last executing test programs: 6m11.291001767s ago: executing program 2 (id=3): r0 = openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000080)={0x1c0980928, 0x101, "21234e08a42be8f30c56a68f3a8b3d06f842b27fa0e919d9d579cc1f93c60300", 0x6c90, 0x10010000, 0x0, 0x0, 0x4ff, 0x1e8, 0x10, 0x9887, [0x400, 0x10000, 0x0, 0xfffffffe]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m11.023105556s ago: executing program 2 (id=6): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$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") syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000861a1820830447370200010203010902120001000000000904"], 0x0) 6m7.605940402s ago: executing program 2 (id=16): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xfffffbff7ffffffb, 0x1222e2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 6m7.301568451s ago: executing program 2 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x2000c044) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) 6m5.873115945s ago: executing program 2 (id=22): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6m5.279469234s ago: executing program 2 (id=31): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r0) keyctl$unlink(0x9, r1, r0) 6m4.496420968s ago: executing program 32 (id=31): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r0) keyctl$unlink(0x9, r1, r0) 5m58.408177938s ago: executing program 4 (id=63): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x6000, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045010}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xca9a3b, 0x9000000, 0x0, 0x40000}, &(0x7f0000000140), &(0x7f00000003c0)={0x0, 0x7, 0x4}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200), 0x8}) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004004) 5m57.195430886s ago: executing program 4 (id=67): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000500bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0xfe90, 0x10, &(0x7f00000000c0)={0x1}, 0xfffffffffffffd27}, 0x48) syz_io_uring_setup(0x77cc, &(0x7f0000001000)={0x0, 0xc092, 0x40, 0x17, 0x8348}, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r2, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000000000000000000001"], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x9315, 0x1f480, 0x0, 0x39d}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 5m57.057942819s ago: executing program 4 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) syz_open_procfs(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x10}, 0x94) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x286, &(0x7f0000001300)="$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") r3 = fsopen(&(0x7f0000000080)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x101000, 0x108) lseek(r5, 0x8, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @mcast2, 0x6}, 0x1c) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2, {[@generic={0x7, 0x3, "e8"}]}}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x9, 0x0, &(0x7f0000000040)) 5m56.754113779s ago: executing program 3 (id=70): syz_read_part_table(0x105f, &(0x7f0000008a40)="$eJzszitSBDEUhtE/3U0/HIaFsBg0AgeLoA07YhOsBIHAjM9U5lXjW8yIc0yS+irJDTdVxry/9iXJkmRNnabrPNSSlJbXhyTf/5fSndfH35YzPh/PP2/J7rDr24tzMtWTz6yZ8/XULUPSvulear9t/L+PbfcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4C7sAwAA///bnhVl") prlimit64(0x0, 0x2, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) write$P9_RLINK(r0, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) 5m56.206010896s ago: executing program 4 (id=71): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x110000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a3, 0x0, 0x21, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) 5m55.919207246s ago: executing program 4 (id=72): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r2, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0xfffffffffffffea1) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xb6d2, 0x1d080, 0x2, 0x37a}) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 5m54.886253217s ago: executing program 3 (id=75): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e65"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(0x0, 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000009060102000000000000000000000000090002007379"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) gettid() openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xffffff37, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) 5m54.607507316s ago: executing program 4 (id=77): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r0, 0x0, 0x0) 5m53.465734761s ago: executing program 33 (id=77): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r0, 0x0, 0x0) 5m53.441600102s ago: executing program 3 (id=80): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prlimit64(r0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001a40)=[{{&(0x7f0000000240)=@can, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000380)=""/236, 0xec}, {&(0x7f0000000980)=""/4083, 0xff3}, {&(0x7f0000001980)=""/125, 0x7d}], 0x3}, 0x8}], 0x1, 0x1020, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_procfs(r1, 0x0) syz_clone3(&(0x7f0000000480)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x3, 0x9, 0x0, 0x4}, 0x20) io_uring_setup(0x3062, &(0x7f0000000180)={0x0, 0xa60a, 0x1000, 0xffffffff, 0x21f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[], 0x38}}, 0x0) mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) syz_clone(0x8200d380, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpid() r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) r8 = eventfd2(0x7, 0x1) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000000)={0x1, r8}) close_range(r7, r7, 0x0) process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 5m52.491894622s ago: executing program 3 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb141a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) 5m52.383441805s ago: executing program 3 (id=83): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 5m51.982226538s ago: executing program 3 (id=84): r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r2, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffd22}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}) 5m51.632604829s ago: executing program 34 (id=84): r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r2, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffd22}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}) 4m21.314357949s ago: executing program 0 (id=381): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd2(0x7, 0x1) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1, r0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m19.795453616s ago: executing program 0 (id=389): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e65"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) gettid() openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xffffff37, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) 4m17.922722755s ago: executing program 0 (id=391): socket$inet6(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00000000000000000000000800", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 4m15.962565095s ago: executing program 0 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000001f80)={{0xa, 0x4e23, 0x21, @mcast1}, {0xa, 0x4e21, 0x7, @empty, 0x200003}, 0xffffffffffffffff, {[0x0, 0x0, 0x0, 0x7fff, 0x1, 0x4]}}, 0x5c) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfeed, 0xffffffffffffffff) 4m14.910901658s ago: executing program 0 (id=396): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xfffffbff7ffffffb, 0x1222e2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 4m13.521648161s ago: executing program 0 (id=401): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) write$UHID_INPUT(r2, &(0x7f0000000e40)={0x8, {"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", 0x1000}}, 0x1006) 3m58.427951011s ago: executing program 35 (id=401): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) write$UHID_INPUT(r2, &(0x7f0000000e40)={0x8, {"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", 0x1000}}, 0x1006) 2m0.919211258s ago: executing program 8 (id=821): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f000000000000000008"], 0x2c}}, 0x0) 1m59.257772649s ago: executing program 8 (id=823): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x0, 0x1ec, &(0x7f0000000380)="$eJzsmD9v00AYxp+zXTepEBILAwwgUYkitY7tAGJhKJ8AqeXf1oiaquA2yPGQRAIRsbDwMRhZGTIxsLGxwgBISCweEQPDobPP9sXJWUQQlrw/Kefn/r/35vRYMgiCWFq+fvnx+eWNa7ubAE5gHauy/btZjjGU8Z8aUnx89e745JNxdT2m2cfUtFsA3m6biGWdc87V/nX53IVR6FswcEnqO2BwpN6DgdtSB2C4l8mzD0uNblOKMHDud8P9B4dh4IrCE4UvinY1vmTEsG/L+CoH6Q2GjzphGERS5PkLV3i+T1QdM6/QpC6Pz0q2DVxX8if+r7svno9EPc+Nq+TPa5bz22DYKeqrcBynTIly/jNWub6pOz/+4pCLEKe26sZs1k//9Z9CBZtokfcMi9jrtRRPw+mLu0RCTXhTCGFaRcvpZPx+eta3RQZ2/h+sw6XzzuhCQ9P1Ye2PtmDPNF21d7X0T2EvFxV/smAV/tGKjx63eoPh1uFR5yA4CI59v33Vvey6V/xWakRZWeN/jdSf1pT1V8qtJ7CZjX4njiOvD8SRZ9vI6n5WKo6782bvZzEvGRnYuJBpkWU7s8qZMPkz0qdQG7pXH0EQBEEQBEEQBEEQBEEQxJycA0u/gnKefhLmGvyb6ejfAQAA///EelSm") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)=ANY=[]) 1m58.939230099s ago: executing program 8 (id=828): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x150, 0x0, 0x3, [{{0x4, 0x3, 0x28000, 0x80000003, 0xd, 0x10001, {0x6, 0x9, 0x2, 0xb, 0xe8, 0xfffffffffffffffe, 0x6, 0x1, 0x2, 0x8000, 0xe2, r2, 0x0, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x7, 0x3, 0x7ff, 0x7ffffffffffffffe, 0xfff, 0x7ff, {0x3, 0xd, 0x3, 0x2, 0x5, 0x2, 0x2, 0x6, 0x7, 0x1000, 0x0, r2, r3, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 1m58.731042276s ago: executing program 8 (id=829): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4e, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddf"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m58.515494642s ago: executing program 8 (id=832): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x1, 0x5581, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) syz_open_dev$usbfs(0x0, 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)="02", 0x1, 0x8000c61) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r9 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r9, 0x0, 0x5) 1m54.125838299s ago: executing program 8 (id=846): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 1m39.063384298s ago: executing program 36 (id=846): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 8.178670975s ago: executing program 9 (id=1274): getpgrp(0x0) truncate(&(0x7f0000000380)='./file0/file0\x00', 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 6.194726907s ago: executing program 9 (id=1279): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x20000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x34, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x298087f6, 0x8, 0x0, 0x0}}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.872185858s ago: executing program 9 (id=1285): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000080)={0x8000000000000005, r2, r1}) 4.723475843s ago: executing program 9 (id=1287): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x82a, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed60205000000", 0x54, 0x4008044, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0)="94", 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 4.723347313s ago: executing program 5 (id=1288): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xfffffbff7ffffffb, 0x1222e2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) socket$unix(0x1, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 4.584764957s ago: executing program 5 (id=1290): syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000080)={[{@nobh}]}, 0x4, 0x4a3, &(0x7f0000000bc0)="$eJzs3MtvVNUfAPDvnT6gPPvjx+8BYqzig/hoaXnIwo3GhQtNTHSBuqptIZWBGloTIUSqC0zcGBL3xp0m/gWuNCZGXZm41b0hIYYN4Oqa+5gync4MlA6dynw+yTTnzD33nvOdc0977j1zG0DPGsl+JBHbIuK3iNhZZJcXGIlNWfLGtQtTN69dmEoiTV/7M8nLXb92YapWtLbf1iKTpmV+U5N6L70VMVmtzpwt82MLp98dmz93/pnZ05MnZ07OnJk4duzwoQcHj04c6UicWVzX934wt2/PS29cfmXq+OW3f/o6a++2cnt9HDWDa6xzpPh0m3psjcfeaLbXpZP+LjaEVemLiKy7BvLxvzP6Yih7+/EdxeaPmo9e4H6QpmnaZoQvpsB9LIlutwDojtof+uz6N3+lyTrNPDaGq88XF0BZ7DfKV7GlPyplmYGG69tOGomI44t/fZ69osV9CACATvo2m/88XTf/W5p/VOK/deV2lGsowxHxr4jYFRH/jojdEfGfiLzs/yLi/6usv3GFZOX8p3LlrgK7Q9n877lybWv5/K82+4vhvjK3PY9/IDkxW505WH4mB2JgU5Yfr5Vusmj03Yu/ftqq/vr5X/bK6q/NBct2XOlvuEE3PbkwmU9KO+DqhxF7+5vFn0RtGSe7ItgTEXtv7ba4mjpmn/xq38p3i6OPxM00TdvF30YH1pnSLyKeKPp/MRriz0/4Mv7m65Pjzx6dODK2OaozB8dqZ8VKP/9y6dVW9d+u/+/11VjW/1uanv9LNQ8nmyPmz50/la/Xzrc4UP3FZINLv3/c8pqmffxpy/N/MHk9T9eG2/uTCwtnxyMGk5dXvj9xa99avlY+i//A/ubjf1fc+iQeiIh9dWthD5VtfzgiHomI/a0CjIgfX3j0ndXHvz7rbln800X/v/lJ8dbK/o/6/m88ERabbFqe6Dv1wzet6m/T/xeLEln/H85TB8p98t9/t9GmOc2CAAAAgPtaJf8OfFIZXUpXKqOjxXf4d8eWSnVufuGpE3PvnZkuvis/HAOVE7PVmaGl+8HF/dDx8t5wLT/RkD9U3jf+rG8oz49OzVWnux089LitLcZ/5o++brcOuOc8rwW9y/iH3mX8Q69KjH/oYfn439ztVgDd0Ozv/8UutANYf+b/0LuMf+hN339p/EMvu9vxP9ThdgDratkj8fWPzVeWb6pExJ09Ud82MbS23SXWK3H7f6AQlQ3S1I2ViMWIzh65v1VfFCM4iTVWkUTTTe1/b/TWfwkFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+yf4OAAD//8WC3gs=") syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001002089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={0x1}) 4.538510059s ago: executing program 6 (id=1292): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4.287540896s ago: executing program 9 (id=1293): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[], 0x5, 0x2c1, &(0x7f0000001880)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0xc) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)) 4.100465493s ago: executing program 6 (id=1294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2800c1e, &(0x7f00000001c0)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000005c0)) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) setxattr$security_ima(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="757466383d302c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c756e695f786c6174653d312c756e695f786c6174653d302c726f6469722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c757466383d312c73686f72746e616d653d77696e39352c726f6469722c6e66733d6e6f7374616c655f726f2c726f6469722c757466383d312c73686f72746e616d653d77696e6e742c636865636b3d72656c617865642c00c63b831754d4eeec4cf38c28cf1e3409b9950bbab09abe8d407d1c7c935e034461a37ac3113829124efad15a202673b20ad011cb0f0cedb0cef9f6ec5e2634db26ef8581fd506844d0133ac021c0172b4b36a109949512e8dc6a8c7d603e3ef3cd57451eaee1b0e4804b9ea88fcad7afb59594dcfeaf8d34935fa0e54a36c57d964429e7ec869287810e5d97759017ace0c3f5"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") 3.045284455s ago: executing program 9 (id=1296): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x2, '\a\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, 0x0, &(0x7f0000000640)={0x0, 0x3, 0xad, @string={0xad, 0x3, "52709e8900ddc81805e7a35e5117cdfbe369b006ba2c646c8be5bca7e54200146974c165d55c05218df0c1505a6540b96ba1f61f6629996ecde1ca54881dcfc434d9482d0b645bc788fe8ca8cbddbfe3aff7e5c3c0ff030da71ce467743d5b030d177c5fe6032c8d3cc85871b20a9b7dfa428804c85390785b5a864fc3b2d5664aa08278a36c1444eb20c86f85abffdf9ac01de1119b3179d3481f5231f45b40debcf21258487623e4925f"}}, 0x0, 0x0, 0x0}, &(0x7f0000000d00)={0x84, &(0x7f0000000840)={0x20, 0x1b, 0xf, "e6de8ca05d3f9c40f0f40893613515"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.754101575s ago: executing program 6 (id=1299): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) 1.042017508s ago: executing program 7 (id=1300): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xfffffbff7ffffffb, 0x1222e2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) socket$unix(0x1, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 879.722143ms ago: executing program 7 (id=1301): getpgrp(0x0) truncate(&(0x7f0000000380)='./file0/file0\x00', 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 754.293346ms ago: executing program 5 (id=1302): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0xfcff, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 706.669958ms ago: executing program 7 (id=1304): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x82a, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed60205000000", 0x54, 0x4008044, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0)="94", 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 689.100319ms ago: executing program 6 (id=1305): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x4005, 0x1, {0x1, @win={{}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0}}}) ppoll(&(0x7f0000000040)=[{r0, 0x2049}], 0x1, 0x0, 0x0, 0x0) 574.973762ms ago: executing program 6 (id=1306): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f00000001c0)) 574.400432ms ago: executing program 1 (id=1307): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000400)={r3, @in6={{0xa, 0x3, 0x4, @mcast1, 0x4}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000740), 0x8) 487.205925ms ago: executing program 5 (id=1308): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e80)=@bridge_delneigh={0x30, 0x1c, 0xf01, 0x2001, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8, 0xa0, 0x7}, [@NDA_DST_IPV6={0x14, 0x1, @empty}]}, 0x30}}, 0x440c0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfff}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27) 476.179595ms ago: executing program 1 (id=1309): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/223, 0xdf}], 0x1, 0x0) madvise(&(0x7f00007e6000/0x2000)=nil, 0x2000, 0x15) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) keyctl$invalidate(0x15, 0x0) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x0, 0xfffffffe, 0x2d3}) socket$inet(0x2, 0x2, 0x1) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) read$char_usb(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x1c, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 447.625066ms ago: executing program 6 (id=1310): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0xfff1}, {0x8, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008044) close(0x3) getdents64(r1, 0x0, 0x0) 420.671847ms ago: executing program 5 (id=1311): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xfffffbff7ffffffb, 0x1222e2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) socket$unix(0x1, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 347.234029ms ago: executing program 7 (id=1312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xf54023a49d656863}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x38, 0x1, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4010) 266.196342ms ago: executing program 1 (id=1313): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x9, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) syz_emit_ethernet(0x0, 0x0, 0x0) 266.110312ms ago: executing program 7 (id=1314): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6020400) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 248.762663ms ago: executing program 5 (id=1315): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/63, 0x3f) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x33fe, 0x0, 0xfffc}}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 202.173664ms ago: executing program 7 (id=1316): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) brk(0x400000ffc000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000004e000100"], 0x18}}, 0x0) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00', 0x1, r2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000680)={[{@prjquota}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@resgid}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@dioread_lock}, {@grpid}]}, 0x1, 0x490, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000400)={'erspan0\x00', r5, 0x8000, 0x80, 0x0, 0x4, {{0x2b, 0x4, 0x3, 0x7, 0xac, 0x68, 0x0, 0xff, 0x0, 0x0, @multicast1, @private=0xa010100, {[@timestamp_prespec={0x44, 0x44, 0xce, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0xf484}, {@rand_addr=0x64010101, 0x4}, {@empty, 0x37f}, {@dev={0xac, 0x14, 0x14, 0xc}}, {@private=0xa010101, 0x100}, {@private=0xa010100, 0x5f1a}, {@remote, 0x7}]}, @cipso={0x86, 0x45, 0x2, [{0x1, 0x2}, {0x7, 0x5, "b7085f"}, {0x7, 0x2}, {0x1, 0x10, "bb5a7c57166a7f9ed17d550bc2f5"}, {0x7, 0x4, "fe81"}, {0x2, 0xf, "2e4fe8b1d045a6c5b0fd1e207b"}, {0x1, 0x5, "0f0c2d"}, {0x1, 0xe, "d7ce5038af0cd0ae87dcddd3"}]}, @timestamp={0x44, 0xc, 0xce, 0x0, 0x2, [0x4, 0xc0000000]}]}}}}}) sendto$packet(r4, &(0x7f0000000100), 0x0, 0x40000, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e00cb7b27bd7000f3dbdf2500000000", @ANYRES32=0x0, @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x8d33864195c5c22f}, 0x60400c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb5}, 0x80) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x474203, 0x408}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendfile(r0, r1, &(0x7f0000002080)=0x99, 0x23b) 119.420526ms ago: executing program 1 (id=1317): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 47.844199ms ago: executing program 1 (id=1318): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0xf836345d3386e8d5, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=1319): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) prlimit64(r0, 0xc, 0x0, &(0x7f00000001c0)) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x40}}}, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) kernel console output (not intermixed with test programs): orphan inode deleted [ 177.007603][ T5849] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 177.232513][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 178.178504][ T5879] Can't find ip_set type hash:ne [ 178.631831][ T5899] loop6: detected capacity change from 0 to 1024 [ 180.416050][ T5912] netlink: 36 bytes leftover after parsing attributes in process `syz.1.383'. [ 181.528565][ T5923] Can't find ip_set type hash:ne [ 181.550383][ T5926] loop1: detected capacity change from 0 to 512 [ 181.930372][ T5926] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.388: EA inode hash validation failed [ 182.184428][ T5926] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.388: corrupted inode contents [ 182.440957][ T5926] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.388: mark_inode_dirty error [ 182.464596][ T5933] Can't find ip_set type hash:ne [ 182.539269][ T5926] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.388: corrupted inode contents [ 182.561366][ T5926] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2952: inode #15: comm syz.1.388: mark_inode_dirty error [ 182.625293][ T5926] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2955: inode #15: comm syz.1.388: mark inode dirty (error -117) [ 182.673343][ T5926] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 182.737463][ T5926] EXT4-fs (loop1): 1 orphan inode deleted [ 182.760646][ T5926] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 183.467424][ T5946] loop5: detected capacity change from 0 to 512 [ 183.699525][ T5946] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.392: EA inode hash validation failed [ 184.130924][ T5946] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.392: corrupted inode contents [ 184.310166][ T5946] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #15: comm syz.5.392: mark_inode_dirty error [ 184.399910][ T5946] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.392: corrupted inode contents [ 184.718901][ T5946] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2952: inode #15: comm syz.5.392: mark_inode_dirty error [ 184.738782][ T5946] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2955: inode #15: comm syz.5.392: mark inode dirty (error -117) [ 184.959918][ T5946] EXT4-fs warning (device loop5): ext4_evict_inode:304: xattr delete (err -117) [ 184.970125][ T5946] EXT4-fs (loop5): 1 orphan inode deleted [ 184.977534][ T5946] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 185.072833][ T5963] Invalid option length (57448) for dns_resolver key [ 186.340140][ T4269] Bluetooth: hci0: command 0x0406 tx timeout [ 186.348567][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 186.970671][ T5977] binder: 5976:5977 ioctl c0306201 0 returned -14 [ 189.034965][ T6016] Can't find ip_set type hash:ne [ 189.070532][ T6003] device syzkaller0 entered promiscuous mode [ 189.103326][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.405'. [ 189.354512][ T6024] netlink: 36 bytes leftover after parsing attributes in process `syz.5.408'. [ 191.333531][ T6037] loop1: detected capacity change from 0 to 512 [ 192.128421][ T6044] loop7: detected capacity change from 0 to 512 [ 192.347810][ T6037] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.412: EA inode hash validation failed [ 192.364338][ T6050] binder: 6049:6050 ioctl c0306201 0 returned -14 [ 192.399467][ T6037] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.412: corrupted inode contents [ 192.430689][ T6044] EXT4-fs warning (device loop7): ext4_xattr_inode_get:506: inode #11: comm syz.7.413: EA inode hash validation failed [ 192.462905][ T6044] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.413: corrupted inode contents [ 192.476833][ T6044] EXT4-fs error (device loop7): ext4_dirty_inode:6077: inode #15: comm syz.7.413: mark_inode_dirty error [ 192.510653][ T6037] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.412: mark_inode_dirty error [ 192.547289][ T6037] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.412: corrupted inode contents [ 192.563495][ T6044] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.413: corrupted inode contents [ 192.708508][ T6044] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2952: inode #15: comm syz.7.413: mark_inode_dirty error [ 192.713474][ T6037] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2952: inode #15: comm syz.1.412: mark_inode_dirty error [ 193.160171][ T6044] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2955: inode #15: comm syz.7.413: mark inode dirty (error -117) [ 193.217950][ T6044] EXT4-fs warning (device loop7): ext4_evict_inode:304: xattr delete (err -117) [ 193.230029][ T6037] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2955: inode #15: comm syz.1.412: mark inode dirty (error -117) [ 193.261018][ T6044] EXT4-fs (loop7): 1 orphan inode deleted [ 193.266801][ T6044] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 193.308748][ T6037] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 193.328333][ T6037] EXT4-fs (loop1): 1 orphan inode deleted [ 193.334108][ T6037] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 193.387012][ T6065] loop6: detected capacity change from 0 to 1024 [ 195.710070][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.716417][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.833330][ T6086] Can't find ip_set type hash:ne [ 197.123744][ T6095] netlink: 36 bytes leftover after parsing attributes in process `syz.5.422'. [ 198.097759][ T6097] device syzkaller0 entered promiscuous mode [ 199.534681][ T6109] Can't find ip_set type hash:ne [ 200.046529][ T6115] binder: 6114:6115 ioctl c0306201 0 returned -14 [ 200.447579][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.7.429'. [ 201.211676][ T6138] loop6: detected capacity change from 0 to 512 [ 201.415800][ T6145] netlink: 48 bytes leftover after parsing attributes in process `syz.1.433'. [ 201.419089][ T6108] Bluetooth: hci1: command 0x0406 tx timeout [ 202.144596][ T6144] Can't find ip_set type hash:ne [ 202.353641][ T6138] EXT4-fs warning (device loop6): ext4_xattr_inode_get:506: inode #11: comm syz.6.431: EA inode hash validation failed [ 202.353849][ T6138] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.431: corrupted inode contents [ 202.354129][ T6138] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #15: comm syz.6.431: mark_inode_dirty error [ 202.354341][ T6138] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.431: corrupted inode contents [ 202.354553][ T6138] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2952: inode #15: comm syz.6.431: mark_inode_dirty error [ 202.354744][ T6138] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2955: inode #15: comm syz.6.431: mark inode dirty (error -117) [ 202.354934][ T6138] EXT4-fs warning (device loop6): ext4_evict_inode:304: xattr delete (err -117) [ 202.354989][ T6138] EXT4-fs (loop6): 1 orphan inode deleted [ 202.355002][ T6138] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 203.420177][ T3031] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.607579][ T6160] chnl_net:caif_netlink_parms(): no params data found [ 203.864427][ T3031] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.119933][ T6183] netlink: 36 bytes leftover after parsing attributes in process `syz.1.436'. [ 204.271255][ T3031] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.720147][ T3031] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.908497][ T6160] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.915697][ T6160] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.934207][ T6187] loop1: detected capacity change from 0 to 512 [ 204.955755][ T6160] device bridge_slave_0 entered promiscuous mode [ 205.015070][ T6160] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.043290][ T6187] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.437: EA inode hash validation failed [ 205.083920][ T6187] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.437: corrupted inode contents [ 205.096010][ T1345] Bluetooth: hci0: command 0x0409 tx timeout [ 205.096130][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.102930][ T6160] device bridge_slave_1 entered promiscuous mode [ 205.197132][ T6187] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.437: mark_inode_dirty error [ 205.216537][ T6187] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.437: corrupted inode contents [ 205.238859][ T6187] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2952: inode #15: comm syz.1.437: mark_inode_dirty error [ 205.273395][ T6187] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2955: inode #15: comm syz.1.437: mark inode dirty (error -117) [ 205.279384][ T6160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.287547][ T6187] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 205.305806][ T6187] EXT4-fs (loop1): 1 orphan inode deleted [ 205.315405][ T6187] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 205.692494][ T6160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.132410][ T6160] team0: Port device team_slave_0 added [ 206.192823][ T6160] team0: Port device team_slave_1 added [ 206.805635][ T6160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.860626][ T6160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.084331][ T6160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.124734][ T5069] Bluetooth: hci0: command 0x041b tx timeout [ 207.167145][ T6160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.191515][ T6160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.690220][ T6217] binder: BINDER_SET_CONTEXT_MGR already set [ 207.888491][ T6217] binder: 6215:6217 ioctl 4018620d 200000004a80 returned -16 [ 208.038255][ T6160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.098452][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 208.390624][ T6231] netlink: 48 bytes leftover after parsing attributes in process `syz.1.444'. [ 209.111800][ T6229] Can't find ip_set type hash:ne [ 209.178634][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 209.429272][ T6160] device hsr_slave_0 entered promiscuous mode [ 209.440751][ T6160] device hsr_slave_1 entered promiscuous mode [ 209.454608][ T6160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.792393][ T6160] Cannot create hsr debugfs directory [ 210.204814][ T6247] netlink: 36 bytes leftover after parsing attributes in process `syz.6.446'. [ 210.341115][ T6249] loop5: detected capacity change from 0 to 1024 [ 211.261542][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 211.858529][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 211.887056][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 212.007168][ T6256] device syzkaller0 entered promiscuous mode [ 213.026062][ T6275] loop1: detected capacity change from 0 to 512 [ 213.260584][ T6278] loop5: detected capacity change from 0 to 512 [ 213.331594][ T6275] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.455: EA inode hash validation failed [ 213.584789][ T6275] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.455: corrupted inode contents [ 213.628742][ T6278] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.456: EA inode hash validation failed [ 213.796969][ T6279] Can't find ip_set type hash:ne [ 213.801964][ T6278] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.456: corrupted inode contents [ 213.815603][ T6275] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.455: mark_inode_dirty error [ 213.831999][ T6278] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #15: comm syz.5.456: mark_inode_dirty error [ 213.864815][ T6275] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.455: corrupted inode contents [ 213.876990][ T6278] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.456: corrupted inode contents [ 213.888964][ T6160] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 213.897177][ T6275] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2952: inode #15: comm syz.1.455: mark_inode_dirty error [ 213.909369][ T6160] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 214.040677][ T6289] netlink: 48 bytes leftover after parsing attributes in process `syz.7.457'. [ 214.422410][ T6278] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2952: inode #15: comm syz.5.456: mark_inode_dirty error [ 214.721325][ T6288] Can't find ip_set type hash:ne [ 214.726526][ T6275] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2955: inode #15: comm syz.1.455: mark inode dirty (error -117) [ 214.797194][ T6278] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2955: inode #15: comm syz.5.456: mark inode dirty (error -117) [ 214.823516][ T6275] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 214.833842][ T6278] EXT4-fs warning (device loop5): ext4_evict_inode:304: xattr delete (err -117) [ 214.854037][ T3031] device hsr_slave_0 left promiscuous mode [ 214.904963][ T6278] EXT4-fs (loop5): 1 orphan inode deleted [ 214.911180][ T3031] device hsr_slave_1 left promiscuous mode [ 214.928623][ T3031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.938307][ T6275] EXT4-fs (loop1): 1 orphan inode deleted [ 214.944079][ T6275] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 214.978142][ T6278] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 215.022921][ T3031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.033787][ T3031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.041336][ T3031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.056125][ T3031] device bridge_slave_1 left promiscuous mode [ 215.066591][ T3031] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.898860][ T3031] device bridge_slave_0 left promiscuous mode [ 215.911055][ T3031] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.975856][ T3031] device veth1_macvtap left promiscuous mode [ 216.003309][ T3031] device veth0_macvtap left promiscuous mode [ 216.023737][ T3031] device veth1_vlan left promiscuous mode [ 216.038914][ T3031] device veth0_vlan left promiscuous mode [ 216.454201][ T3031] team0 (unregistering): Port device team_slave_1 removed [ 216.487510][ T3031] team0 (unregistering): Port device team_slave_0 removed [ 216.517716][ T3031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.556767][ T3031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.636200][ T3031] bond0 (unregistering): Released all slaves [ 216.706072][ T6160] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 216.757431][ T6160] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 217.007260][ T6318] loop6: detected capacity change from 0 to 1024 [ 219.278337][ T6324] netlink: 36 bytes leftover after parsing attributes in process `syz.7.462'. [ 219.583283][ T6160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.972645][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.012334][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.139832][ T6160] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.267032][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.297103][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.348434][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.355541][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.365262][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.375575][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.385350][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.392469][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.402717][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.738522][ T6334] device syzkaller0 entered promiscuous mode [ 220.902998][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'. [ 221.038514][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.059019][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.127274][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.159953][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.179341][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.196965][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.239897][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.267098][ T6160] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.418535][ T6160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.431374][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.479070][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.663361][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.674306][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.695061][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.031794][ T6362] loop5: detected capacity change from 0 to 1024 [ 222.052701][ T6356] netlink: 48 bytes leftover after parsing attributes in process `syz.6.469'. [ 222.836392][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.845273][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.882180][ T6160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.456447][ T6393] loop7: detected capacity change from 0 to 1024 [ 224.453527][ T6400] netlink: 36 bytes leftover after parsing attributes in process `syz.1.475'. [ 225.473823][ T6409] loop6: detected capacity change from 0 to 512 [ 225.582064][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.7.476'. [ 225.820093][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.832753][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.945309][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.959363][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.998839][ T6160] device veth0_vlan entered promiscuous mode [ 226.015802][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.031820][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.072973][ T6160] device veth1_vlan entered promiscuous mode [ 226.111099][ T6413] loop1: detected capacity change from 0 to 512 [ 226.344770][ T6415] Can't find ip_set type hash:ne [ 226.389085][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 226.455854][ T6413] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.478: EA inode hash validation failed [ 226.473343][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 226.475777][ T6409] EXT4-fs warning (device loop6): ext4_xattr_inode_get:506: inode #11: comm syz.6.477: EA inode hash validation failed [ 226.481809][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.502881][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.514199][ T6160] device veth0_macvtap entered promiscuous mode [ 226.525078][ T6160] device veth1_macvtap entered promiscuous mode [ 226.552490][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.565441][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.575513][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.585994][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.586119][ T6413] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.478: corrupted inode contents [ 226.600578][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.620706][ T6409] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.477: corrupted inode contents [ 226.733821][ T6409] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #15: comm syz.6.477: mark_inode_dirty error [ 226.800117][ T6409] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.477: corrupted inode contents [ 226.834471][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.844629][ T6413] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.478: mark_inode_dirty error [ 226.856686][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.867895][ T6413] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.478: corrupted inode contents [ 226.880454][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.892381][ T6160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.901774][ T6413] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2952: inode #15: comm syz.1.478: mark_inode_dirty error [ 226.916254][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.924571][ T6413] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2955: inode #15: comm syz.1.478: mark inode dirty (error -117) [ 226.946215][ T6427] Can't find ip_set type hash:ne [ 226.951945][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.960204][ T6409] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2952: inode #15: comm syz.6.477: mark_inode_dirty error [ 226.982336][ T6409] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2955: inode #15: comm syz.6.477: mark inode dirty (error -117) [ 227.003539][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.026469][ T6409] EXT4-fs warning (device loop6): ext4_evict_inode:304: xattr delete (err -117) [ 227.047078][ T6437] Zero length message leads to an empty skb [ 227.057630][ T6409] EXT4-fs (loop6): 1 orphan inode deleted [ 227.068345][ T6413] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 227.088443][ T6413] EXT4-fs (loop1): 1 orphan inode deleted [ 227.092918][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.094303][ T6413] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 227.103770][ T6409] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 227.213015][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.258241][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.268131][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.377290][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.443824][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.528691][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.593287][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.660762][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.673205][ T6160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.687014][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.734423][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.950502][ T6160] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.986075][ T6160] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.032950][ T6160] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.089028][ T6160] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.429423][ T4259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.470099][ T4259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.539609][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 228.567386][ T4482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.575572][ T4482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.604396][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.918092][ T6465] loop7: detected capacity change from 0 to 1024 [ 230.042283][ T6478] loop5: detected capacity change from 0 to 1024 [ 230.344515][ T6481] netlink: 36 bytes leftover after parsing attributes in process `syz.6.488'. [ 231.370772][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.8.490'. [ 232.217074][ T6499] netlink: 48 bytes leftover after parsing attributes in process `syz.6.491'. [ 232.323267][ T6483] Can't find ip_set type hash:ne [ 232.929718][ T6497] Can't find ip_set type hash:ne [ 233.178828][ T6507] loop5: detected capacity change from 0 to 512 [ 233.287359][ T6509] device syzkaller0 entered promiscuous mode [ 233.323637][ T6507] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.493: EA inode hash validation failed [ 233.390376][ T6507] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.493: corrupted inode contents [ 233.403162][ T6507] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #15: comm syz.5.493: mark_inode_dirty error [ 233.427370][ T6507] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.493: corrupted inode contents [ 233.564000][ T6507] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2952: inode #15: comm syz.5.493: mark_inode_dirty error [ 233.679043][ T6507] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2955: inode #15: comm syz.5.493: mark inode dirty (error -117) [ 233.682035][ T6507] EXT4-fs warning (device loop5): ext4_evict_inode:304: xattr delete (err -117) [ 233.682149][ T6507] EXT4-fs (loop5): 1 orphan inode deleted [ 233.682172][ T6507] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 233.726336][ T6529] loop6: detected capacity change from 0 to 1024 [ 235.174043][ T6546] netlink: 36 bytes leftover after parsing attributes in process `syz.5.501'. [ 236.218299][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.7.502'. [ 237.313255][ T6563] Can't find ip_set type hash:ne [ 237.471004][ T6571] netlink: 36 bytes leftover after parsing attributes in process `syz.6.507'. [ 237.848459][ T6569] Can't find ip_set type hash:ne [ 238.185112][ T6579] loop6: detected capacity change from 0 to 1024 [ 238.349785][ T6578] device syzkaller0 entered promiscuous mode [ 238.477344][ T6586] loop6: detected capacity change from 0 to 512 [ 238.975530][ T6601] loop7: detected capacity change from 0 to 512 [ 239.007009][ T6598] netlink: 36 bytes leftover after parsing attributes in process `syz.8.513'. [ 239.047396][ T6586] EXT4-fs warning (device loop6): ext4_xattr_inode_get:506: inode #11: comm syz.6.512: EA inode hash validation failed [ 239.139984][ T6586] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.512: corrupted inode contents [ 239.672705][ T6586] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #15: comm syz.6.512: mark_inode_dirty error [ 239.685199][ T6586] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.512: corrupted inode contents [ 239.744332][ T6586] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2952: inode #15: comm syz.6.512: mark_inode_dirty error [ 239.803054][ T6586] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2955: inode #15: comm syz.6.512: mark inode dirty (error -117) [ 240.058436][ T6586] EXT4-fs warning (device loop6): ext4_evict_inode:304: xattr delete (err -117) [ 240.082052][ T6586] EXT4-fs (loop6): 1 orphan inode deleted [ 240.242291][ T6586] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 240.270041][ T6601] EXT4-fs warning (device loop7): ext4_xattr_inode_get:506: inode #11: comm syz.7.514: EA inode hash validation failed [ 240.338650][ T6601] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.514: corrupted inode contents [ 240.383361][ T6601] EXT4-fs error (device loop7): ext4_dirty_inode:6077: inode #15: comm syz.7.514: mark_inode_dirty error [ 240.598794][ T6601] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.514: corrupted inode contents [ 241.121595][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 241.138572][ T6601] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2952: inode #15: comm syz.7.514: mark_inode_dirty error [ 241.173066][ T6601] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2955: inode #15: comm syz.7.514: mark inode dirty (error -117) [ 241.324221][ T6601] EXT4-fs warning (device loop7): ext4_evict_inode:304: xattr delete (err -117) [ 241.352688][ T6621] loop8: detected capacity change from 0 to 1024 [ 241.376595][ T6601] EXT4-fs (loop7): 1 orphan inode deleted [ 241.398376][ T6601] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 242.293099][ T6626] Can't find ip_set type hash:ne [ 242.476537][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.5.521'. [ 243.187522][ T6635] Can't find ip_set type hash:ne [ 243.561923][ T6648] loop7: detected capacity change from 0 to 1024 [ 243.632012][ T6643] device syzkaller0 entered promiscuous mode [ 244.684557][ T6668] netlink: 36 bytes leftover after parsing attributes in process `syz.5.528'. [ 244.775602][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'. [ 245.626455][ T6672] loop1: detected capacity change from 0 to 512 [ 245.858261][ T6672] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.531: EA inode hash validation failed [ 245.872907][ T6672] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.531: corrupted inode contents [ 245.892351][ T6672] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.531: mark_inode_dirty error [ 246.001960][ T6672] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.531: corrupted inode contents [ 246.172741][ T6672] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2952: inode #15: comm syz.1.531: mark_inode_dirty error [ 246.351881][ T6672] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2955: inode #15: comm syz.1.531: mark inode dirty (error -117) [ 246.527548][ T6672] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 246.658820][ T6672] EXT4-fs (loop1): 1 orphan inode deleted [ 246.761142][ T6672] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 246.811810][ T6687] Can't find ip_set type hash:ne [ 247.797254][ T6697] loop8: detected capacity change from 0 to 512 [ 248.008613][ T6697] EXT4-fs warning (device loop8): ext4_xattr_inode_get:506: inode #11: comm syz.8.536: EA inode hash validation failed [ 248.055092][ T6697] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #15: comm syz.8.536: corrupted inode contents [ 248.130636][ T6697] EXT4-fs error (device loop8): ext4_dirty_inode:6077: inode #15: comm syz.8.536: mark_inode_dirty error [ 248.179191][ T6697] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #15: comm syz.8.536: corrupted inode contents [ 248.253467][ T6696] netlink: 36 bytes leftover after parsing attributes in process `syz.5.535'. [ 248.284065][ T6697] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2952: inode #15: comm syz.8.536: mark_inode_dirty error [ 248.338874][ T6697] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2955: inode #15: comm syz.8.536: mark inode dirty (error -117) [ 248.359563][ T6697] EXT4-fs warning (device loop8): ext4_evict_inode:304: xattr delete (err -117) [ 248.376101][ T6706] device syzkaller0 entered promiscuous mode [ 248.407989][ T6697] EXT4-fs (loop8): 1 orphan inode deleted [ 248.428253][ T6697] EXT4-fs (loop8): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 248.828303][ T6712] loop6: detected capacity change from 0 to 1024 [ 249.590670][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 250.441100][ T6729] netlink: 36 bytes leftover after parsing attributes in process `syz.5.542'. [ 252.219269][ T6746] Can't find ip_set type hash:ne [ 252.544559][ T6761] loop7: detected capacity change from 0 to 512 [ 252.710560][ T6761] EXT4-fs warning (device loop7): ext4_xattr_inode_get:506: inode #11: comm syz.7.549: EA inode hash validation failed [ 252.711712][ T6761] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.549: corrupted inode contents [ 252.713569][ T6761] EXT4-fs error (device loop7): ext4_dirty_inode:6077: inode #15: comm syz.7.549: mark_inode_dirty error [ 252.714766][ T6761] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.549: corrupted inode contents [ 252.715478][ T6761] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2952: inode #15: comm syz.7.549: mark_inode_dirty error [ 252.716333][ T6761] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2955: inode #15: comm syz.7.549: mark inode dirty (error -117) [ 252.721426][ T6761] EXT4-fs warning (device loop7): ext4_evict_inode:304: xattr delete (err -117) [ 252.721787][ T6761] EXT4-fs (loop7): 1 orphan inode deleted [ 252.721855][ T6761] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 252.788959][ T6770] netlink: 36 bytes leftover after parsing attributes in process `syz.8.550'. [ 253.717296][ T6768] Can't find ip_set type hash:ne [ 254.533890][ T6776] device syzkaller0 entered promiscuous mode [ 254.935930][ T6786] loop7: detected capacity change from 0 to 512 [ 255.014602][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.8.553'. [ 255.432103][ T6786] EXT4-fs warning (device loop7): ext4_xattr_inode_get:506: inode #11: comm syz.7.554: EA inode hash validation failed [ 255.648855][ T6786] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.554: corrupted inode contents [ 255.679050][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.685437][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.830691][ T6796] netlink: 36 bytes leftover after parsing attributes in process `syz.6.555'. [ 256.562226][ T6786] EXT4-fs error (device loop7): ext4_dirty_inode:6077: inode #15: comm syz.7.554: mark_inode_dirty error [ 256.642380][ T6803] binder: 6802:6803 ioctl c0306201 0 returned -14 [ 256.648968][ T6786] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.554: corrupted inode contents [ 256.649510][ T6786] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2952: inode #15: comm syz.7.554: mark_inode_dirty error [ 256.778362][ T6786] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2955: inode #15: comm syz.7.554: mark inode dirty (error -117) [ 256.906814][ T6786] EXT4-fs warning (device loop7): ext4_evict_inode:304: xattr delete (err -117) [ 257.000505][ T6786] EXT4-fs (loop7): 1 orphan inode deleted [ 257.006859][ T6786] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 257.075493][ T6813] loop6: detected capacity change from 0 to 512 [ 257.237949][ T6809] Can't find ip_set type hash:ne [ 257.324018][ T6813] EXT4-fs warning (device loop6): ext4_xattr_inode_get:506: inode #11: comm syz.6.561: EA inode hash validation failed [ 257.418537][ T6813] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.561: corrupted inode contents [ 257.478579][ T6813] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #15: comm syz.6.561: mark_inode_dirty error [ 257.548311][ T6813] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.561: corrupted inode contents [ 257.633335][ T6829] netlink: 36 bytes leftover after parsing attributes in process `syz.5.562'. [ 258.310576][ T6828] Can't find ip_set type hash:ne [ 258.850067][ T6813] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2952: inode #15: comm syz.6.561: mark_inode_dirty error [ 258.899733][ T6813] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2955: inode #15: comm syz.6.561: mark inode dirty (error -117) [ 258.927870][ T6813] EXT4-fs warning (device loop6): ext4_evict_inode:304: xattr delete (err -117) [ 258.990560][ T6813] EXT4-fs (loop6): 1 orphan inode deleted [ 258.996483][ T6813] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 259.034053][ T6836] device syzkaller0 entered promiscuous mode [ 260.489419][ T6849] netlink: 36 bytes leftover after parsing attributes in process `syz.8.567'. [ 261.213035][ T6859] binder: 6856:6859 ioctl c0306201 0 returned -14 [ 262.194942][ T6869] Can't find ip_set type hash:ne [ 263.121285][ T6891] netlink: 36 bytes leftover after parsing attributes in process `syz.6.575'. [ 263.789703][ T6888] Can't find ip_set type hash:ne [ 263.947183][ T6892] device syzkaller0 entered promiscuous mode [ 263.970210][ T6897] loop1: detected capacity change from 0 to 512 [ 264.176942][ T6897] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.576: EA inode hash validation failed [ 264.203930][ T6897] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.576: corrupted inode contents [ 264.242547][ T6897] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.576: mark_inode_dirty error [ 264.265101][ T6897] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.576: corrupted inode contents [ 264.279155][ T6897] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2952: inode #15: comm syz.1.576: mark_inode_dirty error [ 264.298072][ T6897] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2955: inode #15: comm syz.1.576: mark inode dirty (error -117) [ 264.317629][ T6897] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 264.327063][ T6897] EXT4-fs (loop1): 1 orphan inode deleted [ 264.339592][ T6897] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 265.209703][ T6931] netlink: 36 bytes leftover after parsing attributes in process `syz.8.583'. [ 266.189977][ T6936] binder: 6934:6936 ioctl c0306201 0 returned -14 [ 267.294838][ T6948] Can't find ip_set type hash:ne [ 267.557151][ T6960] netlink: 36 bytes leftover after parsing attributes in process `syz.8.588'. [ 267.951947][ T6954] Can't find ip_set type hash:ne [ 268.668649][ T6984] netlink: 36 bytes leftover after parsing attributes in process `syz.8.594'. [ 269.628970][ T6991] binder: BINDER_SET_CONTEXT_MGR already set [ 269.688504][ T6991] binder: 6989:6991 ioctl 4018620d 200000004a80 returned -16 [ 269.768806][ T6996] loop7: detected capacity change from 0 to 1024 [ 270.880908][ T7023] netlink: 36 bytes leftover after parsing attributes in process `syz.6.602'. [ 271.610837][ T7021] Can't find ip_set type hash:ne [ 271.690564][ T7011] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 271.699978][ T7011] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 271.973194][ T7027] Can't find ip_set type hash:ne [ 271.989075][ T7015] device syzkaller0 entered promiscuous mode [ 272.457811][ T7043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.607'. [ 273.404846][ T7052] loop1: detected capacity change from 0 to 512 [ 273.498384][ T7052] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.610: EA inode hash validation failed [ 273.599888][ T7052] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.610: corrupted inode contents [ 273.700574][ T7052] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.610: mark_inode_dirty error [ 273.759862][ T7052] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.610: corrupted inode contents [ 273.824840][ T7052] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2952: inode #15: comm syz.1.610: mark_inode_dirty error [ 273.909216][ T7052] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2955: inode #15: comm syz.1.610: mark inode dirty (error -117) [ 273.991236][ T7052] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 274.018641][ T7052] EXT4-fs (loop1): 1 orphan inode deleted [ 274.044970][ T7052] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 274.578008][ T7083] netlink: 36 bytes leftover after parsing attributes in process `syz.6.614'. [ 275.238791][ T7080] Can't find ip_set type hash:ne [ 275.577346][ T7093] loop5: detected capacity change from 0 to 256 [ 275.857258][ T7093] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 275.962636][ T7093] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 275.999827][ T7099] device syzkaller0 entered promiscuous mode [ 276.041698][ T7094] Can't find ip_set type hash:ne [ 276.392785][ T7110] netlink: 36 bytes leftover after parsing attributes in process `syz.6.620'. [ 277.392458][ T7124] loop5: detected capacity change from 0 to 1024 [ 278.403980][ T7139] netlink: 36 bytes leftover after parsing attributes in process `syz.8.626'. [ 279.146992][ T7137] Can't find ip_set type hash:ne [ 279.321930][ T7150] loop5: detected capacity change from 0 to 512 [ 279.391081][ T7153] device syzkaller0 entered promiscuous mode [ 279.558867][ T7165] netlink: 36 bytes leftover after parsing attributes in process `syz.6.635'. [ 279.570458][ T7150] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.632: EA inode hash validation failed [ 279.807280][ T7150] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.632: corrupted inode contents [ 280.112904][ T7150] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #15: comm syz.5.632: mark_inode_dirty error [ 280.412473][ T7150] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.632: corrupted inode contents [ 280.463487][ T7150] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2952: inode #15: comm syz.5.632: mark_inode_dirty error [ 280.498254][ T7150] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2955: inode #15: comm syz.5.632: mark inode dirty (error -117) [ 280.526795][ T7150] EXT4-fs warning (device loop5): ext4_evict_inode:304: xattr delete (err -117) [ 280.559314][ T7150] EXT4-fs (loop5): 1 orphan inode deleted [ 280.565101][ T7150] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 280.817498][ T7184] netlink: 36 bytes leftover after parsing attributes in process `syz.7.640'. [ 281.503328][ T7179] Can't find ip_set type hash:ne [ 281.515833][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 281.526137][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.533883][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.544274][ T7186] device bridge_slave_0 left promiscuous mode [ 281.551700][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.583459][ T7186] device bridge_slave_1 left promiscuous mode [ 281.590005][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.697798][ T7186] bond0: (slave bond_slave_0): Releasing backup interface [ 281.736770][ T7186] bond0: (slave bond_slave_1): Releasing backup interface [ 281.978642][ T7186] team0: Port device team_slave_0 removed [ 282.054182][ T7186] team0: Port device team_slave_1 removed [ 282.162682][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.328311][ T7186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.343912][ T7193] kvm [7189]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0 [ 282.422410][ T7193] kvm [7189]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 282.437679][ T7193] kvm [7189]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x100000000 [ 282.447333][ T7193] kvm [7189]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 282.485539][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.547210][ T7186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.911460][ T7226] netlink: 36 bytes leftover after parsing attributes in process `syz.8.649'. [ 283.190817][ T7225] loop6: detected capacity change from 0 to 512 [ 283.663083][ T7225] EXT4-fs warning (device loop6): ext4_xattr_inode_get:506: inode #11: comm syz.6.650: EA inode hash validation failed [ 283.677350][ T7225] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.650: corrupted inode contents [ 284.429469][ T7238] Can't find ip_set type hash:ne [ 284.434645][ T7225] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #15: comm syz.6.650: mark_inode_dirty error [ 284.539279][ T7225] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.650: corrupted inode contents [ 284.594265][ T7225] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2952: inode #15: comm syz.6.650: mark_inode_dirty error [ 284.690146][ T7225] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2955: inode #15: comm syz.6.650: mark inode dirty (error -117) [ 284.904294][ T7225] EXT4-fs warning (device loop6): ext4_evict_inode:304: xattr delete (err -117) [ 284.944086][ T7225] EXT4-fs (loop6): 1 orphan inode deleted [ 284.988099][ T7225] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 287.416136][ T7310] binder: BINDER_SET_CONTEXT_MGR already set [ 287.446456][ T7310] binder: 7309:7310 ioctl 4018620d 200000004a80 returned -16 [ 287.880877][ T7324] netlink: 36 bytes leftover after parsing attributes in process `syz.5.664'. [ 290.112208][ T7340] device syzkaller0 entered promiscuous mode [ 290.525202][ T7363] netlink: 7 bytes leftover after parsing attributes in process `syz.5.684'. [ 290.572668][ T7366] loop6: detected capacity change from 0 to 512 [ 290.738995][ T7375] netlink: 36 bytes leftover after parsing attributes in process `syz.8.687'. [ 290.755886][ T7366] EXT4-fs warning (device loop6): ext4_xattr_inode_get:506: inode #11: comm syz.6.685: EA inode hash validation failed [ 291.497101][ T7366] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.685: corrupted inode contents [ 292.114548][ T7366] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #15: comm syz.6.685: mark_inode_dirty error [ 292.211894][ T7366] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.685: corrupted inode contents [ 292.331290][ T7366] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2952: inode #15: comm syz.6.685: mark_inode_dirty error [ 292.668390][ T7366] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2955: inode #15: comm syz.6.685: mark inode dirty (error -117) [ 292.676778][ T7382] loop8: detected capacity change from 0 to 512 [ 292.750151][ T7366] EXT4-fs warning (device loop6): ext4_evict_inode:304: xattr delete (err -117) [ 292.768634][ T7366] EXT4-fs (loop6): 1 orphan inode deleted [ 292.786564][ T7366] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 292.902327][ T7382] EXT4-fs warning (device loop8): ext4_xattr_inode_get:506: inode #11: comm syz.8.690: EA inode hash validation failed [ 293.038667][ T7382] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #15: comm syz.8.690: corrupted inode contents [ 293.072374][ T7382] EXT4-fs error (device loop8): ext4_dirty_inode:6077: inode #15: comm syz.8.690: mark_inode_dirty error [ 293.138818][ T7382] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #15: comm syz.8.690: corrupted inode contents [ 293.224549][ T7382] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2952: inode #15: comm syz.8.690: mark_inode_dirty error [ 293.298224][ T7382] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2955: inode #15: comm syz.8.690: mark inode dirty (error -117) [ 293.394466][ T7382] EXT4-fs warning (device loop8): ext4_evict_inode:304: xattr delete (err -117) [ 293.418783][ T7382] EXT4-fs (loop8): 1 orphan inode deleted [ 293.424677][ T7382] EXT4-fs (loop8): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 294.236490][ T7412] kvm [7411]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x495a [ 294.244202][ T7422] loop7: detected capacity change from 0 to 128 [ 294.252082][ T7412] kvm [7411]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x495a [ 294.285535][ T7412] kvm [7411]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x11e5 [ 294.358498][ T7412] kvm [7411]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x11e5 [ 294.379932][ T7425] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 294.417563][ T7412] kvm [7411]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x928 [ 294.523606][ T7412] kvm [7411]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x928 [ 294.623681][ T7412] kvm [7411]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x28e8 [ 294.666825][ T7412] kvm [7411]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x28e8 [ 294.702369][ T7412] kvm [7411]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x9f5 [ 294.757600][ T7437] loop7: detected capacity change from 0 to 1024 [ 294.762982][ T7439] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 294.766512][ T7412] kvm [7411]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x9f5 [ 295.158516][ T7451] netlink: 36 bytes leftover after parsing attributes in process `syz.5.700'. [ 296.117365][ T7454] loop8: detected capacity change from 0 to 512 [ 296.346415][ T7454] EXT4-fs warning (device loop8): ext4_xattr_inode_get:506: inode #11: comm syz.8.703: EA inode hash validation failed [ 296.438594][ T7454] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #15: comm syz.8.703: corrupted inode contents [ 296.473052][ T7454] EXT4-fs error (device loop8): ext4_dirty_inode:6077: inode #15: comm syz.8.703: mark_inode_dirty error [ 296.525895][ T7454] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #15: comm syz.8.703: corrupted inode contents [ 296.598816][ T7454] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2952: inode #15: comm syz.8.703: mark_inode_dirty error [ 296.688515][ T7454] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2955: inode #15: comm syz.8.703: mark inode dirty (error -117) [ 296.748468][ T7454] EXT4-fs warning (device loop8): ext4_evict_inode:304: xattr delete (err -117) [ 296.778007][ T7454] EXT4-fs (loop8): 1 orphan inode deleted [ 296.818398][ T7454] EXT4-fs (loop8): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 297.264944][ T7491] netlink: 36 bytes leftover after parsing attributes in process `syz.1.714'. [ 298.257675][ T7517] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 298.426987][ T7520] loop1: detected capacity change from 0 to 1024 [ 299.385410][ T7531] loop8: detected capacity change from 0 to 512 [ 299.583991][ T7531] EXT4-fs warning (device loop8): ext4_xattr_inode_get:506: inode #11: comm syz.8.725: EA inode hash validation failed [ 299.653290][ T7559] device syzkaller0 entered promiscuous mode [ 299.669059][ T7531] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #15: comm syz.8.725: corrupted inode contents [ 299.739737][ T7531] EXT4-fs error (device loop8): ext4_dirty_inode:6077: inode #15: comm syz.8.725: mark_inode_dirty error [ 299.759286][ T7531] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #15: comm syz.8.725: corrupted inode contents [ 299.802867][ T7531] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2952: inode #15: comm syz.8.725: mark_inode_dirty error [ 300.058258][ T7531] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2955: inode #15: comm syz.8.725: mark inode dirty (error -117) [ 300.270621][ T7531] EXT4-fs warning (device loop8): ext4_evict_inode:304: xattr delete (err -117) [ 300.472504][ T7531] EXT4-fs (loop8): 1 orphan inode deleted [ 300.499596][ T7575] loop7: detected capacity change from 0 to 256 [ 300.507126][ T7531] EXT4-fs (loop8): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 300.972271][ T7580] loop1: detected capacity change from 0 to 1024 [ 301.304109][ T7592] ipt_CLUSTERIP: Please specify destination IP [ 304.017747][ T7666] Invalid option length (57448) for dns_resolver key [ 304.035668][ T7667] loop8: detected capacity change from 0 to 512 [ 304.194795][ T7667] EXT4-fs warning (device loop8): ext4_xattr_inode_get:506: inode #11: comm syz.8.747: EA inode hash validation failed [ 304.281243][ T7667] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #15: comm syz.8.747: corrupted inode contents [ 304.388726][ T7667] EXT4-fs error (device loop8): ext4_dirty_inode:6077: inode #15: comm syz.8.747: mark_inode_dirty error [ 304.410082][ T7667] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #15: comm syz.8.747: corrupted inode contents [ 304.461319][ T7667] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2952: inode #15: comm syz.8.747: mark_inode_dirty error [ 304.498662][ T7667] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2955: inode #15: comm syz.8.747: mark inode dirty (error -117) [ 304.563421][ T7667] EXT4-fs warning (device loop8): ext4_evict_inode:304: xattr delete (err -117) [ 304.598333][ T7667] EXT4-fs (loop8): 1 orphan inode deleted [ 304.604116][ T7667] EXT4-fs (loop8): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 305.855051][ T7699] loop7: detected capacity change from 0 to 1024 [ 306.265865][ T7706] loop8: detected capacity change from 0 to 128 [ 306.661977][ T7713] loop8: detected capacity change from 0 to 128 [ 306.857765][ T7717] binder: BINDER_SET_CONTEXT_MGR already set [ 306.905873][ T7717] binder: 7715:7717 ioctl 4018620d 200000004a80 returned -16 [ 307.160625][ T7726] loop5: detected capacity change from 0 to 128 [ 308.296205][ T7763] loop7: detected capacity change from 0 to 1024 [ 308.832353][ T7772] Invalid option length (57448) for dns_resolver key [ 309.139812][ T7779] loop6: detected capacity change from 0 to 764 [ 309.206847][ T7779] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 310.773914][ T7823] loop3: detected capacity change from 0 to 7 [ 310.821310][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.832452][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 310.840556][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.851498][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 310.890023][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.900991][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 310.969989][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.981151][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 311.018252][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.029305][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 311.039786][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.050761][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 311.095330][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.106355][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 311.119625][ T4184] ldm_validate_partition_table(): Disk read failed. [ 311.170733][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.181829][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 311.228397][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.239419][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 311.274885][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.285852][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 311.296796][ T4184] Dev loop3: unable to read RDB block 0 [ 311.303287][ T4184] loop3: unable to read partition table [ 311.322653][ T4184] loop3: partition table beyond EOD, truncated [ 311.351778][ T7823] ldm_validate_partition_table(): Disk read failed. [ 311.398986][ T7823] Dev loop3: unable to read RDB block 0 [ 311.436037][ T7823] loop3: unable to read partition table [ 311.458327][ T7823] loop3: partition table beyond EOD, truncated [ 311.498315][ T7823] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 311.554827][ T7826] ldm_validate_partition_table(): Disk read failed. [ 311.574847][ T7826] Dev loop3: unable to read RDB block 0 [ 311.595064][ T7826] loop3: unable to read partition table [ 311.613732][ T7826] loop3: partition table beyond EOD, truncated [ 311.642401][ T7826] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 313.339585][ T7880] loop8: detected capacity change from 0 to 256 [ 313.440898][ T7880] FAT-fs (loop8): Directory bread(block 64) failed [ 313.468567][ T7880] FAT-fs (loop8): Directory bread(block 65) failed [ 313.478767][ T7880] FAT-fs (loop8): Directory bread(block 66) failed [ 313.508629][ T7880] FAT-fs (loop8): Directory bread(block 67) failed [ 313.540926][ T7880] FAT-fs (loop8): Directory bread(block 68) failed [ 313.557739][ T7880] FAT-fs (loop8): Directory bread(block 69) failed [ 313.577100][ T7880] FAT-fs (loop8): Directory bread(block 70) failed [ 313.614325][ T7880] FAT-fs (loop8): Directory bread(block 71) failed [ 313.633856][ T7880] FAT-fs (loop8): Directory bread(block 72) failed [ 313.665120][ T7880] FAT-fs (loop8): Directory bread(block 73) failed [ 314.028646][ T7895] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 314.524971][ T7910] Invalid option length (57448) for dns_resolver key [ 315.715567][ T7918] loop7: detected capacity change from 0 to 512 [ 315.812434][ T7918] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.795: inode has both inline data and extents flags [ 315.913992][ T7925] loop1: detected capacity change from 0 to 512 [ 315.951071][ T7918] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.795: couldn't read orphan inode 15 (err -117) [ 316.000729][ T7918] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,acl,lazytime,noblock_validity,errors=continue,,errors=continue. Quota mode: writeback. [ 316.169515][ T7925] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,sysvgroups,grpjquota=,. Quota mode: writeback. [ 316.278265][ T7918] loop_set_status: loop7 () has still dirty pages (nrpages=2) [ 316.279016][ T7925] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.563773][ T7953] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 316.932164][ T7960] loop7: detected capacity change from 0 to 512 [ 316.985833][ T7960] EXT4-fs (loop7): inline encryption not supported [ 317.005988][ T7960] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 317.052472][ T7960] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 317.101210][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.107678][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.137025][ T7960] EXT4-fs (loop7): 1 truncate cleaned up [ 317.234100][ T7960] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 317.392771][ T7978] loop8: detected capacity change from 0 to 256 [ 317.491292][ T7978] FAT-fs (loop8): Directory bread(block 64) failed [ 317.497884][ T7978] FAT-fs (loop8): Directory bread(block 65) failed [ 317.546261][ T7978] FAT-fs (loop8): Directory bread(block 66) failed [ 317.594555][ T7978] FAT-fs (loop8): Directory bread(block 67) failed [ 317.652763][ T7978] FAT-fs (loop8): Directory bread(block 68) failed [ 317.669998][ T7978] FAT-fs (loop8): Directory bread(block 69) failed [ 317.683255][ T7983] netlink: 32 bytes leftover after parsing attributes in process `syz.5.808'. [ 317.686903][ T7978] FAT-fs (loop8): Directory bread(block 70) failed [ 317.699352][ T7978] FAT-fs (loop8): Directory bread(block 71) failed [ 317.705957][ T7978] FAT-fs (loop8): Directory bread(block 72) failed [ 317.713030][ T7978] FAT-fs (loop8): Directory bread(block 73) failed [ 317.848281][ T2304] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 318.026121][ T7996] binder: BINDER_SET_CONTEXT_MGR already set [ 318.048949][ T7996] binder: 7995:7996 ioctl 4018620d 200000004a80 returned -16 [ 318.208591][ T2304] usb 2-1: config 0 has no interfaces? [ 318.214378][ T2304] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 318.220098][ T8002] loop5: detected capacity change from 0 to 4096 [ 318.233449][ T2304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.263518][ T2304] usb 2-1: config 0 descriptor?? [ 318.281855][ T8002] EXT4-fs (loop5): inline encryption not supported [ 318.474932][ T26] audit: type=1326 audit(1778899668.192:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.8.816" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9087821e59 code=0x7ffc0000 [ 318.514101][ T4234] usb 2-1: USB disconnect, device number 2 [ 318.524462][ T26] audit: type=1326 audit(1778899668.222:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.8.816" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9087821e59 code=0x7ffc0000 [ 318.553159][ T8002] EXT4-fs (loop5): Test dummy encryption mode enabled [ 318.568744][ T8002] EXT4-fs (loop5): Test dummy encryption mode enabled [ 318.576246][ T8002] EXT4-fs (loop5): Ignoring removed bh option [ 318.582027][ T26] audit: type=1326 audit(1778899668.222:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.8.816" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9087821e59 code=0x7ffc0000 [ 318.603971][ T8002] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 318.651850][ T26] audit: type=1326 audit(1778899668.222:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.8.816" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9087821e59 code=0x7ffc0000 [ 318.706135][ T8002] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 318.736398][ T8002] System zones: 0-5 [ 318.790674][ T8002] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,test_dummy_encryption,bh,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 318.792149][ T26] audit: type=1326 audit(1778899668.222:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.8.816" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9087821e59 code=0x7ffc0000 [ 319.681123][ T26] audit: type=1326 audit(1778899668.222:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.8.816" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9087821e59 code=0x7ffc0000 [ 319.705044][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.719942][ T8035] netlink: 24 bytes leftover after parsing attributes in process `syz.8.821'. [ 319.767305][ T8002] fscrypt (loop5): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 319.790247][ T26] audit: type=1326 audit(1778899668.222:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.8.816" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9087821e59 code=0x7ffc0000 [ 321.145609][ T8051] 8021q: VLANs not supported on vcan0 [ 321.201845][ T26] audit: type=1326 audit(1778899668.222:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.8.816" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f9087821e59 code=0x7ffc0000 [ 321.259669][ T8028] overlayfs: failed to resolve './bus': -2 [ 321.311499][ T8054] loop8: detected capacity change from 0 to 16 [ 321.371075][ T26] audit: type=1326 audit(1778899668.232:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.8.816" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9087821e59 code=0x7ffc0000 [ 321.395130][ T26] audit: type=1326 audit(1778899668.232:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.8.816" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9087821e59 code=0x7ffc0000 [ 321.447025][ T8054] erofs: (device loop8): mounted with root inode @ nid 36. [ 321.511587][ T8062] loop7: detected capacity change from 0 to 512 [ 321.527055][ T8054] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 321.705129][ T8062] EXT4-fs warning (device loop7): ext4_xattr_inode_get:506: inode #11: comm syz.7.826: EA inode hash validation failed [ 321.748808][ T8033] Invalid option length (57448) for dns_resolver key [ 321.782580][ T8062] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.826: corrupted inode contents [ 321.849100][ T8062] EXT4-fs error (device loop7): ext4_dirty_inode:6077: inode #15: comm syz.7.826: mark_inode_dirty error [ 321.914621][ T8062] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.826: corrupted inode contents [ 321.962821][ T8062] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2952: inode #15: comm syz.7.826: mark_inode_dirty error [ 322.031386][ T8062] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2955: inode #15: comm syz.7.826: mark inode dirty (error -117) [ 322.074936][ T8062] EXT4-fs warning (device loop7): ext4_evict_inode:304: xattr delete (err -117) [ 322.095085][ T8062] EXT4-fs (loop7): 1 orphan inode deleted [ 322.135493][ T8062] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 322.153413][ T8089] loop5: detected capacity change from 0 to 512 [ 322.607499][ T8089] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 322.819768][ T8089] EXT4-fs (loop5): orphan cleanup on readonly fs [ 323.115226][ T8089] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 323.182572][ T8089] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.831: corrupted inode contents [ 323.203897][ T8089] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #12: comm syz.5.831: mark_inode_dirty error [ 323.237894][ T8089] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.831: corrupted inode contents [ 323.268695][ T8089] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #12: comm syz.5.831: mark_inode_dirty error [ 323.296151][ T8089] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.831: corrupted inode contents [ 323.330497][ T8089] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 323.350884][ T8089] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.831: corrupted inode contents [ 323.397371][ T8089] EXT4-fs error (device loop5): ext4_truncate:4286: inode #12: comm syz.5.831: mark_inode_dirty error [ 323.434860][ T8089] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 323.465414][ T8089] EXT4-fs (loop5): 1 truncate cleaned up [ 323.496384][ T8089] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,nolazytime,auto_da_alloc=0x0000000000000005,minixdf,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2,errors=continue. Quota mode: writeback. [ 323.983912][ T8090] loop8: detected capacity change from 0 to 40427 [ 324.218861][ T8090] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 324.332276][ T8090] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 324.391522][ T8090] F2FS-fs (loop8): invalid crc_offset: 33558275 [ 324.465807][ T8090] F2FS-fs (loop8): Found nat_bits in checkpoint [ 324.765210][ T8090] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 324.812704][ T8090] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 325.903758][ T8148] fuse: Bad value for 'rootmode' [ 325.962804][ T8151] attempt to access beyond end of device [ 325.962804][ T8151] loop8: rw=2049, want=45104, limit=40427 [ 326.055445][ T8154] loop1: detected capacity change from 0 to 512 [ 326.343330][ T8163] loop6: detected capacity change from 0 to 256 [ 326.386552][ T8154] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 326.410390][ T8163] FAT-fs (loop6): Unrecognized mount option "uni_xlat$=1" or missing value [ 326.448645][ T8154] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 326.506680][ T6160] attempt to access beyond end of device [ 326.506680][ T6160] loop8: rw=2049, want=40968, limit=40427 [ 329.090104][ T8206] ipt_CLUSTERIP: Please specify destination IP [ 329.588721][ T4232] Bluetooth: hci0: command 0x0406 tx timeout [ 330.315973][ T8210] ipt_CLUSTERIP: Please specify destination IP [ 330.745694][ T8239] loop5: detected capacity change from 0 to 512 [ 331.719108][ T8239] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 331.839440][ T8239] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 332.177656][ T8257] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.359001][ T8303] overlayfs: failed to get inode (-116) [ 339.430182][ T8303] overlayfs: failed to get inode (-116) [ 339.556278][ T8319] overlayfs: failed to get inode (-116) [ 339.613967][ T8319] overlayfs: failed to get inode (-116) [ 340.113191][ T8341] loop5: detected capacity change from 0 to 128 [ 340.231608][ T8341] EXT4-fs (loop5): Test dummy encryption mode enabled [ 340.264739][ T8341] EXT4-fs (loop5): inline encryption not supported [ 340.618029][ T8341] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 340.618029][ T8341] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 340.618029][ T8341] [ 340.788920][ T8341] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,inode_readahead_blks=0x0000000000000010,noacl,,errors=continue. Quota mode: none. [ 340.866138][ T8341] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 341.155058][ T8341] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 341.367146][ T8362] loop5: detected capacity change from 0 to 1024 [ 341.515909][ T8362] EXT4-fs (loop5): Ignoring removed bh option [ 341.532813][ T8362] EXT4-fs warning (device loop5): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 341.575021][ T8322] loop7: detected capacity change from 0 to 40427 [ 341.613346][ T8367] loop6: detected capacity change from 0 to 256 [ 341.678790][ T8367] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0x702b3b70, utbl_chksum : 0xe619d30d) [ 341.709620][ T8367] exFAT-fs (loop6): error, invalid access to FAT (entry 0x00000005) bogus content (0x20ffffff) [ 341.741950][ T8322] F2FS-fs (loop7): invalid crc value [ 341.768364][ T8367] exFAT-fs (loop6): failed to initialize root inode [ 341.806534][ T8322] F2FS-fs (loop7): Found nat_bits in checkpoint [ 341.927287][ T8367] loop6: detected capacity change from 0 to 512 [ 342.153042][ T8367] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.881: iget: bad i_size value: 38620345925642 [ 342.174528][ T8322] F2FS-fs (loop7): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 342.209222][ T8367] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.881: couldn't read orphan inode 15 (err -117) [ 342.318381][ T8367] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 342.812608][ T8382] loop5: detected capacity change from 0 to 2048 [ 343.215004][ T8382] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 343.278493][ T8382] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.340085][ T8388] loop7: detected capacity change from 0 to 2048 [ 343.492300][ T8388] loop7: p1 p2 < > p3 < p5 > p4 [ 343.501313][ T8378] chnl_net:caif_netlink_parms(): no params data found [ 343.515442][ T8388] loop7: partition table partially beyond EOD, truncated [ 344.148622][ T8388] loop7: p1 size 917504 extends beyond EOD, truncated [ 344.203441][ T8388] loop7: p2 start 4278190080 is beyond EOD, truncated [ 344.272468][ T8388] loop7: p4 start 150994949 is beyond EOD, truncated [ 344.343513][ T8388] loop7: p5 size 917504 extends beyond EOD, truncated [ 344.382770][ T8378] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.391173][ T8378] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.399683][ T8378] device bridge_slave_0 entered promiscuous mode [ 344.408420][ T8378] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.415648][ T8378] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.424281][ T8378] device bridge_slave_1 entered promiscuous mode [ 344.534205][ T8378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.543493][ T2304] Bluetooth: hci5: command 0x0409 tx timeout [ 344.591309][ T8378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.634467][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 344.647433][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 344.670580][ T4184] udevd[4184]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 344.736849][ T8378] team0: Port device team_slave_0 added [ 344.761417][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 344.772642][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 344.791463][ T4184] udevd[4184]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 344.832909][ T8378] team0: Port device team_slave_1 added [ 344.946108][ T8378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.003595][ T8378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.121183][ T8378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.175966][ T8378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.218237][ T8378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.328219][ T8378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.483938][ T8378] device hsr_slave_0 entered promiscuous mode [ 345.510213][ T8378] device hsr_slave_1 entered promiscuous mode [ 345.573656][ T8428] loop5: detected capacity change from 0 to 512 [ 345.648056][ T8428] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 345.709916][ T8428] EXT4-fs (loop5): 1 truncate cleaned up [ 345.748738][ T8428] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 346.703128][ T4232] Bluetooth: hci5: command 0x041b tx timeout [ 349.237048][ T3031] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.387957][ T4232] Bluetooth: hci5: command 0x040f tx timeout [ 349.595410][ T3031] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.702614][ T3031] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.886644][ T8466] Illegal XDP return value 4294967274, expect packet loss! [ 349.938869][ T3031] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.246226][ T8472] loop5: detected capacity change from 0 to 512 [ 350.277002][ T8378] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 350.322204][ T8378] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 350.557732][ T8378] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 350.800918][ T8472] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 350.815070][ T8472] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.428302][ T4232] Bluetooth: hci5: command 0x0419 tx timeout [ 351.480480][ T8378] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 352.752325][ T8483] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 353.418791][ T8378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.488994][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 353.504665][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.533232][ T8378] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.573024][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 353.589151][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.612551][ T4870] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.619741][ T4870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.655265][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.703348][ T8512] device syzkaller0 entered promiscuous mode [ 353.730685][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 353.749102][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.767864][ T4870] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.775034][ T4870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.871122][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 353.915151][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.015918][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.031920][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.044877][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 354.053870][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 354.063318][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.229649][ T8528] loop5: detected capacity change from 0 to 256 [ 354.988244][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.996879][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 355.050314][ T8528] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 355.171174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.187963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.223593][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.805375][ T3031] device hsr_slave_0 left promiscuous mode [ 355.828863][ T8563] loop6: detected capacity change from 0 to 1024 [ 355.842475][ T3031] device hsr_slave_1 left promiscuous mode [ 355.858997][ T3031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.893541][ T3031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.025297][ T3031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.110206][ T3031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.365209][ T3031] device bridge_slave_1 left promiscuous mode [ 356.522475][ T3031] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.980061][ T3031] device bridge_slave_0 left promiscuous mode [ 356.986313][ T3031] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.116957][ T3031] device veth1_macvtap left promiscuous mode [ 357.125871][ T3031] device veth0_macvtap left promiscuous mode [ 357.165733][ T3031] device veth1_vlan left promiscuous mode [ 357.400329][ T3031] device veth0_vlan left promiscuous mode [ 359.025396][ T3031] team0 (unregistering): Port device team_slave_1 removed [ 359.099882][ T3031] team0 (unregistering): Port device team_slave_0 removed [ 359.174894][ T3031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.294569][ T3031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.433047][ T8613] loop5: detected capacity change from 0 to 512 [ 360.462392][ T8613] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 360.493597][ T3031] bond0 (unregistering): Released all slaves [ 360.524937][ T8613] EXT4-fs (loop5): 1 truncate cleaned up [ 360.531235][ T8613] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 360.685396][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 360.702150][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 360.768311][ T8378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.325355][ T8633] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.945'. [ 362.592469][ T8378] device veth0_vlan entered promiscuous mode [ 362.623911][ T8378] device veth1_vlan entered promiscuous mode [ 362.702806][ T8378] device veth0_macvtap entered promiscuous mode [ 362.713296][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 362.775480][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 362.865434][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 362.912921][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 362.935937][ T8659] Invalid option length (57448) for dns_resolver key [ 362.958783][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 362.979964][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 363.008054][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 363.017144][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 363.026101][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.034201][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.042207][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 363.095109][ T8378] device veth1_macvtap entered promiscuous mode [ 363.478529][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.556355][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.597893][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.632033][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.641989][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.652621][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.674247][ T8378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.681901][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 363.723697][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 363.802640][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.831208][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.872060][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.915233][ T8682] netlink: 60 bytes leftover after parsing attributes in process `syz.5.953'. [ 363.945645][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.148283][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.379459][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.597325][ T8378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.841731][ T8682] netlink: 60 bytes leftover after parsing attributes in process `syz.5.953'. [ 364.889062][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 364.957372][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 364.977334][ T8378] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.071034][ T8378] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.168165][ T8378] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.072833][ T8378] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.099361][ T8701] netlink: 'syz.1.958': attribute type 29 has an invalid length. [ 366.107468][ T8701] netlink: 'syz.1.958': attribute type 29 has an invalid length. [ 366.234705][ T8701] netlink: 'syz.1.958': attribute type 29 has an invalid length. [ 366.261920][ T8704] loop5: detected capacity change from 0 to 256 [ 366.369754][ T8704] FAT-fs (loop5): Unrecognized mount option "uni_xlat$=1" or missing value [ 366.370365][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.430938][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.492619][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 366.547858][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.608807][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.616374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 367.580075][ T8731] infiniband syz0: set active [ 367.587398][ T8731] infiniband syz0: added team_slave_0 [ 367.796794][ T8731] RDS/IB: syz0: added [ 367.804260][ T8731] smc: adding ib device syz0 with port count 1 [ 367.811103][ T8731] smc: ib device syz0 port 1 has pnetid [ 368.587071][ T8801] Invalid option length (57448) for dns_resolver key [ 369.357045][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 369.466483][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 370.264738][ T8851] loop6: detected capacity change from 0 to 1024 [ 370.376514][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 370.852281][ T8861] netlink: 'syz.7.1001': attribute type 39 has an invalid length. [ 371.819139][ T8895] loop9: detected capacity change from 0 to 1024 [ 372.363071][ T8900] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1011'. [ 373.033363][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1018'. [ 373.118244][ T8920] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1018'. [ 373.509221][ T8936] loop5: detected capacity change from 0 to 2048 [ 373.636153][ T8943] loop7: detected capacity change from 0 to 1024 [ 373.887205][ T8936] EXT4-fs error (device loop5): ext4_fill_super:4872: inode #2: comm syz.5.1021: inode has both inline data and extents flags [ 374.240441][ T8936] EXT4-fs (loop5): get root inode failed [ 374.533684][ T8936] EXT4-fs (loop5): mount failed [ 374.879676][ T8951] Invalid option length (57448) for dns_resolver key [ 376.355975][ T8982] loop7: detected capacity change from 0 to 512 [ 376.562578][ T8994] loop5: detected capacity change from 0 to 1024 [ 376.663241][ T8982] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 376.792513][ T8982] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.540050][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.546684][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.821426][ T9025] Invalid option length (57448) for dns_resolver key [ 380.221402][ T9043] device syzkaller0 entered promiscuous mode [ 382.502586][ T9083] device syzkaller0 entered promiscuous mode [ 382.578463][ T4236] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 382.868420][ T4236] usb 7-1: Using ep0 maxpacket: 16 [ 383.695710][ T4236] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 383.705251][ T4236] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.715793][ T4236] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 383.928323][ T4236] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 383.937521][ T4236] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.018424][ T4236] usb 7-1: Product: syz [ 384.022654][ T4236] usb 7-1: Manufacturer: syz [ 384.052890][ T9110] loop6: detected capacity change from 0 to 512 [ 384.068228][ T4236] usb 7-1: SerialNumber: syz [ 384.118338][ T4236] usb 7-1: can't set config #1, error -71 [ 384.128028][ T4236] usb 7-1: USB disconnect, device number 2 [ 384.194959][ T9110] EXT4-fs (loop6): Test dummy encryption mode enabled [ 385.167408][ T9110] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.1064: inode #1: comm syz.6.1064: iget: illegal inode # [ 385.228636][ T9110] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1064: error while reading EA inode 1 err=-117 [ 385.261094][ T9110] EXT4-fs (loop6): 1 orphan inode deleted [ 385.286484][ T9110] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,norecovery,barrier,nodioread_nolock,minixdf,usrjquota=,debug_want_extra_isize=0x0000000000000008,usrjquota=,test_dummy_encryption=v1,max_batch_time=0x0000000000000001,noquota,,errors=continue. Quota mode: none. [ 390.011242][ T9155] loop6: detected capacity change from 0 to 512 [ 390.889133][ T9163] Invalid option length (57448) for dns_resolver key [ 391.146276][ T9155] EXT4-fs (loop6): orphan cleanup on readonly fs [ 391.155257][ T9155] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.1074: corrupted inode contents [ 391.169843][ T9155] EXT4-fs (loop6): Remounting filesystem read-only [ 391.176387][ T9155] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 391.185843][ T9155] EXT4-fs (loop6): Remounting filesystem read-only [ 391.192432][ T9155] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.1074: corrupted inode contents [ 391.204853][ T9155] EXT4-fs (loop6): Remounting filesystem read-only [ 391.211617][ T9155] EXT4-fs error (device loop6): ext4_evict_inode:332: inode #15: comm syz.6.1074: mark_inode_dirty error [ 391.223712][ T9155] EXT4-fs (loop6): Remounting filesystem read-only [ 391.230400][ T9155] EXT4-fs (loop6): 1 orphan inode deleted [ 391.236146][ T9155] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x0000000000010000,errors=remount-ro,quota,resgid=0x0000000000000000,acl,init_itable=0x000000000000d3d0,. Quota mode: writeback. [ 392.100111][ T9175] device syzkaller0 entered promiscuous mode [ 392.336455][ T9180] loop5: detected capacity change from 0 to 1024 [ 392.414289][ T9180] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 392.493158][ T9180] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 392.538563][ T9180] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #3: comm syz.5.1077: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 392.582179][ T9185] loop9: detected capacity change from 0 to 512 [ 392.622579][ T9180] EXT4-fs (loop5): no journal found [ 392.661193][ T9180] EXT4-fs (loop5): can't get journal size [ 392.674897][ T9180] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000002000,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback. [ 392.697136][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.008746][ T9200] loop6: detected capacity change from 0 to 16 [ 393.029068][ T9185] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 393.066503][ T9200] erofs: (device loop6): mounted with root inode @ nid 36. [ 393.103137][ T9185] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 393.118672][ T9185] EXT4-fs error (device loop9): ext4_resize_begin:61: comm syz.9.1079: resize_inode disabled but reserved GDT blocks non-zero [ 393.236230][ T9203] loop7: detected capacity change from 0 to 16 [ 393.335640][ T9203] erofs: (device loop7): mounted with root inode @ nid 36. [ 393.424083][ T9203] erofs: (device loop7): erofs_fill_dentries: bogus dirent @ nid 36 [ 393.860160][ T9230] device syzkaller0 entered promiscuous mode [ 393.912246][ T9229] loop6: detected capacity change from 0 to 1024 [ 393.959100][ T9233] usb usb4: usbfs: process 9233 (syz.7.1091) did not claim interface 8 before use [ 394.014307][ T9229] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 394.028272][ T9229] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 394.038504][ T1345] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 394.078715][ T9229] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #3: comm syz.6.1089: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 394.737291][ T9229] EXT4-fs (loop6): no journal found [ 394.743130][ T9229] EXT4-fs (loop6): can't get journal size [ 394.788231][ T9229] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000002000,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback. [ 395.128474][ T1345] usb 10-1: unable to get BOS descriptor or descriptor too short [ 395.816211][ T1345] usb 10-1: not running at top speed; connect to a high speed hub [ 396.368447][ T1345] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 396.688434][ T1345] usb 10-1: string descriptor 0 read error: -22 [ 396.694808][ T1345] usb 10-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 396.727460][ T1345] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.310273][ T1345] usb 10-1: can't set config #1, error -71 [ 397.331085][ T9246] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1094'. [ 397.350061][ T1345] usb 10-1: USB disconnect, device number 2 [ 397.684151][ T9290] loop6: detected capacity change from 0 to 16 [ 398.540604][ T9290] erofs: (device loop6): mounted with root inode @ nid 36. [ 398.664719][ T9302] Invalid option length (57448) for dns_resolver key [ 398.692687][ T9290] attempt to access beyond end of device [ 398.692687][ T9290] loop6: rw=524288, want=34359738368, limit=16 [ 399.622418][ T4201] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 399.644700][ T9290] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 400.931357][ T9290] erofs: (device loop6): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 401.158554][ T9320] Invalid option length (57448) for dns_resolver key [ 401.191133][ T9290] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 401.308843][ T9290] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 401.336635][ T9322] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.339418][ T9290] attempt to access beyond end of device [ 401.339418][ T9290] loop6: rw=524288, want=56, limit=16 [ 401.386439][ T9325] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.393573][ T9290] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 401.393598][ T9325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.511708][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 401.511786][ T26] audit: type=1800 audit(1778899751.212:34): pid=9290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1102" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 401.684975][ T9290] syz.6.1102 (9290) used greatest stack depth: 19824 bytes left [ 402.518204][ T6108] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 402.798223][ T6108] usb 6-1: Using ep0 maxpacket: 32 [ 403.688643][ T6108] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 403.696787][ T6108] usb 6-1: config 0 has no interface number 0 [ 403.928326][ T6108] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 403.937428][ T6108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.954400][ T6108] usb 6-1: Product: syz [ 403.961341][ T6108] usb 6-1: Manufacturer: syz [ 403.966097][ T6108] usb 6-1: SerialNumber: syz [ 404.009096][ T6108] usb 6-1: config 0 descriptor?? [ 404.208527][ T4234] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 404.415938][ T4269] kernel write not supported for file /uinput (pid: 4269 comm: kworker/1:9) [ 404.628339][ T4234] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.686403][ T4234] usb 10-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xDC, skipping [ 404.929350][ T6108] smsc95xx v2.0.0 [ 404.998428][ T4234] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.027198][ T4234] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.055298][ T4234] usb 10-1: Product: syz [ 405.060157][ T4234] usb 10-1: Manufacturer: syz [ 405.064873][ T4234] usb 10-1: SerialNumber: syz [ 405.124849][ T9383] syz.1.1127 uses obsolete (PF_INET,SOCK_PACKET) [ 405.455352][ T9390] Invalid option length (57448) for dns_resolver key [ 405.544923][ T6108] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 405.563302][ T6108] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 405.608411][ T6108] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 405.637601][ T6108] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 405.678425][ T6108] usb 6-1: USB disconnect, device number 2 [ 405.799013][ T9405] loop6: detected capacity change from 0 to 512 [ 405.858716][ T9405] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 405.889387][ T9405] EXT4-fs (loop6): 1 truncate cleaned up [ 405.895752][ T9405] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 411.088189][ T9424] loop7: detected capacity change from 0 to 1024 [ 411.268941][ T4234] cdc_ncm 10-1:1.0: bind() failure [ 411.313795][ T4234] cdc_ncm: probe of 10-1:1.1 failed with error -32 [ 411.428986][ T4234] cdc_mbim: probe of 10-1:1.1 failed with error -71 [ 411.457018][ T4234] usbtest: probe of 10-1:1.1 failed with error -71 [ 411.479447][ T4234] usb 10-1: USB disconnect, device number 3 [ 411.693159][ T6108] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 411.908980][ T9443] Invalid option length (57448) for dns_resolver key [ 411.954911][ T9452] loop9: detected capacity change from 0 to 512 [ 412.033714][ T9452] EXT4-fs warning (device loop9): ext4_xattr_inode_get:506: inode #11: comm syz.9.1146: EA inode hash validation failed [ 412.128195][ T6108] usb 6-1: Using ep0 maxpacket: 32 [ 412.158034][ T9452] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #15: comm syz.9.1146: corrupted inode contents [ 412.201368][ T9452] EXT4-fs error (device loop9): ext4_dirty_inode:6077: inode #15: comm syz.9.1146: mark_inode_dirty error [ 412.233654][ T9452] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #15: comm syz.9.1146: corrupted inode contents [ 412.268442][ T6108] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 412.276517][ T6108] usb 6-1: config 0 has no interface number 0 [ 412.288754][ T9452] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2952: inode #15: comm syz.9.1146: mark_inode_dirty error [ 412.320239][ T9452] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2955: inode #15: comm syz.9.1146: mark inode dirty (error -117) [ 412.373611][ T9452] EXT4-fs warning (device loop9): ext4_evict_inode:304: xattr delete (err -117) [ 412.404658][ T9452] EXT4-fs (loop9): 1 orphan inode deleted [ 412.438220][ T9452] EXT4-fs (loop9): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 412.508483][ T6108] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 412.527789][ T6108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.564224][ T6108] usb 6-1: Product: syz [ 412.584646][ T6108] usb 6-1: Manufacturer: syz [ 412.619541][ T6108] usb 6-1: SerialNumber: syz [ 412.821621][ T6108] usb 6-1: config 0 descriptor?? [ 412.864669][ T6108] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 413.078003][ T9476] loop7: detected capacity change from 0 to 1024 [ 413.162831][ T9476] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 413.238246][ T9476] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 413.298477][ T9476] jbd2_journal_init_inode: Cannot locate journal superblock [ 413.338339][ T9476] EXT4-fs (loop7): Could not load journal inode [ 413.433356][ T6108] usb 6-1: selecting invalid altsetting 1 [ 413.439255][ T6108] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 413.481217][ T6108] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 413.508623][ T6108] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 413.517388][ T6108] usb 6-1: media controller created [ 413.604437][ T6108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 413.768329][ T6108] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 413.779491][ T6108] zl10353_read_register: readreg error (reg=127, ret==-71) [ 418.344483][ T9496] loop7: detected capacity change from 0 to 1024 [ 418.481645][ T6108] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 418.619671][ T6108] usb 6-1: USB disconnect, device number 3 [ 419.024385][ T1345] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 419.180684][ T9510] Invalid option length (57448) for dns_resolver key [ 419.443628][ T1345] usb 10-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 419.568162][ T1345] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.901056][ T1345] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.100695][ T1345] usb 10-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 420.144623][ T1345] usb 10-1: config 0 interface 0 has no altsetting 0 [ 420.166154][ T1345] usb 10-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 420.180585][ T1345] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.192632][ T9535] netlink: 566 bytes leftover after parsing attributes in process `syz.6.1164'. [ 420.230381][ T1345] usb 10-1: config 0 descriptor?? [ 420.792326][ T1345] hid-generic 0003:05AC:027D.0001: unknown main item tag 0x0 [ 420.816775][ T1345] hid-generic 0003:05AC:027D.0001: unknown main item tag 0x0 [ 420.849559][ T1345] hid-generic 0003:05AC:027D.0001: unknown main item tag 0x0 [ 420.880188][ T1345] hid-generic 0003:05AC:027D.0001: unknown main item tag 0x0 [ 420.910224][ T1345] hid-generic 0003:05AC:027D.0001: unknown main item tag 0x0 [ 420.940558][ T1345] hid-generic 0003:05AC:027D.0001: unknown main item tag 0x0 [ 420.996093][ T1345] hid-generic 0003:05AC:027D.0001: hidraw0: USB HID v0.04 Device [HID 05ac:027d] on usb-dummy_hcd.9-1/input0 [ 421.065276][ T1345] usb 10-1: USB disconnect, device number 4 [ 421.313359][ T9574] fido_id[9574]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 422.124150][ T2304] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 422.203808][ T9621] IPVS: sync thread started: state = MASTER, mcast_ifn = wg2, syncid = 0, id = 0 [ 422.488500][ T2304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.514394][ T2304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.563761][ T2304] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 422.577705][ T26] audit: type=1804 audit(1778899772.292:35): pid=9639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1196" name="bus" dev="ramfs" ino=51575 res=1 errno=0 [ 422.617123][ T2304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.649713][ T2304] usb 6-1: config 0 descriptor?? [ 422.870423][ T9657] netlink: 'syz.6.1202': attribute type 10 has an invalid length. [ 422.958940][ T9657] team0: Port device dummy0 added [ 422.979370][ T9661] netlink: 'syz.6.1202': attribute type 10 has an invalid length. [ 423.070003][ T9661] team0: Port device dummy0 removed [ 423.081532][ T9661] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 423.185191][ T2304] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 423.251386][ T2304] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 423.429908][ T2304] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 423.606636][ T2304] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 423.819465][ T2304] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 424.039303][ T2304] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 424.046327][ T2304] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 424.070559][ T2304] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 424.211145][ T2304] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 424.528274][ T2304] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 424.558617][ T2304] usb 6-1: USB disconnect, device number 4 [ 424.938999][ T4232] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 425.258616][ T4232] usb 10-1: Using ep0 maxpacket: 32 [ 425.479286][ T4232] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 425.698195][ T9726] fido_id[9726]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 425.716001][ T4232] usb 10-1: config 0 has no interface number 0 [ 425.773302][ T4232] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 425.902443][ T9736] autofs4:pid:9736:autofs_fill_super: called with bogus options [ 426.008302][ T4232] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 426.028284][ T4232] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.054238][ T4232] usb 10-1: Product: syz [ 426.059138][ T4232] usb 10-1: Manufacturer: syz [ 426.063881][ T4232] usb 10-1: SerialNumber: syz [ 426.108817][ T4232] usb 10-1: config 0 descriptor?? [ 426.161218][ T4232] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 426.188431][ T4232] em28xx 10-1:0.132: Video interface 132 found: [ 426.278184][ T2304] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 426.518258][ T2304] usb 8-1: Using ep0 maxpacket: 8 [ 426.578445][ T4232] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 426.678490][ T2304] usb 8-1: unable to get BOS descriptor or descriptor too short [ 426.768414][ T2304] usb 8-1: config 4 interface 0 has no altsetting 0 [ 427.028441][ T2304] usb 8-1: string descriptor 0 read error: -22 [ 427.048261][ T2304] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 427.108730][ T2304] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 427.180836][ T2304] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 427.225179][ T2304] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 427.256604][ T2304] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 427.274597][ T2304] usb 8-1: media controller created [ 427.280340][ T4232] em28xx 10-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 427.355432][ T9786] loop5: detected capacity change from 0 to 1024 [ 428.218700][ T6108] Bluetooth: hci5: command 0x0411 tx timeout [ 428.269157][ T4232] em28xx 10-1:0.132: failed to read eeprom (err=-5) [ 428.275836][ T4232] em28xx 10-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 428.291359][ T9738] em28xx 10-1:0.132: failed to trigger read from i2c address 0x0 (error=-5) [ 428.304910][ T2304] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.394117][ T2304] zl10353_read_register: readreg error (reg=127, ret==0) [ 428.418490][ T4232] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 428.472626][ T4232] em28xx 10-1:0.132: analog set to bulk mode. [ 428.583107][ T9805] loop9: detected capacity change from 0 to 512 [ 428.590484][ T4232] usb 10-1: USB disconnect, device number 5 [ 428.597150][ T4232] em28xx 10-1:0.132: Disconnecting em28xx [ 428.639805][ T2304] usb 8-1: USB disconnect, device number 2 [ 428.655256][ T4230] em28xx 10-1:0.132: Registering V4L2 extension [ 428.701745][ T9805] EXT4-fs warning (device loop9): ext4_xattr_inode_get:506: inode #11: comm syz.9.1234: EA inode hash validation failed [ 428.842385][ T9805] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #15: comm syz.9.1234: corrupted inode contents [ 428.929673][ T9816] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1235'. [ 429.000291][ T9805] EXT4-fs error (device loop9): ext4_dirty_inode:6077: inode #15: comm syz.9.1234: mark_inode_dirty error [ 429.257676][ T9805] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #15: comm syz.9.1234: corrupted inode contents [ 429.513552][ T9813] Can't find ip_set type hash:ne [ 429.585822][ T9805] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2952: inode #15: comm syz.9.1234: mark_inode_dirty error [ 429.609446][ T4230] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 429.617135][ T4230] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 429.670744][ T9805] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2955: inode #15: comm syz.9.1234: mark inode dirty (error -117) [ 429.683807][ T4230] em28xx 10-1:0.132: No AC97 audio processor [ 429.722257][ T4230] usb 10-1: Decoder not found [ 429.727942][ T9805] EXT4-fs warning (device loop9): ext4_evict_inode:304: xattr delete (err -117) [ 429.766154][ T4230] em28xx 10-1:0.132: failed to create media graph [ 429.786504][ T9805] EXT4-fs (loop9): 1 orphan inode deleted [ 429.792954][ T4230] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 429.830582][ T9805] EXT4-fs (loop9): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 429.870362][ T4230] em28xx 10-1:0.132: Remote control support is not available for this card. [ 429.919311][ T4232] em28xx 10-1:0.132: Closing input extension [ 429.982220][ T4232] em28xx 10-1:0.132: Freeing device [ 430.188358][ T1345] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 430.296601][ T9850] device syzkaller1 entered promiscuous mode [ 430.448572][ T1345] usb 6-1: Using ep0 maxpacket: 8 [ 430.640516][ T1345] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 430.665732][ T1345] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 430.735451][ T1345] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 430.783564][ T1345] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.856789][ T1345] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.944443][ T9867] loop7: detected capacity change from 0 to 512 [ 430.945677][ T1345] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 430.970554][ T9870] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1254'. [ 430.976516][ T1345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.069994][ T9867] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.1255: inode has both inline data and extents flags [ 431.132308][ T9867] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.1255: couldn't read orphan inode 15 (err -117) [ 431.186757][ T9867] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 431.268251][ T1345] usb 6-1: usb_control_msg returned -71 [ 431.275174][ T1345] usbtmc 6-1:16.0: can't read capabilities [ 431.433445][ T1345] usb 6-1: USB disconnect, device number 5 [ 431.570558][ T9897] loop6: detected capacity change from 0 to 512 [ 431.775026][ T9906] loop9: detected capacity change from 0 to 1024 [ 431.777876][ T9897] EXT4-fs warning (device loop6): ext4_xattr_inode_get:506: inode #11: comm syz.6.1266: EA inode hash validation failed [ 431.819966][ T9897] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.1266: corrupted inode contents [ 431.836284][ T9906] EXT4-fs (loop9): inline encryption not supported [ 432.048941][ T9897] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #15: comm syz.6.1266: mark_inode_dirty error [ 432.133306][ T9906] EXT4-fs (loop9): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,inlinecrypt,,errors=continue. Quota mode: none. [ 432.162222][ T9897] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.1266: corrupted inode contents [ 432.273054][ T9906] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.303970][ T9897] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2952: inode #15: comm syz.6.1266: mark_inode_dirty error [ 432.408586][ T9897] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2955: inode #15: comm syz.6.1266: mark inode dirty (error -117) [ 432.464400][ T4425] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm kworker/u4:12: bg 0: block 112: padding at end of block bitmap is not set [ 432.488058][ T9897] EXT4-fs warning (device loop6): ext4_evict_inode:304: xattr delete (err -117) [ 432.562827][ T4425] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 432.583233][ T9897] EXT4-fs (loop6): 1 orphan inode deleted [ 432.590735][ T4425] EXT4-fs (loop9): This should not happen!! Data will be lost [ 432.590735][ T4425] [ 432.627549][ T9897] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 432.658527][ T4425] EXT4-fs (loop9): Total free blocks count 0 [ 432.664597][ T4425] EXT4-fs (loop9): Free/Dirty block details [ 432.676319][ T4425] EXT4-fs (loop9): free_blocks=0 [ 432.876482][ T9928] overlayfs: failed to clone upperpath [ 432.893162][ T4425] EXT4-fs (loop9): dirty_blocks=16 [ 433.669177][ T4425] EXT4-fs (loop9): Block reservation details [ 433.705780][ T4425] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 434.444846][ T9936] netlink: 'syz.5.1278': attribute type 39 has an invalid length. [ 434.836412][ T5069] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 435.250236][ T9951] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1281'. [ 435.788960][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1282'. [ 436.091248][ T9975] loop5: detected capacity change from 0 to 512 [ 436.175386][ T9975] EXT4-fs (loop5): Ignoring removed nobh option [ 436.294863][ T9975] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 436.354665][ T9990] loop9: detected capacity change from 0 to 256 [ 436.423578][ T9975] EXT4-fs (loop5): invalid inodes per group: 0 [ 436.423578][ T9975] [ 436.854244][ T9997] loop6: detected capacity change from 0 to 128 [ 437.243178][ T9997] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 437.256590][ T9997] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.888258][ T9820] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 439.902020][T10021] binder: 10020:10021 unknown command 0 [ 439.915016][T10021] binder: 10020:10021 ioctl c0306201 200000000080 returned -22 [ 439.981961][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.983525][T10021] binder: BINDER_SET_CONTEXT_MGR already set [ 439.988481][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.001145][T10021] binder: 10020:10021 ioctl 4018620d 200000000040 returned -16 [ 440.258254][ T9820] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 440.281934][ T9820] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.329186][ T9820] usb 10-1: config 0 descriptor?? [ 440.406698][ T9820] cp210x 10-1:0.0: cp210x converter detected [ 440.456183][T10055] loop5: detected capacity change from 0 to 1024 [ 440.482514][T10057] loop7: detected capacity change from 0 to 512 [ 440.529943][T10057] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 210 vs 220 free clusters [ 440.549169][T10055] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 440.593999][T10057] EXT4-fs (loop7): Remounting filesystem read-only [ 440.601455][T10057] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: comm syz.7.1316: inode #11520: comm syz.7.1316: iget: illegal inode # [ 440.622892][T10057] EXT4-fs (loop7): Remounting filesystem read-only [ 440.629722][T10057] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1316: error while reading EA inode 11520 err=-117 [ 440.653372][T10057] EXT4-fs (loop7): Remounting filesystem read-only [ 440.660424][T10057] ------------[ cut here ]------------ [ 440.675134][T10057] EA inode 11 i_nlink=0 [ 440.675358][T10057] WARNING: CPU: 0 PID: 10057 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4e7/0x540 [ 440.692071][T10057] Modules linked in: [ 440.705275][T10057] CPU: 0 PID: 10057 Comm: syz.7.1316 Not tainted syzkaller #0 [ 440.725869][T10057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 440.736516][T10057] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 440.743590][T10057] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 7a e7 a1 ff 49 8b 37 48 c7 c7 80 a6 3d 8a 89 da e8 e9 6b 95 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 13 5c a0 07 [ 440.763507][T10057] RSP: 0018:ffffc900058d7380 EFLAGS: 00010246 [ 440.770333][T10057] RAX: edea535b1ea8b100 RBX: 0000000000000000 RCX: 0000000000080000 [ 440.778569][T10057] RDX: ffffc90017685000 RSI: 000000000001da25 RDI: 000000000001da26 [ 440.786585][T10057] RBP: ffffc900058d7470 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 440.794696][T10057] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff88805e14be70 [ 440.804059][T10057] R13: 1ffff1100bc2980d R14: dffffc0000000000 R15: ffff88805e14beb0 [ 440.832181][T10057] FS: 00007f0eb32816c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 440.841309][T10057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 440.847951][T10057] CR2: 0000555584c03a38 CR3: 000000005d706000 CR4: 00000000003506e0 [ 440.856268][T10057] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 440.860386][ T9820] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 440.875946][T10057] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 440.884016][T10057] Call Trace: [ 440.887409][T10057] [ 440.890647][T10057] ? ext4_xattr_block_csum+0x560/0x560 [ 440.896376][T10057] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 440.902896][T10057] ext4_xattr_inode_dec_ref_all+0x960/0xfc0 [ 440.909256][T10057] ? errseq_check+0x3c/0x70 [ 440.913962][T10057] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 440.920288][T10057] ? __ext4_journal_ensure_credits+0x450/0x450 [ 440.926528][T10057] ? ext4_get_inode_loc+0xf6/0x120 [ 440.931890][T10057] ext4_xattr_delete_inode+0xad1/0xca0 [ 440.937408][T10057] ? ext4_expand_extra_isize_ea+0x19b0/0x19b0 [ 440.943685][T10057] ext4_evict_inode+0xc53/0x1090 [ 440.948723][T10057] ? _raw_spin_unlock+0x24/0x40 [ 440.953705][T10057] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 440.959701][T10057] ? do_raw_spin_unlock+0x11d/0x230 [ 440.964942][T10057] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 440.971187][T10057] evict+0x4c9/0x8d0 [ 440.975330][T10057] ? proc_nr_inodes+0x320/0x320 [ 440.983466][T10057] ? do_raw_spin_unlock+0x11d/0x230 [ 440.989954][T10057] ? _raw_spin_unlock+0x24/0x40 [ 440.994977][T10057] ? iput+0x706/0x8a0 [ 440.999527][T10057] ext4_orphan_cleanup+0xad2/0x1320 [ 441.004819][T10057] ? ext4_orphan_del+0xbf0/0xbf0 [ 441.010297][T10057] ? errseq_check_and_advance+0x62/0x120 [ 441.015963][T10057] ext4_fill_super+0x8d6e/0x94f0 [ 441.022806][T10057] ? format_decode+0x898/0x1300 [ 441.027832][T10057] ? ext4_mount+0x40/0x40 [ 441.032398][T10057] ? set_blocksize+0x1f3/0x370 [ 441.037356][T10057] ? sb_set_blocksize+0xa5/0xe0 [ 441.042490][T10057] mount_bdev+0x287/0x3c0 [ 441.047012][T10057] ? ext4_mount+0x40/0x40 [ 441.051558][T10057] legacy_get_tree+0xe6/0x180 [ 441.056371][T10057] ? ext4_errno_to_code+0x160/0x160 [ 441.063531][T10057] vfs_get_tree+0x88/0x270 [ 441.067996][T10057] do_new_mount+0x24a/0xa40 [ 441.073189][T10057] __se_sys_mount+0x2e3/0x3d0 [ 441.077925][T10057] ? __x64_sys_mount+0xc0/0xc0 [ 441.082790][T10057] ? lockdep_hardirqs_on+0x94/0x140 [ 441.088146][T10057] ? __x64_sys_mount+0x1c/0xc0 [ 441.092950][T10057] do_syscall_64+0x4c/0xa0 [ 441.097401][T10057] ? clear_bhb_loop+0x30/0x80 [ 441.102330][T10057] ? clear_bhb_loop+0x30/0x80 [ 441.107033][T10057] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 441.113202][T10057] RIP: 0033:0x7f0eb50290ca [ 441.117694][T10057] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.129048][ T9820] usb 10-1: cp210x converter now attached to ttyUSB0 [ 441.138983][T10057] RSP: 002b:00007f0eb3280e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 441.152840][T10057] RAX: ffffffffffffffda RBX: 00007f0eb3280ee0 RCX: 00007f0eb50290ca [ 441.161128][T10057] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 00007f0eb3280ea0 [ 441.174115][T10057] RBP: 0000200000000180 R08: 00007f0eb3280ee0 R09: 0000000000000000 [ 441.183337][T10057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040 [ 441.197973][T10057] R13: 00007f0eb3280ea0 R14: 0000000000000490 R15: 000000000000002c [ 441.207082][T10057] [ 441.210432][T10057] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 441.217731][T10057] CPU: 0 PID: 10057 Comm: syz.7.1316 Not tainted syzkaller #0 [ 441.225190][T10057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 441.235257][T10057] Call Trace: [ 441.238547][T10057] [ 441.241470][T10057] dump_stack_lvl+0x188/0x250 [ 441.246168][T10057] ? show_regs_print_info+0x20/0x20 [ 441.251358][T10057] ? load_image+0x400/0x400 [ 441.255864][T10057] panic+0x2e5/0x810 [ 441.259799][T10057] ? bpf_jit_dump+0xd0/0xd0 [ 441.264302][T10057] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 441.270286][T10057] __warn+0x248/0x2b0 [ 441.274287][T10057] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 441.280260][T10057] report_bug+0x1b7/0x2e0 [ 441.284638][T10057] handle_bug+0x3a/0x70 [ 441.288802][T10057] exc_invalid_op+0x16/0x40 [ 441.293312][T10057] asm_exc_invalid_op+0x16/0x20 [ 441.298262][T10057] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 441.304862][T10057] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 7a e7 a1 ff 49 8b 37 48 c7 c7 80 a6 3d 8a 89 da e8 e9 6b 95 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 13 5c a0 07 [ 441.324840][T10057] RSP: 0018:ffffc900058d7380 EFLAGS: 00010246 [ 441.330958][T10057] RAX: edea535b1ea8b100 RBX: 0000000000000000 RCX: 0000000000080000 [ 441.338968][T10057] RDX: ffffc90017685000 RSI: 000000000001da25 RDI: 000000000001da26 [ 441.346978][T10057] RBP: ffffc900058d7470 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 441.352870][ T9820] usb 10-1: USB disconnect, device number 6 [ 441.354978][T10057] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff88805e14be70 [ 441.355000][T10057] R13: 1ffff1100bc2980d R14: dffffc0000000000 R15: ffff88805e14beb0 [ 441.355040][T10057] ? ext4_xattr_block_csum+0x560/0x560 [ 441.365514][ T9820] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 441.368889][T10057] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 441.368929][T10057] ext4_xattr_inode_dec_ref_all+0x960/0xfc0 [ 441.368968][T10057] ? errseq_check+0x3c/0x70 [ 441.368992][T10057] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 441.369021][T10057] ? __ext4_journal_ensure_credits+0x450/0x450 [ 441.369049][T10057] ? ext4_get_inode_loc+0xf6/0x120 [ 441.369075][T10057] ext4_xattr_delete_inode+0xad1/0xca0 [ 441.369112][T10057] ? ext4_expand_extra_isize_ea+0x19b0/0x19b0 [ 441.390389][ T9820] cp210x 10-1:0.0: device disconnected [ 441.396440][T10057] ext4_evict_inode+0xc53/0x1090 [ 441.396474][T10057] ? _raw_spin_unlock+0x24/0x40 [ 441.450502][T10057] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 441.456403][T10057] ? do_raw_spin_unlock+0x11d/0x230 [ 441.461612][T10057] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 441.467502][T10057] evict+0x4c9/0x8d0 [ 441.471417][T10057] ? proc_nr_inodes+0x320/0x320 [ 441.476304][T10057] ? do_raw_spin_unlock+0x11d/0x230 [ 441.481534][T10057] ? _raw_spin_unlock+0x24/0x40 [ 441.486378][T10057] ? iput+0x706/0x8a0 [ 441.490374][T10057] ext4_orphan_cleanup+0xad2/0x1320 [ 441.495578][T10057] ? ext4_orphan_del+0xbf0/0xbf0 [ 441.500508][T10057] ? errseq_check_and_advance+0x62/0x120 [ 441.506138][T10057] ext4_fill_super+0x8d6e/0x94f0 [ 441.511068][T10057] ? format_decode+0x898/0x1300 [ 441.516031][T10057] ? ext4_mount+0x40/0x40 [ 441.520375][T10057] ? set_blocksize+0x1f3/0x370 [ 441.525255][T10057] ? sb_set_blocksize+0xa5/0xe0 [ 441.530131][T10057] mount_bdev+0x287/0x3c0 [ 441.534499][T10057] ? ext4_mount+0x40/0x40 [ 441.538849][T10057] legacy_get_tree+0xe6/0x180 [ 441.543527][T10057] ? ext4_errno_to_code+0x160/0x160 [ 441.548730][T10057] vfs_get_tree+0x88/0x270 [ 441.553172][T10057] do_new_mount+0x24a/0xa40 [ 441.557672][T10057] __se_sys_mount+0x2e3/0x3d0 [ 441.562352][T10057] ? __x64_sys_mount+0xc0/0xc0 [ 441.567124][T10057] ? lockdep_hardirqs_on+0x94/0x140 [ 441.572332][T10057] ? __x64_sys_mount+0x1c/0xc0 [ 441.577123][T10057] do_syscall_64+0x4c/0xa0 [ 441.581539][T10057] ? clear_bhb_loop+0x30/0x80 [ 441.586208][T10057] ? clear_bhb_loop+0x30/0x80 [ 441.590910][T10057] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 441.596801][T10057] RIP: 0033:0x7f0eb50290ca [ 441.601214][T10057] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.620820][T10057] RSP: 002b:00007f0eb3280e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 441.629263][T10057] RAX: ffffffffffffffda RBX: 00007f0eb3280ee0 RCX: 00007f0eb50290ca [ 441.637256][T10057] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 00007f0eb3280ea0 [ 441.645227][T10057] RBP: 0000200000000180 R08: 00007f0eb3280ee0 R09: 0000000000000000 [ 441.653198][T10057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040 [ 441.661169][T10057] R13: 00007f0eb3280ea0 R14: 0000000000000490 R15: 000000000000002c [ 441.669165][T10057] [ 441.672286][T10057] Kernel Offset: disabled [ 441.676859][T10057] Rebooting in 86400 seconds..