last executing test programs: 11m32.633511721s ago: executing program 3 (id=2515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x0, 0x0}) syz_emit_ethernet(0xc5, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffffffffffffff884700000000000000000000000000000000401a00a7006500000e219078e0000002e0000001860a346715960ce5e061445433c1e00000017fffffff0a010100000000080000000000000007ac1414aa000089880a016e9ab6960008e000000100000003ac1414bb0000008a0000000000000006ac14140a7eaa00010001ac1414bb00000005890bed0a010102e00000020000004e204e2204519078c84753b9081af4edab9464977e1a668761d696a7c692", @ANYRES16], &(0x7f0000000180)={0x1, 0x1, [0x929, 0x19e, 0x221, 0x66f]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$eJzs2k1rVFcYB/Bz05SkCXkppS3Jpoe2i3ZzabIsXSSUBEoHFM0IKkhuyESHGWfC3FnMiItZu/IjuBaX7gTJF8h3cOEuCNFVVl7R0bwRFyrJCPn9NvOHPwPn4cDhWdydf+7frm3k6UbWDkNJEoYWQi/sJWE6DIUPeuHP3/9+ee/y1Wv/L5ZKS5diXF5cmZuPMU7+8vT63Ue/brXHrzyefDIStqdv7OzOP9/+aXtm5/XKrWoeq3lsNNsxi2vNZjtbq1fiejWvpTFerFeyvBKrjbzSOtJv1Jubm92YNdYnxjZblTyPWaMba5VubDdju9WN2c2s2ohpmsaJscCXKD/cK4qwW3y7Goqi+O5BGN8KE8/CVEi+j8kPC8mPq8nPvWRmtyimBn1UToX7P98OPeqjIbzodcqdcv+33y//V1r6K74zffCvV51O+Zv9fq7fx6P9SBh738+f2I+GP37r92+7fy+UjvWzYf30xwcAOHfSuO/E/S5NP9b306H98Nj+Nhxmh89sDD5T3r1Ty+r1SksQBGE/DPpl4iwcXPqgTwIAAAAAAAAAAMCnOIvPCQc9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HV7EwAA///n0Xgk") mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) 11m29.004876883s ago: executing program 3 (id=2519): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) msgctl$MSG_INFO(0x0, 0xc, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) unshare(0x20000400) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 11m27.282780752s ago: executing program 3 (id=2526): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88", 0x0, 0x80000fd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x5f, 0x5f, 0x61, 0x0, 0x2e, 0x2e]}}, 0x0, 0x20, 0x0, 0x1, 0x1}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x101403, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x81044d03, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000010609"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='uid_map\x00') setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x50) syz_80211_inject_frame(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x80082) epoll_create1(0x0) 11m24.366968256s ago: executing program 3 (id=2530): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e9, &(0x7f0000001f80)="$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") socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea8", 0xb5, 0x800, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmmsg$alg(r2, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}], 0x1, 0x0) 11m23.104267558s ago: executing program 3 (id=2533): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0x1, 0x489, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000800)={[{@barrier}, {@noblock_validity}, {@mblk_io_submit}, {@data_err_ignore}, {@debug}, {@inlinecrypt}]}, 0x6, 0x615, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) 11m20.682517372s ago: executing program 3 (id=2536): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006100)=@delchain={0x24, 0x64, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0x1000)=nil, 0x1000}, 0x1}) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 11m5.485246793s ago: executing program 32 (id=2536): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006100)=@delchain={0x24, 0x64, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0x1000)=nil, 0x1000}, 0x1}) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 7.34504238s ago: executing program 1 (id=4473): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0xa, 0x19, 0x8, "fafd8317e5a114998a1a8dbe43ea6a4996e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9a5d680f985891a7beda9d69098c8b534464c9500dd8e0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a0b2f7b6aa54cc50a1fcaed1e831fa79a00", "67523760fd40f78d2cfc03d81a8cc85ba139c01802c4dae4162e43ac61b7ad33", [0x800000000005, 0x7]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x1, 0xa, 0x8, 0x0, 0x8001, 0xc, 0x6, 0x10, 0xfc, 0xc9, 0xe3, 0xc5, 0x0, 0xff, 0x5, 0x7f, 0x79, 0x7, 0x3, '\x00', 0x92, 0x84}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.259097357s ago: executing program 0 (id=4475): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000003700)=ANY=[@ANYBLOB="24000000240003012bbd7000fbdbdf2503"], 0x24}, 0x1, 0x0, 0x0, 0x4068000}, 0x80) 7.030027065s ago: executing program 0 (id=4477): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec64, 0x1, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x4, 0x10000, 0x100, 0x9004, 0x0, 0x1ff, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x2, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x9, 0x8000000000008, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0xc, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x10001, 0x4, 0xe6, 0x2000000000000fe, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x9, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x200, 0x2, 0x3, 0x2, 0x7638, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x3, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x2000008, 0xf6, 0x4, 0x6, 0x200, 0x7ff80000, 0x1, 0x2b, 0x8, 0x2293332f, 0x7, 0x5, 0x0, 0xd, 0x2, 0x5, 0x981, 0x2, 0x7, 0x400dfd4, 0xfffd, 0x10, 0x5, 0x7, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb68e, 0x2, 0x8, 0x6]}) 6.354291079s ago: executing program 1 (id=4478): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001c40)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6, {0xfff2, 0xfff3}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 6.353462079s ago: executing program 2 (id=4479): socket$kcm(0x10, 0x2, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@redirect_dir_off}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setresuid(0xee00, 0xee00, 0xee00) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b52, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x3, 0xff) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000004c0)=0x79, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000200)={0x1, &(0x7f00000003c0)=[{0x80, 0x5}]}) sendmmsg$inet(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b40)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde128419bfe468e7760112d01b2746540dc8a0e9087bde26b530a321fd36ffcbeddbc482d96b9f47e195afe70b764b941e9590c8cfb377d923eaffee045993ff1eb3757b9ec29b8416714cab16f748d946c85b", 0x87}, {&(0x7f0000001a80)="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", 0x436}], 0x2}}], 0x2, 0x48d0) 5.60096754s ago: executing program 0 (id=4481): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000400000000000008000000000000000000000000000fcffffffffffffff0000000000000000020000000002000000000000000000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x12, 0x9, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x40010) 5.434748723s ago: executing program 5 (id=4482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aaaaaaaa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 5.331495191s ago: executing program 1 (id=4484): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$TIOCMGET(r1, 0x5415, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4002804) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.331282602s ago: executing program 2 (id=4485): syz_emit_ethernet(0x7a, &(0x7f0000000400)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x3}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x4}}}}}}}}}, 0x0) 5.321234132s ago: executing program 0 (id=4486): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close(r1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 5.284325565s ago: executing program 5 (id=4487): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x202080, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420}}, 0x50) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.195993882s ago: executing program 4 (id=4488): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000003700)=ANY=[@ANYBLOB="24000000240003012bbd7000fbdbdf2503"], 0x24}, 0x1, 0x0, 0x0, 0x4068000}, 0x80) 5.194989412s ago: executing program 2 (id=4489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) io_getevents(0x0, 0x8, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r6, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.947916363s ago: executing program 4 (id=4490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 4.932809174s ago: executing program 0 (id=4491): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 4.019950497s ago: executing program 2 (id=4492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ae4000000060a0b0400000000000000000200fffeb80004802800018007000100637400001c0002800800014000000002080002400000000305000500060000008c0001800c000100636f756e746572007c0002800c00014000000000000000020c00024000000000000000090c000140fffffffffffffbff0c00024000000000000000010c00024000000000000006920c00014000000000000000020c00024000000000000000010c00024000000000000000070c00014000000000000088770c00024000000000000000060900010073797a30000000000900020073797a32"], 0x10c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3.810464084s ago: executing program 5 (id=4493): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000a80)="a080203e3f764f8a9aefd39cafdb26bffadae8105afd9db7fb281c375787c7506703ffe54f53e430e0d2af6e9f88a1d5d2fdad902cf70b315dce0d0c54c3d41e7907479bef309cd6705a1a41c2b5dbdbd66493db2006692ebf42f2520d453545ab0a176692d1553d", 0x68}, {&(0x7f0000000b00)="3bcab867990dafd48a38aa5c3e5078b40f6939f90b68fb7ea320958d4d64836e07", 0x21}, {&(0x7f0000000b40)="7ea229968456cc1d273939b7eaaaf05b3e95c220a05dfec9deedcff57f4337977785bc5532e5d07a8ccd0bbe9ca7c342b821efd28821b4b3993cc7a9cfa514552e371060b3c74d9ad72ddd7c8d0a2ad86262c6582d5da2894f9cbeef46b8a4017be35490301c70b310c1fa63a9c4770e7ce7163b13f9cdd81ae4009a071d0209e3a41890d2943d15ad4a8fefc21f74de71773a", 0x93}, {&(0x7f0000000c00)="c45d5115e5374f6fef7f2f36aa65c7d43d1a282d095234e7c7387a3fa4a89cf1ee7228bb05d139383ce8a2197e705c9fb3cbbe69978007e76b108b6833b9cb03672f82956f192da9f131d69c127412277674ff4b96ddc3e62b1da4558352a61e636903a6d5c779c89f12b18a0ebec4bb4fcba25ba5f39e411b76c23f2f1ab9f7ca0c38a061b69e5a170a679b49d3d2029a1ebcf22212cd34a8d72d5a149b0955f354a9a9218d4ed1e3fdf02ed0d4f965f3d4a3fcc8a40bc604", 0xb9}, {&(0x7f0000000cc0)="3d044f36f5552e866c3e5bb625333ef189fed6d8891dcfb57a8af0678117c5669c82577417732f234f36a56f0d93d87af4c5fc3ab6cee7349ad7727eb4a3c5112fe13630c22e2455ea850820fbcbf233c0313409a9988cdff271cee9ed03d0d21e5ce72041046a8f77a63ff19fc8b050c522430571530885a968f466dca589223abdb0d2ef3d65ae3d3330e20d2b0a65514313c8a11f2aabb1a771b5704198da9cf8c4650ca654d2fa047c4b8800efa103147f9d2a94c6d1b4e21b3c9dbd8cb8d2aaaef558253cfc76e7b5541cf74c26d20a3ac061f8cb7a92b4c4e38f5db671b3b065a358d76662135ddd869b42e4dc2e9ed3b4b232a4215e30f688caef66ebac74f58ef34139266bcfb7055a838fe80dc25a1b541c8e673e56e94b1263c900122a5bd4a1670b9fabface28fef99d81bcce6727eea3403ae2ecdd69b1c6b5c84c7ce6b0ee500aafde6a7c87d3e2dad571e2a983cb9a5b02d2779033f95e2eb88cee8fd792f8354acf392a73ea69e724634f7858d351c564f2206ab6001cafc78bd91c10de8b370920b085f76fbf49a1b30c52ede89d87f59dff53a4c17fa2450904fdd726f33510e200166034a078434064cc018035d45e242feb43840240944a9f056d105350cca3ed1a58253fd70b292e4a61c0178ed37d7dce2164a7607fdf9e0ea2f0e48d3b94c05db51566f9c9e6c5d8db185723fc3fd74408a33f98682fd5bd371db5d87ae8d7f9969a7b7975a97030445a959cde1a0910d37b1cc2be02c7b924288dbdef1edcb1005679ff13d3e42df5f35e5a2db1782e76ff2b54b11dc6245b7c974d61c730bec067a2f4869c45e1d984914dd253e9318173925918dac1199fd8f920c8412d2db567374fb8b662c718f462aeafd5bfa0ac8ab0d084a6bac390cb0375159a988f784ad996a48c8813d3dec5c0d1e0922f3a9a35d17883e93d141b0df2727aa61f4e6fb3b363773e0ea670b2d22781b1ea0464047397a028840d05eac44c0463218b0b345306b68da577c019d8f9349854f7feae6211c8d901399f26c5cb06ad60dc4d6e0db1c3f266b0c11a8f3fe30575cef7ae4195c1aa2be4816d2a1e00bb22cc0992e19b7cae73e8cce4878c5d0413965426344b1f58668869969113c5cf5d2dcbc74395c93d871b1df40750a3e2bf415d0cebb2c4398885cd59c06e8a8efecab9e4088350f17ad68d21b9ab92beb888b0cd8ea0fa91d4d41bbdb7b8a10bef8b04027a66db34dd6dbc67615e1f2b794019303861e312366980ff015aaaa3e89ea627318c530ee2b2340b3d57027701413e00a2e22072380123e8749e3b5d19021d750b435b2c6c08ae7710c5e90bd918ad9e6c3f520616a19fa5fda161ab24d56d4b29d6e71880575fcb4fb66c6f1a22a7bbfcdfdfd39d8302f722f9aab98fc4b7474f151e1bc7ead7271b63ca5a51215cf0b417b6c0ca8ca3f72b723ffa66a96f70f281f98dabab1956cb4e4decffa7cf4a272b3b811b833b1db02a7a785d39d62c315d7a6aba26a0f86a0e9194f1c2d42b472333d8e077ffaa2f9c100198d5a857d5d1789c14a0ddf0560045ce96a109514c38580e29988c669ca2838b555304294338112ad52e6ab89cd2c1b2de6aa8c7c07d2d955905fa79577f3ad12bcfb919440c4610082ac7da2cb2d2d81ae8cafad94f53776a5f49816d0588c03868e432863e28024cbc9270bac8886cdf8c95768ee50475cc4502cf3f51f217c04050fc5623a21a1e0b034e55d3610158af853ed0d091aaa94b5ad4e1ea4ffce865fb3d5f8867f3a67b48c2c8028bd9f42afa88c0d3fe5c2fe3f7c99a9609eaa8c1d50f542b55c5673a3f761fad232afecaaee20792a97e9bb196dda2cfb26f770adc2250deb8e0f8db9c1416e5c2cf6f5be7383efa377ca4594d65c370bbf1713e30e2dd0b159a88a2928eea13a285d08f83eaed977ca380960e070e57bb689aa034ebedc9e6cbf6f57d13f3f9a79722a97a3875629077b33fc5fbcb62a11fdfa932ec5d89bab5b076f902c9fb62fa1289dca4cb0845cf95d6838748b741d1a3d4ccd37d2a40ce4ef881032dffc44148e93672d380d0fdd7677a4a295cd377f8e48f10dd691ae2e288ad632d5e7c6c57da71885e3935d8839e0a05a8ff7749a0fed7b7cb23de745cde57982ce362503d26659e2080fb9ff5ca63bd610460a5dc119f05cb1b006b64de5a078f84a1e302565f414fa6316b6607e03c18805948ff6c16d8b8eeab2ad5fa7ce5940f3fcd911ec6d80230b15563fbd2be0dc09e529327a2374d5c15fe667b8168c88ecb0d13cd2ee4f994cce0272c99be012a0d092f4000756be625284f9aecd9565c43bb0f69ea5b16284b024f31122e3e6e7104d0f8d5ac96f0cd4a9e53372f0a5df793e1b4d57a0f91619b2daf21299fd9fcfacfbbe0b27643a4597073c6da888d85d873ac26190bd6386967da5f1da6b18b19944d1279aae4aba62c4120171deb0eb1e1a1ac4f8d0bfe73e7dd0204e3682fa83c11f3b695a54a3e024a7937b87bd891326bf8b1061e9a49d3a660c49eb4a39bb92259ebdc4982475c873b1d85e9713f3271882eebd090ccb167ae9a59829b62235352b664f1c050766a55350f7981b1f885aae6a84a99547530cf5dcfe30b27328d5c2561692358d1acbe9bc1999a927c8daf630a4cb945e15d441cfed27874cee9dd820f4f59331b66a3b86b24540bd3dd2207081564c0d9e5788fa908cbbbc5eb8b3b39cf0944ddeb452913013de160b83013a6ce6c71a4ebb9fba0c64e69d11296b386252bea3dc03e0b3c415fcd8a53a5cd49f3e725ef7e7bd43144f51f78a79713e3f2a12f5fe4ee52164d48aec30e8688dc3b5b5fe5f23dec7abf0aee5b148d09d948c1afeae1e0cbff4563423118b5bfbedb74e01486d2c1eef94c7b66ff3e76db46ece84154aa8ec462f6ec84f0942c6cad475aafd7d2647a58606a24c182669705b273545ecadcf9d6eef33c95dcb1f09ac944ef816ffe3586c322afcf3d750a87bef633cdc9fb413134494e972b7ca65c091822346a1fa0223e77a41c937b7e0ab71d243c65d3a09fb57bca2e2a2c2941bac03bfba3bb38c56d5478eab5dbf6b33f3aba56cb0d9ee8d55dd98bc48d6beb246d3fb0aa52eab253d10802ef7e70bccdd3ec265381896bd3623600f7904752055317d67e3f36494a8e0d8ac911b46e1b36c0dc57d13174ff05886303ae3c2ef4f06071132cc1885219a699ba1d79a985f9b21d2147497152eca2308e9c9a3be3ee5e0c0b7fa5fc3f33fe12cb2c026334e453db615b4f74d1c0288c184a4c14b053c3a071513f4f7c8a3997693f111753739bd0eeef4f890a420bd0110f7296799a505762ae44297f2a04304b71563ad9cc8f68b927790d18f58da8804394a4d0919d939167b0e4cdee6ba88208c628a466a05d52ef09126271e82c4a7e4b0fd66885d2d6bf563b01d9ce1ce58f1dea91312a9031b335ba7665da23d15e259008b56b89b49bf1aa1007ea35b125f78f43f619fe4c6ceb8445cf5fb866faca2902ae303142525401dfa24b148307e0a18620baba8fea648b551e6c3092d126192ff51b396b00dafc2fc4f1149e3d7d4572d2dca69b262dfe69b2d1d7ac61ebe61a2ae46b18c20e98db24ff39e314c1c62520af9d1847c104caca86a3df151fea892463ceb0929f44934a67c09ffc3ced430f38b1f3889e87fd3f99bf1f467a6c763965d8bc69ae5a77655798daea573345647c312362f3a86cb043baef0a4ccb1aee536229a821c6897ff5cb1e5b8a818d12e6482155caa6d151de00d5eeb50d83543d73c2cc486a7c86326a92e184fd822bc750aed095442f3e6eaaced52ae72e80b39a8e663af9dc26341798dbe5e4863b823485f5cd25f35f9f16b2578201a7662a831ded8f2afbe9ebf233e504824727eb9605e2f1097ca9d17640ac489a61c11c5d76c7afd1dfcd09210c89856654ea4be6460ae9af5a0950b5a20a28a2b2b28387f985d981d072b5c0561d1eb8b9075038eda12ee2fa1224f6ca2b67c7193df72ddc4e910c93d7544fb594833b204a01baa0e1079e4a1cad6b6edb2a31dea3814bdeb411f1a1a4d854dc99f000662957872005db01471a95e53475263b22a47087b0c85e33db6ac30ee6f26e81b06ec9b5bd781cf386b10b0d156a703ad451b3589960a546310ae8483fe60609801e242c63125652ac8857447a0478fd98d3822afef3f9146e336eba1b241004b4bee86cc1087453ef6aceb55a2d80b57624cf149b35da9a145f08211e7880276748c37d7326fff19be41535707ef4dbeaccf9c2555b1ef3e24ac6b6065e97dacc8c514e11ab822537baf0da7f32198d1bbf74008138b4fab7453f02db9a996c98ccb0cff4e40a1e502f2a1bba20462067ea38928a42a30d844626a7feaaccede8d3f7861741d9e62bff08e621dcadb3303c836dbb7ade37633b314ca8ec219c03ba4a1c720bb37ba3727c85b6c87f0b2a4a956f4a2e9db625465479faf63b4c5cd14188ce71cd28fd610ea32306dcf7a6133d79475cbdb03dee71ab095258b34a0d02a6e138e8a386caca078eba537c42e6f7e095116dcdb70321312ed238be621404a58cf29b65c5b2ee5dc568f02bf208201215e3cefdd2e435ed11e5ae0dc85c6cf06965dcabebf25fdd10d485037ca4bb864abb907c77ce4fa817f57c7707b21ca892eb9f4d3251f4948c3145c55a7f26e0b54ca45e4c6cd189b56516a0c99ef3f9f54e5ea859565bf2595e9b41d2c350cebc830f06073c215e00bfa38e4852803d757c4b1fb756bd675446452eae04316d4dc613b9b43421156fa642019d7c23ca77a52a3841b3f0d356d18ed34f864243a14b8c84ed5933d2a3d48038127b838311781198c8493d1fa462bd558953ff1ed6607e610051b1c337a741fc42a7cedd5a4ffa08cdeb59e08734833657cb59e05bf22989475f1fa7a17fbbb9a6996e17e67012b4e84de956a6540d5b62d29bb56eeb2576d088c0d45033e9a099bbbddd8b32d655afdef24b57811f835f7bb506510fac0db6d33b9ec416dd0622a0d11e98a00e3d05cf12caad90f2154b89dc1b9c8b000e81a00c10b99c35fa8443ece8e92a9f94c81b212cb6351a8cc598b28f2fcfe9720762787a6ada8502899640c3f5bc74aaea1c7292ddf59a8d5b4114d698936f2e6a7e0cc3c5eb2112ba00534319d0ec4a73a40ea04789345ec1117ca5022b9fe27d80b6cc6ef03e27a0ff563627ac69ddb31875eef3eaf5e8224a0e0dc5b48596deeef13bc9714fa52981d9165faf47a9600938d3a0e55a7238c5148a5738865e43fe3702cca8d186f1a1e8cbec0f6dcdfcc4e4d570208ae6043b09b846842737fa3cc6e44ce2a0692da45a6a273c1323d8de2ce4da2c2b8fb4d634053949e213442089fc9eb0346a906122963e3ab232d880dbca59189220ed19816630056ec6412600419ce54e54294f2f680d37f1c6c06ffed178aac72702a45602cbb8277278fe0833116543e3e931891cf40b7ad4656640884ef0dd01a7451d8a7f8639ec793ac58a87596ca14077eaa7c138e1a17f5f1398f40bb17b92e0e1088fbe2e39b6442ec3055d29fdfcb40a72f460d3f938d8720f2a093110eaf0cd12b937b2711ad57675ae96783d3aa388838910d43dec9c5546810f9ffeaa5aef27dd7268fbdd811ea879e2e7f7ee5b908b2f8171c71233d18ed45a7c200d34e4891779935b27309787aaf0599c6187be1b30571cef81385c6b460a372abd2cc330cba59e14758aa2638c1c286d3682b48f543451afff9d00113021e78b", 0x1000}, {&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="b7d77122ff0e4e10075f1aea20a1dd71fd9685bfad6d382d971ef3d62a2a012f7d06f00576a349d7f5e806512101a1ab500915f3f907550ba9d8071279004ff65644851c526604972b086716368cd6cf777c582bc523f87ee79f9ba6b58d65d1eb742691c9a11d2523141a94b874f6f178d76742b442232d1fd588c4a67c143b7d7120884217465d7d0662c65e21b2359a9170e32921892046124cb01b710352c20a09e5a3d1a5cfc0b6", 0xaa}, {&(0x7f0000002d80)="ae7699a27663725e496a1d4477a33f7192b4f8e619e529bd414590fedcedebd3a74ae4f3ecb6aa6866c924ab79cfdf3e941ed1ddfdcd66fda02c78f37d6d9b719769616417f76edd2db964ff309cd95275033746f1120afcb4230f790de61e7713e1181c041cebdcdc8fd423a2e88d598e714e94c8a03438fad42ffecf0b8438fcdbdf2621f8fd9fd57ea9971c4e0b099bd2f5e1f5b7f7a716f59d33ac5c4af92c6e84694ffeb550ec8708c4c12638776c342bc5ab188a", 0xb7}, {&(0x7f0000002e40)="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", 0xccb}], 0x9) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x110, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_complete(r2) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=@allocspi={0xf8, 0x16, 0x100, 0x70bd2d, 0x25dfdbfe, {{{@in=@loopback, @in=@rand_addr=0x64010101, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x80, 0x87}, {@in6=@empty, 0x4d3, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xffffffffffffffc0, 0x3, 0x7, 0x7fffffffffffffff, 0x8000, 0x1, 0x94, 0x1}, {0x7fff, 0x4, 0x9, 0x4ba15d0a}, {0x200, 0x401, 0x2}, 0x70bd25, 0x0, 0x2, 0x0, 0x20}, 0x13b, 0x8}}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x48001) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r8 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x0, {0x8000, 0x1000, 0x4, 0x1}}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1000, 0x7], [0x9, 0xfff], 0x108}}) r9 = syz_open_pts(r4, 0x101) r10 = dup3(r9, r4, 0x0) write$UHID_INPUT(r10, &(0x7f00000001c0)={0xa, {"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", 0xe00}}, 0xffffff5c) getsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f00000001c0)=""/69, &(0x7f0000000100)=0x45) ioctl$COMEDI_SETRSUBD(r3, 0x6410) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0xa1, &(0x7f00000000c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0040002020800020003000100040005a1ea8c56a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000880) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) 3.769497587s ago: executing program 1 (id=4494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14}}, 0xa4}}, 0x0) 2.873415159s ago: executing program 4 (id=4495): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setrlimit(0xc, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f0000005400)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000001080)='net/icmp6\x00') read$FUSE(r5, &(0x7f0000003100)={0x2020}, 0x2020) 2.799141305s ago: executing program 2 (id=4496): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0xfffffffc, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r4 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0x57e, 0x10100, 0x4, 0x37d}, &(0x7f000001b100)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0xa) fchdir(r9) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r10, 0x101, 0x1) getdents64(r10, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019040)=ANY=[@ANYBLOB="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"], 0x2090}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r4, 0x92, 0x0, 0x1, 0x0, 0x0) 2.591888912s ago: executing program 0 (id=4497): r0 = socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x4, 0x8000000, 0xffffffffffffffff, 0x0) bind$inet6(r0, 0x0, 0x0) 2.591560792s ago: executing program 5 (id=4498): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.591077692s ago: executing program 1 (id=4499): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x89801) socket$rxrpc(0x21, 0x2, 0xa) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) tee(0xffffffffffffffff, r5, 0xfffffffffffffc01, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xe) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r7}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, 0x0) 1.754934389s ago: executing program 4 (id=4500): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) tee(r1, r3, 0x60000000000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.679178515s ago: executing program 5 (id=4501): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000003700)=ANY=[@ANYBLOB="24000000240003012bbd7000fbdbdf2503"], 0x24}, 0x1, 0x0, 0x0, 0x4068000}, 0x80) 687.659154ms ago: executing program 1 (id=4502): mkdir(0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$binder(0x0, 0x0, 0x0, 0x1008008, &(0x7f0000000040)={[{@max={'max', 0x3d, 0x1}}]}) 634.523699ms ago: executing program 2 (id=4503): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffffff) unshare(0x10000000) 184.083625ms ago: executing program 4 (id=4504): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') getdents64(r0, &(0x7f0000000080)=""/33, 0x21) getdents(r0, 0x0, 0x0) 178.495375ms ago: executing program 5 (id=4505): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6a, '\x00', 0x0, r0, 0x2, 0x2}, 0x50) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000002000000000000000000000081040100", @ANYRES32=r5, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYBLOB="0200000002", @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000440)={0x2, @vbi={0x8001, 0x0, 0x6, 0x43353039, [0x7, 0x7ff], [0x1, 0x4]}}) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r7, 0x58, &(0x7f0000000180)}, 0x10) 0s ago: executing program 4 (id=4506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) kernel console output (not intermixed with test programs): ] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1760.758287][T16578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1760.875742][T16578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1760.985897][T16578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1761.086623][T16578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1761.248933][T16578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1761.335765][T14735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1761.350750][ T4421] kworker/u4:12: attempt to access beyond end of device [ 1761.350750][ T4421] loop5: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1761.380070][T14735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1761.382768][ T4421] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 1761.502915][T16578] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.520581][T16578] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.530148][T16578] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.536294][T16945] loop1: detected capacity change from 0 to 512 [ 1761.598539][T16946] binder: 16940:16946 ioctl c0306201 200000000780 returned -11 [ 1761.609769][T16946] loop0: detected capacity change from 0 to 128 [ 1761.736414][T16944] virtio-fs: tag not found [ 1761.752778][T16578] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.886200][T16945] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1761.920989][T16945] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1762.037439][T16945] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.3134: corrupted inode contents [ 1762.179306][T16945] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz.1.3134: mark_inode_dirty error [ 1762.301941][T16945] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.3134: corrupted inode contents [ 1762.351641][T16945] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.3134: mark_inode_dirty error [ 1762.364510][ T6237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1762.672760][ T6237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1762.679365][T16960] loop0: detected capacity change from 0 to 64 [ 1762.719680][T14735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1762.738204][ T4427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1762.791460][ T4427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1762.912802][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1763.179705][T16299] EXT4-fs (loop1): unmounting filesystem. [ 1763.861588][ T4514] kworker/u4:16: attempt to access beyond end of device [ 1763.861588][ T4514] loop0: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1763.957891][ T4514] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 1764.025456][T16974] loop5: detected capacity change from 0 to 512 [ 1764.138584][T16974] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1764.212198][T16982] loop2: detected capacity change from 0 to 128 [ 1764.242614][T16974] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1764.310148][T16974] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #2: comm syz.5.3140: corrupted inode contents [ 1764.370546][T16974] EXT4-fs error (device loop5): ext4_dirty_inode:6119: inode #2: comm syz.5.3140: mark_inode_dirty error [ 1764.383533][T16982] virtio-fs: tag not found [ 1764.416945][T16987] loop0: detected capacity change from 0 to 64 [ 1764.423718][T16974] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #2: comm syz.5.3140: corrupted inode contents [ 1764.469670][T16974] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.3140: mark_inode_dirty error [ 1764.671919][T14281] EXT4-fs (loop5): unmounting filesystem. [ 1764.819618][T16995] loop4: detected capacity change from 0 to 64 [ 1766.285467][T17007] binder: 17003:17007 ioctl c0306201 200000000780 returned -11 [ 1766.295917][T17007] loop0: detected capacity change from 0 to 128 [ 1766.315371][T17007] virtio-fs: tag not found [ 1766.373100][ T4541] kworker/u4:17: attempt to access beyond end of device [ 1766.373100][ T4541] loop4: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1766.412922][ T4541] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 1766.574199][T17013] loop0: detected capacity change from 0 to 512 [ 1766.634835][T17013] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1766.692821][T17013] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1766.781763][T17013] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.3148: corrupted inode contents [ 1766.822984][T17013] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #2: comm syz.0.3148: mark_inode_dirty error [ 1766.854350][T17013] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.3148: corrupted inode contents [ 1766.900150][T17013] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.3148: mark_inode_dirty error [ 1767.086102][T15907] EXT4-fs (loop0): unmounting filesystem. [ 1768.022693][T13926] Bluetooth: hci0: command 0x0406 tx timeout [ 1768.282065][T17039] loop5: detected capacity change from 0 to 64 [ 1769.942934][T12257] kworker/u4:23: attempt to access beyond end of device [ 1769.942934][T12257] loop5: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1769.992973][T12257] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 1770.159985][T17050] loop5: detected capacity change from 0 to 512 [ 1770.221707][T15685] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.347974][T15685] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.397655][T17050] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1770.467997][T15685] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.572643][T17050] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1770.701853][T13926] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1770.711179][T13926] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1770.724644][T13926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1770.769734][T13926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1770.772879][T17050] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #2: comm syz.5.3154: corrupted inode contents [ 1771.002684][T13926] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1771.011145][T13926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1771.078225][T17050] EXT4-fs error (device loop5): ext4_dirty_inode:6119: inode #2: comm syz.5.3154: mark_inode_dirty error [ 1771.110018][T15685] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1771.138972][T17050] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #2: comm syz.5.3154: corrupted inode contents [ 1771.161650][T17050] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.3154: mark_inode_dirty error [ 1771.685318][T14281] EXT4-fs (loop5): unmounting filesystem. [ 1771.866113][T17073] loop5: detected capacity change from 0 to 64 [ 1773.112610][ T4272] Bluetooth: hci2: command 0x0409 tx timeout [ 1774.287652][T17058] chnl_net:caif_netlink_parms(): no params data found [ 1774.306658][ T4421] kworker/u4:12: attempt to access beyond end of device [ 1774.306658][ T4421] loop5: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1774.358540][ T4421] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 1775.182545][ T4272] Bluetooth: hci2: command 0x041b tx timeout [ 1775.281525][T17058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.296157][T17058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.356916][T17058] device bridge_slave_0 entered promiscuous mode [ 1775.433814][T17058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.444497][T17058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.455543][T17090] loop1: detected capacity change from 0 to 128 [ 1775.456281][T17058] device bridge_slave_1 entered promiscuous mode [ 1775.542309][T17058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.563597][T17090] virtio-fs: tag not found [ 1775.619936][T17058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1775.681232][T17058] team0: Port device team_slave_0 added [ 1775.696030][T17058] team0: Port device team_slave_1 added [ 1775.787337][T17107] loop5: detected capacity change from 0 to 128 [ 1776.311350][T17058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1776.322652][T17058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1776.387431][T17112] loop0: detected capacity change from 0 to 764 [ 1776.448562][T17058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1777.263019][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 1777.380832][T17058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1777.402492][T17058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.444957][T17058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1777.860767][T17131] loop5: detected capacity change from 0 to 512 [ 1777.905088][T15685] device hsr_slave_0 left promiscuous mode [ 1777.912182][T15685] device hsr_slave_1 left promiscuous mode [ 1777.933967][T17131] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1777.967892][T17131] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1778.058549][T17131] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #2: comm syz.5.3168: corrupted inode contents [ 1778.079080][T15685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1778.087007][T15685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1778.096686][T17131] EXT4-fs error (device loop5): ext4_dirty_inode:6119: inode #2: comm syz.5.3168: mark_inode_dirty error [ 1778.121772][T15685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1778.134205][T17131] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #2: comm syz.5.3168: corrupted inode contents [ 1778.134545][T15685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1778.160088][T15685] device bridge_slave_1 left promiscuous mode [ 1778.166813][T15685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.166878][T17131] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.3168: mark_inode_dirty error [ 1778.326222][T15685] device bridge_slave_0 left promiscuous mode [ 1778.370677][T15685] bridge0: port 1(bridge_slave_0) entered disabled state [ 1778.646958][T15685] device veth1_macvtap left promiscuous mode [ 1778.782985][T15685] device veth0_macvtap left promiscuous mode [ 1778.789212][T15685] device veth1_vlan left promiscuous mode [ 1778.807773][T15685] device veth0_vlan left promiscuous mode [ 1778.855133][T14281] EXT4-fs (loop5): unmounting filesystem. [ 1779.007797][T17149] loop5: detected capacity change from 0 to 512 [ 1779.281587][T17149] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1779.343400][ T4272] Bluetooth: hci2: command 0x0419 tx timeout [ 1779.402155][T17149] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1779.676052][T17149] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #2: comm syz.5.3171: corrupted inode contents [ 1779.928706][T17149] EXT4-fs error (device loop5): ext4_dirty_inode:6119: inode #2: comm syz.5.3171: mark_inode_dirty error [ 1780.048495][T17149] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #2: comm syz.5.3171: corrupted inode contents [ 1780.189738][T17149] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.3171: mark_inode_dirty error [ 1780.361478][T14281] EXT4-fs (loop5): unmounting filesystem. [ 1780.636489][T17172] loop5: detected capacity change from 0 to 128 [ 1780.655317][T17172] virtio-fs: tag not found [ 1780.963734][T15685] team0 (unregistering): Port device team_slave_1 removed [ 1781.061925][T15685] team0 (unregistering): Port device team_slave_0 removed [ 1781.122876][T15685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1781.194873][T15685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1781.464315][T17174] autofs4:pid:17174:autofs_fill_super: called with bogus options [ 1782.021935][T15685] bond0 (unregistering): Released all slaves [ 1782.167416][T17058] device hsr_slave_0 entered promiscuous mode [ 1782.223525][T17058] device hsr_slave_1 entered promiscuous mode [ 1782.382033][T17185] loop5: detected capacity change from 0 to 64 [ 1782.462307][T17187] syz.1.3180 (17187): drop_caches: 2 [ 1782.485027][T17187] syz.1.3180 (17187): drop_caches: 2 [ 1782.500773][T17189] loop4: detected capacity change from 0 to 128 [ 1784.679227][ T4367] kworker/u4:7: attempt to access beyond end of device [ 1784.679227][ T4367] loop5: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1784.827730][ T4367] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 1784.854862][T17200] loop0: detected capacity change from 0 to 64 [ 1785.700839][T17208] loop1: detected capacity change from 0 to 256 [ 1785.786682][T17208] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdf1ac56c, utbl_chksum : 0xe619d30d) [ 1785.999587][T11645] kworker/u4:22: attempt to access beyond end of device [ 1785.999587][T11645] loop0: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1786.074384][T11645] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 1786.180652][T17214] binder: 17211:17214 ioctl c0306201 200000000780 returned -11 [ 1786.193032][T17214] loop4: detected capacity change from 0 to 128 [ 1786.204384][T17214] virtio-fs: tag not found [ 1786.437778][T17220] autofs4:pid:17220:autofs_fill_super: called with bogus options [ 1786.935749][T17205] loop5: detected capacity change from 0 to 128 [ 1787.748542][T17205] virtio-fs: tag not found [ 1787.998493][T17058] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1788.066420][T17058] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1788.078869][T17244] loop1: detected capacity change from 0 to 512 [ 1788.193458][T17058] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1788.462534][T17246] autofs4:pid:17246:autofs_fill_super: called with bogus options [ 1788.595062][T17058] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1788.661141][T17244] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1788.704167][T17244] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1788.839764][T17244] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.3192: corrupted inode contents [ 1788.954344][T17244] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz.1.3192: mark_inode_dirty error [ 1788.995202][T17244] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.3192: corrupted inode contents [ 1789.023048][T17244] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.3192: mark_inode_dirty error [ 1789.243862][T17058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1789.308893][T16299] EXT4-fs (loop1): unmounting filesystem. [ 1789.341978][T14735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1789.353755][T14735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1789.365255][T17058] 8021q: adding VLAN 0 to HW filter on device team0 [ 1789.433173][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1789.448646][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1789.490907][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.498076][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1789.544592][T17270] loop1: detected capacity change from 0 to 128 [ 1789.945690][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1790.016408][T17273] loop4: detected capacity change from 0 to 64 [ 1790.103504][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1790.228126][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1790.356096][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1790.363282][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1790.625257][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1790.725394][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1790.768807][T11645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1790.790161][T11645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1790.860627][T11645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1790.870326][T11645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1790.894296][T11645] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1790.928149][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1790.949922][ T4367] kworker/u4:7: attempt to access beyond end of device [ 1790.949922][ T4367] loop4: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1791.061543][ T4367] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 1791.064541][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1791.116610][T17285] loop5: detected capacity change from 0 to 128 [ 1791.126212][T17285] virtio-fs: tag not found [ 1791.143667][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1791.203018][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1791.226719][T17058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1791.282860][T17287] loop4: detected capacity change from 0 to 1024 [ 1791.411686][T17294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3199'. [ 1791.435765][T17294] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1791.505191][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.506476][T17287] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1791.511607][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.862029][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1792.883870][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1792.913040][T17058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1792.962701][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1792.973336][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1793.013161][T17058] device veth0_vlan entered promiscuous mode [ 1793.041855][T17058] device veth1_vlan entered promiscuous mode [ 1793.094761][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1793.109851][T16578] EXT4-fs (loop4): unmounting filesystem. [ 1793.146502][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1793.392126][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1793.426126][T17323] loop4: detected capacity change from 0 to 64 [ 1793.431087][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1793.496922][T17321] autofs4:pid:17321:autofs_fill_super: called with bogus options [ 1793.502625][ T4272] Bluetooth: hci4: command 0xfc11 tx timeout [ 1793.513060][T13926] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1793.762744][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1793.772063][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1795.177315][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1795.365349][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1795.394994][T17058] device veth0_macvtap entered promiscuous mode [ 1795.464061][T17058] device veth1_macvtap entered promiscuous mode [ 1795.470727][ T4409] kworker/u4:9: attempt to access beyond end of device [ 1795.470727][ T4409] loop4: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1795.543510][ T4409] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 1795.563838][T17058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1795.584871][T17058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.625527][T17058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1795.642061][T17058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.660853][T17058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1795.681188][T17336] loop5: detected capacity change from 0 to 64 [ 1795.687586][T17058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.721724][T17058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1797.205096][T17058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.217059][T17058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1797.229168][T17058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1797.239706][T17058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.249958][T17058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1797.260741][T17058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.270978][T17058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1797.282371][T17058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.293021][T17058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1797.303519][T17058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.314518][T17058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1797.321990][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1797.355892][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1797.536478][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1797.689648][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1797.849862][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1797.992829][T17058] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.113348][T17058] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.263442][T17058] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.417739][T17058] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.918922][T14735] kworker/u4:3: attempt to access beyond end of device [ 1798.918922][T14735] loop5: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1798.975813][T14735] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 1799.479989][T14735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1799.528837][T14735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1799.570488][T12257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1799.578416][T14735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1799.588913][T17361] binder: 17351:17361 ioctl c0306201 200000000780 returned -11 [ 1799.613312][T17361] loop5: detected capacity change from 0 to 128 [ 1799.641126][T17361] virtio-fs: tag not found [ 1799.659315][T12257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1799.717902][T12257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1800.272330][T17366] loop1: detected capacity change from 0 to 64 [ 1802.013646][T11645] kworker/u4:22: attempt to access beyond end of device [ 1802.013646][T11645] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1802.084551][T11645] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 1802.259123][T17374] loop2: detected capacity change from 0 to 512 [ 1802.298636][T17374] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1802.323321][T17374] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1802.352554][T17374] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3219: Corrupt directory, running e2fsck is recommended [ 1802.408716][T17374] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1802.462020][T17374] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.3219: corrupted in-inode xattr [ 1802.540607][T17374] EXT4-fs (loop2): Remounting filesystem read-only [ 1802.553681][T17376] autofs4:pid:17376:autofs_fill_super: called with bogus options [ 1802.578831][T17374] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3219: couldn't read orphan inode 15 (err -117) [ 1802.616599][T17374] EXT4-fs (loop2): Remounting filesystem read-only [ 1802.631821][T17374] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1802.770447][T17385] loop0: detected capacity change from 0 to 512 [ 1802.835206][T17388] syz.4.3222 (17388): drop_caches: 2 [ 1802.840814][T17388] syz.4.3222 (17388): drop_caches: 2 [ 1802.931729][T17385] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1802.953923][T17385] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1803.040088][T17385] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.3221: corrupted inode contents [ 1803.075171][T17385] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #2: comm syz.0.3221: mark_inode_dirty error [ 1803.099020][T17385] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.3221: corrupted inode contents [ 1803.113894][T17385] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.3221: mark_inode_dirty error [ 1803.193362][T17058] EXT4-fs (loop2): unmounting filesystem. [ 1803.271462][T15907] EXT4-fs (loop0): unmounting filesystem. [ 1803.394731][T17398] loop1: detected capacity change from 0 to 64 [ 1804.547645][T17404] loop0: detected capacity change from 0 to 128 [ 1804.561845][T17403] virtio-fs: tag not found [ 1804.943263][T12257] kworker/u4:23: attempt to access beyond end of device [ 1804.943263][T12257] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1804.970284][T12257] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 1805.101058][T17419] loop0: detected capacity change from 0 to 64 [ 1807.718144][ T5347] kworker/u4:19: attempt to access beyond end of device [ 1807.718144][ T5347] loop0: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1807.936147][ T5347] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 1808.265634][T17433] syz.1.3234 (17433): drop_caches: 2 [ 1808.273851][T17433] syz.1.3234 (17433): drop_caches: 2 [ 1808.666245][T17439] loop4: detected capacity change from 0 to 512 [ 1809.117305][T17439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1809.272707][T17439] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1809.322066][T17445] binder: 17437:17445 ioctl c0306201 200000000780 returned -11 [ 1809.338650][T17445] loop1: detected capacity change from 0 to 128 [ 1809.359703][T17445] virtio-fs: tag not found [ 1809.377178][T17439] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.3236: corrupted inode contents [ 1809.498344][T17439] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #2: comm syz.4.3236: mark_inode_dirty error [ 1809.515631][T17439] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.3236: corrupted inode contents [ 1809.541873][T17439] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.3236: mark_inode_dirty error [ 1810.075285][T17455] loop0: detected capacity change from 0 to 128 [ 1810.817480][T17454] virtio-fs: tag not found [ 1810.842117][T16578] EXT4-fs (loop4): unmounting filesystem. [ 1813.115359][T17468] loop4: detected capacity change from 0 to 1024 [ 1813.354402][T17468] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1816.002307][T17488] loop0: detected capacity change from 0 to 64 [ 1816.024066][T16578] EXT4-fs (loop4): unmounting filesystem. [ 1816.234489][T17492] loop1: detected capacity change from 0 to 64 [ 1818.222971][ T4411] kworker/u4:11: attempt to access beyond end of device [ 1818.222971][ T4411] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1818.352752][ T4411] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 1818.454702][T17505] loop0: detected capacity change from 0 to 128 [ 1818.476090][T17505] virtio-fs: tag not found [ 1819.182926][T13926] Bluetooth: hci5: command 0x0406 tx timeout [ 1819.304487][T17509] loop1: detected capacity change from 0 to 1024 [ 1820.899023][T17509] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1821.190695][T16299] EXT4-fs (loop1): unmounting filesystem. [ 1822.066826][T17530] loop5: detected capacity change from 0 to 64 [ 1823.083406][ T4411] kworker/u4:11: attempt to access beyond end of device [ 1823.083406][ T4411] loop5: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1823.097391][ T4411] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 1823.272262][T17539] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1823.339872][T15685] Bluetooth: hci4: Frame reassembly failed (-84) [ 1824.705474][T17542] loop5: detected capacity change from 0 to 64 [ 1825.352696][T13926] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1825.360412][ T4272] Bluetooth: hci4: command 0xfc11 tx timeout [ 1825.948122][T17548] loop4: detected capacity change from 0 to 512 [ 1826.177653][T17548] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1826.264454][T17548] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1826.536624][T17551] syz.1.3265 (17551): drop_caches: 2 [ 1828.012142][T17551] syz.1.3265 (17551): drop_caches: 2 [ 1828.015278][T17548] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.3266: corrupted inode contents [ 1828.118982][T17548] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #2: comm syz.4.3266: mark_inode_dirty error [ 1828.202153][T17548] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.3266: corrupted inode contents [ 1828.263024][T17548] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.3266: mark_inode_dirty error [ 1828.422331][T17572] syz.1.3271 (17572): drop_caches: 2 [ 1828.428416][T17572] syz.1.3271 (17572): drop_caches: 2 [ 1828.491357][T16578] EXT4-fs (loop4): unmounting filesystem. [ 1829.046502][T17585] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1829.280160][ T5187] Bluetooth: hci4: Frame reassembly failed (-84) [ 1831.195925][T13926] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1831.203603][ T4272] Bluetooth: hci4: command 0xfc11 tx timeout [ 1831.516456][T17600] loop2: detected capacity change from 0 to 8 [ 1834.163329][T17611] loop2: detected capacity change from 0 to 512 [ 1834.337123][T17611] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1834.762604][T17611] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1834.861706][T17611] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.3283: corrupted inode contents [ 1834.890503][T17622] syz.0.3286 (17622): drop_caches: 2 [ 1834.898734][T17622] syz.0.3286 (17622): drop_caches: 2 [ 1834.936071][T17611] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #2: comm syz.2.3283: mark_inode_dirty error [ 1834.950221][T17611] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.3283: corrupted inode contents [ 1834.973612][T17611] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.3283: mark_inode_dirty error [ 1835.120405][T17058] EXT4-fs (loop2): unmounting filesystem. [ 1835.126560][T17625] loop0: detected capacity change from 0 to 64 [ 1836.965621][T17633] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1837.032501][ T4367] Bluetooth: hci4: Frame reassembly failed (-84) [ 1837.344334][ T4367] Bluetooth: hci4: Frame reassembly failed (-84) [ 1838.505282][ T4367] kworker/u4:7: attempt to access beyond end of device [ 1838.505282][ T4367] loop0: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1838.522192][ T4367] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 1838.607053][T17638] loop0: detected capacity change from 0 to 1024 [ 1838.646792][T17639] loop1: detected capacity change from 0 to 64 [ 1838.780009][T17644] autofs4:pid:17644:autofs_fill_super: called with bogus options [ 1839.088880][T17638] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1839.102696][ T4281] Bluetooth: hci4: command 0xfc11 tx timeout [ 1839.112982][T13926] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1840.992029][ T37] kworker/u4:2: attempt to access beyond end of device [ 1840.992029][ T37] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1841.029897][ T37] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 1841.399509][T17661] loop1: detected capacity change from 0 to 512 [ 1841.453077][T17660] /dev/loop0: Can't open blockdev [ 1841.683756][T17661] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1841.772708][T17661] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1841.809062][T17671] loop2: detected capacity change from 0 to 512 [ 1841.961223][T17672] autofs4:pid:17672:autofs_fill_super: called with bogus options [ 1842.215123][T17661] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.3297: corrupted inode contents [ 1842.254212][T17671] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1842.284628][T17661] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz.1.3297: mark_inode_dirty error [ 1842.293043][T17671] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1842.389010][T17671] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.3299: corrupted inode contents [ 1842.414854][T17661] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.3297: corrupted inode contents [ 1842.450441][T17671] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #2: comm syz.2.3299: mark_inode_dirty error [ 1842.462950][T17661] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.3297: mark_inode_dirty error [ 1842.484915][T17671] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.3299: corrupted inode contents [ 1842.509991][T17671] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.3299: mark_inode_dirty error [ 1842.599801][T17058] EXT4-fs (loop2): unmounting filesystem. [ 1842.702321][T16299] EXT4-fs (loop1): unmounting filesystem. [ 1842.832247][T17680] loop2: detected capacity change from 0 to 1024 [ 1843.118057][T17680] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1843.231872][T17686] loop5: detected capacity change from 0 to 1024 [ 1843.256328][T17686] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1843.368032][T17058] EXT4-fs (loop2): unmounting filesystem. [ 1843.375488][T17690] loop1: detected capacity change from 0 to 64 [ 1843.484692][T15907] EXT4-fs (loop0): unmounting filesystem. [ 1844.287390][T14281] EXT4-fs (loop5): unmounting filesystem. [ 1844.415073][T17695] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1846.013405][ T5347] kworker/u4:19: attempt to access beyond end of device [ 1846.013405][ T5347] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1846.051157][ T5347] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 1846.542898][ T4272] Bluetooth: hci4: command 0xfc11 tx timeout [ 1846.549336][T13926] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1847.585277][T17721] autofs4:pid:17721:autofs_fill_super: called with bogus options [ 1850.146452][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 1850.412623][T17750] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 1850.442489][T17750] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 1850.760945][T17755] loop0: detected capacity change from 0 to 1024 [ 1850.876045][T17755] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1851.584502][T17766] /dev/loop0: Can't open blockdev [ 1852.439714][T15907] EXT4-fs (loop0): unmounting filesystem. [ 1852.944818][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.951153][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.190875][T17780] loop4: detected capacity change from 0 to 64 [ 1853.749356][T17772] loop5: detected capacity change from 0 to 32768 [ 1853.810550][T17772] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1853.858855][T17772] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1853.882587][T17772] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1853.906440][T17772] BTRFS info (device loop5): max_inline at 0 [ 1853.932128][T17772] BTRFS info (device loop5): enabling disk space caching [ 1853.956715][T17772] BTRFS info (device loop5): turning off barriers [ 1854.000336][T17772] BTRFS info (device loop5): allowing degraded mounts [ 1854.034969][T17772] BTRFS info (device loop5): doing ref verification [ 1854.043139][T17772] BTRFS info (device loop5): force clearing of disk cache [ 1854.098196][T17772] BTRFS info (device loop5): enabling ssd optimizations [ 1854.147869][T17772] BTRFS info (device loop5): max_inline at 4096 [ 1854.186791][T17772] BTRFS info (device loop5): disk space caching is enabled [ 1855.449338][T17772] BTRFS info (device loop5): rebuilding free space tree [ 1855.541894][T17816] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1855.573330][ T56] Bluetooth: hci4: Frame reassembly failed (-84) [ 1855.610963][ T56] Bluetooth: hci4: Frame reassembly failed (-84) [ 1857.245433][T17772] BTRFS info (device loop5): disabling free space tree [ 1857.306852][T17772] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1857.445433][T17772] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1857.582619][T13926] Bluetooth: hci4: command 0xfc11 tx timeout [ 1857.589006][ T4281] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1857.919828][T17772] syz.5.3328 (17772) used greatest stack depth: 20304 bytes left [ 1857.987526][T14281] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1858.466664][T17833] loop0: detected capacity change from 0 to 512 [ 1858.639122][T17833] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1858.674929][T17833] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1858.769664][T17840] loop2: detected capacity change from 0 to 64 [ 1858.910161][T17833] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.3344: corrupted inode contents [ 1858.953068][T17833] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #2: comm syz.0.3344: mark_inode_dirty error [ 1859.021969][T17833] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.3344: corrupted inode contents [ 1859.079810][T17833] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.3344: mark_inode_dirty error [ 1859.296260][T17846] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1860.814405][T15907] EXT4-fs (loop0): unmounting filesystem. [ 1861.422646][T13926] Bluetooth: hci4: command 0xfc11 tx timeout [ 1861.431124][ T4281] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1861.765661][T17856] syz.2.3348 (17856): drop_caches: 2 [ 1861.792767][T17856] syz.2.3348 (17856): drop_caches: 2 [ 1862.147881][T17862] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1862.179877][ T4514] Bluetooth: hci4: Frame reassembly failed (-84) [ 1864.223797][ T4281] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1864.231453][T13926] Bluetooth: hci4: command 0xfc11 tx timeout [ 1864.350101][T17867] loop0: detected capacity change from 0 to 1024 [ 1864.918282][T17867] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1865.365254][T17882] loop1: detected capacity change from 0 to 512 [ 1865.375041][T17884] autofs4:pid:17884:autofs_fill_super: called with bogus options [ 1865.430022][T17886] loop2: detected capacity change from 0 to 64 [ 1865.484837][T17882] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1865.517651][T17882] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1865.570083][T17882] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.3357: corrupted inode contents [ 1865.666832][T17882] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz.1.3357: mark_inode_dirty error [ 1865.700984][T17882] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.3357: corrupted inode contents [ 1865.905736][T17882] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.3357: mark_inode_dirty error [ 1865.990374][T16299] EXT4-fs (loop1): unmounting filesystem. [ 1866.136329][T17894] loop1: detected capacity change from 0 to 512 [ 1866.179945][T15907] EXT4-fs (loop0): unmounting filesystem. [ 1866.198640][T17894] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1866.254537][T17894] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1866.401162][T17894] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.3360: corrupted inode contents [ 1866.414381][T17894] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz.1.3360: mark_inode_dirty error [ 1866.470904][T17894] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.3360: corrupted inode contents [ 1866.614429][T17907] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1866.661863][T11645] Bluetooth: hci4: Frame reassembly failed (-84) [ 1866.677603][T11645] Bluetooth: hci4: Frame reassembly failed (-84) [ 1868.712566][ T4281] Bluetooth: hci4: command 0xfc11 tx timeout [ 1868.721059][T13926] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1868.744506][T17894] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.3360: mark_inode_dirty error [ 1868.935487][T17915] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1869.002095][ T5187] Bluetooth: hci4: Frame reassembly failed (-84) [ 1870.564935][T16299] EXT4-fs (loop1): unmounting filesystem. [ 1870.681676][T17924] loop0: detected capacity change from 0 to 128 [ 1870.740505][T17924] virtio-fs: tag not found [ 1871.023847][ T4281] Bluetooth: hci4: command 0xfc11 tx timeout [ 1871.032052][T13926] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1871.554173][T17921] syz.5.3366 (17921): drop_caches: 2 [ 1871.559737][T17921] syz.5.3366 (17921): drop_caches: 2 [ 1872.131519][T17936] loop0: detected capacity change from 0 to 512 [ 1872.163292][T17935] syz.2.3372 (17935): drop_caches: 2 [ 1872.192970][T17935] syz.2.3372 (17935): drop_caches: 2 [ 1872.271002][T17936] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1872.312901][T17936] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1872.332970][T17941] loop5: detected capacity change from 0 to 1024 [ 1872.425278][T17936] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.3371: corrupted inode contents [ 1872.458682][T17941] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1872.506228][T17936] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #2: comm syz.0.3371: mark_inode_dirty error [ 1872.628573][T17936] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.3371: corrupted inode contents [ 1872.675201][T17945] loop2: detected capacity change from 0 to 64 [ 1872.694918][T17936] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.3371: mark_inode_dirty error [ 1872.859730][T15907] EXT4-fs (loop0): unmounting filesystem. [ 1875.084597][T17965] binder: 17955:17965 ioctl c0306201 200000000780 returned -11 [ 1875.106814][T17965] loop2: detected capacity change from 0 to 128 [ 1875.137333][T17965] virtio-fs: tag not found [ 1878.114974][T17983] loop2: detected capacity change from 0 to 64 [ 1878.174278][T17980] loop4: detected capacity change from 0 to 1024 [ 1878.220143][T17985] loop1: detected capacity change from 0 to 512 [ 1878.280246][T17980] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1878.376575][T17985] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1878.407355][T17985] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1878.510628][T17985] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.3386: corrupted inode contents [ 1878.564535][T14281] EXT4-fs (loop5): unmounting filesystem. [ 1878.576341][T17985] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz.1.3386: mark_inode_dirty error [ 1878.692841][T17985] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.3386: corrupted inode contents [ 1878.726565][T17985] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.3386: mark_inode_dirty error [ 1879.147486][T16578] EXT4-fs (loop4): unmounting filesystem. [ 1879.166676][T16299] EXT4-fs (loop1): unmounting filesystem. [ 1879.822540][T18017] loop5: detected capacity change from 0 to 128 [ 1879.899217][T18016] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1881.412675][T18013] virtio-fs: tag not found [ 1881.513743][T18021] loop4: detected capacity change from 0 to 512 [ 1881.698538][T18021] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1881.759188][T18021] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1881.775786][T18021] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.3396: corrupted inode contents [ 1881.780532][T18026] loop5: detected capacity change from 0 to 1024 [ 1881.808199][T18021] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #2: comm syz.4.3396: mark_inode_dirty error [ 1881.836283][T18026] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1881.850250][T18021] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.3396: corrupted inode contents [ 1881.878223][T18021] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.3396: mark_inode_dirty error [ 1881.974684][T18032] binder: 18008:18032 ioctl c0306201 200000000780 returned -11 [ 1881.986092][T18032] loop0: detected capacity change from 0 to 128 [ 1881.993704][T13926] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1882.143372][T18030] virtio-fs: tag not found [ 1882.321973][T16578] EXT4-fs (loop4): unmounting filesystem. [ 1882.567425][T14281] EXT4-fs (loop5): unmounting filesystem. [ 1883.476240][T18038] loop4: detected capacity change from 0 to 64 [ 1883.514561][T18042] loop5: detected capacity change from 0 to 512 [ 1883.531690][T18040] loop2: detected capacity change from 0 to 64 [ 1883.568118][T18042] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1883.661338][T18042] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 1883.676202][T18042] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3400: Corrupt directory, running e2fsck is recommended [ 1883.691618][T18042] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1883.702564][T18042] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.3400: corrupted in-inode xattr [ 1883.715947][T18042] EXT4-fs (loop5): Remounting filesystem read-only [ 1883.722751][T18042] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3400: couldn't read orphan inode 15 (err -117) [ 1883.775444][T18042] EXT4-fs (loop5): Remounting filesystem read-only [ 1883.872863][T18042] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1884.213226][ T4503] kworker/u4:15: attempt to access beyond end of device [ 1884.213226][ T4503] loop4: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1884.273971][ T4503] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 1884.420746][T14281] EXT4-fs (loop5): unmounting filesystem. [ 1884.983644][T18057] loop4: detected capacity change from 0 to 512 [ 1885.058018][T18057] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1885.143791][T18057] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1885.200997][T18057] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.3403: corrupted inode contents [ 1885.235067][T18064] loop1: detected capacity change from 0 to 64 [ 1885.263138][T18057] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #2: comm syz.4.3403: mark_inode_dirty error [ 1885.322609][T18057] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.3403: corrupted inode contents [ 1885.373443][T18057] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.3403: mark_inode_dirty error [ 1886.210765][T18074] loop2: detected capacity change from 0 to 512 [ 1886.319189][T16578] EXT4-fs (loop4): unmounting filesystem. [ 1886.341571][T11369] kworker/u4:5: attempt to access beyond end of device [ 1886.341571][T11369] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1886.406568][T18074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1886.462207][T11369] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 1886.510451][T18074] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1887.528266][T18074] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.3409: corrupted inode contents [ 1887.555616][T18086] loop4: detected capacity change from 0 to 64 [ 1887.592502][T18074] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #2: comm syz.2.3409: mark_inode_dirty error [ 1887.673191][T18074] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.3409: corrupted inode contents [ 1887.703381][T18074] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.3409: mark_inode_dirty error [ 1888.224094][T18091] loop0: detected capacity change from 0 to 1024 [ 1888.312365][T18091] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1888.329971][T18097] loop4: detected capacity change from 0 to 64 [ 1888.350095][T17058] EXT4-fs (loop2): unmounting filesystem. [ 1888.680044][T18081] binder: 18080:18081 ioctl c0306201 200000000780 returned -11 [ 1888.702304][T18081] loop1: detected capacity change from 0 to 128 [ 1888.753183][T18081] virtio-fs: tag not found [ 1889.591553][T18104] loop4: detected capacity change from 0 to 64 [ 1890.232610][T15907] EXT4-fs (loop0): unmounting filesystem. [ 1890.575541][ T6237] kworker/u4:21: attempt to access beyond end of device [ 1890.575541][ T6237] loop4: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1890.631292][T18115] loop5: detected capacity change from 0 to 512 [ 1890.639741][ T6237] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 1890.683958][T18115] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1890.703680][T18115] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1890.750235][T18124] fuseblk: Bad value for 'fd' [ 1890.875982][T18115] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #2: comm syz.5.3422: corrupted inode contents [ 1891.054873][T18127] syz.2.3423 (18127): drop_caches: 2 [ 1891.066834][T18127] syz.2.3423 (18127): drop_caches: 2 [ 1891.279949][T18126] loop4: detected capacity change from 0 to 64 [ 1891.282797][T18115] EXT4-fs error (device loop5): ext4_dirty_inode:6119: inode #2: comm syz.5.3422: mark_inode_dirty error [ 1891.364538][T18115] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #2: comm syz.5.3422: corrupted inode contents [ 1891.514907][T18115] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.3422: mark_inode_dirty error [ 1891.629698][T18131] loop0: detected capacity change from 0 to 64 [ 1891.791123][T14281] EXT4-fs (loop5): unmounting filesystem. [ 1893.625084][T18135] loop2: detected capacity change from 0 to 64 [ 1893.706979][ T4503] kworker/u4:15: attempt to access beyond end of device [ 1893.706979][ T4503] loop0: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1893.733285][ T4409] kworker/u4:9: attempt to access beyond end of device [ 1893.733285][ T4409] loop4: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1893.761770][ T4503] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 1893.813053][ T4409] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 1894.741598][T18149] loop4: detected capacity change from 0 to 64 [ 1894.776744][ T4409] kworker/u4:9: attempt to access beyond end of device [ 1894.776744][ T4409] loop2: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1894.868834][ T4409] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 1895.247106][T18157] loop2: detected capacity change from 0 to 512 [ 1895.423666][T18157] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1895.460986][T18157] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1895.557068][T18157] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.3432: corrupted inode contents [ 1895.646746][T18163] binder: 18141:18163 ioctl c0306201 200000000780 returned -11 [ 1895.657519][T18163] loop0: detected capacity change from 0 to 128 [ 1895.698924][T18157] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #2: comm syz.2.3432: mark_inode_dirty error [ 1895.710685][T18163] virtio-fs: tag not found [ 1895.778747][T18157] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.3432: corrupted inode contents [ 1895.801638][T18167] loop1: detected capacity change from 0 to 64 [ 1895.803164][T18165] loop4: detected capacity change from 0 to 1024 [ 1895.819579][T18157] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.3432: mark_inode_dirty error [ 1895.896700][T18165] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1895.982645][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 1897.870460][ T4409] kworker/u4:9: attempt to access beyond end of device [ 1897.870460][ T4409] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1897.873284][T17058] EXT4-fs (loop2): unmounting filesystem. [ 1897.892740][ T4409] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 1898.314695][T18177] fuseblk: Bad value for 'fd' [ 1898.579814][T18182] loop2: detected capacity change from 0 to 512 [ 1898.644874][T16578] EXT4-fs (loop4): unmounting filesystem. [ 1898.755646][T18182] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1898.772552][T18182] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1898.800183][T18182] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.3437: corrupted inode contents [ 1898.847278][T18189] loop1: detected capacity change from 0 to 64 [ 1898.939766][T18182] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #2: comm syz.2.3437: mark_inode_dirty error [ 1899.247373][T18182] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.3437: corrupted inode contents [ 1899.342004][T18182] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.3437: mark_inode_dirty error [ 1900.038904][ T4427] kworker/u4:13: attempt to access beyond end of device [ 1900.038904][ T4427] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1900.154590][ T4427] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 1900.368045][T17058] EXT4-fs (loop2): unmounting filesystem. [ 1900.377808][T18200] loop0: detected capacity change from 0 to 64 [ 1900.565845][T18203] loop1: detected capacity change from 0 to 128 [ 1900.601260][T18203] virtio-fs: tag not found [ 1900.661787][T18209] loop5: detected capacity change from 0 to 64 [ 1901.248866][T18215] fuseblk: Bad value for 'fd' [ 1903.006917][T14735] kworker/u4:3: attempt to access beyond end of device [ 1903.006917][T14735] loop5: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1903.047547][T14735] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 1903.141499][T18225] loop2: detected capacity change from 0 to 1024 [ 1903.353225][T18225] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1903.458830][T18234] loop1: detected capacity change from 0 to 512 [ 1903.566998][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3461'. [ 1903.580228][T18234] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1903.626008][T18227] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1903.645161][T17058] EXT4-fs (loop2): unmounting filesystem. [ 1903.662727][T18234] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 1903.685791][T18234] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3452: Corrupt directory, running e2fsck is recommended [ 1903.709757][T15685] Bluetooth: hci4: Frame reassembly failed (-84) [ 1903.726533][T18234] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1903.740681][T18234] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.3452: corrupted in-inode xattr [ 1903.757548][T18234] EXT4-fs (loop1): Remounting filesystem read-only [ 1903.766129][T18234] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3452: couldn't read orphan inode 15 (err -117) [ 1903.792785][T18234] EXT4-fs (loop1): Remounting filesystem read-only [ 1903.823977][T18234] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1904.378912][T18244] binder: 18231:18244 ioctl c0306201 200000000780 returned -11 [ 1904.436338][T18249] loop0: detected capacity change from 0 to 128 [ 1904.575342][T18244] virtio-fs: tag not found [ 1904.598775][T16299] EXT4-fs (loop1): unmounting filesystem. [ 1905.742624][T13926] Bluetooth: hci4: command 0xfc11 tx timeout [ 1905.749218][ T4281] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1906.762951][T18262] loop4: detected capacity change from 0 to 512 [ 1906.839811][T18262] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1906.871148][T18262] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1907.098908][T18269] loop5: detected capacity change from 0 to 128 [ 1907.128703][T18269] virtio-fs: tag not found [ 1907.735736][T18270] loop2: detected capacity change from 0 to 64 [ 1907.769479][T18262] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.3457: corrupted inode contents [ 1907.842962][T18262] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #2: comm syz.4.3457: mark_inode_dirty error [ 1907.883311][T18262] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.3457: corrupted inode contents [ 1907.984361][T18262] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.3457: mark_inode_dirty error [ 1908.113333][T16578] EXT4-fs (loop4): unmounting filesystem. [ 1908.510146][T18286] syz.4.3466 (18286): drop_caches: 2 [ 1908.532055][T18286] syz.4.3466 (18286): drop_caches: 2 [ 1908.934841][T18293] loop2: detected capacity change from 0 to 128 [ 1908.968972][T18293] virtio-fs: tag not found [ 1909.085019][T18298] loop4: detected capacity change from 0 to 1024 [ 1909.172376][T18303] loop1: detected capacity change from 0 to 64 [ 1909.200416][T18298] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1909.448214][T16578] EXT4-fs (loop4): unmounting filesystem. [ 1911.100220][T18323] loop1: detected capacity change from 0 to 512 [ 1911.196092][T18323] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1911.295384][T18323] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1911.451031][T18323] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.3477: corrupted inode contents [ 1911.512235][T18323] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz.1.3477: mark_inode_dirty error [ 1911.558832][T18323] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.3477: corrupted inode contents [ 1911.606725][T18323] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.3477: mark_inode_dirty error [ 1911.977623][T16299] EXT4-fs (loop1): unmounting filesystem. [ 1912.215101][T18343] loop0: detected capacity change from 0 to 1024 [ 1912.319135][T18343] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1912.361960][T18347] loop1: detected capacity change from 0 to 512 [ 1912.593966][T15907] EXT4-fs (loop0): unmounting filesystem. [ 1912.619256][T18347] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1912.669334][T18347] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 1912.680227][T18347] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3484: Corrupt directory, running e2fsck is recommended [ 1912.693712][T18347] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1912.708319][T18347] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.3484: corrupted in-inode xattr [ 1912.754197][T18347] EXT4-fs (loop1): Remounting filesystem read-only [ 1912.767176][T18347] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3484: couldn't read orphan inode 15 (err -117) [ 1912.788595][T18347] EXT4-fs (loop1): Remounting filesystem read-only [ 1912.835444][T18347] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1912.847406][T18352] loop0: detected capacity change from 0 to 64 [ 1912.887046][T18353] binder: 18337:18353 ioctl c0306201 200000000780 returned -11 [ 1913.013246][T18354] loop5: detected capacity change from 0 to 128 [ 1913.089954][T18353] virtio-fs: tag not found [ 1913.216582][T16299] EXT4-fs (loop1): unmounting filesystem. [ 1913.588968][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3487'. [ 1913.616455][T18357] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1913.754214][ T4427] Bluetooth: hci4: Frame reassembly failed (-84) [ 1914.390166][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.398513][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.673225][T18372] autofs4:pid:18372:autofs_fill_super: called with bogus options [ 1914.808986][T18376] loop4: detected capacity change from 0 to 512 [ 1914.964339][T18376] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1914.975169][T18376] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1915.010431][T18376] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.3495: corrupted inode contents [ 1915.059574][T18376] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #2: comm syz.4.3495: mark_inode_dirty error [ 1915.093272][T18376] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.3495: corrupted inode contents [ 1915.165569][T18376] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.3495: mark_inode_dirty error [ 1915.740906][T16578] EXT4-fs (loop4): unmounting filesystem. [ 1915.742806][T13926] Bluetooth: hci4: command 0xfc11 tx timeout [ 1915.753158][ T4281] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1915.980656][T18390] fuseblk: Bad value for 'fd' [ 1916.057914][T18392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3498'. [ 1916.077619][T18392] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1916.106613][ T8832] Bluetooth: hci4: Frame reassembly failed (-84) [ 1916.146527][ T8832] Bluetooth: hci4: Frame reassembly failed (-84) [ 1918.142534][T13926] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1918.206931][T18395] loop0: detected capacity change from 0 to 64 [ 1918.607485][T18411] loop4: detected capacity change from 0 to 64 [ 1919.059823][T18414] binder: 18398:18414 ioctl c0306201 200000000780 returned -11 [ 1919.179523][T18414] loop2: detected capacity change from 0 to 128 [ 1919.290972][T18414] virtio-fs: tag not found [ 1919.359046][ T9] kworker/u4:0: attempt to access beyond end of device [ 1919.359046][ T9] loop4: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1919.418606][ T9] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 1919.425569][T18420] autofs4:pid:18420:autofs_fill_super: called with bogus options [ 1919.767312][T18424] loop1: detected capacity change from 0 to 64 [ 1921.448790][T18426] loop0: detected capacity change from 0 to 512 [ 1921.706469][ T9] kworker/u4:0: attempt to access beyond end of device [ 1921.706469][ T9] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1921.785360][ T9] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 1921.807868][T18436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3511'. [ 1921.839959][T18426] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1921.871480][T18426] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1921.947787][T18426] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.3508: corrupted inode contents [ 1922.042602][T18426] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #2: comm syz.0.3508: mark_inode_dirty error [ 1922.141876][T18426] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.3508: corrupted inode contents [ 1922.189630][T18426] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.3508: mark_inode_dirty error [ 1922.400479][T18445] autofs4:pid:18445:autofs_fill_super: called with bogus options [ 1922.640210][T15907] EXT4-fs (loop0): unmounting filesystem. [ 1922.750117][T18449] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3514'. [ 1922.809292][T18450] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1923.689389][ T9] Bluetooth: hci4: Frame reassembly failed (-84) [ 1923.720130][T18453] loop0: detected capacity change from 0 to 64 [ 1924.237232][T18457] loop5: detected capacity change from 0 to 64 [ 1925.063221][ T4541] kworker/u4:17: attempt to access beyond end of device [ 1925.063221][ T4541] loop5: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1925.089092][ T4541] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 1925.742537][T13926] Bluetooth: hci4: command 0xfc11 tx timeout [ 1925.742565][ T4281] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1926.281780][T18479] loop4: detected capacity change from 0 to 64 [ 1928.204581][T18483] autofs4:pid:18483:autofs_fill_super: called with bogus options [ 1928.368878][ T4427] kworker/u4:13: attempt to access beyond end of device [ 1928.368878][ T4427] loop4: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1928.403854][ T4427] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 1929.851290][T18502] loop5: detected capacity change from 0 to 64 [ 1929.912759][T18503] binder: 18486:18503 ioctl c0306201 200000000780 returned -11 [ 1930.127093][T18503] loop2: detected capacity change from 0 to 128 [ 1930.174312][T18503] virtio-fs: tag not found [ 1930.641987][T18506] loop4: detected capacity change from 0 to 64 [ 1930.789047][T18508] loop1: detected capacity change from 0 to 1024 [ 1930.924173][T18508] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1931.953197][T18523] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3535'. [ 1932.010109][T18522] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1933.373476][T16299] EXT4-fs (loop1): unmounting filesystem. [ 1933.466031][ T11] kworker/u4:1: attempt to access beyond end of device [ 1933.466031][ T11] loop4: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1933.480147][ T11] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 1933.535717][T18528] loop2: detected capacity change from 0 to 1024 [ 1934.064833][T18528] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1934.142656][ T4281] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1934.187037][T18536] loop0: detected capacity change from 0 to 64 [ 1934.570833][T17058] EXT4-fs (loop2): unmounting filesystem. [ 1935.223642][ T4541] kworker/u4:17: attempt to access beyond end of device [ 1935.223642][ T4541] loop0: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1935.344344][ T4541] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 1935.371923][T18542] loop1: detected capacity change from 0 to 64 [ 1935.714117][T18549] loop5: detected capacity change from 0 to 64 [ 1936.255290][ T11] kworker/u4:1: attempt to access beyond end of device [ 1936.255290][ T11] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1936.435794][T18555] loop0: detected capacity change from 0 to 64 [ 1936.443617][ T11] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 1937.361754][ T11] kworker/u4:1: attempt to access beyond end of device [ 1937.361754][ T11] loop5: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1937.403931][ T11] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 1938.478481][T18579] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3551'. [ 1938.539117][T18580] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1938.628326][ T4421] Bluetooth: hci4: Frame reassembly failed (-84) [ 1940.187603][T18584] binder: 18568:18584 ioctl c0306201 200000000780 returned -11 [ 1940.236597][T18584] loop4: detected capacity change from 0 to 128 [ 1940.336217][T18584] virtio-fs: tag not found [ 1940.622862][ T4281] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1941.001365][T18587] loop0: detected capacity change from 0 to 1024 [ 1941.181879][T18587] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1941.858392][T15907] EXT4-fs (loop0): unmounting filesystem. [ 1942.001359][T18597] loop2: detected capacity change from 0 to 64 [ 1943.615263][ T6237] kworker/u4:21: attempt to access beyond end of device [ 1943.615263][ T6237] loop2: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1943.641821][T18612] loop5: detected capacity change from 0 to 64 [ 1943.726505][ T6237] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 1944.218576][T18620] loop4: detected capacity change from 0 to 512 [ 1944.256032][T18620] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1944.272647][T18620] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 1944.319635][T18620] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.3562: Corrupt directory, running e2fsck is recommended [ 1944.333836][T18620] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1944.348436][T18620] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.3562: corrupted in-inode xattr [ 1944.380826][T18624] loop0: detected capacity change from 0 to 512 [ 1944.400627][T18620] EXT4-fs (loop4): Remounting filesystem read-only [ 1944.460455][T18620] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.3562: couldn't read orphan inode 15 (err -117) [ 1944.527990][T18620] EXT4-fs (loop4): Remounting filesystem read-only [ 1944.539457][T18624] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1944.571003][T18624] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1944.582927][T18620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1944.651180][T18624] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.3563: corrupted inode contents [ 1944.697537][T18624] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #2: comm syz.0.3563: mark_inode_dirty error [ 1944.763132][T18624] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.3563: corrupted inode contents [ 1944.799531][T18624] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.3563: mark_inode_dirty error [ 1944.958173][T15907] EXT4-fs (loop0): unmounting filesystem. [ 1945.305573][T16578] EXT4-fs (loop4): unmounting filesystem. [ 1947.377135][T18651] loop1: detected capacity change from 0 to 64 [ 1947.611256][T18653] binder: 18634:18653 ioctl c0306201 200000000780 returned -11 [ 1948.463832][T18661] loop2: detected capacity change from 0 to 64 [ 1948.740372][T18653] loop5: detected capacity change from 0 to 128 [ 1949.429560][ T4421] kworker/u4:12: attempt to access beyond end of device [ 1949.429560][ T4421] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1949.497293][ T4421] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 1949.688962][T18673] loop1: detected capacity change from 0 to 64 [ 1951.919483][ T4427] kworker/u4:13: attempt to access beyond end of device [ 1951.919483][ T4427] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1951.943467][ T4427] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 1952.877000][T18691] loop1: detected capacity change from 0 to 512 [ 1952.951509][T18691] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1952.970797][T18691] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1953.392966][T18691] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.3582: corrupted inode contents [ 1953.577611][T18691] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz.1.3582: mark_inode_dirty error [ 1953.816495][T18691] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.3582: corrupted inode contents [ 1953.952524][T18691] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.3582: mark_inode_dirty error [ 1954.560967][T16299] EXT4-fs (loop1): unmounting filesystem. [ 1954.864425][T18716] loop1: detected capacity change from 0 to 64 [ 1955.905760][T18724] loop1: detected capacity change from 0 to 1024 [ 1956.036557][T18724] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1956.098027][T18731] loop2: detected capacity change from 0 to 512 [ 1956.167885][T18731] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1956.181467][T18731] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1956.242960][T18731] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.3593: corrupted inode contents [ 1956.300600][T18731] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #2: comm syz.2.3593: mark_inode_dirty error [ 1956.378506][T18731] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.3593: corrupted inode contents [ 1956.483028][T18731] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.3593: mark_inode_dirty error [ 1956.972731][T16299] EXT4-fs (loop1): unmounting filesystem. [ 1956.986767][T17058] EXT4-fs (loop2): unmounting filesystem. [ 1957.503221][T18751] loop1: detected capacity change from 0 to 128 [ 1958.909449][T18750] virtio-fs: tag not found [ 1959.462092][T18759] loop2: detected capacity change from 0 to 1024 [ 1959.652296][T18759] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1959.920212][T18765] binder: 18760:18765 ioctl c0306201 200000000780 returned -11 [ 1959.931396][T18765] loop1: detected capacity change from 0 to 128 [ 1960.074108][T18764] virtio-fs: tag not found [ 1960.329180][T17058] EXT4-fs (loop2): unmounting filesystem. [ 1960.342931][T18768] loop0: detected capacity change from 0 to 64 [ 1960.639457][T18770] loop2: detected capacity change from 0 to 1024 [ 1960.726349][T18770] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1960.730083][T18772] loop5: detected capacity change from 0 to 64 [ 1962.384021][T17058] EXT4-fs (loop2): unmounting filesystem. [ 1962.565183][ T37] kworker/u4:2: attempt to access beyond end of device [ 1962.565183][ T37] loop5: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1962.607364][ T37] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 1962.623201][T18783] autofs4:pid:18783:autofs_fill_super: called with bogus options [ 1963.506501][T18795] binder: 18790:18795 ioctl c0306201 0 returned -14 [ 1963.527670][T18795] loop1: detected capacity change from 0 to 128 [ 1963.749324][T18792] virtio-fs: tag not found [ 1963.764123][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3607'. [ 1963.824610][T18797] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1965.199345][T18789] loop2: detected capacity change from 0 to 1024 [ 1965.299501][T18789] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1965.704685][T18807] loop5: detected capacity change from 0 to 1024 [ 1965.982575][ T4281] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1965.982718][T18807] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1967.187466][T18807] overlayfs: missing 'lowerdir' [ 1967.308300][T18819] loop1: detected capacity change from 0 to 64 [ 1967.420845][T17058] EXT4-fs (loop2): unmounting filesystem. [ 1968.009285][T18831] loop2: detected capacity change from 0 to 128 [ 1968.273516][T18831] virtio-fs: tag not found [ 1968.343514][T14281] EXT4-fs (loop5): unmounting filesystem. [ 1969.013511][T18834] binder: 18814:18834 ioctl c0306201 200000000780 returned -11 [ 1969.131438][T18836] fuseblk: Bad value for 'rootmode' [ 1969.194383][T18834] loop0: detected capacity change from 0 to 128 [ 1969.260121][T18841] loop1: detected capacity change from 0 to 64 [ 1969.301959][T18834] virtio-fs: tag not found [ 1970.205152][T18845] loop5: detected capacity change from 0 to 512 [ 1970.335765][T18845] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1970.347769][ T4410] kworker/u4:10: attempt to access beyond end of device [ 1970.347769][ T4410] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1970.355879][T18845] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 1970.384708][T18845] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3622: Corrupt directory, running e2fsck is recommended [ 1970.408076][ T4410] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 1970.419852][T18845] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1970.452699][T18845] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.3622: corrupted in-inode xattr [ 1970.582672][T18853] autofs4:pid:18853:autofs_fill_super: called with bogus options [ 1970.677533][T18854] loop2: detected capacity change from 0 to 1024 [ 1970.955118][T18845] EXT4-fs (loop5): Remounting filesystem read-only [ 1970.992618][T18845] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3622: couldn't read orphan inode 15 (err -117) [ 1971.079563][T18857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3624'. [ 1971.096535][T18857] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1971.147828][ T4421] Bluetooth: hci4: Frame reassembly failed (-84) [ 1972.606926][T18845] EXT4-fs (loop5): Remounting filesystem read-only [ 1972.625364][T18854] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1972.625905][T18845] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1972.744834][T14281] EXT4-fs (loop5): unmounting filesystem. [ 1973.193944][T13926] Bluetooth: hci4: command 0xfc11 tx timeout [ 1973.200445][ T4281] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1973.730371][T18866] syz.4.3626 (18866): drop_caches: 2 [ 1973.836530][T18866] syz.4.3626 (18866): drop_caches: 2 [ 1973.943532][T17058] EXT4-fs (loop2): unmounting filesystem. [ 1974.277064][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3629'. [ 1974.287658][T18873] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1974.465874][T18876] loop2: detected capacity change from 0 to 64 [ 1974.494278][T18878] loop5: detected capacity change from 0 to 512 [ 1974.568030][T18883] fuseblk: Unknown parameter 'use00000000000000000000' [ 1974.576445][T18878] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1974.591038][T18878] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1974.703335][T18887] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1974.713172][T18887] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1974.748344][T18878] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #2: comm syz.5.3631: corrupted inode contents [ 1974.790561][T18878] EXT4-fs error (device loop5): ext4_dirty_inode:6119: inode #2: comm syz.5.3631: mark_inode_dirty error [ 1974.804703][T18878] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #2: comm syz.5.3631: corrupted inode contents [ 1974.855500][T18878] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.3631: mark_inode_dirty error [ 1975.028842][T14281] EXT4-fs (loop5): unmounting filesystem. [ 1975.135020][T18900] loop5: detected capacity change from 0 to 1024 [ 1975.223625][T18900] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1975.824717][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.832534][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.112178][T14281] EXT4-fs (loop5): unmounting filesystem. [ 1976.312580][ T4281] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1976.569709][T18911] loop1: detected capacity change from 0 to 1024 [ 1976.716588][T18911] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1977.514624][T16299] EXT4-fs (loop1): unmounting filesystem. [ 1977.669502][T18920] loop5: detected capacity change from 0 to 64 [ 1979.581988][ T37] kworker/u4:2: attempt to access beyond end of device [ 1979.581988][ T37] loop5: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1979.603012][ T37] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 1981.741890][T18935] loop2: detected capacity change from 0 to 64 [ 1982.092168][T18939] fuseblk: Unknown parameter 'use00000000000000000000' [ 1984.959243][T18954] loop1: detected capacity change from 0 to 512 [ 1985.223559][T18962] binder: 18950:18962 ioctl c0306201 200000000780 returned -11 [ 1985.234744][T18962] loop5: detected capacity change from 0 to 128 [ 1985.399636][T18954] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1985.417814][T18962] virtio-fs: tag not found [ 1985.472718][T18954] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1985.586849][T18968] autofs4:pid:18968:autofs_fill_super: called with bogus options [ 1985.953540][T18954] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.3649: corrupted inode contents [ 1985.993708][T18954] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz.1.3649: mark_inode_dirty error [ 1986.047906][T18954] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.3649: corrupted inode contents [ 1986.071580][T18971] loop2: detected capacity change from 0 to 1024 [ 1986.202036][T18973] loop0: detected capacity change from 0 to 128 [ 1986.351952][T18973] virtio-fs: tag not found [ 1986.398170][T18954] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.3649: mark_inode_dirty error [ 1986.494219][T18971] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1986.826443][T16299] EXT4-fs (loop1): unmounting filesystem. [ 1987.549421][T17058] EXT4-fs (loop2): unmounting filesystem. [ 1987.603988][T18988] loop1: detected capacity change from 0 to 64 [ 1989.975531][T19009] syz.4.3664 (19009): drop_caches: 2 [ 1989.998672][T19009] syz.4.3664 (19009): drop_caches: 2 [ 1990.569123][T19018] loop4: detected capacity change from 0 to 1024 [ 1990.629094][T19019] loop1: detected capacity change from 0 to 512 [ 1990.693284][T19018] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1990.703333][T19019] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1990.784792][T19019] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 1990.872963][T19019] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3666: Corrupt directory, running e2fsck is recommended [ 1991.922995][T19019] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1992.008332][T19019] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.3666: corrupted in-inode xattr [ 1992.034692][T19019] EXT4-fs (loop1): Remounting filesystem read-only [ 1992.041259][T19019] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3666: couldn't read orphan inode 15 (err -117) [ 1992.059552][T19019] EXT4-fs (loop1): Remounting filesystem read-only [ 1992.076038][T19019] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1992.507031][T16299] EXT4-fs (loop1): unmounting filesystem. [ 1992.910620][T19039] fuseblk: Unknown parameter 'user_i00000000000000000000' [ 1993.015504][T19041] binder: 19036:19041 ioctl c0306201 200000000780 returned -11 [ 1993.032176][T19041] loop1: detected capacity change from 0 to 128 [ 1993.047797][T19041] virtio-fs: tag not found [ 1993.765935][T19047] loop2: detected capacity change from 0 to 64 [ 1994.776070][ T11] kworker/u4:1: attempt to access beyond end of device [ 1994.776070][ T11] loop2: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1994.875717][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1994.894399][T19052] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 1994.924308][ T37] Bluetooth: hci4: Frame reassembly failed (-84) [ 1994.955372][ T11] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 1996.942676][T13926] Bluetooth: hci4: command 0xfc11 tx timeout [ 1996.950955][ T4281] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1997.227726][T19060] loop2: detected capacity change from 0 to 1024 [ 1997.304211][T19060] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1997.338362][T16578] EXT4-fs (loop4): unmounting filesystem. [ 1997.583708][T19066] syz.5.3680 (19066): drop_caches: 2 [ 1997.594156][T19066] syz.5.3680 (19066): drop_caches: 2 [ 1997.602004][T19069] loop4: detected capacity change from 0 to 64 [ 1998.109290][T17058] EXT4-fs (loop2): unmounting filesystem. [ 1999.324429][ T4514] kworker/u4:16: attempt to access beyond end of device [ 1999.324429][ T4514] loop4: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 1999.400487][ T4514] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 1999.908887][T19089] loop0: detected capacity change from 0 to 128 [ 2000.810026][T19090] loop5: detected capacity change from 0 to 64 [ 2002.250062][T19086] virtio-fs: tag not found [ 2003.855042][ T4410] kworker/u4:10: attempt to access beyond end of device [ 2003.855042][ T4410] loop5: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 2003.869109][ T4410] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 2004.200968][T19102] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 2004.262560][T19102] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 2005.997045][T19113] binder: 19097:19113 ioctl c0306201 200000000780 returned -11 [ 2006.030943][T19120] loop2: detected capacity change from 0 to 64 [ 2006.097543][T19113] loop1: detected capacity change from 0 to 128 [ 2006.193104][T19116] virtio-fs: tag not found [ 2007.600381][T19123] binder: 19112:19123 ioctl c0306201 200000000780 returned -11 [ 2007.616990][T19123] loop4: detected capacity change from 0 to 128 [ 2007.647514][T19123] virtio-fs: tag not found [ 2007.656098][T14735] kworker/u4:3: attempt to access beyond end of device [ 2007.656098][T14735] loop2: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 2007.741280][T14735] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 2008.338023][T19132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3700'. [ 2009.131720][T19138] loop5: detected capacity change from 0 to 512 [ 2009.226849][T19141] loop2: detected capacity change from 0 to 64 [ 2009.289782][T19138] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2011.432267][T19155] loop5: detected capacity change from 0 to 1024 [ 2011.885972][T19159] loop4: detected capacity change from 0 to 128 [ 2011.945840][T19159] virtio-fs: tag not found [ 2012.113605][T19155] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2012.685006][T19162] syz.1.3706 (19162): drop_caches: 2 [ 2012.795883][T19162] syz.1.3706 (19162): drop_caches: 2 [ 2012.848819][ T4541] kworker/u4:17: attempt to access beyond end of device [ 2012.848819][ T4541] loop2: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 2013.582114][ T4541] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 2014.190850][T14281] EXT4-fs (loop5): unmounting filesystem. [ 2014.496957][T19185] loop5: detected capacity change from 0 to 64 [ 2015.239592][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3713'. [ 2015.266284][T19190] autofs4:pid:19190:autofs_fill_super: called with bogus options [ 2015.921265][T19180] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 2016.008256][ T5187] Bluetooth: hci4: Frame reassembly failed (-84) [ 2016.016270][ T5187] Bluetooth: hci4: Frame reassembly failed (-84) [ 2016.253532][T19197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3719'. [ 2016.301522][ T4514] kworker/u4:16: attempt to access beyond end of device [ 2016.301522][ T4514] loop5: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 2016.397297][T19197] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 2016.427444][ T4514] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 2016.849640][T19207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3721'. [ 2016.908626][T19208] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 2018.062550][ T4281] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 2018.458795][T19214] fuseblk: Unknown parameter 'user_id00000000000000000000' [ 2019.360565][T13926] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 2019.466929][T19206] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2019.826574][T19224] loop0: detected capacity change from 0 to 1024 [ 2019.939492][T19224] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2020.043765][T19231] loop4: detected capacity change from 0 to 1024 [ 2020.085972][T19231] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2020.123975][T19231] overlayfs: unrecognized mount option "/" or missing value [ 2020.259976][T16578] EXT4-fs (loop4): unmounting filesystem. [ 2020.938338][T19241] autofs4:pid:19241:autofs_fill_super: called with bogus options [ 2021.008569][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3729'. [ 2021.087189][T19238] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 2021.093415][T15907] EXT4-fs (loop0): unmounting filesystem. [ 2021.469119][T19252] syz.2.3733 (19252): drop_caches: 2 [ 2021.572258][T19252] syz.2.3733 (19252): drop_caches: 2 [ 2021.687072][T19251] loop0: detected capacity change from 0 to 512 [ 2021.750850][T19251] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 2021.806412][T19251] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 2021.867091][T19251] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3732: Corrupt directory, running e2fsck is recommended [ 2021.882009][T19251] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 2021.936755][T19251] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3732: corrupted in-inode xattr [ 2021.983647][T19251] EXT4-fs (loop0): Remounting filesystem read-only [ 2021.990817][T19251] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3732: couldn't read orphan inode 15 (err -117) [ 2022.050222][T19251] EXT4-fs (loop0): Remounting filesystem read-only [ 2022.057271][T19251] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2022.096524][T19256] loop2: detected capacity change from 0 to 512 [ 2022.171668][T19256] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 2022.183232][T19259] loop1: detected capacity change from 0 to 64 [ 2022.187297][T19256] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 2022.207756][T19256] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 2023.263768][T13926] Bluetooth: hci4: command 0xfc11 tx timeout [ 2023.270273][T19206] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 2023.638823][T19256] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 2023.755558][T19256] System zones: 0-2, 18-18, 34-35 [ 2023.794354][T15907] EXT4-fs (loop0): unmounting filesystem. [ 2023.808726][T19256] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 2023.889619][ T8832] kworker/u4:6: attempt to access beyond end of device [ 2023.889619][ T8832] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 2024.491863][ T8832] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 2024.499604][T19256] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 2024.537129][T19256] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 2024.549460][T19256] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 2024.683772][T17058] EXT4-fs (loop2): unmounting filesystem. [ 2024.767830][T19274] loop5: detected capacity change from 0 to 1024 [ 2026.163113][T19286] loop0: detected capacity change from 0 to 512 [ 2026.181237][T19274] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2026.216564][T19286] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 2026.252842][T19286] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 2026.294525][T19274] overlayfs: unrecognized mount option "/" or missing value [ 2026.304556][T19286] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3742: Corrupt directory, running e2fsck is recommended [ 2026.322781][T19286] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 2026.335891][T19286] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3742: corrupted in-inode xattr [ 2026.359370][T19286] EXT4-fs (loop0): Remounting filesystem read-only [ 2026.376422][T19286] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3742: couldn't read orphan inode 15 (err -117) [ 2026.387878][T19291] loop1: detected capacity change from 0 to 1024 [ 2026.429966][T19286] EXT4-fs (loop0): Remounting filesystem read-only [ 2026.445587][T19286] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2026.496748][T14281] EXT4-fs (loop5): unmounting filesystem. [ 2026.504938][T19291] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2026.897155][T19299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3746'. [ 2026.922516][T19299] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 2027.090613][T19306] binder: 19305:19306 ioctl c0306201 200000000780 returned -11 [ 2027.101095][T19306] loop5: detected capacity change from 0 to 128 [ 2027.117810][T19306] virtio-fs: tag not found [ 2027.260821][T16299] EXT4-fs (loop1): unmounting filesystem. [ 2027.260864][T15907] EXT4-fs (loop0): unmounting filesystem. [ 2027.402853][T19311] loop1: detected capacity change from 0 to 64 [ 2029.023837][T13926] Bluetooth: hci4: command 0xfc11 tx timeout [ 2029.030198][T19206] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 2030.943193][T18019] kworker/u4:20: attempt to access beyond end of device [ 2030.943193][T18019] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 2031.008288][T18019] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 2031.576164][T19341] loop1: detected capacity change from 0 to 64 [ 2031.727354][T19335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3755'. [ 2031.828341][T19335] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 2031.851057][ T4409] Bluetooth: hci4: Frame reassembly failed (-84) [ 2033.818693][ T9] kworker/u4:0: attempt to access beyond end of device [ 2033.818693][ T9] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 2033.842162][ T9] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 2033.916381][T19206] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 2033.924061][T13926] Bluetooth: hci4: command 0xfc11 tx timeout [ 2034.554397][T19358] loop4: detected capacity change from 0 to 1024 [ 2034.665135][T19358] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2034.953406][T19370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3762'. [ 2035.013331][T19371] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 2036.703984][T19375] autofs4:pid:19375:autofs_fill_super: called with bogus options [ 2036.733618][T16578] EXT4-fs (loop4): unmounting filesystem. [ 2037.102947][T19206] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 2037.110866][T13926] Bluetooth: hci4: command 0xfc11 tx timeout [ 2037.264782][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.271206][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.778340][T19385] loop0: detected capacity change from 0 to 64 [ 2040.479183][T19397] loop0: detected capacity change from 0 to 64 [ 2042.180119][T18019] kworker/u4:20: attempt to access beyond end of device [ 2042.180119][T18019] loop0: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 2042.258309][T19403] fuseblk: Unknown parameter '0x0000000000000003' [ 2042.274869][T18019] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 2044.374439][T19418] binder: 19398:19418 ioctl c0306201 200000000780 returned -11 [ 2044.443395][T19418] loop1: detected capacity change from 0 to 128 [ 2044.549190][T19418] virtio-fs: tag not found [ 2045.269297][T19431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3784'. [ 2045.294094][T19431] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3784'. [ 2046.289123][T19459] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3797'. [ 2046.542991][T19459] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3797'. [ 2046.635069][T19476] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3803'. [ 2046.927550][T19459] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3797'. [ 2047.192244][T19499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3816'. [ 2047.526648][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3824'. [ 2047.766507][T19527] x_tables: ip_tables: TPROXY target: only valid in mangle table, not syz0 [ 2047.819049][T19531] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3831'. [ 2047.935690][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3834'. [ 2050.207751][T19617] device pim6reg1 entered promiscuous mode [ 2050.360717][T19623] netlink: 'syz.5.3873': attribute type 13 has an invalid length. [ 2050.383751][T19623] __nla_validate_parse: 11 callbacks suppressed [ 2050.383766][T19623] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3873'. [ 2050.430535][T19623] syz_tun: refused to change device tx_queue_len [ 2050.587994][T19631] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3877'. [ 2050.653213][T19631] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3877'. [ 2050.666941][T19638] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3880'. [ 2050.676699][T19636] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3877'. [ 2050.768280][T19631] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3877'. [ 2050.812807][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3882'. [ 2050.981301][T19651] netlink: 'syz.1.3885': attribute type 21 has an invalid length. [ 2051.035510][T19651] netlink: 'syz.1.3885': attribute type 15 has an invalid length. [ 2051.066738][T19651] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3885'. [ 2051.120681][T19651] IPv6: NLM_F_CREATE should be specified when creating new route [ 2051.140907][T19651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2051.148735][T19651] IPv6: NLM_F_CREATE should be set when creating new route [ 2051.156162][T19651] IPv6: NLM_F_CREATE should be set when creating new route [ 2051.163440][T19651] IPv6: NLM_F_CREATE should be set when creating new route [ 2051.337604][T19664] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3891'. [ 2051.365969][T19666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3893'. [ 2051.461686][T19669] netlink: 'syz.1.3894': attribute type 3 has an invalid length. [ 2052.479326][T19709] netlink: 'syz.0.3914': attribute type 29 has an invalid length. [ 2052.501567][T19709] netlink: 'syz.0.3914': attribute type 29 has an invalid length. [ 2052.526874][T19709] netlink: 'syz.0.3914': attribute type 29 has an invalid length. [ 2052.567314][T19709] netlink: 'syz.0.3914': attribute type 29 has an invalid length. [ 2052.576510][T19709] netlink: 'syz.0.3914': attribute type 29 has an invalid length. [ 2053.570437][T19737] netlink: 'syz.1.3928': attribute type 5 has an invalid length. [ 2055.491099][T19815] __nla_validate_parse: 6 callbacks suppressed [ 2055.491120][T19815] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3962'. [ 2055.518865][T19815] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3962'. [ 2055.550936][T19821] syz.0.3961[19821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2055.551076][T19821] syz.0.3961[19821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2055.553011][T19822] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3962'. [ 2055.702264][T19824] validate_nla: 1 callbacks suppressed [ 2055.702280][T19824] netlink: 'syz.5.3966': attribute type 8 has an invalid length. [ 2055.733215][T19824] netlink: 'syz.5.3966': attribute type 1 has an invalid length. [ 2056.430355][T19857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3982'. [ 2056.620833][T19857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3982'. [ 2057.029309][T19857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3982'. [ 2057.107132][T19889] netlink: 'syz.0.3993': attribute type 25 has an invalid length. [ 2057.125584][T19889] netlink: 'syz.0.3993': attribute type 3 has an invalid length. [ 2057.242545][T19893] netlink: 'syz.1.3995': attribute type 17 has an invalid length. [ 2057.251205][T19893] netlink: 'syz.1.3995': attribute type 6 has an invalid length. [ 2057.276955][T19893] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.3995'. [ 2057.392523][T19886] infiniband syz1: set active [ 2057.402582][T19886] infiniband syz1: added veth0_vlan [ 2057.573308][T19886] RDS/IB: syz1: added [ 2057.604673][T19886] smc: adding ib device syz1 with port count 1 [ 2057.628063][T19886] smc: ib device syz1 port 1 has pnetid [ 2057.898212][T19918] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4007'. [ 2058.131609][T19932] netlink: 'syz.1.4012': attribute type 29 has an invalid length. [ 2058.228122][T19931] netlink: 'syz.4.4014': attribute type 25 has an invalid length. [ 2058.246451][T19931] netlink: 'syz.4.4014': attribute type 7 has an invalid length. [ 2058.266907][T16717] syzkaller0: tun_net_xmit 76 [ 2058.272354][T16717] syzkaller0: tun_net_xmit 48 [ 2058.289426][T19932] netlink: 'syz.1.4012': attribute type 29 has an invalid length. [ 2058.302902][ T4374] syzkaller0: tun_net_xmit 76 [ 2058.309863][T19925] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 2058.332917][ T4374] syzkaller0: tun_net_xmit 76 [ 2058.899086][T19957] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4025'. [ 2060.625646][T19960] team0: Device veth1_macvtap failed to register rx_handler [ 2061.521959][T19998] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4045'. [ 2062.066768][T20024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4056'. [ 2062.723528][T20056] netlink: 611 bytes leftover after parsing attributes in process `syz.2.4070'. [ 2064.471258][T20135] netlink: 277 bytes leftover after parsing attributes in process `syz.5.4102'. [ 2064.494340][T20139] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.4104'. [ 2065.591168][T20190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4128'. [ 2065.611853][T20192] validate_nla: 4 callbacks suppressed [ 2065.611870][T20192] netlink: 'syz.0.4130': attribute type 29 has an invalid length. [ 2065.626548][T20190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4128'. [ 2065.638953][T20192] netlink: 'syz.0.4130': attribute type 29 has an invalid length. [ 2065.679567][T20193] netlink: 'syz.0.4130': attribute type 29 has an invalid length. [ 2065.715673][T20192] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4130'. [ 2065.775485][T20196] netlink: 'syz.2.4131': attribute type 3 has an invalid length. [ 2065.792839][T20196] netlink: 'syz.2.4131': attribute type 4 has an invalid length. [ 2067.713644][T20291] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 2068.105171][T20308] netlink: 277 bytes leftover after parsing attributes in process `syz.5.4187'. [ 2068.256370][T20314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4191'. [ 2068.332229][T20317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4190'. [ 2068.447463][T20317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4190'. [ 2068.498735][T20317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4190'. [ 2068.591919][ T3638] udevd[3638]: worker [4260] terminated by signal 33 (Unknown signal 33) [ 2068.628804][ T3638] udevd[3638]: worker [4260] failed while handling '/devices/virtual/block/loop4' [ 2068.837328][T20338] netlink: 'syz.4.4199': attribute type 29 has an invalid length. [ 2068.863431][T20338] netlink: 'syz.4.4199': attribute type 29 has an invalid length. [ 2068.893473][T20338] netlink: 'syz.4.4199': attribute type 29 has an invalid length. [ 2068.917561][T20338] netlink: 'syz.4.4199': attribute type 29 has an invalid length. [ 2068.940339][T20338] netlink: 'syz.4.4199': attribute type 29 has an invalid length. [ 2069.685812][T20376] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4219'. [ 2069.850259][T20383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4222'. [ 2069.875290][T20383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4222'. [ 2069.900228][T20383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4222'. [ 2069.926766][T20383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4222'. [ 2070.111543][T20395] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2070.734461][T20417] netlink: 'syz.1.4238': attribute type 7 has an invalid length. [ 2071.841750][T20465] rdma_rxe: rxe_register_device failed with error -23 [ 2071.855401][T20465] rdma_rxe: failed to add bond_slave_0 [ 2072.262550][T20483] netlink: 'syz.1.4268': attribute type 10 has an invalid length. [ 2072.303550][T20483] device geneve0 entered promiscuous mode [ 2072.351324][T20483] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2073.006377][T20352] Set syz1 is full, maxelem 65536 reached [ 2073.181151][T20518] __nla_validate_parse: 5 callbacks suppressed [ 2073.181169][T20518] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4288'. [ 2075.934049][T20540] overlayfs: failed to resolve './file0': -2 [ 2076.093959][ T26] audit: type=1326 audit(1755411113.068:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20570 comm="syz.2.4305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7face738ebe9 code=0x0 [ 2076.478702][T20582] mmap: syz.4.4306 (20582) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2077.441599][T20589] netlink: 'syz.2.4309': attribute type 1 has an invalid length. [ 2077.481040][T20589] netlink: 'syz.2.4309': attribute type 2 has an invalid length. [ 2078.202764][T20596] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 2078.254643][T20592] IPVS: stopping backup sync thread 20596 ... [ 2078.313132][T20598] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 2080.819706][T20646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4331'. [ 2081.823279][ T4374] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2082.050400][ T4374] usb 3-1: Using ep0 maxpacket: 8 [ 2082.111406][ T4374] usb 3-1: config 2 has an invalid interface number: 169 but max is 0 [ 2082.203149][ T4374] usb 3-1: config 2 has no interface number 0 [ 2082.270574][ T4374] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 2082.365526][ T4374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2082.493938][ T4374] cypress_m8 3-1:2.169: DeLorme Earthmate USB converter detected [ 2082.504530][ T4374] earthmate ttyUSB0: required endpoint is missing [ 2082.723879][ T4374] usb 3-1: USB disconnect, device number 12 [ 2082.728261][ T4374] cypress_m8 3-1:2.169: device disconnected [ 2084.737999][T20688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4343'. [ 2084.766916][T20689] netlink: 'syz.2.4343': attribute type 10 has an invalid length. [ 2084.788793][T20689] device syz_tun entered promiscuous mode [ 2084.839059][T20689] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2084.888817][T20693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4345'. [ 2091.872723][T16717] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2092.112520][T16717] usb 6-1: Using ep0 maxpacket: 32 [ 2092.119171][T16717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2092.165335][T16717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2092.212653][T16717] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 2092.232519][T16717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2092.263398][T16717] usb 6-1: config 0 descriptor?? [ 2092.689151][T16717] greenasia 0003:0E8F:0012.0001: item fetching failed at offset 0/3 [ 2092.713355][T16717] greenasia 0003:0E8F:0012.0001: parse failed [ 2092.745090][T16717] greenasia: probe of 0003:0E8F:0012.0001 failed with error -22 [ 2092.928662][ T5036] usb 6-1: USB disconnect, device number 3 [ 2092.943060][T20791] Illegal XDP return value 3457 on prog (id 153) dev syz_tun, expect packet loss! [ 2094.496693][T20801] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2095.800977][T14313] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 2095.810045][T14313] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 2095.818465][T14313] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 2095.826243][T14313] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 2095.833892][T14313] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 2095.841389][T14313] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 2095.853812][T14313] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 2095.861261][T14313] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 2095.869111][T14313] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 2095.888453][T14313] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 2095.898836][T14313] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 2095.909827][T14313] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 2095.917789][T14313] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 2095.925759][T14313] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 2095.943774][T14313] hid-generic 00A0:0006:0003.0002: hidraw0: HID v0.05 Device [syz1] on syz0 [ 2096.112493][T16717] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 2096.120297][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 2096.302544][T16717] usb 2-1: device descriptor read/64, error -32 [ 2096.582565][T16717] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 2096.782044][T16717] usb 2-1: config 0 has an invalid interface number: 212 but max is 0 [ 2096.799526][T16717] usb 2-1: config 0 has no interface number 0 [ 2096.827163][T16717] usb 2-1: config 0 interface 212 has no altsetting 0 [ 2096.850814][T16717] usb 2-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 2096.876835][T16717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.927461][T16717] usb 2-1: Product: syz [ 2096.931685][T16717] usb 2-1: Manufacturer: syz [ 2096.954506][T16717] usb 2-1: SerialNumber: syz [ 2096.961950][T20857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4399'. [ 2096.973653][T16717] usb 2-1: config 0 descriptor?? [ 2097.018947][T16717] HFC-S_USB: probe of 2-1:0.212 failed with error -5 [ 2097.162600][ T4374] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2097.390877][ T4374] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2097.399849][ T4374] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2097.413248][ T4374] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2097.452501][ T4374] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2097.482682][ T4374] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2097.521886][ T4374] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2097.531538][ T4374] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2097.540138][ T4374] usb 3-1: Product: syz [ 2097.544755][ T4374] usb 3-1: Manufacturer: syz [ 2097.564837][ T4374] cdc_wdm 3-1:1.0: skipping garbage [ 2097.571450][ T4374] cdc_wdm 3-1:1.0: skipping garbage [ 2097.584316][ T4374] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2097.591505][ T4374] cdc_wdm 3-1:1.0: Unknown control protocol [ 2097.672498][T20857] device hsr_slave_0 left promiscuous mode [ 2097.778300][ T4374] usb 3-1: USB disconnect, device number 13 [ 2098.433412][T20874] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4403'. [ 2098.605708][T20874] syz.0.4403 (20874): drop_caches: 2 [ 2098.704889][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.716737][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.576253][T20884] Bluetooth: MGMT ver 1.22 [ 2100.262676][ T5036] usb 2-1: USB disconnect, device number 13 [ 2100.339872][T20893] input: syz0 as /devices/virtual/input/input13 [ 2100.510801][T20901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4413'. [ 2100.534884][T20901] device vlan2 entered promiscuous mode [ 2100.540744][T20901] device macvtap0 entered promiscuous mode [ 2101.651657][T20900] sched: RT throttling activated [ 2105.147495][ T52] block nbd2: Attempted send on invalid socket [ 2105.155072][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2105.167996][T20936] (syz.2.4425,20936,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 2105.175737][T20936] (syz.2.4425,20936,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 2105.183198][T20936] (syz.2.4425,20936,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2105.191884][T20936] (syz.2.4425,20936,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 2105.284581][T20936] ubi31: attaching mtd0 [ 2105.291430][T20936] ubi31: scanning is finished [ 2105.291446][T20936] ubi31: empty MTD device detected [ 2105.381088][T20936] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 2105.381113][T20936] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 2105.381129][T20936] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 2105.381143][T20936] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 2105.381159][T20936] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 2105.381174][T20936] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 2105.381189][T20936] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2505987078 [ 2105.381208][T20936] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 2105.384620][T20954] ubi31: background thread "ubi_bgt31d" started, PID 20954 [ 2106.152482][T20861] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2106.342524][T20861] usb 6-1: Using ep0 maxpacket: 8 [ 2106.442091][T20861] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2106.521835][T20861] usb 6-1: config 7 has an invalid interface number: 148 but max is 0 [ 2106.589903][T20861] usb 6-1: config 7 has no interface number 0 [ 2106.605441][T20861] usb 6-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=1c.76 [ 2106.620223][T20861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.637351][T20861] usb 6-1: Product: syz [ 2106.647797][T20861] usb 6-1: Manufacturer: syz [ 2106.672159][T20861] usb 6-1: SerialNumber: syz [ 2106.963842][T17832] Process accounting resumed [ 2107.135937][T20861] ldusb 6-1:7.148: Interrupt in endpoint not found [ 2107.144932][T20861] usb 6-1: USB disconnect, device number 4 [ 2107.632684][T20996] afs: Unknown parameter 'smackfsdef' [ 2108.573168][T21009] user requested TSC rate below hardware speed [ 2108.581186][T21009] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2110.052008][T21037] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 2110.109378][T21035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2110.935699][T21055] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2110.992887][T21055] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2111.336000][T21073] block nbd5: shutting down sockets [ 2112.423295][ T26] audit: type=1326 audit(1755411149.388:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21067 comm="syz.0.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921d98ebe9 code=0x7fc00000 [ 2112.462880][ T26] audit: type=1326 audit(1755411149.428:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21067 comm="syz.0.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f921d98ebe9 code=0x7fc00000 [ 2112.497489][ T26] audit: type=1326 audit(1755411149.458:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21067 comm="syz.0.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921d98ebe9 code=0x7fc00000 [ 2112.624002][ T26] audit: type=1326 audit(1755411149.478:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21067 comm="syz.0.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921d98ebe9 code=0x7fc00000 [ 2112.648713][ T26] audit: type=1326 audit(1755411149.478:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21067 comm="syz.0.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921d98ebe9 code=0x7fc00000 [ 2112.687573][ T26] audit: type=1326 audit(1755411149.478:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21067 comm="syz.0.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921d98ebe9 code=0x7fc00000 [ 2112.709911][ C1] vkms_vblank_simulate: vblank timer overrun [ 2113.008731][ T26] audit: type=1326 audit(1755411149.478:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21067 comm="syz.0.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921d98ebe9 code=0x7fc00000 [ 2113.237534][ T26] audit: type=1326 audit(1755411149.478:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21067 comm="syz.0.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921d98ebe9 code=0x7fc00000 [ 2113.471500][ T26] audit: type=1326 audit(1755411149.478:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21067 comm="syz.0.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921d98ebe9 code=0x7fc00000 [ 2113.681620][ T26] audit: type=1326 audit(1755411149.478:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21067 comm="syz.0.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921d98ebe9 code=0x7fc00000 [ 2113.894652][T21100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4475'. [ 2114.756524][T21108] overlayfs: missing 'lowerdir' [ 2114.921379][T21112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4478'. [ 2115.169471][T21112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4478'. [ 2115.790873][T21124] netlink: 'syz.1.4484': attribute type 1 has an invalid length. [ 2115.923572][T21124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2116.044946][T21133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4488'. [ 2118.132605][T21149] ALSA: mixer_oss: invalid OSS volume '' [ 2118.138400][T21149] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 2118.156027][T21149] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 2118.377135][T21149] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 2118.386297][T21149] ALSA: mixer_oss: invalid OSS volume '+8iYJz' [ 2120.440216][T21176] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4501'. [ 2121.093669][T21185] [ 2121.096044][T21185] ====================================================== [ 2121.103071][T21185] WARNING: possible circular locking dependency detected [ 2121.110110][T21185] 6.1.148-syzkaller #0 Not tainted [ 2121.115260][T21185] ------------------------------------------------------ [ 2121.122275][T21185] syz.1.4502/21185 is trying to acquire lock: [ 2121.128340][T21185] ffff88802cd21058 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 2121.138110][T21185] [ 2121.138110][T21185] but task is already holding lock: [ 2121.145472][T21185] ffff888077030290 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 2121.156402][T21185] [ 2121.156402][T21185] which lock already depends on the new lock. [ 2121.156402][T21185] [ 2121.166810][T21185] [ 2121.166810][T21185] the existing dependency chain (in reverse order) is: [ 2121.175801][T21185] [ 2121.175801][T21185] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 2121.184467][T21185] down_write+0x36/0x60 [ 2121.189234][T21185] process_measurement+0x33c/0x1a10 [ 2121.194990][T21185] ima_file_mmap+0x104/0x150 [ 2121.200084][T21185] __se_sys_remap_file_pages+0x53e/0x770 [ 2121.206277][T21185] do_syscall_64+0x4c/0xa0 [ 2121.211209][T21185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2121.217604][T21185] [ 2121.217604][T21185] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 2121.225136][T21185] __lock_acquire+0x2cf8/0x7c50 [ 2121.230545][T21185] lock_acquire+0x1b4/0x490 [ 2121.235549][T21185] down_read_killable+0x4c/0x340 [ 2121.240985][T21185] mmap_read_lock_killable+0x1d/0x60 [ 2121.246773][T21185] lock_mm_and_find_vma+0x2b1/0x2f0 [ 2121.252481][T21185] do_user_addr_fault+0x2db/0xb10 [ 2121.258026][T21185] exc_page_fault+0x60/0x100 [ 2121.263164][T21185] asm_exc_page_fault+0x22/0x30 [ 2121.268541][T21185] fault_in_readable+0x13e/0x1f0 [ 2121.273992][T21185] fault_in_iov_iter_readable+0xbb/0x2e0 [ 2121.280182][T21185] generic_perform_write+0x1d2/0x560 [ 2121.285989][T21185] __generic_file_write_iter+0x172/0x430 [ 2121.292128][T21185] generic_file_write_iter+0xab/0x2e0 [ 2121.298013][T21185] vfs_write+0x44c/0x960 [ 2121.302864][T21185] ksys_write+0x143/0x240 [ 2121.307717][T21185] do_syscall_64+0x4c/0xa0 [ 2121.312634][T21185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2121.319034][T21185] [ 2121.319034][T21185] other info that might help us debug this: [ 2121.319034][T21185] [ 2121.329254][T21185] Possible unsafe locking scenario: [ 2121.329254][T21185] [ 2121.336707][T21185] CPU0 CPU1 [ 2121.342051][T21185] ---- ---- [ 2121.347397][T21185] lock(&sb->s_type->i_mutex_key#12); [ 2121.352838][T21185] lock(&mm->mmap_lock); [ 2121.359669][T21185] lock(&sb->s_type->i_mutex_key#12); [ 2121.367629][T21185] lock(&mm->mmap_lock); [ 2121.371943][T21185] [ 2121.371943][T21185] *** DEADLOCK *** [ 2121.371943][T21185] [ 2121.380102][T21185] 3 locks held by syz.1.4502/21185: [ 2121.385272][T21185] #0: ffff8880795bf268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 2121.394558][T21185] #1: ffff888076644460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x256/0x960 [ 2121.403432][T21185] #2: ffff888077030290 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 2121.414722][T21185] [ 2121.414722][T21185] stack backtrace: [ 2121.420586][T21185] CPU: 0 PID: 21185 Comm: syz.1.4502 Not tainted 6.1.148-syzkaller #0 [ 2121.428715][T21185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2121.438766][T21185] Call Trace: [ 2121.442030][T21185] [ 2121.444941][T21185] dump_stack_lvl+0x168/0x22e [ 2121.449605][T21185] ? load_image+0x3b0/0x3b0 [ 2121.454123][T21185] ? show_regs_print_info+0x12/0x12 [ 2121.459302][T21185] ? print_circular_bug+0x12b/0x1a0 [ 2121.464486][T21185] check_noncircular+0x274/0x310 [ 2121.469405][T21185] ? add_chain_block+0x940/0x940 [ 2121.474323][T21185] ? lockdep_lock+0xdc/0x1e0 [ 2121.478892][T21185] ? _find_first_zero_bit+0xcf/0x100 [ 2121.484157][T21185] __lock_acquire+0x2cf8/0x7c50 [ 2121.488992][T21185] ? verify_lock_unused+0x140/0x140 [ 2121.494173][T21185] ? verify_lock_unused+0x140/0x140 [ 2121.499351][T21185] ? verify_lock_unused+0x140/0x140 [ 2121.504525][T21185] ? mark_lock+0x94/0x320 [ 2121.508834][T21185] lock_acquire+0x1b4/0x490 [ 2121.513341][T21185] ? mmap_read_lock_killable+0x1d/0x60 [ 2121.518805][T21185] ? read_lock_is_recursive+0x10/0x10 [ 2121.524154][T21185] ? cmp_ex_search+0x1a/0x70 [ 2121.528745][T21185] ? bsearch+0x8a/0xb0 [ 2121.532795][T21185] ? fault_in_readable+0x13e/0x1f0 [ 2121.537886][T21185] ? search_extable+0x8c/0xd0 [ 2121.542568][T21185] ? trim_init_extable+0x3b0/0x3b0 [ 2121.547653][T21185] ? mmap_read_lock_killable+0x1d/0x60 [ 2121.553093][T21185] down_read_killable+0x4c/0x340 [ 2121.558008][T21185] ? mmap_read_lock_killable+0x1d/0x60 [ 2121.563445][T21185] mmap_read_lock_killable+0x1d/0x60 [ 2121.568710][T21185] lock_mm_and_find_vma+0x2b1/0x2f0 [ 2121.573889][T21185] do_user_addr_fault+0x2db/0xb10 [ 2121.578892][T21185] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2121.584074][T21185] exc_page_fault+0x60/0x100 [ 2121.588643][T21185] asm_exc_page_fault+0x22/0x30 [ 2121.593474][T21185] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 2121.599195][T21185] Code: 58 eb c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 37 eb c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 1a eb [ 2121.618791][T21185] RSP: 0018:ffffc9000df0fa90 EFLAGS: 00050287 [ 2121.624837][T21185] RAX: ffffffff81bbd329 RBX: 0000000000001000 RCX: 0000000000080000 [ 2121.632803][T21185] RDX: ffffc9000edf9000 RSI: 000000000004e6c6 RDI: 000000000004e6c7 [ 2121.640749][T21185] RBP: 0000000000000000 R08: ffff88802d725940 R09: 0000000000000002 [ 2121.648697][T21185] R10: 0000000000000006 R11: 0000000000000002 R12: 00002000002d3000 [ 2121.656644][T21185] R13: dffffc0000000000 R14: 00002000002d1100 R15: 00002000002d2000 [ 2121.664593][T21185] ? fault_in_readable+0x139/0x1f0 [ 2121.669688][T21185] fault_in_iov_iter_readable+0xbb/0x2e0 [ 2121.675303][T21185] generic_perform_write+0x1d2/0x560 [ 2121.680570][T21185] ? generic_file_direct_write+0x660/0x660 [ 2121.686355][T21185] ? __file_remove_privs+0x5b0/0x5b0 [ 2121.691619][T21185] ? preempt_count_add+0x8d/0x190 [ 2121.696716][T21185] ? rwsem_write_trylock+0x12f/0x1b0 [ 2121.701980][T21185] ? clear_nonspinnable+0x60/0x60 [ 2121.706983][T21185] ? generic_write_checks_count+0x3d9/0x4c0 [ 2121.712860][T21185] __generic_file_write_iter+0x172/0x430 [ 2121.718474][T21185] generic_file_write_iter+0xab/0x2e0 [ 2121.723823][T21185] vfs_write+0x44c/0x960 [ 2121.728047][T21185] ? file_end_write+0x250/0x250 [ 2121.732875][T21185] ? __fget_files+0x44a/0x4d0 [ 2121.737535][T21185] ? __fdget_pos+0x2ae/0x360 [ 2121.742198][T21185] ? ksys_write+0x71/0x240 [ 2121.746594][T21185] ksys_write+0x143/0x240 [ 2121.750903][T21185] ? __ia32_sys_read+0x80/0x80 [ 2121.755645][T21185] ? lockdep_hardirqs_on+0x94/0x140 [ 2121.760823][T21185] do_syscall_64+0x4c/0xa0 [ 2121.765218][T21185] ? clear_bhb_loop+0x60/0xb0 [ 2121.769875][T21185] ? clear_bhb_loop+0x60/0xb0 [ 2121.774527][T21185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2121.780402][T21185] RIP: 0033:0x7fc69178ebe9 [ 2121.784802][T21185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2121.804568][T21185] RSP: 002b:00007fc69251d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2121.812961][T21185] RAX: ffffffffffffffda RBX: 00007fc6919b6090 RCX: 00007fc69178ebe9 [ 2121.820913][T21185] RDX: 000000000208e24b RSI: 0000200000000100 RDI: 0000000000000005 [ 2121.828864][T21185] RBP: 00007fc691811e19 R08: 0000000000000000 R09: 0000000000000000 [ 2121.836828][T21185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2121.844777][T21185] R13: 00007fc6919b6128 R14: 00007fc6919b6090 R15: 00007ffcb61f0f08 [ 2121.852731][T21185]