized [ 95.891794][ T7678] loop6: lost filesystem error report for type 5 error -117 [ 95.896131][ T7678] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.771: Block bitmap for bg 0 marked uninitialized [ 95.896157][ T7678] loop6: lost filesystem error report for type 5 error -117 [ 95.905953][ T7683] loop0: detected capacity change from 0 to 512 [ 95.909261][ T7678] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.771: Block bitmap for bg 0 marked uninitialized [ 95.909279][ T7678] loop6: lost filesystem error report for type 5 error -117 [ 95.917471][ T7678] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 95.921887][ T7678] EXT4-fs (loop6): 1 truncate cleaned up [ 95.922377][ T7678] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.930540][ T7683] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 95.941014][ T7689] binder: BINDER_SET_CONTEXT_MGR already set [ 95.941038][ T7689] binder: 7688:7689 ioctl 4018620d 20004a80 returned -16 [ 95.953590][ T7689] binder: 7688:7689 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 95.953622][ T7689] binder: 7688:7689 ioctl c0306201 20000480 returned -22 [ 96.010731][ T6414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.106807][ T7699] netlink: 'syz.0.778': attribute type 1 has an invalid length. [ 96.255676][ T7708] loop5: detected capacity change from 0 to 2048 [ 96.298119][ T7708] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.325399][ T7708] EXT4-fs error (device loop5): __ext4_iget:5533: inode #2: block 127754: comm syz.5.785: invalid block [ 96.325586][ T7708] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 96.326555][ T7708] EXT4-fs (loop5): get root inode failed [ 96.326566][ T7708] EXT4-fs (loop5): mount failed [ 96.328108][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 96.328122][ C0] EXT4-fs (loop5): initial error at time 96: __ext4_iget:5533: inode 2: block 127754 [ 96.328142][ C0] EXT4-fs (loop5): last error at time 96: __ext4_iget:5533: inode 2: block 127754 [ 96.430634][ T11] kernel read not supported for file bpf-prog (pid: 11 comm: kworker/0:1) [ 96.439805][ T7720] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 96.590967][ T7723] loop5: detected capacity change from 0 to 512 [ 96.593509][ T7723] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 96.793591][ T7733] binder: BINDER_SET_CONTEXT_MGR already set [ 96.794897][ T7733] binder: 7732:7733 ioctl 4018620d 20004a80 returned -16 [ 96.797716][ T7733] binder: 7732:7733 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 96.797739][ T7733] binder: 7732:7733 ioctl c0306201 20000480 returned -22 [ 96.866046][ T7737] binder_alloc: 7736: binder_alloc_buf size 64768 failed, no address space [ 96.866118][ T7737] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 97.181571][ T11] kernel read not supported for file bpf-prog (pid: 11 comm: kworker/0:1) [ 97.205483][ T7754] loop1: detected capacity change from 0 to 512 [ 97.207916][ T7756] loop6: detected capacity change from 0 to 256 [ 97.216770][ T7754] ext4: Bad value for 'mb_optimize_scan' [ 97.228368][ T7758] binder: 7757:7758 ioctl c0306201 0 returned -14 [ 97.235460][ T7758] binder_user_error: 4 callbacks suppressed [ 97.235506][ T7758] binder: 7757:7758 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 97.238561][ T7758] binder: 7757:7758 ioctl c0306201 20000480 returned -22 [ 97.281670][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.804'. [ 97.288175][ T7470] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.288994][ T7470] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.290199][ T7470] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.290435][ T7470] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.295849][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.804'. [ 97.437195][ T7770] binder: 7769:7770 tried to acquire reference to desc 0, got 1 instead [ 97.439942][ T7770] binder: 7769:7770 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 97.442828][ T7770] binder: 7770 RLIMIT_NICE not set [ 97.443957][ T7770] binder: 7770 RLIMIT_NICE not set [ 97.445264][ T7770] binder_debug: 9 callbacks suppressed [ 97.445283][ T7770] binder: release 7769:7770 transaction 177 in, still active [ 97.447995][ T7770] binder: send failed reply for transaction 177 to 7769:7770 [ 97.449798][ T7770] binder_alloc: 7769: binder_alloc_buf size 65536 failed, no address space [ 97.452316][ T7770] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 97.454498][ T7770] binder: cannot allocate buffer: no space left [ 97.454600][ T7770] binder: 7769:7770 transaction call to 7769:0 failed 178/29201/-28, code 0 size 65532-0 line 3408 [ 97.461144][ T4824] binder: undelivered TRANSACTION_COMPLETE [ 97.461173][ T4824] binder: undelivered TRANSACTION_ERROR: 29189 [ 97.461200][ T4824] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.494519][ T7774] netlink: 10 bytes leftover after parsing attributes in process `syz.6.808'. [ 98.007913][ T7796] binder: 7795:7796 ioctl c0306201 0 returned -14 [ 98.012427][ T7796] binder: 7795:7796 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 98.014346][ T7796] binder: 7795:7796 ioctl c0306201 20000480 returned -22 [ 98.135922][ T7798] EXT4-fs: inline encryption not supported [ 98.140958][ T7798] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.140991][ T7798] EXT4-fs (loop0): Test dummy encryption mode enabled [ 98.228352][ T7798] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 98.228431][ T7798] System zones: 0-5 [ 98.232738][ T7798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.242612][ T7798] openvswitch: netlink: Actions may not be safe on all matching packets [ 98.975661][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.368174][ T4718] Bluetooth: hci5: command 0x1003 tx timeout [ 99.368377][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 100.941941][ T7811] netlink: 12 bytes leftover after parsing attributes in process `syz.6.820'. [ 100.947931][ T7811] veth2: entered allmulticast mode [ 100.981738][ T7815] binder: 7810:7815 tried to acquire reference to desc 0, got 1 instead [ 100.983718][ T7815] binder: 7810:7815 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 100.986285][ T7815] binder: 7815 RLIMIT_NICE not set [ 100.987267][ T7815] binder: 7815 RLIMIT_NICE not set [ 100.988714][ T7815] binder: release 7810:7815 transaction 186 in, still active [ 100.990022][ T7815] binder: send failed reply for transaction 186 to 7810:7815 [ 100.991508][ T7815] binder: 7810:7815 transaction call to 7810:0 failed 187/29201/-14, code 0 size 0-252 line 3447 [ 101.051827][ T7814] set_capacity_and_notify: 1 callbacks suppressed [ 101.051879][ T7814] loop0: detected capacity change from 0 to 2048 [ 101.098390][ T7814] Alternate GPT is invalid, using primary GPT. [ 101.098453][ T7814] loop0: p1 p2 p3 [ 102.205267][ T7857] binder_alloc: 7856: binder_alloc_buf size 64768 failed, no address space [ 102.205310][ T7857] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 102.312030][ T7861] overlayfs: failed to clone upperpath [ 102.327168][ T7861] overlayfs: failed to clone upperpath [ 102.381585][ T7867] binder_user_error: 5 callbacks suppressed [ 102.381623][ T7867] binder: 7866:7867 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 102.383987][ T7867] binder: 7866:7867 ioctl c0306201 20000480 returned -22 [ 102.583570][ T7881] loop4: detected capacity change from 0 to 512 [ 102.771155][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.842'. [ 102.774501][ T7881] EXT4-fs (loop4): 1 orphan inode deleted [ 102.775014][ T7881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.784993][ T7470] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 102.785053][ T7470] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:10: Failed to release dquot type 1 [ 102.792653][ T7470] EXT4-fs (loop4): Remounting filesystem read-only [ 102.796286][ T7881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.839388][ T7892] binder: 7891:7892 tried to acquire reference to desc 0, got 1 instead [ 102.841562][ T7892] binder: 7891:7892 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 102.844502][ T7892] binder: 7892 RLIMIT_NICE not set [ 102.845812][ T7892] binder: 7892 RLIMIT_NICE not set [ 102.847348][ T7892] binder_debug: 10 callbacks suppressed [ 102.847372][ T7892] binder: release 7891:7892 transaction 201 in, still active [ 102.848397][ T7892] binder: send failed reply for transaction 201 to 7891:7892 [ 102.849207][ T7892] binder_alloc: 7891: binder_alloc_buf size 65536 failed, no address space [ 102.849220][ T7892] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 102.849238][ T7892] binder: cannot allocate buffer: no space left [ 102.849257][ T7892] binder: 7891:7892 transaction call to 7891:0 failed 202/29201/-28, code 0 size 0-65532 line 3408 [ 102.850006][ T4817] binder: undelivered TRANSACTION_COMPLETE [ 102.850022][ T4817] binder: undelivered TRANSACTION_ERROR: 29189 [ 102.850032][ T4817] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.890598][ T7894] loop1: detected capacity change from 0 to 512 [ 102.894594][ T7894] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.896517][ T7894] EXT4-fs (loop1): bad geometry: first data block is 0 with a 1k block and cluster size [ 102.902992][ T7894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.850'. [ 102.904768][ T7894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.850'. [ 102.912172][ T7894] netlink: 312 bytes leftover after parsing attributes in process `syz.1.850'. [ 102.930849][ T7894] netlink: 312 bytes leftover after parsing attributes in process `syz.1.850'. [ 103.139643][ T7901] loop4: detected capacity change from 0 to 8 [ 103.146851][ T7901] Page size > filesystem block size (1024). This is currently not supported! [ 103.656943][ T7913] loop5: detected capacity change from 0 to 8 [ 103.665884][ T7913] SQUASHFS error: Failed to read block 0x1e8: -5 [ 103.666001][ T7913] unable to read xattr id index table [ 104.400869][ T7929] Bluetooth: ISO socket layer initialized [ 104.468900][ T7930] loop5: detected capacity change from 0 to 256 [ 104.562022][ T7468] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 104.564657][ T7468] FAT-fs (loop5): Filesystem has been set read-only [ 104.564820][ T7468] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 104.574327][ T39] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 104.600336][ T7930] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 104.600482][ T7930] FAT-fs (loop5): Filesystem has been set read-only [ 104.620695][ T7941] loop0: detected capacity change from 0 to 8 [ 104.740092][ T7943] ublk_ctrl_add_dev: dev id not match 4294967295 5 [ 104.998040][ T7945] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.008333][ T4309] team_slave_0: entered promiscuous mode [ 105.008372][ T4309] team_slave_1: entered promiscuous mode [ 105.024606][ T7945] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 105.528146][ T7968] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 105.686181][ T7971] binder: tried to use weak ref as strong ref [ 105.687487][ T7971] binder: 7970:7971 Acquire 1 refcount change on invalid ref 0 ret -22 [ 105.690682][ T7971] binder: 7970:7971 got transaction to invalid handle, 1 [ 105.692817][ T7971] binder: 7970:7971 cannot find target node [ 105.694175][ T7971] binder: 7970:7971 transaction call to 0:0 failed 205/29201/-22, code 0 size 0-0 line 3252 [ 105.700535][ T4824] binder: undelivered TRANSACTION_ERROR: 29201 [ 105.803535][ T7973] loop1: detected capacity change from 0 to 256 [ 105.912713][ T7975] nfs: Unknown parameter '' [ 105.976023][ T7982] loop4: detected capacity change from 0 to 128 [ 106.028423][ T7990] loop0: detected capacity change from 0 to 8 [ 106.058277][ T7990] Page size > filesystem block size (1024). This is currently not supported! [ 106.570613][ T7999] input: syz0 as /devices/virtual/input/input6 [ 106.629919][ T7980] loop5: detected capacity change from 0 to 512 [ 106.644488][ T7980] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 106.649862][ T7980] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e019, mo2=0002] [ 106.650128][ T7980] EXT4-fs (loop5): orphan cleanup on readonly fs [ 106.653353][ T7980] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.877: bg 0: block 361: padding at end of block bitmap is not set [ 106.653390][ T7980] loop5: lost filesystem error report for type 5 error -117 [ 106.658125][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 106.658159][ C1] EXT4-fs (loop5): initial error at time 106: ext4_validate_block_bitmap:441 [ 106.658193][ C1] EXT4-fs (loop5): last error at time 106: ext4_validate_block_bitmap:441 [ 106.667594][ T7980] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 106.669839][ T7980] loop5: lost filesystem error report for type 5 error -117 [ 106.670917][ T7980] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.877: attempt to clear invalid blocks 33619980 len 1 [ 106.670953][ T7980] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 106.676636][ T7980] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.877: invalid indirect mapped block 1811939328 (level 0) [ 106.681715][ T7980] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 106.683237][ T7980] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.877: invalid indirect mapped block 2185560079 (level 1) [ 106.683280][ T7980] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 106.688278][ T7980] EXT4-fs (loop5): 1 truncate cleaned up [ 106.688750][ T7980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 106.742593][ T8010] overlayfs: failed to clone upperpath [ 106.747869][ T8010] overlayfs: failed to clone upperpath [ 106.841714][ T5404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 107.324486][ T8027] loop1: detected capacity change from 0 to 512 [ 107.338027][ T8027] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.338111][ T8027] EXT4-fs (loop1): inodes count not valid: 15 vs 32 [ 107.405887][ T8031] loop0: detected capacity change from 0 to 512 [ 107.424949][ T8031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.375380][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'. [ 108.389862][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.406771][ T8045] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 108.421632][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'. [ 108.421946][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'. [ 108.430248][ T8043] bond3: option ad_actor_sys_prio: invalid value (0) [ 108.431490][ T8043] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 108.474255][ T8043] bond3 (unregistering): Released all slaves [ 108.523818][ T8041] bond3: option ad_actor_sys_prio: invalid value (0) [ 108.523859][ T8041] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 108.545060][ T8041] bond3 (unregistering): Released all slaves [ 108.631691][ T8059] binder: 8058:8059 tried to acquire reference to desc 0, got 1 instead [ 108.633772][ T8059] binder: 8058:8059 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 108.636338][ T8059] binder: 8059 RLIMIT_NICE not set [ 108.637673][ T8059] binder: 8059 RLIMIT_NICE not set [ 108.647889][ T8059] binder: 8058:8059 got new transaction with bad transaction stack, transaction 210 has target 8058:8059 [ 108.647994][ T8059] binder: 8058:8059 transaction call to 8058:0 failed 211/29201/-71, code 0 size 64767-0 line 3312 [ 108.657711][ T4309] binder: release 8058:8059 transaction 210 in, still active [ 108.657753][ T4309] binder: send failed reply for transaction 210 to 8058:8059 [ 108.657834][ T4309] binder: undelivered TRANSACTION_COMPLETE [ 108.657853][ T4309] binder: undelivered TRANSACTION_ERROR: 29201 [ 108.657868][ T4309] binder: undelivered TRANSACTION_ERROR: 29189 [ 108.883231][ T8065] loop0: detected capacity change from 0 to 8 [ 108.887481][ T8065] Page size > filesystem block size (1024). This is currently not supported! [ 109.309174][ T8075] loop4: detected capacity change from 0 to 512 [ 109.316561][ T8075] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.316600][ T8075] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 109.688277][ T8087] nbd4: detected capacity change from 0 to 8 [ 109.881825][ T8087] block nbd4: shutting down sockets [ 109.884247][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.884339][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 109.886742][ T4358] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.887057][ T4358] Buffer I/O error on dev nbd4, logical block 0, async page read [ 109.888162][ T4358] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.888388][ T4358] Buffer I/O error on dev nbd4, logical block 0, async page read [ 109.889860][ T4358] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.889957][ T4358] Buffer I/O error on dev nbd4, logical block 0, async page read [ 110.046646][ T4392] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.046687][ T4392] Buffer I/O error on dev nbd4, logical block 0, async page read [ 110.046764][ T4392] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.046787][ T4392] Buffer I/O error on dev nbd4, logical block 0, async page read [ 110.046847][ T4392] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.046871][ T4392] Buffer I/O error on dev nbd4, logical block 0, async page read [ 110.046923][ T4392] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.046939][ T4392] Buffer I/O error on dev nbd4, logical block 0, async page read [ 110.046961][ T4698] ldm_validate_partition_table(): Disk read failed. [ 110.046996][ T4392] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.047010][ T4392] Buffer I/O error on dev nbd4, logical block 0, async page read [ 110.047053][ T4392] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.047067][ T4392] Buffer I/O error on dev nbd4, logical block 0, async page read [ 110.047153][ T4698] Dev nbd4: unable to read RDB block 0 [ 110.047263][ T4698] nbd4: unable to read partition table [ 110.047338][ T4698] nbd4: partition table beyond EOD, truncated [ 110.084059][ T8092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.911'. [ 110.110416][ T4698] ldm_validate_partition_table(): Disk read failed. [ 110.110584][ T4698] Dev nbd4: unable to read RDB block 0 [ 110.110687][ T4698] nbd4: unable to read partition table [ 110.110741][ T4698] nbd4: partition table beyond EOD, truncated [ 111.375435][ T8107] pimreg: entered allmulticast mode [ 111.379685][ T8108] pimreg: left allmulticast mode [ 111.797573][ T8143] loop1: detected capacity change from 0 to 512 [ 111.809779][ T8143] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.809822][ T8143] EXT4-fs (loop1): inodes count not valid: 31 vs 32 [ 112.302114][ T8172] input: syz0 as /devices/virtual/input/input7 [ 112.426635][ T4309] kernel write not supported for file bpf-prog (pid: 4309 comm: kworker/1:3) [ 112.604071][ T8189] loop4: detected capacity change from 0 to 4096 [ 112.672186][ T8189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.745940][ T8189] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 112.774215][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.914487][ T8214] binder: 8213:8214 tried to acquire reference to desc 0, got 1 instead [ 112.915033][ T8214] binder: 8213:8214 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 112.915154][ T8214] binder: 8214 RLIMIT_NICE not set [ 112.980316][ T8217] binder_alloc: 8213: binder_alloc_buf size 64768 failed, no address space [ 112.983890][ T8217] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 112.985857][ T8217] binder: cannot allocate buffer: no space left [ 112.985948][ T8217] binder: 8213:8217 transaction call to 8213:0 failed 216/29201/-28, code 0 size 64767-0 line 3408 [ 113.507028][ T8240] netlink: 'syz.1.953': attribute type 20 has an invalid length. [ 113.507126][ T8240] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.734164][ T4795] binder: undelivered TRANSACTION_ERROR: 29201 [ 114.346783][ T8280] vlan3: entered allmulticast mode [ 114.346823][ T8280] macsec0: entered allmulticast mode [ 114.346849][ T8280] veth1_macvtap: entered allmulticast mode [ 114.575270][ T8296] binder: BINDER_SET_CONTEXT_MGR already set [ 114.575393][ T8296] binder: 8295:8296 ioctl 4018620d 20004a80 returned -16 [ 114.575858][ T8296] binder: tried to use weak ref as strong ref [ 114.575866][ T8296] binder: 8295:8296 Acquire 1 refcount change on invalid ref 0 ret -22 [ 114.576215][ T8296] binder: 8295:8296 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 114.576230][ T8296] binder: 8296 RLIMIT_NICE not set [ 114.646363][ T8302] binder: 8295:8302 got transaction to invalid handle, 1 [ 114.646494][ T8302] binder: 8295:8302 cannot find target node [ 114.646509][ T8302] binder: 8295:8302 transaction call to 0:0 failed 219/29201/-22, code 0 size 64767-0 line 3252 [ 115.283142][ T8324] binder: tried to use weak ref as strong ref [ 115.283265][ T8324] binder: 8323:8324 Acquire 1 refcount change on invalid ref 0 ret -22 [ 115.283941][ T8324] binder: 8323:8324 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 115.283952][ T8324] binder: 8323:8324 ioctl c0306201 20000480 returned -22 [ 115.396454][ T11] binder: undelivered TRANSACTION_ERROR: 29201 [ 115.688662][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.784668][ T8336] loop5: detected capacity change from 0 to 4096 [ 115.796169][ T8336] ext4: Unknown parameter 'hash' [ 115.877929][ T8362] fuse: fd is not a fuse device [ 116.071493][ T8377] binder: 8376:8377 ioctl 4018620d 0 returned -22 [ 116.071677][ T8377] binder: tried to use weak ref as strong ref [ 116.071685][ T8377] binder: 8376:8377 Acquire 1 refcount change on invalid ref 0 ret -22 [ 116.071767][ T8377] binder: 8376:8377 ioctl c0306201 20000480 returned -22 [ 116.224024][ T8388] netlink: 'syz.4.989': attribute type 8 has an invalid length. [ 116.229896][ T4795] IPVS: starting estimator thread 0... [ 116.346436][ T8395] ublk_ctrl_add_dev: dev id not match 4294967295 5 [ 116.374629][ T8390] IPVS: using max 51 ests per chain, 122400 per kthread [ 117.396826][ T8409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.400019][ T8409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.744788][ T8418] netlink: 'syz.0.995': attribute type 20 has an invalid length. [ 117.744963][ T8418] IPv6: NLM_F_CREATE should be specified when creating new route [ 118.029250][ T8424] binder: 8423:8424 cannot find target node [ 118.030764][ T8424] binder: 8423:8424 transaction call to 0:0 failed 227/29201/-22, code 0 size 0-0 line 3252 [ 118.087798][ T8429] binder: 8423:8429 cannot find target node [ 118.087933][ T8429] binder: 8423:8429 transaction call to 0:0 failed 228/29201/-22, code 0 size 64767-0 line 3252 [ 118.898751][ T4309] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.900455][ T4309] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.642911][ T8450] loop1: detected capacity change from 0 to 512 [ 119.646231][ T8450] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.648787][ T8450] EXT4-fs (loop1): bad geometry: first data block 1 is beyond end of filesystem (0) [ 120.075077][ T8456] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 120.077450][ T8456] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 120.402470][ T8470] netlink: 808 bytes leftover after parsing attributes in process `syz.0.1013'. [ 120.427816][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.430282][ T4718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.431849][ T4718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.434274][ T4718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.440391][ T4718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.475699][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.483781][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.485593][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.490478][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.491543][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.607193][ T8492] loop1: detected capacity change from 0 to 8 [ 120.711084][ T8494] netlink: 'syz.0.1021': attribute type 20 has an invalid length. [ 120.853620][ T8496] loop1: detected capacity change from 0 to 256 [ 120.867172][ T8496] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 120.867211][ T8496] FAT-fs (loop1): Filesystem has been set read-only [ 121.072965][ T8503] loop4: detected capacity change from 0 to 512 [ 121.077925][ T8503] EXT4-fs (loop4): unsupported inode size: 3456 [ 121.077976][ T8503] EXT4-fs (loop4): blocksize: 4096 [ 121.184489][ T8514] loop4: detected capacity change from 0 to 512 [ 121.187364][ T8512] netlink: 'syz.1.1028': attribute type 1 has an invalid length. [ 121.189903][ T8514] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.191524][ T8514] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 121.191543][ T8514] EXT4-fs (loop4): group descriptors corrupted! [ 121.277123][ T8518] netlink: 'syz.4.1030': attribute type 3 has an invalid length. [ 121.277161][ T8518] netlink: 'syz.4.1030': attribute type 1 has an invalid length. [ 121.277172][ T8518] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1030'. [ 121.324040][ T8479] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.324530][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.324641][ T8479] bridge_slave_0: entered allmulticast mode [ 121.325108][ T8479] bridge_slave_0: entered promiscuous mode [ 121.330506][ T8479] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.330588][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.332175][ T8479] bridge_slave_1: entered allmulticast mode [ 121.335737][ T8479] bridge_slave_1: entered promiscuous mode [ 121.341712][ T4309] kernel read not supported for file bpf-prog (pid: 4309 comm: kworker/1:3) [ 121.376586][ T8479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.377975][ T8479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.466335][ T8479] team0: Port device team_slave_0 added [ 121.467306][ T8479] team0: Port device team_slave_1 added [ 121.475954][ T8536] loop0: detected capacity change from 0 to 128 [ 121.562294][ T8479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.562327][ T8479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.562473][ T8479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.563590][ T8479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.563685][ T8479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.563770][ T8479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.573929][ T8479] hsr_slave_0: entered promiscuous mode [ 121.574278][ T8479] hsr_slave_1: entered promiscuous mode [ 121.574637][ T8479] debugfs: 'hsr0' already exists in 'hsr' [ 121.574729][ T8479] Cannot create hsr debugfs directory [ 121.953488][ T8552] loop4: detected capacity change from 0 to 2048 [ 122.068018][ T8552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 122.097279][ T8547] fuse: Bad value for 'fd' [ 122.155815][ T8556] binder_user_error: 5 callbacks suppressed [ 122.156968][ T8556] binder: 8555:8556 tried to acquire reference to desc 0, got 1 instead [ 122.161702][ T8556] binder: 8555:8556 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 122.161840][ T8556] binder: 8556 RLIMIT_NICE not set [ 122.161853][ T8556] binder: 8556 RLIMIT_NICE not set [ 122.163627][ T8479] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 122.166153][ T8556] binder: release 8555:8556 transaction 233 in, still active [ 122.166170][ T8556] binder: send failed reply for transaction 233 to 8555:8556 [ 122.167279][ T4817] binder: release 8555:8556 transaction 234 out, still active [ 122.167290][ T4817] binder: undelivered TRANSACTION_COMPLETE [ 122.167300][ T4817] binder: undelivered TRANSACTION_ERROR: 29189 [ 122.167307][ T4817] binder: undelivered TRANSACTION_COMPLETE [ 122.214356][ T4309] binder: send failed reply for transaction 234, target dead [ 122.219659][ T8479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.220090][ T8479] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 122.225776][ T8479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.228802][ T8479] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 122.233654][ T8479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.235778][ T8479] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 122.256485][ T8479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.277445][ T4309] kernel read not supported for file bpf-prog (pid: 4309 comm: kworker/1:3) [ 122.567405][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.568204][ T50] Bluetooth: hci3: command tx timeout [ 123.064469][ T8588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1049'. [ 123.467292][ T8581] syzkaller0: entered promiscuous mode [ 123.467329][ T8581] syzkaller0: entered allmulticast mode [ 123.485461][ T8479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.493472][ T8479] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.496602][ T7474] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.496653][ T7474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.507182][ T1354] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.507226][ T1354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.562952][ T8479] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.564920][ T8479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.595691][ T8608] netlink: 'syz.4.1055': attribute type 49 has an invalid length. [ 124.128019][ T8479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.178050][ T8638] ip_tables: iptables: counters copy to user failed while replacing table [ 124.272836][ T8648] loop1: detected capacity change from 0 to 1024 [ 124.364630][ T8650] netlink: 'syz.4.1062': attribute type 20 has an invalid length. [ 124.364779][ T8650] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.569239][ T8654] binder: 8652:8654 tried to acquire reference to desc 0, got 1 instead [ 124.580374][ T8654] binder: 8652:8654 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 124.583196][ T8654] binder: 8654 RLIMIT_NICE not set [ 124.584529][ T8654] binder: 8654 RLIMIT_NICE not set [ 124.586218][ T8654] binder: release 8652:8654 transaction 239 in, still active [ 124.589521][ T8654] binder: send failed reply for transaction 239 to 8652:8654 [ 124.593317][ T4817] binder: release 8652:8654 transaction 240 out, still active [ 124.593468][ T4817] binder: undelivered TRANSACTION_COMPLETE [ 124.593569][ T4817] binder: undelivered TRANSACTION_ERROR: 29189 [ 124.593665][ T4817] binder: undelivered TRANSACTION_COMPLETE [ 124.619204][ T4817] binder: send failed reply for transaction 240, target dead [ 124.619556][ T8656] overlayfs: failed to resolve './file0': -2 [ 124.633600][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1065'. [ 124.635782][ T8656] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 124.637580][ T50] Bluetooth: hci3: command tx timeout [ 124.657084][ T8651] netlink: 372 bytes leftover after parsing attributes in process `syz.1.1063'. [ 124.657511][ T8656] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 124.688751][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1065'. [ 124.713587][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1067'. [ 124.743623][ T8479] veth0_vlan: entered promiscuous mode [ 124.761224][ T8479] veth1_vlan: entered promiscuous mode [ 124.819516][ T8479] veth0_macvtap: entered promiscuous mode [ 124.823206][ T8479] veth1_macvtap: entered promiscuous mode [ 124.839488][ T8479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.842574][ T8479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.848605][ T7478] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.848664][ T7478] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.848683][ T7478] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.848699][ T7478] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.900349][ T7474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.900385][ T7474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.944794][ T7474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.944833][ T7474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.057745][ T8647] ima: policy update failed [ 125.063378][ T30] audit: type=1802 audit(125.069:133): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.1.1063" res=0 errno=0 [ 125.372664][ T8700] loop4: detected capacity change from 0 to 512 [ 125.445410][ T8700] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.1077: iget: bad extra_isize 90 (inode size 256) [ 125.448907][ T8700] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 125.452008][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 125.452037][ C0] EXT4-fs (loop4): initial error at time 125: ext4_xattr_inode_iget:441: inode 11 [ 125.452085][ C0] EXT4-fs (loop4): last error at time 125: ext4_xattr_inode_iget:441: inode 11 [ 125.453295][ T8700] EXT4-fs (loop4): Remounting filesystem read-only [ 125.453375][ T8700] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 125.453390][ T8700] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 125.453421][ T8700] EXT4-fs (loop4): 1 orphan inode deleted [ 125.453964][ T8700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.671008][ T4847] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 125.672825][ T4847] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 125.717692][ T8708] fido_id[8708]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 125.777715][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.890965][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.935656][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.358289][ T8730] loop0: detected capacity change from 0 to 8 [ 126.358884][ T8730] Page size > filesystem block size (1024). This is currently not supported! [ 126.697082][ T50] Bluetooth: hci3: command tx timeout [ 126.881977][ T8740] loop1: detected capacity change from 0 to 512 [ 126.982780][ T8740] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.985764][ T8740] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 126.985949][ T8740] System zones: 0-2, 18-18, 34-34 [ 127.000988][ T8740] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1090: bad orphan inode 15 [ 127.001159][ T8740] loop1: lost filesystem error report for type 5 error -117 [ 127.011232][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 127.011265][ C0] EXT4-fs (loop1): initial error at time 127: ext4_orphan_get:1425 [ 127.011288][ C0] EXT4-fs (loop1): last error at time 127: ext4_orphan_get:1425 [ 127.018803][ T8740] ext4_test_bit(bit=14, block=18) = 1 [ 127.018972][ T8740] is_bad_inode(inode)=0 [ 127.018978][ T8740] NEXT_ORPHAN(inode)=2264924160 [ 127.018984][ T8740] max_ino=32 [ 127.018989][ T8740] i_nlink=0 [ 127.028938][ T8740] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #15: comm syz.1.1090: corrupted xattr block 19: e_value out of bounds [ 127.029120][ T8740] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.031115][ T8755] netlink: 'syz.4.1092': attribute type 12 has an invalid length. [ 127.031128][ T8755] netlink: 'syz.4.1092': attribute type 29 has an invalid length. [ 127.031138][ T8755] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1092'. [ 127.032106][ T8755] netlink: 'syz.4.1092': attribute type 12 has an invalid length. [ 127.032116][ T8755] netlink: 'syz.4.1092': attribute type 29 has an invalid length. [ 127.032124][ T8755] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1092'. [ 127.039931][ T8740] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 127.040586][ T8740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.061521][ T8740] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 3: comm syz.1.1090: bad entry in directory: directory entry overrun - offset=44, inode=262156, rec_len=4096, size=4096 fake=0 [ 127.148052][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'. [ 127.581600][ T30] audit: type=1326 audit(127.583:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8791 comm="syz.7.1108" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff941781a8 code=0x0 [ 127.603973][ T8794] loop4: detected capacity change from 0 to 128 [ 127.620717][ T8794] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.638420][ T8794] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1109'. [ 127.649061][ T8794] [ 127.649595][ T8794] ====================================================== [ 127.650865][ T8794] WARNING: possible circular locking dependency detected [ 127.652144][ T8794] syzkaller #0 Tainted: G L [ 127.653207][ T8794] ------------------------------------------------------ [ 127.654390][ T8794] syz.4.1109/8794 is trying to acquire lock: [ 127.655401][ T8794] ffff0000edb5c260 (&ei->xattr_sem){++++}-{4:4}, at: ext4_xattr_set_handle+0x134/0xde4 [ 127.657047][ T8794] [ 127.657047][ T8794] but task is already holding lock: [ 127.658411][ T8794] ffff0000c86e0c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x280/0xc54 [ 127.660204][ T8794] [ 127.660204][ T8794] which lock already depends on the new lock. [ 127.660204][ T8794] [ 127.661945][ T8794] [ 127.661945][ T8794] the existing dependency chain (in reverse order) is: [ 127.663483][ T8794] [ 127.663483][ T8794] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 127.664999][ T8794] percpu_down_read_internal+0x5c/0x294 [ 127.666093][ T8794] ext4_writepages+0x170/0x2dc [ 127.666995][ T8794] do_writepages+0x284/0x47c [ 127.667856][ T8794] __writeback_single_inode+0x140/0x1880 [ 127.668880][ T8794] writeback_single_inode+0x400/0xb20 [ 127.669846][ T8794] write_inode_now+0x170/0x208 [ 127.670748][ T8794] iput+0x7cc/0xc2c [ 127.671466][ T8794] ext4_xattr_block_set+0x1460/0x21e8 [ 127.672487][ T8794] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 127.673526][ T8794] __ext4_expand_extra_isize+0x2a4/0x378 [ 127.674569][ T8794] __ext4_mark_inode_dirty+0x394/0x828 [ 127.675554][ T8794] ext4_evict_inode+0x798/0xfb8 [ 127.676463][ T8794] evict+0x4c0/0x74c [ 127.677202][ T8794] iput+0x8f0/0xc2c [ 127.677924][ T8794] ext4_process_orphan+0x24c/0x2c0 [ 127.678883][ T8794] ext4_orphan_cleanup+0x7d4/0xd20 [ 127.679866][ T8794] ext4_fill_super+0x4628/0x4e14 [ 127.680798][ T8794] get_tree_bdev_flags+0x388/0x43c [ 127.681779][ T8794] get_tree_bdev+0x2c/0x3c [ 127.682633][ T8794] ext4_get_tree+0x28/0x38 [ 127.683499][ T8794] vfs_get_tree+0x90/0x28c [ 127.684363][ T8794] fc_mount+0x24/0xac [ 127.685126][ T8794] do_new_mount+0x2a4/0x538 [ 127.685980][ T8794] path_mount+0x5f0/0xa88 [ 127.686787][ T8794] do_mount+0xe8/0x148 [ 127.687569][ T8794] __arm64_sys_mount+0x33c/0x388 [ 127.688515][ T8794] invoke_syscall+0x98/0x244 [ 127.689401][ T8794] el0_svc_common+0xec/0x23c [ 127.690208][ T8794] do_el0_svc+0x4c/0x5c [ 127.691032][ T8794] el0_svc+0x64/0x260 [ 127.691818][ T8794] el0t_64_sync_handler+0x48/0x148 [ 127.692810][ T8794] el0t_64_sync+0x198/0x19c [ 127.693698][ T8794] [ 127.693698][ T8794] -> #0 (&ei->xattr_sem){++++}-{4:4}: [ 127.695007][ T8794] __lock_acquire+0x17c0/0x2ebc [ 127.695991][ T8794] lock_acquire+0x140/0x364 [ 127.696885][ T8794] down_write+0x50/0xc0 [ 127.697658][ T8794] ext4_xattr_set_handle+0x134/0xde4 [ 127.698641][ T8794] ext4_initxattrs+0xa8/0x11c [ 127.699535][ T8794] security_inode_init_security+0x244/0x370 [ 127.700649][ T8794] ext4_init_security+0x44/0x58 [ 127.701566][ T8794] __ext4_new_inode+0x286c/0x3308 [ 127.702510][ T8794] ext4_ext_migrate+0x564/0xc54 [ 127.703423][ T8794] ext4_ioctl+0x1e14/0x4430 [ 127.704289][ T8794] __arm64_sys_ioctl+0x154/0x1cc [ 127.705294][ T8794] invoke_syscall+0x98/0x244 [ 127.706161][ T8794] el0_svc_common+0xec/0x23c [ 127.707067][ T8794] do_el0_svc+0x4c/0x5c [ 127.707875][ T8794] el0_svc+0x64/0x260 [ 127.708616][ T8794] el0t_64_sync_handler+0x48/0x148 [ 127.709578][ T8794] el0t_64_sync+0x198/0x19c [ 127.710453][ T8794] [ 127.710453][ T8794] other info that might help us debug this: [ 127.710453][ T8794] [ 127.712236][ T8794] Possible unsafe locking scenario: [ 127.712236][ T8794] [ 127.713530][ T8794] CPU0 CPU1 [ 127.714494][ T8794] ---- ---- [ 127.715457][ T8794] lock(&sbi->s_writepages_rwsem); [ 127.716340][ T8794] lock(&ei->xattr_sem); [ 127.717576][ T8794] lock(&sbi->s_writepages_rwsem); [ 127.718965][ T8794] lock(&ei->xattr_sem); [ 127.719738][ T8794] [ 127.719738][ T8794] *** DEADLOCK *** [ 127.719738][ T8794] [ 127.721191][ T8794] 3 locks held by syz.4.1109/8794: [ 127.722071][ T8794] #0: ffff0000cbe60450 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0xdc [ 127.723652][ T8794] #1: ffff0000edb5eaa0 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: ext4_ioctl+0x1e0c/0x4430 [ 127.725558][ T8794] #2: ffff0000c86e0c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x280/0xc54 [ 127.727458][ T8794] [ 127.727458][ T8794] stack backtrace: [ 127.728473][ T8794] CPU: 1 UID: 0 PID: 8794 Comm: syz.4.1109 Tainted: G L syzkaller #0 PREEMPT [ 127.730241][ T8794] Tainted: [L]=SOFTLOCKUP [ 127.730970][ T8794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 127.732628][ T8794] Call trace: [ 127.733190][ T8794] show_stack+0x2c/0x3c (C) [ 127.733982][ T8794] __dump_stack+0x30/0x40 [ 127.734715][ T8794] dump_stack_lvl+0xd8/0x12c [ 127.735502][ T8794] dump_stack+0x1c/0x28 [ 127.736244][ T8794] print_circular_bug+0x328/0x330 [ 127.737151][ T8794] check_noncircular+0x158/0x174 [ 127.738010][ T8794] __lock_acquire+0x17c0/0x2ebc [ 127.738825][ T8794] lock_acquire+0x140/0x364 [ 127.739585][ T8794] down_write+0x50/0xc0 [ 127.740312][ T8794] ext4_xattr_set_handle+0x134/0xde4 [ 127.741210][ T8794] ext4_initxattrs+0xa8/0x11c [ 127.742042][ T8794] security_inode_init_security+0x244/0x370 [ 127.743079][ T8794] ext4_init_security+0x44/0x58 [ 127.743913][ T8794] __ext4_new_inode+0x286c/0x3308 [ 127.744787][ T8794] ext4_ext_migrate+0x564/0xc54 [ 127.745632][ T8794] ext4_ioctl+0x1e14/0x4430 [ 127.746431][ T8794] __arm64_sys_ioctl+0x154/0x1cc [ 127.747444][ T8794] invoke_syscall+0x98/0x244 [ 127.748245][ T8794] el0_svc_common+0xec/0x23c [ 127.749058][ T8794] do_el0_svc+0x4c/0x5c [ 127.749762][ T8794] el0_svc+0x64/0x260 [ 127.750460][ T8794] el0t_64_sync_handler+0x48/0x148 [ 127.751370][ T8794] el0t_64_sync+0x198/0x19c [ 127.829987][ T4708] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.840065][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.827150][ T50] Bluetooth: hci3: command tx timeout