Extracting prog: 29m11.092018847s Minimizing prog: 27m7.052920587s Simplifying prog options: 0s Extracting C: 41.282112618s Simplifying C: 12m41.157868511s extracting reproducer from 30 programs testing a last program of every proc single: executing 5 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-syz_init_net_socket$llc-getsockopt$llc_int-syz_emit_ethernet-socket$packet-close-socket$inet_sctp-ioctl$SIOCSIFHWADDR-sendto$packet-mkdirat-mount-openat detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r7, 0x10c, 0x5, &(0x7f0000000200), &(0x7f0000000280)=0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010102}}}}, &(0x7f0000000080)={0x0, 0x2, [0x829, 0x8cb, 0x3d, 0x66]}) socket$packet(0x11, 0x2, 0x300) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendto$packet(0xffffffffffffffff, &(0x7f0000000640)="000a18000000", 0x6, 0x4000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x40083, 0x100) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-openat$tun-socket$inet_tcp-openat$binderfs-socket$packet-setsockopt$packet_int-setsockopt$packet_rx_ring-syz_genetlink_get_family_id$batadv-prctl$PR_SCHED_CORE-prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-sched_setattr-socket$nl_xfrm-syz_ublk_setup_io_uring-open-ftruncate-sendfile detailed listing: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780), &(0x7f0000000280), &(0x7f0000000140)) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-symlinkat-socket$nl_generic-sendmsg$NFT_BATCH-sendmsg$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-syz_genetlink_get_family_id$nl80211-syz_open_dev$video-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-socket$nl_generic-close-keyctl$instantiate-clock_adjtime-syz_usb_connect-add_key-add_key$user-keyctl$read-socket$nl_route-openat-sendmsg$nl_route-execve-execve detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xfe}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) socket$nl_generic(0x11, 0x3, 0x10) close(0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) clock_adjtime(0x5, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009040000", @ANYBLOB], 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x181000, 0x64) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-sched_setaffinity-sched_setscheduler-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_dev$sndctrl-recvmmsg-ioprio_get$uid-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_procs-openat$cgroup_procs-write$cgroup_pid-sendfile detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580), 0xc290, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) sendfile(r3, r3, 0x0, 0x10001) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-openat$nullb-mmap-syz_emit_ethernet-openat$fuse-mount$fuse-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT-openat$vimc2-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-ioctl$SIOCSIFMTU-socket$inet-getsockopt$sock_buf-madvise-connect$unix-write$FUSE_INIT-sched_setattr-madvise-madvise-pwritev2-ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0xc2401, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @local, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x0, 0x1}}, {@can={0xc, {{0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "7c379b1a50101fc6"}}}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRES16, @ANYRES64=r1]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) r5 = socket$inet(0x2, 0x3, 0x8) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff10e8adc4, 0x0, 0x2, 0x3, 0xf409, 0x0, 0x0, 0x2}}, 0x50) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) pwritev2(r1, 0x0, 0x0, 0x2, 0x8, 0xa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x1, 0x87, 0x5, 0x1, {{0x6, 0x4, 0x1, 0x1b, 0x18, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast1, @rand_addr=0x64010102, {[@end]}}}}}) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 30s testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 15, 22, 16, 30, 29, 17, 4, 26, 10, 27, 15, 2, 4, 16, 29, 4, 3, 26, 4, 2, 4, 16, 30, 28, 15, 23, 5, 20, 20] detailed listing: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x1, 0x4, 0xb47e, 0xa, 0x12, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x4049004) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x0) executing program 0: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffffffffffffff9, 0x6) executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000640)='.\x00', 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r4, 0x0, 0x8e14, 0x8ffff) sendto$inet(r0, &(0x7f0000000280)="eb2ec6", 0x3, 0x24040000, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x620000, 0x0) executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0xfffe, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) geteuid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x4000000) executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280), 0x0) write(r0, &(0x7f00000002c0)='\n', 0x1) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd000000001a00000000ff0200000000000000000d0098000000007f00000000000000000000000100"/66], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000001240001801400018008000100ac1414bb08000200ac0314bb0c00028005004100000000002400028014000180080001000000000008000900ac1414000c000280050001000000000008000740000000000800084000000cde10a8ea1af935d155eb140c23b578ee9504b0f423674f4e36092ad124e3911c2c5f14c85ca3a94c94edbb4323da986a74b443d2fa60ce919b27244f52638e2aa56ca238b18e273c04d991e00261ca1c32cb831614509d2b1b13d20ce15f5a1b63e22e908e12e0463e2a89dec88fcaf10cb85998971144ad8d8c9d10e295"], 0x6c}, 0x1, 0x0, 0x0, 0x8020}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40402) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000080)={0xa, {0x4000003, 0x5ffc, 0x8, 0x10}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mkdir(0x0, 0x13b) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$OCFS2_IOC_INFO(r3, 0x80106f05, &(0x7f0000005a80)={&(0x7f00000058c0)=[&(0x7f0000000300)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000000400)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000000480)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000000500)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000000540)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000001}}, &(0x7f00000005c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000000600)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x20000000}}, &(0x7f0000000640)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, 0x0, &(0x7f00000006c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000000700)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000000740)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000002}}, &(0x7f0000000780)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f00000007c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000001a80)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x4, 0xfffffffffffffff9}, {0x4, 0xf1}, {0x80}, {0x5, 0xb53}, {0x7fffffffffffffff, 0xc9d}, {0x6}, {0x4, 0x9}, {0x2, 0x1}, {0x6, 0xff}, {0x8, 0x9}, {0x9, 0x5}, {0x1, 0x7}, {0x3, 0x4}, {0x3, 0x9}, {0xea8, 0x3}, {0x7fffffff}, {0x0, 0x81}, {0x4, 0x3}, {0x3}, {0x3, 0xfffffffeffffffff}, {0x1, 0xfffffffffffffffa}, {0x8, 0xc12}, {0x0, 0x4}, {0x9, 0x380000000000000}, {0x7fffffff, 0x7fffffffffffffff}, {0x6, 0x2}, {0x0, 0x4}, {0x800, 0xfffffffffffffff6}, {0xe, 0x7}, {0x0, 0xff}, {0xbdc}, {0xd57f, 0x7}, {0xffffffffffffffff, 0x5000000000000}, {0xfffffffffffffffa, 0xffffffffffff9e4f}, {0x95, 0x351e}, {0xfffffffffffffff9, 0x5}, {0x3}, {0x8, 0x2}, {0x26, 0x4}, {0x9, 0x32c}, {0x4, 0x8}, {0x12, 0xcdc9}, {0xff, 0x5}, {0x8, 0x84}, {0x1, 0x9}, {0x1000, 0xd378}, {0x3e7c, 0x9}, {0x9, 0xd445}, {0x100000001, 0x6}, {0x5, 0x6}, {0x2b0, 0x6c}, {0x6, 0x6}, {0xa, 0x200}, {0xbf, 0xb6bb}, {0x4bbf, 0xc13e}, {0xb09, 0x2}, {0x4, 0x10000}, {0x5, 0x7}, {0x891, 0xd}, {0x4, 0x6}, {0xd, 0xf8f}, {0x853, 0x8}, {0x2, 0x400}, {0x0, 0x5}, {0x2, 0x4}, {0x7fffffffffffffff, 0x9}, {0x1}, {0x100000000, 0x2d2}, {0x10000, 0xc10000000}, {0x9, 0x2}, {0xff, 0x40}, {0x3, 0x6}, {0x5, 0xa1b}, {0x0, 0xff}, {0x2, 0x4}, {0x2, 0x2}, {0x40, 0x9}, {0x5, 0x7}, {0x6, 0x7fff}, {0x0, 0x1c}, {0x2, 0xa}, {0x5, 0x93}, {0x5, 0x80000000}, {0x1, 0xd5a}, {0x9}, {0x0, 0x5}, {0x8, 0x571e}, {0x6c9, 0xd9}, {0xa}, {0x3, 0x6}, {0x0, 0x4}, {0x0, 0x80}, {0xdbd4, 0x10}, {0x7fffffff, 0x78}, {0x7, 0x7fffffffffffffff}, {0x0, 0xde3}, {0x7fffffff, 0xd}, {0x100, 0x5}, {0x5, 0x7}, {0x9, 0x7932}, {0xcc, 0x3}, {0x4, 0x9}, {0x6529387b, 0x6}, {0x18, 0xcb3}, {0x2, 0xb}, {0x6, 0x9}, {0x1, 0x7}, {0x200, 0x1}, {0x1, 0x41e}, {0x7fffffffffffffff, 0x1}, {0x5, 0x4}, {0x78fe000000000000, 0x2}, {0x6, 0x6}, {0x8640, 0x3}, {0xfffffffffffffffb, 0x19}, {0x9, 0x10}, {0xe9e9, 0x8}, {0x6d1, 0x3ff}, {0x7fff, 0x7fff}, {0xffffffffffff0001}, {0xf1b, 0x4}, {0x4f, 0x7f}, {0x7ff, 0x380}, {0x7f, 0x6}, {0x5, 0x100000000}, {0xbc9, 0x3ff}, {0x9, 0x8836}, {0x1000, 0x898}, {0x81, 0x4}, {0x4b, 0x300}, {0xfffffffffffffffa, 0x5}, {0x8000000000000000, 0x9}, {0x6401}, {0xb}, {0x7, 0x2f91}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0xa8}, {0x8000, 0xf}, {0xf40a, 0xa97}, {0x8, 0x9}, {0x6, 0x2}, {0x4, 0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x5, 0x7}, {0x5dc, 0x3}, {0x9, 0xf8}, {0x8000000000000000, 0x6}, {0x72, 0x14df43ec}, {0x5, 0x1}, {0x6, 0x9}, {0x142, 0xf064}, {0x4, 0xfffffffffffffff7}, {0x2}, {0x7, 0x2}, {0x3, 0x5}, {0x2, 0xad}, {0x7, 0xad3}, {0x4, 0xffffffff}, {0x40, 0xffff}, {0x8, 0x1}, {0x7, 0x400}, {0x3, 0x3636d9fd}, {0x0, 0x2}, {0x36, 0x6}, {0x5, 0x100}, {0x1, 0x6}, {0x800}, {0x2, 0xed}, {0x7, 0x7}, {0x2, 0x10000}, {0x200, 0x6}, {0x0, 0x2}, {0x4, 0x7fffffffffffffff}, {0x101, 0xc6c}, {0x10, 0x9}, {0x2, 0x80000001}, {0x6, 0xf}, {0xffffffffffffffff, 0x6000}, {0x95, 0x9}, {0x719, 0xffffffffffffff01}, {0x7, 0x6}, {0x3ff, 0x4}, {0x3, 0xc}, {0x100000000, 0x3ff}, {0x10, 0x3}, {0x2, 0x7}, {0xf, 0x4}, {0x9, 0x80000001}, {0x0, 0x7}, {0x2, 0x9}, {0x12, 0x3}, {0x10001, 0x8000000000000001}, {0x800, 0x7}, {0x276, 0x1}, {0x9, 0x3}, {0x2, 0x4}, {0x0, 0x10000}, {0x8001, 0x7}, {0xc, 0x8000}, {0x2, 0x3}, {0x96, 0x9}, {0x0, 0x1}, {0x4, 0xdb4}, {0x0, 0x2}, {0x2, 0x5}, {0x3, 0x4}, {0x4, 0x3}, {0x4, 0x5ed}, {0x6, 0x9}, {0x2, 0x1000}, {0x6, 0x73e}, {0x80, 0x4}, {0x8, 0xfffffffffffffffc}, {0x7, 0x40c0}, {0x1, 0xfffffffffffffffc}, {0xfffffffffffffffa, 0x2f8}, {0x4, 0x7}, {0x4, 0x8}, {0x80000001, 0x6}, {0x3e17, 0x7}, {0x0, 0x6}, {0x0, 0x26d}, {0x7fffffff, 0x8000000000000001}, {}, {0x3, 0x5}, {0xe, 0x7fffffff}, {0x8, 0x41}, {0x5, 0x4}, {0x4, 0x4}, {0x0, 0xcd3c}, {0x1, 0x5}, {0xe934, 0x6}, {0x401, 0x200}, {0x3, 0x5}, {0x5, 0x9}, {0x6, 0x49e}, {0x5, 0x950}, {0x7f, 0xffffffffffffffff}, {0x6, 0x1}, {0x1, 0x9}, {0x7fffffff, 0x1000}, {0x8, 0xfffffffffffffff1}, {0x7, 0xff}, {0x101, 0x13}, {0x200000, 0x280000}, {0x8000, 0x1000}, {0x8, 0x3}, {0x9, 0x27b}, {0x5, 0x2}, {0x3, 0x6}, {0xe, 0x10}, {0xa, 0x9}, {0x1, 0x2}]}, &(0x7f0000002ac0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000002b00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0x2}, &(0x7f0000002c40)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000002c80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x8001}, &(0x7f0000002dc0)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000002e00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000002}}, &(0x7f0000002e40)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000002e80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000002ec0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000002f00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x2b}, &(0x7f0000003040)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000003080)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f00000030c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x6, 0xb7}, {0x100, 0x9}, {0x1, 0xca5}, {0x2, 0x7ff}, {0x3ff, 0x8}, {0x5, 0xfff}, {0x100000000, 0xfffffffffffffffc}, {0x8, 0x8}, {0x0, 0x6}, {0x6, 0xfffffffffffeffff}, {0x8}, {0x2, 0x10000000}, {0x3, 0x100}, {0x95b7, 0x2}, {0x7ff, 0x5}, {0x0, 0x3}, {0x7, 0xb}, {0x6, 0xecf}, {0x1a00000000000000, 0x6}, {0x48, 0x6}, {0x4, 0x6}, {0x2, 0x39}, {0x283f, 0x6}, {0x8000000000000001, 0x3}, {0x81, 0x6}, {0x1, 0x9}, {0x6, 0x101}, {0xd1, 0x7}, {0x4c0, 0x3}, {0x1, 0x2}, {0x3ff, 0x1}, {0x7ff, 0x1}, {0x1, 0x3}, {0x200, 0x2}, {0x1ff, 0x100000001}, {0x7, 0x8}, {0x3, 0x9}, {0x9, 0x1}, {0x8001, 0xd3}, {0x47, 0xc}, {0x8, 0x3}, {0x4, 0x7fff}, {0x4, 0xfffffffffffffff8}, {0xc, 0x20}, {0x8}, {0x8}, {0x800, 0x6}, {0x3, 0x6}, {0x800, 0x2}, {0xa197, 0x4}, {0x5, 0xffffffff}, {0xffffffff}, {0x180a, 0xfffffffffffffff8}, {0x8}, {0x6, 0x7}, {0x9, 0x5}, {0x4}, {0x6, 0x101}, {0x4, 0x2}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x4e8f}, {0x3ff, 0x81}, {0x9, 0x8}, {0xf, 0x6489}, {0xffffffff, 0x3}, {0x2557, 0x4}, {0x40000, 0x6}, {0x7, 0xe3c}, {0x0, 0xb}, {0x2, 0x400000000000}, {0x9, 0x2a7}, {0x4, 0x9}, {0x8001, 0x401}, {0x3, 0x1ff}, {0x100000000}, {0x0, 0x9ec}, {0x9, 0xa73}, {0x2c, 0x8000000000000000}, {0xa5f}, {0x8, 0x1}, {0x7fff, 0x1}, {0x10, 0x2}, {0x3, 0xffffffffffffffc0}, {0xb8b, 0x8}, {0x2, 0x252}, {0x100000000, 0x5}, {0x401, 0x7}, {0x4, 0x6}, {0x3, 0x86d}, {0x7fffffff, 0x1000}, {0x9e, 0xffffffffffffffff}, {0x100000001, 0xfff}, {0x800}, {0x4, 0x749}, {0x4, 0x1}, {0xe, 0x3ff}, {0x94c, 0x2}, {0x5, 0xc17}, {0x8}, {0x2, 0x9}, {0x4, 0x5}, {0xe0fa, 0xe}, {0x4, 0x8001}, {0x7, 0xa54}, {0x9c, 0x9}, {0xfffffffffffffffe, 0x1}, {0x8, 0x723}, {0xc6, 0x9}, {0x2c4d, 0x80}, {0x6, 0xecd8}, {0x2, 0x2}, {0x0, 0x7}, {0x1}, {0x3, 0x4}, {0xa23, 0x1}, {0x10}, {0xffff, 0x8a46}, {0x5, 0x9}, {0xbe, 0x3}, {0x8001, 0x100000000}, {0x7, 0x8}, {0x3a5a, 0x3}, {0x7b5, 0x14425282}, {0x800, 0x9}, {0x2, 0x5}, {0x3, 0x7fff}, {0x8, 0x89}, {0x100, 0x4945}, {0x121faa6e, 0x81}, {0x9aa7, 0x5}, {0xfffffffffffffffa, 0x81}, {0x8000000, 0x731d}, {0xda82, 0x401}, {0x6, 0x6}, {0x4, 0x1}, {0x8, 0x9}, {0x100, 0x99}, {0x2, 0x80}, {0xe, 0x6}, {0x0, 0x4}, {0x1000, 0x200}, {0x9, 0x5}, {0x0, 0x5}, {0x5, 0x400}, {0xfffffffffffffffc, 0xd}, {0x9, 0x6}, {0xffffffffffffffff, 0x6}, {0x6}, {0x9, 0xb}, {0x5, 0x6}, {0x4, 0x2d687c65}, {0xfffffffffffffffc, 0x3}, {0x2, 0x7}, {0x49a, 0x9}, {0x8, 0xc1e}, {0x0, 0x5}, {0x5, 0x3ff}, {0xfffffffffffffeff, 0x7fffffffffffffff}, {0x0, 0x8}, {0x7, 0xf73e}, {0xbf, 0xa7d}, {0x9, 0x9}, {0x101, 0x9}, {0x6, 0x4}, {0x8, 0xd}, {0x2}, {0x2}, {0x800, 0x1}, {0x2b3, 0x3}, {0x7, 0x299}, {0x8, 0x5}, {0x8, 0x423}, {0xff, 0x4}, {0x1ff, 0x9e}, {0x5, 0x4}, {0x8, 0x6}, {0x5}, {0x8, 0x9}, {0x4f, 0x6}, {0x5000000000}, {0x9, 0xfffffffffffffffb}, {0x38d908e5, 0x5}, {0x100, 0x8}, {0x3, 0x3ff}, {0x8001, 0x8}, {0x40, 0x9}, {0x6d2a, 0xfffffffffffffff7}, {0x9, 0x100000001}, {0x1, 0x85}, {0x4, 0xe2f}, {0x8000000000000000, 0x10}, {0x8, 0x4}, {0x3, 0xf}, {0x0, 0x4}, {0x10001, 0xfb}, {0x7}, {0x3, 0x8}, {0x9, 0x40}, {0x4, 0x5}, {0x7, 0x400}, {0x7, 0xfff}, {0x10001, 0x4}, {0x7d91, 0xffffffff7fffffff}, {0x1, 0x6}, {0x4, 0x6}, {0x1, 0x9}, {0xb14, 0xfffffffffffffffe}, {0x5, 0x8}, {0x7, 0x9}, {0x9, 0x9f}, {0x10000, 0xffffffff}, {0x80000000, 0x101}, {0x0, 0x10001}, {0xdbac, 0x8}, {0xffffffffffffff76, 0x100000000}, {0x6, 0x25d}, {0xfff, 0x8001}, {0xcdc, 0x3}, {0x6, 0x9}, {0x6144, 0xc}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x98}, {0x9, 0xab1}, {0x7fffffffffffffff, 0x9}, {0x9}, {0xc0a, 0x4}, {0x0, 0x2}, {0xff, 0x23520000}, {0x1, 0xb2}, {0x4}, {0x0, 0x7}, {0x7f, 0x2aa}, {0x1, 0x6}, {0x6}, {0x0, 0x7}, {0x2, 0x40000000000}, {0x3, 0x6}, {0x9, 0xb}, {0x9, 0x9}, {0xfff, 0x8}, {0x80000001}, {0x100, 0x5}, {0x9, 0x401}, {0x7fffffff, 0xdee1}, {0xfffffffffffffff7, 0x3}, {0x1, 0x6}, {0xfffffffffffffff8, 0x2}, {0xfbef, 0x1}, {0xff, 0x7}, {0x2, 0x6}, {0x8000000000000000, 0x7fffffff}, {0x8, 0xd}]}, &(0x7f0000004100)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004140)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000004180)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f00000041c0)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000004240)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004280)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f00000042c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x20000000}}, &(0x7f0000004300)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004440)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, 0x0, &(0x7f00000044c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004500)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000004540)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000004580)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, 0x0, &(0x7f0000004600)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x4, 0x2}, {0x800, 0x9}, {0xb97, 0x1}, {0x5, 0x8}, {0x6, 0x101}, {0x8}, {0x486, 0x3ff}, {0x6, 0x9}, {0x6}, {0x1, 0x9}, {0x8, 0xd81c}, {0x7, 0x2}, {0x9, 0x3ff}, {0x7, 0x7}, {0x0, 0x8}, {0x5, 0x72}, {0x100, 0x7}, {0xa9d8, 0xa800000}, {0x8, 0x7a}, {0x4, 0x10000}, {0x8, 0x92c}, {0x80000001, 0x2}, {0x8, 0x9}, {0x0, 0x5d0}, {0x9, 0x8000}, {0x6, 0x5}, {0x7fff, 0x6}, {0x4, 0xfffffffffffffffd}, {0x2, 0x6}, {0x0, 0x81}, {0x7, 0x7}, {0x0, 0x8189}, {0x3, 0x4}, {0x31e4, 0x8}, {0x5, 0x3}, {0x7f, 0x6}, {0x3, 0x5}, {0x7, 0xe4}, {0xffffffffffff0001, 0x101}, {0x5, 0x81}, {0x80000000, 0x8f}, {0x4, 0x9}, {0x80000000, 0x5}, {0x722, 0x6}, {0x400, 0xa}, {0x698, 0x79}, {0x4000000, 0x3}, {0xffffffff00000000, 0x7f}, {0x4, 0x7}, {0xd, 0x400}, {0x7, 0x33b7}, {0x800}, {0x64c2, 0x200}, {0x3, 0x6}, {0x80000000, 0x8}, {0x3, 0x6}, {0x1, 0xf}, {0xc361, 0x2ceb}, {0x8}, {0x7}, {0x4, 0x7}, {0xf, 0x5}, {0x4, 0x100000001}, {0x7, 0x3}, {0x6, 0x2}, {0x3, 0x1ff}, {0x8000000000000001, 0x9b6}, {0x2, 0x10001}, {0x100, 0x3}, {0x2, 0x8d78}, {0x6, 0xfffffffffffffa8d}, {0x80000001}, {0x7, 0x6}, {0x10, 0x3f}, {0x7, 0xd}, {0xa2d6, 0x6}, {0x8, 0x24000}, {0x1, 0x8}, {0x9, 0x80}, {0x7fffffff, 0xe0}, {0x8, 0x4}, {0x9, 0x4}, {0x8001, 0x400}, {0x9af2, 0x6}, {0x7fffffff, 0x6}, {0x81, 0x7}, {0x1, 0x7}, {0x3, 0x2}, {0x8b, 0xe}, {0x7, 0x33}, {0x8, 0xcf}, {0x153, 0xc81}, {0x3, 0x80000001}, {0x8000, 0x1}, {0xf, 0x1}, {0x100000000, 0x5}, {0x4, 0x8001}, {0x1, 0x1}, {0x406d, 0x9}, {0x8000000000000000, 0x8}, {0x4, 0x5}, {0x6, 0x3e}, {0x2, 0x6}, {0xfffffffffffffffe, 0x7ff}, {0x6, 0x100000000}, {0x4, 0x1}, {0x9, 0x4}, {0x3, 0xb}, {0x40, 0xc9}, {0x3, 0x80000001}, {0x0, 0x8}, {0x8, 0x2f4}, {0x7, 0x5}, {0xffffffffffffff00, 0xa8f}, {0x1, 0x7}, {0x8, 0x10}, {0xb04, 0x22}, {0x2d2edf24, 0x62}, {0xfffffffffffffff6, 0xb86}, {0x3, 0x6}, {0x81, 0x7}, {0x6, 0x1}, {0x733f, 0x7583}, {0x8001, 0x8}, {0x2, 0xb}, {0x7, 0x8}, {0xb0}, {0x8000, 0xff}, {0x7, 0x5}, {0x8, 0x6}, {0x401, 0xe}, {0x1ff, 0x9}, {0x1, 0x800}, {0x9, 0x6}, {0x9, 0xc5f}, {0x200, 0x6}, {0x5, 0x4}, {0x7a, 0x24f96762}, {0x3, 0x7}, {0xa, 0xfffffffffffffffd}, {0x7435, 0x7}, {0x100000001, 0xffff}, {0x7, 0x4c}, {0x128f, 0x100000000}, {0xffffffff80000001, 0x1}, {0x9, 0x8000000000000001}, {0xfffffffffffff801, 0xd}, {0xe399, 0x86}, {0xa2, 0x8001}, {0x5, 0x1}, {0x7fff, 0xffff}, {0x8, 0x1}, {0xd, 0x5}, {0x6, 0x2}, {0x8, 0x87}, {0x5, 0x1}, {0x80000000, 0x2}, {0x0, 0x800000000000000}, {0x3, 0x27e}, {0x8, 0xfffffffffffffaa1}, {0x101, 0x80}, {0x6, 0x7ff}, {0x452, 0x1}, {0x1ff0, 0x4}, {0x2, 0x3895e5c1}, {0x3, 0x2}, {0x5, 0x8}, {0x9, 0x2}, {0x6, 0x7d0}, {0x4c, 0x9d}, {0xfffffc0000000000, 0x5}, {0x1, 0x168459ed}, {0x9d5, 0x3}, {0xcc2, 0x8}, {0x2, 0x8}, {0x6, 0x1}, {0x2, 0x9}, {0x2f, 0x1}, {0x9, 0x3ff}, {0x4, 0x2c2f}, {0x0, 0xfffffffffffffeff}, {0x5, 0x100000001}, {0xffff, 0x2}, {0x8, 0x607eca40}, {0x0, 0x8000000000000001}, {0x0, 0x8001}, {0x7fffffffffffffff, 0x8}, {0x8, 0x4}, {0x8, 0x5}, {0x8, 0x7}, {0xd8ec, 0x8}, {0x9a0, 0xc1a}, {0x10001, 0x8}, {0xcc, 0xc8}, {0x2, 0x4}, {0xd, 0x9}, {0x1ff, 0xfffffffffffffffc}, {0x6, 0x3}, {0xec8, 0x6}, {0x6, 0x5}, {0x8, 0x6}, {0x8, 0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x9, 0x158}, {0xfffffffffffffffc, 0x3}, {0x8000, 0x9a41}, {0x0, 0x1}, {0x8, 0xb}, {0x1, 0x6}, {0x1b, 0x4}, {0xfffffffffffffffc, 0x6}, {0x1ff}, {0x1, 0x9}, {0x6, 0x200}, {0x2, 0x8}, {0x3, 0x401}, {0x3, 0x8}, {0x8, 0x889}, {0x9, 0xf}, {0x4, 0x20}, {0xc, 0x1400}, {0x48000000000000, 0x9}, {0x9, 0x3}, {0xb, 0x9}, {0x4, 0x70}, {0x7, 0x21e9}, {0xccb, 0x6}, {0x7, 0x6}, {0x89, 0x4}, {0x38e, 0x10}, {0x3, 0x4}, {0x0, 0x31}, {0xcd13, 0x3}, {0x5, 0x7fffffff}, {0xffffffff, 0x2}, {0x2, 0x9}, {0x84a3, 0x15b}, {0x3, 0x88e}, {0x10, 0x7}, {0x2, 0xf}, {0x0, 0x4}, {0x1, 0xc}, {0xfff, 0x7}, {0x5, 0x4475}, {0x0, 0x81}, {0x80000000, 0xff}, {0x17}, {0x7}, {0x9, 0x2}, {0x683e0b48, 0x7}, {0x36, 0x1ff}, {0x1, 0x7}, {0x7, 0x3}, {0x9, 0x4}]}, &(0x7f0000005640)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x5}, &(0x7f0000005780)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000000100)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f0000005800)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000005840)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f0000005880)=@blocksize={{0x4f32494e, 0x2, 0x10}}], 0x32}) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) unshare(0x26020480) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000900)="71ca305b6d785977913e0000417b88594afcdf08f6dee6186e5f1ff38731631801ab95ca3995a4a5289c2aab986a64ffe8944bfb00f3fdeb28ed6a5128b0fe6252d89067c3d498a339d2e0f693775f4b", 0x50}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="280000000401000005000000221c17e87e5acf444a482d6f015b5d0f6abe5bae259bcbbb584400000c00000014000000030000"], 0x74}, 0x4000) fsmount(r6, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x9, 0xb, 0x4, 0x8c45, 0x200}, 0x5b, 0xf, [{0x0, 0x80000000, 0x0, 0x0, 0x2, 0xea4a}]}, [{0x5c, 0x71e, 0x3, 0xfffffffe, 0x6, 0x1}, {0x5, 0x40, 0x2, 0xd, 0x401}, {0x5, 0xc, 0x8, 0xfffffffb, 0x3, 0xfffffffb}, {0x8, 0xfffffffc, 0x16, 0x9, 0x2, 0x9}, {0x0, 0x80000000, 0x3, 0x1, 0x76}, {0x10001, 0x459e, 0x5, 0xb8a5, 0x5, 0x8}, {0x8, 0x2, 0x1ff, 0xfffffffa, 0x8, 0x3}, {0x1b, 0x8, 0x900000, 0xfffffff8, 0x5, 0x8}, {0x9, 0x1, 0x9, 0x10, 0x4}, {0x0, 0xcc, 0x3, 0xffff, 0x7, 0x7}, {0x8, 0x6, 0xdc5, 0x3, 0x3, 0xfffffffa}, {0xa8, 0x5, 0x10000, 0xffffffff, 0x6b0c, 0x8e2}, {0x6, 0x8, 0x200, 0x1, 0x0, 0xffffffff}, {0x2, 0x3, 0x9, 0x0, 0x1, 0x8}, {0x7, 0x30000000, 0x4, 0xb, 0x5, 0x7}, {0x7fff, 0x6, 0x3, 0x6, 0x64, 0x6}, {0xa, 0x9, 0x6, 0x8, 0xfb}, {0xb1, 0xa37, 0xfffffeff, 0x100, 0x200, 0x7fff}, {0x100, 0x3, 0x8, 0x9, 0x7, 0x8}, {0x4e91, 0x7, 0xffffffff, 0x40f, 0x11, 0x1b}, {0xffff, 0x2, 0xfffffff0, 0x101, 0x7ff, 0x6}, {0x1, 0xb, 0x3, 0x5, 0xfffffffc, 0x5}, {0x2, 0x2, 0x400, 0x1a76, 0xa, 0x800}, {0xa578, 0x5, 0x5, 0x9c, 0x675, 0x88b}, {0xfffff221, 0x101, 0x5, 0xfffffff9, 0x80000000, 0x81}, {0x5, 0x0, 0x7, 0x0, 0xb, 0x3}, {0x3, 0xc11, 0x400, 0x6, 0x53f, 0x9}, {0x3, 0x7, 0x6, 0x4, 0x4, 0x4}, {0x5, 0x401, 0x1, 0x6, 0x4, 0x1ff}, {0xffffffff, 0x40089cf3, 0x5, 0x3, 0x9, 0x800}, {0x0, 0x5, 0x4, 0x9, 0x2}, {0x29f, 0xca, 0x0, 0x1, 0x5, 0xfffffffa}, {0x10001, 0x10001, 0x10, 0x4, 0x10000, 0x6}, {0xae7, 0x800, 0x80000001, 0xf, 0x6, 0x6}, {0x4, 0x4, 0x8, 0x2, 0x9, 0x4c}, {0x4, 0x1, 0xfffffff7, 0xcc, 0x7ff, 0xeb9a}, {0x8001, 0x3, 0x2bd2, 0x1621, 0x3, 0x2}, {0x8, 0xfffffe00, 0x9, 0xd5e, 0x5, 0x2}, {0x6, 0x4, 0x6, 0x11f, 0xc, 0x1}, {0x5, 0x101, 0x721, 0x100, 0x908, 0x8}, {0x2597, 0xa, 0x9, 0x8, 0x80000001, 0x4}, {0x3, 0x7fffffff, 0x200, 0x8ad, 0xd34e}, {0x7fff, 0x800, 0x6, 0x2, 0x7, 0xb2f6}, {0x4, 0xc7, 0x6c, 0xfffffd20, 0x6, 0x1}, {0x401, 0x5, 0x3, 0xdf, 0x8, 0x5}, {0x5, 0x1, 0xe, 0x2, 0x6, 0xa2fe}, {0xfffff685, 0xfff, 0x4, 0xa6c, 0x9, 0x5}, {0x10, 0xc771, 0x1, 0x37, 0xe3f, 0x3ff}, {0x7, 0x0, 0xa, 0x1000, 0x6, 0x401}, {0x5, 0x3ff, 0x5, 0xff, 0x10000, 0x3}, {0x2, 0x9, 0xafa5, 0x0, 0x1, 0x4}, {0x4, 0x40, 0x2, 0xa, 0x2, 0xfffffff7}, {0xb, 0x1, 0x3, 0x100, 0xb, 0x7}, {0x100, 0x995, 0x374e, 0x9, 0x1000, 0xffffdb76}, {0x3, 0x4, 0xa6de, 0x9bf4, 0x3, 0x6}, {0x7ff, 0x0, 0x9, 0x0, 0xfffffffa, 0x1}, {0x7, 0x929, 0x7f, 0xe0000, 0x2, 0x81}, {0x1, 0x34, 0x0, 0x5, 0xe22, 0x6}, {0xfffffffc, 0xaadf, 0xbc7, 0x6, 0x8, 0x2}, {0x6ef, 0x3, 0x9, 0x7, 0x4, 0x8000}, {0x2, 0x1, 0x2, 0xc3c1, 0x7, 0x4bbd}, {0x3ff, 0x4, 0xfffffffe, 0x100, 0x7fffffff, 0x3}, {0x7, 0x2, 0xff, 0x9, 0xb5a1, 0x2}, {0x9, 0x9, 0xffff, 0x100, 0xf8000000, 0x8000}, {0x0, 0xfff, 0x7, 0x7, 0xffffffff, 0xfffffffe}, {0x5, 0x9, 0x80, 0x9, 0x6, 0x9250}, {0x3, 0x5, 0x81, 0x4, 0x1, 0x6}, {0x6, 0x7fffffff, 0x0, 0x1b, 0x39, 0x4}, {0x5, 0x3ff, 0x40, 0xbe, 0xffff, 0x5}, {0x24, 0x53956696, 0x81, 0x4, 0x3, 0x5}, {0x80000001, 0x7, 0x0, 0x5, 0x2, 0x8001}, {0x10000, 0x400, 0x4, 0x1, 0x618, 0x1}, {0xf1, 0x5, 0xfffffbff, 0x5, 0x400, 0xa6}, {0x4, 0x7ff, 0x5, 0x8, 0x800, 0x8}, {0x8, 0x1, 0x1000, 0x100, 0x4, 0x45f2}, {0xd8, 0x8, 0x5, 0xf8b, 0x6, 0xb5}, {0x6, 0x7, 0xe9, 0x80, 0x5, 0xa}, {0x2, 0x0, 0x4, 0x400, 0x1, 0x6}, {0xfa9, 0x3, 0x0, 0xffff, 0x0, 0x3}, {0x99, 0x9, 0x6, 0x3, 0x5, 0x10000}, {0x7fff, 0x4, 0x6, 0x2, 0x48, 0x5}, {0xffffb1c7, 0x7, 0x80000001, 0x1, 0x3, 0xb54f}, {0x2, 0x1, 0x1000, 0x101, 0x9, 0xf7}, {0xfffff000, 0x7, 0x7, 0x6ba, 0x6}, {0x6, 0x0, 0x5, 0x6a7a, 0x545, 0x7}, {0xfffffffc, 0x2c04, 0x7, 0x8000000, 0x4, 0x8000}, {0xffff, 0x7fff, 0x3, 0x3, 0x4, 0x8}, {0x100, 0x400, 0x4800000, 0x835, 0x4, 0x52}, {0x4, 0x7b, 0xff, 0xfff, 0x1, 0x9}, {0x18000000, 0x9, 0x833b, 0xfffff251, 0x5, 0xa}, {0xf, 0x1, 0x8, 0x2, 0x5}, {0x40, 0xfffffffc, 0x4, 0x7f, 0x7, 0x3}, {0x2e, 0x80000001, 0x7fff, 0x3, 0x3, 0x401}, {0x9, 0xacc, 0xd, 0x1, 0x95e, 0x5}, {0x9c2, 0x6, 0x4, 0xffffffff, 0x1000}, {0x7b8, 0x5, 0xb, 0xa, 0x8, 0x200}, {0xf, 0xb7a, 0xe, 0x6, 0xc1, 0x7}, {0x7, 0x5f6b0af1, 0x6, 0x54, 0x0, 0xfff}, {0x78f6, 0x46000000, 0x0, 0x6, 0x8, 0xee96}, {0xfffffffe, 0x7, 0x80000001, 0xff, 0x0, 0x3}, {0x40, 0xf29, 0x9, 0xb, 0xcb, 0x1}, {0x91cb, 0x3, 0x0, 0x7, 0x3}, {0x9, 0xd0f, 0x8, 0xfffffffb, 0x8, 0x2}, {0x401, 0x7fffffff, 0x800, 0xfffff001, 0xc}, {0x6, 0x9, 0xc000, 0x0, 0x8000, 0x7fff}, {0x69, 0xffff, 0x1, 0x6, 0x80, 0x8}, {0x8c7, 0x2, 0xd0, 0x0, 0x4, 0x3}, {0x3ff, 0x4, 0x7, 0xffff, 0x1, 0xff}, {0x4, 0x1ff, 0xd, 0x9, 0x9, 0x2}, {0x7, 0x1, 0xc2, 0x7, 0x4}, {0x22b, 0x7, 0x704e, 0x3, 0x9, 0x6}, {0x80000001, 0x2, 0xffffd611, 0x8, 0x7}, {0x8000, 0x80, 0x9, 0xffff, 0x0, 0x2}, {0x6783edc, 0xaf2, 0x7, 0x8, 0x1, 0xff000000}, {0x7, 0x1, 0x140000, 0x4, 0xd, 0x200}, {0xb, 0x2, 0x8, 0xa, 0x1}, {0x7, 0x69a5, 0x100, 0x236, 0x4, 0x10001}, {0x3, 0xffff0000, 0x144, 0x2, 0x81, 0x8}, {0xde8, 0x2, 0x6, 0x9b, 0x88db, 0x401}, {0x0, 0x6, 0x40, 0x0, 0x9, 0xc9}, {0x2bd1272, 0x59, 0x3921, 0x57, 0x6, 0x80000000}, {0x3, 0x7, 0xb861, 0x1, 0x6, 0x4}, {0x1, 0x3, 0x8, 0x9, 0x4, 0x8}, {0x0, 0x7, 0x80, 0xed2, 0x80000000, 0x8}, {0x2, 0xfffffc01, 0xfc3, 0x8d5, 0x8001, 0x3fffc000}, {0x8d, 0x6, 0x0, 0x5, 0x4, 0x1}, {0x6, 0x9, 0xeec6, 0x6, 0x7, 0x9}, {0x80000000, 0xd6187927, 0x1, 0x2a, 0xa, 0x7fffffff}], [{0x1, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5, 0xd716e616b6744d43}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x3, 0xb4d2ea9c256b621e}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xe270aa78089fc197}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x3}, {0x2}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="d800", 0x2}], 0x1}, 0x20000885) executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xa750, &(0x7f0000000b40)) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r0, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x6, &(0x7f0000003f00), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) socket$unix(0x1, 0x1, 0x0) request_key(0x0, 0x0, &(0x7f0000000000)='/\r\x00\xfaF\x1c\xdd\xd4\x84r\v{\xaez\xf5\x9e\xab16\xee\xddg\b\x00\x00\x00\x00\x00\x00\x00\xa7~', 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c100000000100000000", 0x57}], 0x1) write(r5, &(0x7f0000000600)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000edff00039815fa2c1ec28656aaa7a70a4b46fe000000bc1d03000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d6f0f350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) prctl$PR_SET_PTRACER(0x59616d61, r1) executing program 0: r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='dummy_udc.0', 0xb) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0xc2401, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @local, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x0, 0x1}}, {@can={0xc, {{0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "7c379b1a50101fc6"}}}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRES16, @ANYRES64=r1]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) r5 = socket$inet(0x2, 0x3, 0x8) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff10e8adc4, 0x0, 0x2, 0x3, 0xf409, 0x0, 0x0, 0x2}}, 0x50) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) pwritev2(r1, 0x0, 0x0, 0x2, 0x8, 0xa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x1, 0x87, 0x5, 0x1, {{0x6, 0x4, 0x1, 0x1b, 0x18, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast1, @rand_addr=0x64010102, {[@end]}}}}}) executing program 0: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffffffffffffff9, 0x6) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2007ffb) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) executing program 1: pipe2(&(0x7f0000000100), 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xe0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setuid(0xee01) flistxattr(r2, 0x0, 0x58) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$OCFS2_IOC_INFO(r3, 0x80106f05, &(0x7f0000005a80)={&(0x7f00000058c0)=[&(0x7f0000000300)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000000400)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000000480)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000000500)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000000540)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000001}}, &(0x7f00000005c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000000600)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x20000000}}, &(0x7f0000000640)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, 0x0, &(0x7f00000006c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000000700)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000000740)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000002}}, &(0x7f0000000780)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f00000007c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000001a80)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x4, 0xfffffffffffffff9}, {0x4, 0xf1}, {0x80}, {0x5, 0xb53}, {0x7fffffffffffffff, 0xc9d}, {0x6}, {0x4, 0x9}, {0x2, 0x1}, {0x6, 0xff}, {0x8, 0x9}, {0x9, 0x5}, {0x1, 0x7}, {0x3, 0x4}, {0x3, 0x9}, {0xea8, 0x3}, {0x7fffffff}, {0x0, 0x81}, {0x4, 0x3}, {0x3}, {0x3, 0xfffffffeffffffff}, {0x1, 0xfffffffffffffffa}, {0x8, 0xc12}, {0x0, 0x4}, {0x9, 0x380000000000000}, {0x7fffffff, 0x7fffffffffffffff}, {0x6, 0x2}, {0x0, 0x4}, {0x800, 0xfffffffffffffff6}, {0xe, 0x7}, {0x0, 0xff}, {0xbdc}, {0xd57f, 0x7}, {0xffffffffffffffff, 0x5000000000000}, {0xfffffffffffffffa, 0xffffffffffff9e4f}, {0x95, 0x351e}, {0xfffffffffffffff9, 0x5}, {0x3}, {0x8, 0x2}, {0x26, 0x4}, {0x9, 0x32c}, {0x4, 0x8}, {0x12, 0xcdc9}, {0xff, 0x5}, {0x8, 0x84}, {0x1, 0x9}, {0x1000, 0xd378}, {0x3e7c, 0x9}, {0x9, 0xd445}, {0x100000001, 0x6}, {0x5, 0x6}, {0x2b0, 0x6c}, {0x6, 0x6}, {0xa, 0x200}, {0xbf, 0xb6bb}, {0x4bbf, 0xc13e}, {0xb09, 0x2}, {0x4, 0x10000}, {0x5, 0x7}, {0x891, 0xd}, {0x4, 0x6}, {0xd, 0xf8f}, {0x853, 0x8}, {0x2, 0x400}, {0x0, 0x5}, {0x2, 0x4}, {0x7fffffffffffffff, 0x9}, {0x1}, {0x100000000, 0x2d2}, {0x10000, 0xc10000000}, {0x9, 0x2}, {0xff, 0x40}, {0x3, 0x6}, {0x5, 0xa1b}, {0x0, 0xff}, {0x2, 0x4}, {0x2, 0x2}, {0x40, 0x9}, {0x5, 0x7}, {0x6, 0x7fff}, {0x0, 0x1c}, {0x2, 0xa}, {0x5, 0x93}, {0x5, 0x80000000}, {0x1, 0xd5a}, {0x9}, {0x0, 0x5}, {0x8, 0x571e}, {0x6c9, 0xd9}, {0xa}, {0x3, 0x6}, {0x0, 0x4}, {0x0, 0x80}, {0xdbd4, 0x10}, {0x7fffffff, 0x78}, {0x7, 0x7fffffffffffffff}, {0x0, 0xde3}, {0x7fffffff, 0xd}, {0x100, 0x5}, {0x5, 0x7}, {0x9, 0x7932}, {0xcc, 0x3}, {0x4, 0x9}, {0x6529387b, 0x6}, {0x18, 0xcb3}, {0x2, 0xb}, {0x6, 0x9}, {0x1, 0x7}, {0x200, 0x1}, {0x1, 0x41e}, {0x7fffffffffffffff, 0x1}, {0x5, 0x4}, {0x78fe000000000000, 0x2}, {0x6, 0x6}, {0x8640, 0x3}, {0xfffffffffffffffb, 0x19}, {0x9, 0x10}, {0xe9e9, 0x8}, {0x6d1, 0x3ff}, {0x7fff, 0x7fff}, {0xffffffffffff0001}, {0xf1b, 0x4}, {0x4f, 0x7f}, {0x7ff, 0x380}, {0x7f, 0x6}, {0x5, 0x100000000}, {0xbc9, 0x3ff}, {0x9, 0x8836}, {0x1000, 0x898}, {0x81, 0x4}, {0x4b, 0x300}, {0xfffffffffffffffa, 0x5}, {0x8000000000000000, 0x9}, {0x6401}, {0xb}, {0x7, 0x2f91}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0xa8}, {0x8000, 0xf}, {0xf40a, 0xa97}, {0x8, 0x9}, {0x6, 0x2}, {0x4, 0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x5, 0x7}, {0x5dc, 0x3}, {0x9, 0xf8}, {0x8000000000000000, 0x6}, {0x72, 0x14df43ec}, {0x5, 0x1}, {0x6, 0x9}, {0x142, 0xf064}, {0x4, 0xfffffffffffffff7}, {0x2}, {0x7, 0x2}, {0x3, 0x5}, {0x2, 0xad}, {0x7, 0xad3}, {0x4, 0xffffffff}, {0x40, 0xffff}, {0x8, 0x1}, {0x7, 0x400}, {0x3, 0x3636d9fd}, {0x0, 0x2}, {0x36, 0x6}, {0x5, 0x100}, {0x1, 0x6}, {0x800}, {0x2, 0xed}, {0x7, 0x7}, {0x2, 0x10000}, {0x200, 0x6}, {0x0, 0x2}, {0x4, 0x7fffffffffffffff}, {0x101, 0xc6c}, {0x10, 0x9}, {0x2, 0x80000001}, {0x6, 0xf}, {0xffffffffffffffff, 0x6000}, {0x95, 0x9}, {0x719, 0xffffffffffffff01}, {0x7, 0x6}, {0x3ff, 0x4}, {0x3, 0xc}, {0x100000000, 0x3ff}, {0x10, 0x3}, {0x2, 0x7}, {0xf, 0x4}, {0x9, 0x80000001}, {0x0, 0x7}, {0x2, 0x9}, {0x12, 0x3}, {0x10001, 0x8000000000000001}, {0x800, 0x7}, {0x276, 0x1}, {0x9, 0x3}, {0x2, 0x4}, {0x0, 0x10000}, {0x8001, 0x7}, {0xc, 0x8000}, {0x2, 0x3}, {0x96, 0x9}, {0x0, 0x1}, {0x4, 0xdb4}, {0x0, 0x2}, {0x2, 0x5}, {0x3, 0x4}, {0x4, 0x3}, {0x4, 0x5ed}, {0x6, 0x9}, {0x2, 0x1000}, {0x6, 0x73e}, {0x80, 0x4}, {0x8, 0xfffffffffffffffc}, {0x7, 0x40c0}, {0x1, 0xfffffffffffffffc}, {0xfffffffffffffffa, 0x2f8}, {0x4, 0x7}, {0x4, 0x8}, {0x80000001, 0x6}, {0x3e17, 0x7}, {0x0, 0x6}, {0x0, 0x26d}, {0x7fffffff, 0x8000000000000001}, {}, {0x3, 0x5}, {0xe, 0x7fffffff}, {0x8, 0x41}, {0x5, 0x4}, {0x4, 0x4}, {0x0, 0xcd3c}, {0x1, 0x5}, {0xe934, 0x6}, {0x401, 0x200}, {0x3, 0x5}, {0x5, 0x9}, {0x6, 0x49e}, {0x5, 0x950}, {0x7f, 0xffffffffffffffff}, {0x6, 0x1}, {0x1, 0x9}, {0x7fffffff, 0x1000}, {0x8, 0xfffffffffffffff1}, {0x7, 0xff}, {0x101, 0x13}, {0x200000, 0x280000}, {0x8000, 0x1000}, {0x8, 0x3}, {0x9, 0x27b}, {0x5, 0x2}, {0x3, 0x6}, {0xe, 0x10}, {0xa, 0x9}, {0x1, 0x2}]}, &(0x7f0000002ac0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000002b00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0x2}, &(0x7f0000002c40)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000002c80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x8001}, &(0x7f0000002dc0)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000002e00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000002}}, &(0x7f0000002e40)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000002e80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000002ec0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000002f00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x2b}, &(0x7f0000003040)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000003080)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f00000030c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x6, 0xb7}, {0x100, 0x9}, {0x1, 0xca5}, {0x2, 0x7ff}, {0x3ff, 0x8}, {0x5, 0xfff}, {0x100000000, 0xfffffffffffffffc}, {0x8, 0x8}, {0x0, 0x6}, {0x6, 0xfffffffffffeffff}, {0x8}, {0x2, 0x10000000}, {0x3, 0x100}, {0x95b7, 0x2}, {0x7ff, 0x5}, {0x0, 0x3}, {0x7, 0xb}, {0x6, 0xecf}, {0x1a00000000000000, 0x6}, {0x48, 0x6}, {0x4, 0x6}, {0x2, 0x39}, {0x283f, 0x6}, {0x8000000000000001, 0x3}, {0x81, 0x6}, {0x1, 0x9}, {0x6, 0x101}, {0xd1, 0x7}, {0x4c0, 0x3}, {0x1, 0x2}, {0x3ff, 0x1}, {0x7ff, 0x1}, {0x1, 0x3}, {0x200, 0x2}, {0x1ff, 0x100000001}, {0x7, 0x8}, {0x3, 0x9}, {0x9, 0x1}, {0x8001, 0xd3}, {0x47, 0xc}, {0x8, 0x3}, {0x4, 0x7fff}, {0x4, 0xfffffffffffffff8}, {0xc, 0x20}, {0x8}, {0x8}, {0x800, 0x6}, {0x3, 0x6}, {0x800, 0x2}, {0xa197, 0x4}, {0x5, 0xffffffff}, {0xffffffff}, {0x180a, 0xfffffffffffffff8}, {0x8}, {0x6, 0x7}, {0x9, 0x5}, {0x4}, {0x6, 0x101}, {0x4, 0x2}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x4e8f}, {0x3ff, 0x81}, {0x9, 0x8}, {0xf, 0x6489}, {0xffffffff, 0x3}, {0x2557, 0x4}, {0x40000, 0x6}, {0x7, 0xe3c}, {0x0, 0xb}, {0x2, 0x400000000000}, {0x9, 0x2a7}, {0x4, 0x9}, {0x8001, 0x401}, {0x3, 0x1ff}, {0x100000000}, {0x0, 0x9ec}, {0x9, 0xa73}, {0x2c, 0x8000000000000000}, {0xa5f}, {0x8, 0x1}, {0x7fff, 0x1}, {0x10, 0x2}, {0x3, 0xffffffffffffffc0}, {0xb8b, 0x8}, {0x2, 0x252}, {0x100000000, 0x5}, {0x401, 0x7}, {0x4, 0x6}, {0x3, 0x86d}, {0x7fffffff, 0x1000}, {0x9e, 0xffffffffffffffff}, {0x100000001, 0xfff}, {0x800}, {0x4, 0x749}, {0x4, 0x1}, {0xe, 0x3ff}, {0x94c, 0x2}, {0x5, 0xc17}, {0x8}, {0x2, 0x9}, {0x4, 0x5}, {0xe0fa, 0xe}, {0x4, 0x8001}, {0x7, 0xa54}, {0x9c, 0x9}, {0xfffffffffffffffe, 0x1}, {0x8, 0x723}, {0xc6, 0x9}, {0x2c4d, 0x80}, {0x6, 0xecd8}, {0x2, 0x2}, {0x0, 0x7}, {0x1}, {0x3, 0x4}, {0xa23, 0x1}, {0x10}, {0xffff, 0x8a46}, {0x5, 0x9}, {0xbe, 0x3}, {0x8001, 0x100000000}, {0x7, 0x8}, {0x3a5a, 0x3}, {0x7b5, 0x14425282}, {0x800, 0x9}, {0x2, 0x5}, {0x3, 0x7fff}, {0x8, 0x89}, {0x100, 0x4945}, {0x121faa6e, 0x81}, {0x9aa7, 0x5}, {0xfffffffffffffffa, 0x81}, {0x8000000, 0x731d}, {0xda82, 0x401}, {0x6, 0x6}, {0x4, 0x1}, {0x8, 0x9}, {0x100, 0x99}, {0x2, 0x80}, {0xe, 0x6}, {0x0, 0x4}, {0x1000, 0x200}, {0x9, 0x5}, {0x0, 0x5}, {0x5, 0x400}, {0xfffffffffffffffc, 0xd}, {0x9, 0x6}, {0xffffffffffffffff, 0x6}, {0x6}, {0x9, 0xb}, {0x5, 0x6}, {0x4, 0x2d687c65}, {0xfffffffffffffffc, 0x3}, {0x2, 0x7}, {0x49a, 0x9}, {0x8, 0xc1e}, {0x0, 0x5}, {0x5, 0x3ff}, {0xfffffffffffffeff, 0x7fffffffffffffff}, {0x0, 0x8}, {0x7, 0xf73e}, {0xbf, 0xa7d}, {0x9, 0x9}, {0x101, 0x9}, {0x6, 0x4}, {0x8, 0xd}, {0x2}, {0x2}, {0x800, 0x1}, {0x2b3, 0x3}, {0x7, 0x299}, {0x8, 0x5}, {0x8, 0x423}, {0xff, 0x4}, {0x1ff, 0x9e}, {0x5, 0x4}, {0x8, 0x6}, {0x5}, {0x8, 0x9}, {0x4f, 0x6}, {0x5000000000}, {0x9, 0xfffffffffffffffb}, {0x38d908e5, 0x5}, {0x100, 0x8}, {0x3, 0x3ff}, {0x8001, 0x8}, {0x40, 0x9}, {0x6d2a, 0xfffffffffffffff7}, {0x9, 0x100000001}, {0x1, 0x85}, {0x4, 0xe2f}, {0x8000000000000000, 0x10}, {0x8, 0x4}, {0x3, 0xf}, {0x0, 0x4}, {0x10001, 0xfb}, {0x7}, {0x3, 0x8}, {0x9, 0x40}, {0x4, 0x5}, {0x7, 0x400}, {0x7, 0xfff}, {0x10001, 0x4}, {0x7d91, 0xffffffff7fffffff}, {0x1, 0x6}, {0x4, 0x6}, {0x1, 0x9}, {0xb14, 0xfffffffffffffffe}, {0x5, 0x8}, {0x7, 0x9}, {0x9, 0x9f}, {0x10000, 0xffffffff}, {0x80000000, 0x101}, {0x0, 0x10001}, {0xdbac, 0x8}, {0xffffffffffffff76, 0x100000000}, {0x6, 0x25d}, {0xfff, 0x8001}, {0xcdc, 0x3}, {0x6, 0x9}, {0x6144, 0xc}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x98}, {0x9, 0xab1}, {0x7fffffffffffffff, 0x9}, {0x9}, {0xc0a, 0x4}, {0x0, 0x2}, {0xff, 0x23520000}, {0x1, 0xb2}, {0x4}, {0x0, 0x7}, {0x7f, 0x2aa}, {0x1, 0x6}, {0x6}, {0x0, 0x7}, {0x2, 0x40000000000}, {0x3, 0x6}, {0x9, 0xb}, {0x9, 0x9}, {0xfff, 0x8}, {0x80000001}, {0x100, 0x5}, {0x9, 0x401}, {0x7fffffff, 0xdee1}, {0xfffffffffffffff7, 0x3}, {0x1, 0x6}, {0xfffffffffffffff8, 0x2}, {0xfbef, 0x1}, {0xff, 0x7}, {0x2, 0x6}, {0x8000000000000000, 0x7fffffff}, {0x8, 0xd}]}, &(0x7f0000004100)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004140)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000004180)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f00000041c0)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000004240)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004280)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f00000042c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x20000000}}, &(0x7f0000004300)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004440)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, 0x0, &(0x7f00000044c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004500)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000004540)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000004580)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, 0x0, &(0x7f0000004600)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x4, 0x2}, {0x800, 0x9}, {0xb97, 0x1}, {0x5, 0x8}, {0x6, 0x101}, {0x8}, {0x486, 0x3ff}, {0x6, 0x9}, {0x6}, {0x1, 0x9}, {0x8, 0xd81c}, {0x7, 0x2}, {0x9, 0x3ff}, {0x7, 0x7}, {0x0, 0x8}, {0x5, 0x72}, {0x100, 0x7}, {0xa9d8, 0xa800000}, {0x8, 0x7a}, {0x4, 0x10000}, {0x8, 0x92c}, {0x80000001, 0x2}, {0x8, 0x9}, {0x0, 0x5d0}, {0x9, 0x8000}, {0x6, 0x5}, {0x7fff, 0x6}, {0x4, 0xfffffffffffffffd}, {0x2, 0x6}, {0x0, 0x81}, {0x7, 0x7}, {0x0, 0x8189}, {0x3, 0x4}, {0x31e4, 0x8}, {0x5, 0x3}, {0x7f, 0x6}, {0x3, 0x5}, {0x7, 0xe4}, {0xffffffffffff0001, 0x101}, {0x5, 0x81}, {0x80000000, 0x8f}, {0x4, 0x9}, {0x80000000, 0x5}, {0x722, 0x6}, {0x400, 0xa}, {0x698, 0x79}, {0x4000000, 0x3}, {0xffffffff00000000, 0x7f}, {0x4, 0x7}, {0xd, 0x400}, {0x7, 0x33b7}, {0x800}, {0x64c2, 0x200}, {0x3, 0x6}, {0x80000000, 0x8}, {0x3, 0x6}, {0x1, 0xf}, {0xc361, 0x2ceb}, {0x8}, {0x7}, {0x4, 0x7}, {0xf, 0x5}, {0x4, 0x100000001}, {0x7, 0x3}, {0x6, 0x2}, {0x3, 0x1ff}, {0x8000000000000001, 0x9b6}, {0x2, 0x10001}, {0x100, 0x3}, {0x2, 0x8d78}, {0x6, 0xfffffffffffffa8d}, {0x80000001}, {0x7, 0x6}, {0x10, 0x3f}, {0x7, 0xd}, {0xa2d6, 0x6}, {0x8, 0x24000}, {0x1, 0x8}, {0x9, 0x80}, {0x7fffffff, 0xe0}, {0x8, 0x4}, {0x9, 0x4}, {0x8001, 0x400}, {0x9af2, 0x6}, {0x7fffffff, 0x6}, {0x81, 0x7}, {0x1, 0x7}, {0x3, 0x2}, {0x8b, 0xe}, {0x7, 0x33}, {0x8, 0xcf}, {0x153, 0xc81}, {0x3, 0x80000001}, {0x8000, 0x1}, {0xf, 0x1}, {0x100000000, 0x5}, {0x4, 0x8001}, {0x1, 0x1}, {0x406d, 0x9}, {0x8000000000000000, 0x8}, {0x4, 0x5}, {0x6, 0x3e}, {0x2, 0x6}, {0xfffffffffffffffe, 0x7ff}, {0x6, 0x100000000}, {0x4, 0x1}, {0x9, 0x4}, {0x3, 0xb}, {0x40, 0xc9}, {0x3, 0x80000001}, {0x0, 0x8}, {0x8, 0x2f4}, {0x7, 0x5}, {0xffffffffffffff00, 0xa8f}, {0x1, 0x7}, {0x8, 0x10}, {0xb04, 0x22}, {0x2d2edf24, 0x62}, {0xfffffffffffffff6, 0xb86}, {0x3, 0x6}, {0x81, 0x7}, {0x6, 0x1}, {0x733f, 0x7583}, {0x8001, 0x8}, {0x2, 0xb}, {0x7, 0x8}, {0xb0}, {0x8000, 0xff}, {0x7, 0x5}, {0x8, 0x6}, {0x401, 0xe}, {0x1ff, 0x9}, {0x1, 0x800}, {0x9, 0x6}, {0x9, 0xc5f}, {0x200, 0x6}, {0x5, 0x4}, {0x7a, 0x24f96762}, {0x3, 0x7}, {0xa, 0xfffffffffffffffd}, {0x7435, 0x7}, {0x100000001, 0xffff}, {0x7, 0x4c}, {0x128f, 0x100000000}, {0xffffffff80000001, 0x1}, {0x9, 0x8000000000000001}, {0xfffffffffffff801, 0xd}, {0xe399, 0x86}, {0xa2, 0x8001}, {0x5, 0x1}, {0x7fff, 0xffff}, {0x8, 0x1}, {0xd, 0x5}, {0x6, 0x2}, {0x8, 0x87}, {0x5, 0x1}, {0x80000000, 0x2}, {0x0, 0x800000000000000}, {0x3, 0x27e}, {0x8, 0xfffffffffffffaa1}, {0x101, 0x80}, {0x6, 0x7ff}, {0x452, 0x1}, {0x1ff0, 0x4}, {0x2, 0x3895e5c1}, {0x3, 0x2}, {0x5, 0x8}, {0x9, 0x2}, {0x6, 0x7d0}, {0x4c, 0x9d}, {0xfffffc0000000000, 0x5}, {0x1, 0x168459ed}, {0x9d5, 0x3}, {0xcc2, 0x8}, {0x2, 0x8}, {0x6, 0x1}, {0x2, 0x9}, {0x2f, 0x1}, {0x9, 0x3ff}, {0x4, 0x2c2f}, {0x0, 0xfffffffffffffeff}, {0x5, 0x100000001}, {0xffff, 0x2}, {0x8, 0x607eca40}, {0x0, 0x8000000000000001}, {0x0, 0x8001}, {0x7fffffffffffffff, 0x8}, {0x8, 0x4}, {0x8, 0x5}, {0x8, 0x7}, {0xd8ec, 0x8}, {0x9a0, 0xc1a}, {0x10001, 0x8}, {0xcc, 0xc8}, {0x2, 0x4}, {0xd, 0x9}, {0x1ff, 0xfffffffffffffffc}, {0x6, 0x3}, {0xec8, 0x6}, {0x6, 0x5}, {0x8, 0x6}, {0x8, 0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x9, 0x158}, {0xfffffffffffffffc, 0x3}, {0x8000, 0x9a41}, {0x0, 0x1}, {0x8, 0xb}, {0x1, 0x6}, {0x1b, 0x4}, {0xfffffffffffffffc, 0x6}, {0x1ff}, {0x1, 0x9}, {0x6, 0x200}, {0x2, 0x8}, {0x3, 0x401}, {0x3, 0x8}, {0x8, 0x889}, {0x9, 0xf}, {0x4, 0x20}, {0xc, 0x1400}, {0x48000000000000, 0x9}, {0x9, 0x3}, {0xb, 0x9}, {0x4, 0x70}, {0x7, 0x21e9}, {0xccb, 0x6}, {0x7, 0x6}, {0x89, 0x4}, {0x38e, 0x10}, {0x3, 0x4}, {0x0, 0x31}, {0xcd13, 0x3}, {0x5, 0x7fffffff}, {0xffffffff, 0x2}, {0x2, 0x9}, {0x84a3, 0x15b}, {0x3, 0x88e}, {0x10, 0x7}, {0x2, 0xf}, {0x0, 0x4}, {0x1, 0xc}, {0xfff, 0x7}, {0x5, 0x4475}, {0x0, 0x81}, {0x80000000, 0xff}, {0x17}, {0x7}, {0x9, 0x2}, {0x683e0b48, 0x7}, {0x36, 0x1ff}, {0x1, 0x7}, {0x7, 0x3}, {0x9, 0x4}]}, &(0x7f0000005640)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x5}, &(0x7f0000005780)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000000100)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f0000005800)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000005840)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f0000005880)=@blocksize={{0x4f32494e, 0x2, 0x10}}], 0x32}) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) unshare(0x26020480) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000900)="71ca305b6d785977913e0000417b88594afcdf08f6dee6186e5f1ff38731631801ab95ca3995a4a5289c2aab986a64ffe8944bfb00f3fdeb28ed6a5128b0fe6252d89067c3d498a339d2e0f693775f4b", 0x50}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="280000000401000005000000221c17e87e5acf444a482d6f015b5d0f6abe5bae259bcbbb584400000c00000014000000030000"], 0x74}, 0x4000) fsmount(r6, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r1, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="d800", 0x2}], 0x1}, 0x20000885) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r0, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x6, &(0x7f0000003f00), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) ioperm(0x7ff, 0x8, 0x4) request_key(0x0, 0x0, &(0x7f0000000000)='/\r\x00\xfaF\x1c\xdd\xd4\x84r\v{\xaez\xf5\x9e\xab16\xee\xddg\b\x00\x00\x00\x00\x00\x00\x00\xa7~', 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c100000000100000000", 0x57}], 0x1) write(r5, &(0x7f0000000600)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000edff00039815fa2c1ec28656aaa7a70a4b46fe000000bc1d03000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d6f0f350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) prctl$PR_SET_PTRACER(0x59616d61, r1) executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x0) executing program 4: r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=@newqdisc={0x4c, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5, 0xe}, {0xb, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xc1}}}, @qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004040}, 0x4040040) executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x10000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0214200011000000004000000000000003000500000000"], 0x88}}, 0x20000000) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580), 0xc290, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) sendfile(r3, r3, 0x0, 0x10001) executing program 4: r0 = fsopen(&(0x7f0000000200)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r4 = fsmount(r0, 0x1, 0x0) fchdir(r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000740)=""/138, 0x8a, 0x0) r6 = fsopen(&(0x7f0000000100)='cgroup\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700"], 0x48) r8 = fsmount(r6, 0x1, 0x0) fchdir(r8) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="180100001200010000000000000000007368613338340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000008000100c50000000800010001800000080001997dbebc0c893cc200ff01000008000100080000000800010040e9000007000100020000000800010008000000"], 0x118}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r7}, 0x14) r10 = socket$inet6(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r4], 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmmsg$inet6(r10, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c0c0) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r11, &(0x7f0000000240)={0xa, 0x4e24, 0x80000b, @empty}, 0x1c) r12 = syz_open_procfs(0x0, &(0x7f0000000340)='net/icmp6\x00') pread64(r12, &(0x7f0000000600)=""/92, 0x5c, 0xf7) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r5}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x18, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000006000/0x2000)=nil, 0x3) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002780), 0x2280) fcntl$setstatus(r6, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) executing program 3: pipe2(&(0x7f0000000100), 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xe0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setuid(0xee01) flistxattr(r2, 0x0, 0x58) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xfe}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) socket$nl_generic(0x11, 0x3, 0x10) close(0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) clock_adjtime(0x5, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009040000", @ANYBLOB], 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x181000, 0x64) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780), &(0x7f0000000280), &(0x7f0000000140)) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r7, 0x10c, 0x5, &(0x7f0000000200), &(0x7f0000000280)=0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010102}}}}, &(0x7f0000000080)={0x0, 0x2, [0x829, 0x8cb, 0x3d, 0x66]}) socket$packet(0x11, 0x2, 0x300) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendto$packet(0xffffffffffffffff, &(0x7f0000000640)="000a18000000", 0x6, 0x4000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x40083, 0x100) program did not crash replaying the whole log did not cause a kernel crash single: executing 5 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-syz_init_net_socket$llc-getsockopt$llc_int-syz_emit_ethernet-socket$packet-close-socket$inet_sctp-ioctl$SIOCSIFHWADDR-sendto$packet-mkdirat-mount-openat detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r7, 0x10c, 0x5, &(0x7f0000000200), &(0x7f0000000280)=0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010102}}}}, &(0x7f0000000080)={0x0, 0x2, [0x829, 0x8cb, 0x3d, 0x66]}) socket$packet(0x11, 0x2, 0x300) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendto$packet(0xffffffffffffffff, &(0x7f0000000640)="000a18000000", 0x6, 0x4000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x40083, 0x100) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-openat$tun-socket$inet_tcp-openat$binderfs-socket$packet-setsockopt$packet_int-setsockopt$packet_rx_ring-syz_genetlink_get_family_id$batadv-prctl$PR_SCHED_CORE-prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-sched_setattr-socket$nl_xfrm-syz_ublk_setup_io_uring-open-ftruncate-sendfile detailed listing: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780), &(0x7f0000000280), &(0x7f0000000140)) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-symlinkat-socket$nl_generic-sendmsg$NFT_BATCH-sendmsg$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-syz_genetlink_get_family_id$nl80211-syz_open_dev$video-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-socket$nl_generic-close-keyctl$instantiate-clock_adjtime-syz_usb_connect-add_key-add_key$user-keyctl$read-socket$nl_route-openat-sendmsg$nl_route-execve-execve detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xfe}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) socket$nl_generic(0x11, 0x3, 0x10) close(0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) clock_adjtime(0x5, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009040000", @ANYBLOB], 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x181000, 0x64) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-sched_setaffinity-sched_setscheduler-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_dev$sndctrl-recvmmsg-ioprio_get$uid-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_procs-openat$cgroup_procs-write$cgroup_pid-sendfile detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580), 0xc290, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) sendfile(r3, r3, 0x0, 0x10001) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-openat$nullb-mmap-syz_emit_ethernet-openat$fuse-mount$fuse-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT-openat$vimc2-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-ioctl$SIOCSIFMTU-socket$inet-getsockopt$sock_buf-madvise-connect$unix-write$FUSE_INIT-sched_setattr-madvise-madvise-pwritev2-ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0xc2401, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @local, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x0, 0x1}}, {@can={0xc, {{0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "7c379b1a50101fc6"}}}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRES16, @ANYRES64=r1]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) r5 = socket$inet(0x2, 0x3, 0x8) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff10e8adc4, 0x0, 0x2, 0x3, 0xf409, 0x0, 0x0, 0x2}}, 0x50) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) pwritev2(r1, 0x0, 0x0, 0x2, 0x8, 0xa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x1, 0x87, 0x5, 0x1, {{0x6, 0x4, 0x1, 0x1b, 0x18, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast1, @rand_addr=0x64010102, {[@end]}}}}}) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 1m40s testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 15, 22, 16, 30, 29, 17, 4, 26, 10, 27, 15, 2, 4, 16, 29, 4, 3, 26, 4, 2, 4, 16, 30, 28, 15, 23, 5, 20, 20] detailed listing: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x1, 0x4, 0xb47e, 0xa, 0x12, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x4049004) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x0) executing program 0: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffffffffffffff9, 0x6) executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000640)='.\x00', 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r4, 0x0, 0x8e14, 0x8ffff) sendto$inet(r0, &(0x7f0000000280)="eb2ec6", 0x3, 0x24040000, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x620000, 0x0) executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0xfffe, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) geteuid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x4000000) executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280), 0x0) write(r0, &(0x7f00000002c0)='\n', 0x1) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd000000001a00000000ff0200000000000000000d0098000000007f00000000000000000000000100"/66], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000001240001801400018008000100ac1414bb08000200ac0314bb0c00028005004100000000002400028014000180080001000000000008000900ac1414000c000280050001000000000008000740000000000800084000000cde10a8ea1af935d155eb140c23b578ee9504b0f423674f4e36092ad124e3911c2c5f14c85ca3a94c94edbb4323da986a74b443d2fa60ce919b27244f52638e2aa56ca238b18e273c04d991e00261ca1c32cb831614509d2b1b13d20ce15f5a1b63e22e908e12e0463e2a89dec88fcaf10cb85998971144ad8d8c9d10e295"], 0x6c}, 0x1, 0x0, 0x0, 0x8020}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40402) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000080)={0xa, {0x4000003, 0x5ffc, 0x8, 0x10}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mkdir(0x0, 0x13b) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$OCFS2_IOC_INFO(r3, 0x80106f05, &(0x7f0000005a80)={&(0x7f00000058c0)=[&(0x7f0000000300)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000000400)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000000480)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000000500)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000000540)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000001}}, &(0x7f00000005c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000000600)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x20000000}}, &(0x7f0000000640)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, 0x0, &(0x7f00000006c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000000700)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000000740)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000002}}, &(0x7f0000000780)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f00000007c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000001a80)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x4, 0xfffffffffffffff9}, {0x4, 0xf1}, {0x80}, {0x5, 0xb53}, {0x7fffffffffffffff, 0xc9d}, {0x6}, {0x4, 0x9}, {0x2, 0x1}, {0x6, 0xff}, {0x8, 0x9}, {0x9, 0x5}, {0x1, 0x7}, {0x3, 0x4}, {0x3, 0x9}, {0xea8, 0x3}, {0x7fffffff}, {0x0, 0x81}, {0x4, 0x3}, {0x3}, {0x3, 0xfffffffeffffffff}, {0x1, 0xfffffffffffffffa}, {0x8, 0xc12}, {0x0, 0x4}, {0x9, 0x380000000000000}, {0x7fffffff, 0x7fffffffffffffff}, {0x6, 0x2}, {0x0, 0x4}, {0x800, 0xfffffffffffffff6}, {0xe, 0x7}, {0x0, 0xff}, {0xbdc}, {0xd57f, 0x7}, {0xffffffffffffffff, 0x5000000000000}, {0xfffffffffffffffa, 0xffffffffffff9e4f}, {0x95, 0x351e}, {0xfffffffffffffff9, 0x5}, {0x3}, {0x8, 0x2}, {0x26, 0x4}, {0x9, 0x32c}, {0x4, 0x8}, {0x12, 0xcdc9}, {0xff, 0x5}, {0x8, 0x84}, {0x1, 0x9}, {0x1000, 0xd378}, {0x3e7c, 0x9}, {0x9, 0xd445}, {0x100000001, 0x6}, {0x5, 0x6}, {0x2b0, 0x6c}, {0x6, 0x6}, {0xa, 0x200}, {0xbf, 0xb6bb}, {0x4bbf, 0xc13e}, {0xb09, 0x2}, {0x4, 0x10000}, {0x5, 0x7}, {0x891, 0xd}, {0x4, 0x6}, {0xd, 0xf8f}, {0x853, 0x8}, {0x2, 0x400}, {0x0, 0x5}, {0x2, 0x4}, {0x7fffffffffffffff, 0x9}, {0x1}, {0x100000000, 0x2d2}, {0x10000, 0xc10000000}, {0x9, 0x2}, {0xff, 0x40}, {0x3, 0x6}, {0x5, 0xa1b}, {0x0, 0xff}, {0x2, 0x4}, {0x2, 0x2}, {0x40, 0x9}, {0x5, 0x7}, {0x6, 0x7fff}, {0x0, 0x1c}, {0x2, 0xa}, {0x5, 0x93}, {0x5, 0x80000000}, {0x1, 0xd5a}, {0x9}, {0x0, 0x5}, {0x8, 0x571e}, {0x6c9, 0xd9}, {0xa}, {0x3, 0x6}, {0x0, 0x4}, {0x0, 0x80}, {0xdbd4, 0x10}, {0x7fffffff, 0x78}, {0x7, 0x7fffffffffffffff}, {0x0, 0xde3}, {0x7fffffff, 0xd}, {0x100, 0x5}, {0x5, 0x7}, {0x9, 0x7932}, {0xcc, 0x3}, {0x4, 0x9}, {0x6529387b, 0x6}, {0x18, 0xcb3}, {0x2, 0xb}, {0x6, 0x9}, {0x1, 0x7}, {0x200, 0x1}, {0x1, 0x41e}, {0x7fffffffffffffff, 0x1}, {0x5, 0x4}, {0x78fe000000000000, 0x2}, {0x6, 0x6}, {0x8640, 0x3}, {0xfffffffffffffffb, 0x19}, {0x9, 0x10}, {0xe9e9, 0x8}, {0x6d1, 0x3ff}, {0x7fff, 0x7fff}, {0xffffffffffff0001}, {0xf1b, 0x4}, {0x4f, 0x7f}, {0x7ff, 0x380}, {0x7f, 0x6}, {0x5, 0x100000000}, {0xbc9, 0x3ff}, {0x9, 0x8836}, {0x1000, 0x898}, {0x81, 0x4}, {0x4b, 0x300}, {0xfffffffffffffffa, 0x5}, {0x8000000000000000, 0x9}, {0x6401}, {0xb}, {0x7, 0x2f91}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0xa8}, {0x8000, 0xf}, {0xf40a, 0xa97}, {0x8, 0x9}, {0x6, 0x2}, {0x4, 0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x5, 0x7}, {0x5dc, 0x3}, {0x9, 0xf8}, {0x8000000000000000, 0x6}, {0x72, 0x14df43ec}, {0x5, 0x1}, {0x6, 0x9}, {0x142, 0xf064}, {0x4, 0xfffffffffffffff7}, {0x2}, {0x7, 0x2}, {0x3, 0x5}, {0x2, 0xad}, {0x7, 0xad3}, {0x4, 0xffffffff}, {0x40, 0xffff}, {0x8, 0x1}, {0x7, 0x400}, {0x3, 0x3636d9fd}, {0x0, 0x2}, {0x36, 0x6}, {0x5, 0x100}, {0x1, 0x6}, {0x800}, {0x2, 0xed}, {0x7, 0x7}, {0x2, 0x10000}, {0x200, 0x6}, {0x0, 0x2}, {0x4, 0x7fffffffffffffff}, {0x101, 0xc6c}, {0x10, 0x9}, {0x2, 0x80000001}, {0x6, 0xf}, {0xffffffffffffffff, 0x6000}, {0x95, 0x9}, {0x719, 0xffffffffffffff01}, {0x7, 0x6}, {0x3ff, 0x4}, {0x3, 0xc}, {0x100000000, 0x3ff}, {0x10, 0x3}, {0x2, 0x7}, {0xf, 0x4}, {0x9, 0x80000001}, {0x0, 0x7}, {0x2, 0x9}, {0x12, 0x3}, {0x10001, 0x8000000000000001}, {0x800, 0x7}, {0x276, 0x1}, {0x9, 0x3}, {0x2, 0x4}, {0x0, 0x10000}, {0x8001, 0x7}, {0xc, 0x8000}, {0x2, 0x3}, {0x96, 0x9}, {0x0, 0x1}, {0x4, 0xdb4}, {0x0, 0x2}, {0x2, 0x5}, {0x3, 0x4}, {0x4, 0x3}, {0x4, 0x5ed}, {0x6, 0x9}, {0x2, 0x1000}, {0x6, 0x73e}, {0x80, 0x4}, {0x8, 0xfffffffffffffffc}, {0x7, 0x40c0}, {0x1, 0xfffffffffffffffc}, {0xfffffffffffffffa, 0x2f8}, {0x4, 0x7}, {0x4, 0x8}, {0x80000001, 0x6}, {0x3e17, 0x7}, {0x0, 0x6}, {0x0, 0x26d}, {0x7fffffff, 0x8000000000000001}, {}, {0x3, 0x5}, {0xe, 0x7fffffff}, {0x8, 0x41}, {0x5, 0x4}, {0x4, 0x4}, {0x0, 0xcd3c}, {0x1, 0x5}, {0xe934, 0x6}, {0x401, 0x200}, {0x3, 0x5}, {0x5, 0x9}, {0x6, 0x49e}, {0x5, 0x950}, {0x7f, 0xffffffffffffffff}, {0x6, 0x1}, {0x1, 0x9}, {0x7fffffff, 0x1000}, {0x8, 0xfffffffffffffff1}, {0x7, 0xff}, {0x101, 0x13}, {0x200000, 0x280000}, {0x8000, 0x1000}, {0x8, 0x3}, {0x9, 0x27b}, {0x5, 0x2}, {0x3, 0x6}, {0xe, 0x10}, {0xa, 0x9}, {0x1, 0x2}]}, &(0x7f0000002ac0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000002b00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0x2}, &(0x7f0000002c40)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000002c80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x8001}, &(0x7f0000002dc0)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000002e00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000002}}, &(0x7f0000002e40)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000002e80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000002ec0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000002f00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x2b}, &(0x7f0000003040)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000003080)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f00000030c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x6, 0xb7}, {0x100, 0x9}, {0x1, 0xca5}, {0x2, 0x7ff}, {0x3ff, 0x8}, {0x5, 0xfff}, {0x100000000, 0xfffffffffffffffc}, {0x8, 0x8}, {0x0, 0x6}, {0x6, 0xfffffffffffeffff}, {0x8}, {0x2, 0x10000000}, {0x3, 0x100}, {0x95b7, 0x2}, {0x7ff, 0x5}, {0x0, 0x3}, {0x7, 0xb}, {0x6, 0xecf}, {0x1a00000000000000, 0x6}, {0x48, 0x6}, {0x4, 0x6}, {0x2, 0x39}, {0x283f, 0x6}, {0x8000000000000001, 0x3}, {0x81, 0x6}, {0x1, 0x9}, {0x6, 0x101}, {0xd1, 0x7}, {0x4c0, 0x3}, {0x1, 0x2}, {0x3ff, 0x1}, {0x7ff, 0x1}, {0x1, 0x3}, {0x200, 0x2}, {0x1ff, 0x100000001}, {0x7, 0x8}, {0x3, 0x9}, {0x9, 0x1}, {0x8001, 0xd3}, {0x47, 0xc}, {0x8, 0x3}, {0x4, 0x7fff}, {0x4, 0xfffffffffffffff8}, {0xc, 0x20}, {0x8}, {0x8}, {0x800, 0x6}, {0x3, 0x6}, {0x800, 0x2}, {0xa197, 0x4}, {0x5, 0xffffffff}, {0xffffffff}, {0x180a, 0xfffffffffffffff8}, {0x8}, {0x6, 0x7}, {0x9, 0x5}, {0x4}, {0x6, 0x101}, {0x4, 0x2}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x4e8f}, {0x3ff, 0x81}, {0x9, 0x8}, {0xf, 0x6489}, {0xffffffff, 0x3}, {0x2557, 0x4}, {0x40000, 0x6}, {0x7, 0xe3c}, {0x0, 0xb}, {0x2, 0x400000000000}, {0x9, 0x2a7}, {0x4, 0x9}, {0x8001, 0x401}, {0x3, 0x1ff}, {0x100000000}, {0x0, 0x9ec}, {0x9, 0xa73}, {0x2c, 0x8000000000000000}, {0xa5f}, {0x8, 0x1}, {0x7fff, 0x1}, {0x10, 0x2}, {0x3, 0xffffffffffffffc0}, {0xb8b, 0x8}, {0x2, 0x252}, {0x100000000, 0x5}, {0x401, 0x7}, {0x4, 0x6}, {0x3, 0x86d}, {0x7fffffff, 0x1000}, {0x9e, 0xffffffffffffffff}, {0x100000001, 0xfff}, {0x800}, {0x4, 0x749}, {0x4, 0x1}, {0xe, 0x3ff}, {0x94c, 0x2}, {0x5, 0xc17}, {0x8}, {0x2, 0x9}, {0x4, 0x5}, {0xe0fa, 0xe}, {0x4, 0x8001}, {0x7, 0xa54}, {0x9c, 0x9}, {0xfffffffffffffffe, 0x1}, {0x8, 0x723}, {0xc6, 0x9}, {0x2c4d, 0x80}, {0x6, 0xecd8}, {0x2, 0x2}, {0x0, 0x7}, {0x1}, {0x3, 0x4}, {0xa23, 0x1}, {0x10}, {0xffff, 0x8a46}, {0x5, 0x9}, {0xbe, 0x3}, {0x8001, 0x100000000}, {0x7, 0x8}, {0x3a5a, 0x3}, {0x7b5, 0x14425282}, {0x800, 0x9}, {0x2, 0x5}, {0x3, 0x7fff}, {0x8, 0x89}, {0x100, 0x4945}, {0x121faa6e, 0x81}, {0x9aa7, 0x5}, {0xfffffffffffffffa, 0x81}, {0x8000000, 0x731d}, {0xda82, 0x401}, {0x6, 0x6}, {0x4, 0x1}, {0x8, 0x9}, {0x100, 0x99}, {0x2, 0x80}, {0xe, 0x6}, {0x0, 0x4}, {0x1000, 0x200}, {0x9, 0x5}, {0x0, 0x5}, {0x5, 0x400}, {0xfffffffffffffffc, 0xd}, {0x9, 0x6}, {0xffffffffffffffff, 0x6}, {0x6}, {0x9, 0xb}, {0x5, 0x6}, {0x4, 0x2d687c65}, {0xfffffffffffffffc, 0x3}, {0x2, 0x7}, {0x49a, 0x9}, {0x8, 0xc1e}, {0x0, 0x5}, {0x5, 0x3ff}, {0xfffffffffffffeff, 0x7fffffffffffffff}, {0x0, 0x8}, {0x7, 0xf73e}, {0xbf, 0xa7d}, {0x9, 0x9}, {0x101, 0x9}, {0x6, 0x4}, {0x8, 0xd}, {0x2}, {0x2}, {0x800, 0x1}, {0x2b3, 0x3}, {0x7, 0x299}, {0x8, 0x5}, {0x8, 0x423}, {0xff, 0x4}, {0x1ff, 0x9e}, {0x5, 0x4}, {0x8, 0x6}, {0x5}, {0x8, 0x9}, {0x4f, 0x6}, {0x5000000000}, {0x9, 0xfffffffffffffffb}, {0x38d908e5, 0x5}, {0x100, 0x8}, {0x3, 0x3ff}, {0x8001, 0x8}, {0x40, 0x9}, {0x6d2a, 0xfffffffffffffff7}, {0x9, 0x100000001}, {0x1, 0x85}, {0x4, 0xe2f}, {0x8000000000000000, 0x10}, {0x8, 0x4}, {0x3, 0xf}, {0x0, 0x4}, {0x10001, 0xfb}, {0x7}, {0x3, 0x8}, {0x9, 0x40}, {0x4, 0x5}, {0x7, 0x400}, {0x7, 0xfff}, {0x10001, 0x4}, {0x7d91, 0xffffffff7fffffff}, {0x1, 0x6}, {0x4, 0x6}, {0x1, 0x9}, {0xb14, 0xfffffffffffffffe}, {0x5, 0x8}, {0x7, 0x9}, {0x9, 0x9f}, {0x10000, 0xffffffff}, {0x80000000, 0x101}, {0x0, 0x10001}, {0xdbac, 0x8}, {0xffffffffffffff76, 0x100000000}, {0x6, 0x25d}, {0xfff, 0x8001}, {0xcdc, 0x3}, {0x6, 0x9}, {0x6144, 0xc}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x98}, {0x9, 0xab1}, {0x7fffffffffffffff, 0x9}, {0x9}, {0xc0a, 0x4}, {0x0, 0x2}, {0xff, 0x23520000}, {0x1, 0xb2}, {0x4}, {0x0, 0x7}, {0x7f, 0x2aa}, {0x1, 0x6}, {0x6}, {0x0, 0x7}, {0x2, 0x40000000000}, {0x3, 0x6}, {0x9, 0xb}, {0x9, 0x9}, {0xfff, 0x8}, {0x80000001}, {0x100, 0x5}, {0x9, 0x401}, {0x7fffffff, 0xdee1}, {0xfffffffffffffff7, 0x3}, {0x1, 0x6}, {0xfffffffffffffff8, 0x2}, {0xfbef, 0x1}, {0xff, 0x7}, {0x2, 0x6}, {0x8000000000000000, 0x7fffffff}, {0x8, 0xd}]}, &(0x7f0000004100)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004140)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000004180)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f00000041c0)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000004240)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004280)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f00000042c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x20000000}}, &(0x7f0000004300)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004440)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, 0x0, &(0x7f00000044c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004500)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000004540)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000004580)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, 0x0, &(0x7f0000004600)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x4, 0x2}, {0x800, 0x9}, {0xb97, 0x1}, {0x5, 0x8}, {0x6, 0x101}, {0x8}, {0x486, 0x3ff}, {0x6, 0x9}, {0x6}, {0x1, 0x9}, {0x8, 0xd81c}, {0x7, 0x2}, {0x9, 0x3ff}, {0x7, 0x7}, {0x0, 0x8}, {0x5, 0x72}, {0x100, 0x7}, {0xa9d8, 0xa800000}, {0x8, 0x7a}, {0x4, 0x10000}, {0x8, 0x92c}, {0x80000001, 0x2}, {0x8, 0x9}, {0x0, 0x5d0}, {0x9, 0x8000}, {0x6, 0x5}, {0x7fff, 0x6}, {0x4, 0xfffffffffffffffd}, {0x2, 0x6}, {0x0, 0x81}, {0x7, 0x7}, {0x0, 0x8189}, {0x3, 0x4}, {0x31e4, 0x8}, {0x5, 0x3}, {0x7f, 0x6}, {0x3, 0x5}, {0x7, 0xe4}, {0xffffffffffff0001, 0x101}, {0x5, 0x81}, {0x80000000, 0x8f}, {0x4, 0x9}, {0x80000000, 0x5}, {0x722, 0x6}, {0x400, 0xa}, {0x698, 0x79}, {0x4000000, 0x3}, {0xffffffff00000000, 0x7f}, {0x4, 0x7}, {0xd, 0x400}, {0x7, 0x33b7}, {0x800}, {0x64c2, 0x200}, {0x3, 0x6}, {0x80000000, 0x8}, {0x3, 0x6}, {0x1, 0xf}, {0xc361, 0x2ceb}, {0x8}, {0x7}, {0x4, 0x7}, {0xf, 0x5}, {0x4, 0x100000001}, {0x7, 0x3}, {0x6, 0x2}, {0x3, 0x1ff}, {0x8000000000000001, 0x9b6}, {0x2, 0x10001}, {0x100, 0x3}, {0x2, 0x8d78}, {0x6, 0xfffffffffffffa8d}, {0x80000001}, {0x7, 0x6}, {0x10, 0x3f}, {0x7, 0xd}, {0xa2d6, 0x6}, {0x8, 0x24000}, {0x1, 0x8}, {0x9, 0x80}, {0x7fffffff, 0xe0}, {0x8, 0x4}, {0x9, 0x4}, {0x8001, 0x400}, {0x9af2, 0x6}, {0x7fffffff, 0x6}, {0x81, 0x7}, {0x1, 0x7}, {0x3, 0x2}, {0x8b, 0xe}, {0x7, 0x33}, {0x8, 0xcf}, {0x153, 0xc81}, {0x3, 0x80000001}, {0x8000, 0x1}, {0xf, 0x1}, {0x100000000, 0x5}, {0x4, 0x8001}, {0x1, 0x1}, {0x406d, 0x9}, {0x8000000000000000, 0x8}, {0x4, 0x5}, {0x6, 0x3e}, {0x2, 0x6}, {0xfffffffffffffffe, 0x7ff}, {0x6, 0x100000000}, {0x4, 0x1}, {0x9, 0x4}, {0x3, 0xb}, {0x40, 0xc9}, {0x3, 0x80000001}, {0x0, 0x8}, {0x8, 0x2f4}, {0x7, 0x5}, {0xffffffffffffff00, 0xa8f}, {0x1, 0x7}, {0x8, 0x10}, {0xb04, 0x22}, {0x2d2edf24, 0x62}, {0xfffffffffffffff6, 0xb86}, {0x3, 0x6}, {0x81, 0x7}, {0x6, 0x1}, {0x733f, 0x7583}, {0x8001, 0x8}, {0x2, 0xb}, {0x7, 0x8}, {0xb0}, {0x8000, 0xff}, {0x7, 0x5}, {0x8, 0x6}, {0x401, 0xe}, {0x1ff, 0x9}, {0x1, 0x800}, {0x9, 0x6}, {0x9, 0xc5f}, {0x200, 0x6}, {0x5, 0x4}, {0x7a, 0x24f96762}, {0x3, 0x7}, {0xa, 0xfffffffffffffffd}, {0x7435, 0x7}, {0x100000001, 0xffff}, {0x7, 0x4c}, {0x128f, 0x100000000}, {0xffffffff80000001, 0x1}, {0x9, 0x8000000000000001}, {0xfffffffffffff801, 0xd}, {0xe399, 0x86}, {0xa2, 0x8001}, {0x5, 0x1}, {0x7fff, 0xffff}, {0x8, 0x1}, {0xd, 0x5}, {0x6, 0x2}, {0x8, 0x87}, {0x5, 0x1}, {0x80000000, 0x2}, {0x0, 0x800000000000000}, {0x3, 0x27e}, {0x8, 0xfffffffffffffaa1}, {0x101, 0x80}, {0x6, 0x7ff}, {0x452, 0x1}, {0x1ff0, 0x4}, {0x2, 0x3895e5c1}, {0x3, 0x2}, {0x5, 0x8}, {0x9, 0x2}, {0x6, 0x7d0}, {0x4c, 0x9d}, {0xfffffc0000000000, 0x5}, {0x1, 0x168459ed}, {0x9d5, 0x3}, {0xcc2, 0x8}, {0x2, 0x8}, {0x6, 0x1}, {0x2, 0x9}, {0x2f, 0x1}, {0x9, 0x3ff}, {0x4, 0x2c2f}, {0x0, 0xfffffffffffffeff}, {0x5, 0x100000001}, {0xffff, 0x2}, {0x8, 0x607eca40}, {0x0, 0x8000000000000001}, {0x0, 0x8001}, {0x7fffffffffffffff, 0x8}, {0x8, 0x4}, {0x8, 0x5}, {0x8, 0x7}, {0xd8ec, 0x8}, {0x9a0, 0xc1a}, {0x10001, 0x8}, {0xcc, 0xc8}, {0x2, 0x4}, {0xd, 0x9}, {0x1ff, 0xfffffffffffffffc}, {0x6, 0x3}, {0xec8, 0x6}, {0x6, 0x5}, {0x8, 0x6}, {0x8, 0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x9, 0x158}, {0xfffffffffffffffc, 0x3}, {0x8000, 0x9a41}, {0x0, 0x1}, {0x8, 0xb}, {0x1, 0x6}, {0x1b, 0x4}, {0xfffffffffffffffc, 0x6}, {0x1ff}, {0x1, 0x9}, {0x6, 0x200}, {0x2, 0x8}, {0x3, 0x401}, {0x3, 0x8}, {0x8, 0x889}, {0x9, 0xf}, {0x4, 0x20}, {0xc, 0x1400}, {0x48000000000000, 0x9}, {0x9, 0x3}, {0xb, 0x9}, {0x4, 0x70}, {0x7, 0x21e9}, {0xccb, 0x6}, {0x7, 0x6}, {0x89, 0x4}, {0x38e, 0x10}, {0x3, 0x4}, {0x0, 0x31}, {0xcd13, 0x3}, {0x5, 0x7fffffff}, {0xffffffff, 0x2}, {0x2, 0x9}, {0x84a3, 0x15b}, {0x3, 0x88e}, {0x10, 0x7}, {0x2, 0xf}, {0x0, 0x4}, {0x1, 0xc}, {0xfff, 0x7}, {0x5, 0x4475}, {0x0, 0x81}, {0x80000000, 0xff}, {0x17}, {0x7}, {0x9, 0x2}, {0x683e0b48, 0x7}, {0x36, 0x1ff}, {0x1, 0x7}, {0x7, 0x3}, {0x9, 0x4}]}, &(0x7f0000005640)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x5}, &(0x7f0000005780)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000000100)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f0000005800)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000005840)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f0000005880)=@blocksize={{0x4f32494e, 0x2, 0x10}}], 0x32}) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) unshare(0x26020480) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000900)="71ca305b6d785977913e0000417b88594afcdf08f6dee6186e5f1ff38731631801ab95ca3995a4a5289c2aab986a64ffe8944bfb00f3fdeb28ed6a5128b0fe6252d89067c3d498a339d2e0f693775f4b", 0x50}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="280000000401000005000000221c17e87e5acf444a482d6f015b5d0f6abe5bae259bcbbb584400000c00000014000000030000"], 0x74}, 0x4000) fsmount(r6, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x9, 0xb, 0x4, 0x8c45, 0x200}, 0x5b, 0xf, [{0x0, 0x80000000, 0x0, 0x0, 0x2, 0xea4a}]}, [{0x5c, 0x71e, 0x3, 0xfffffffe, 0x6, 0x1}, {0x5, 0x40, 0x2, 0xd, 0x401}, {0x5, 0xc, 0x8, 0xfffffffb, 0x3, 0xfffffffb}, {0x8, 0xfffffffc, 0x16, 0x9, 0x2, 0x9}, {0x0, 0x80000000, 0x3, 0x1, 0x76}, {0x10001, 0x459e, 0x5, 0xb8a5, 0x5, 0x8}, {0x8, 0x2, 0x1ff, 0xfffffffa, 0x8, 0x3}, {0x1b, 0x8, 0x900000, 0xfffffff8, 0x5, 0x8}, {0x9, 0x1, 0x9, 0x10, 0x4}, {0x0, 0xcc, 0x3, 0xffff, 0x7, 0x7}, {0x8, 0x6, 0xdc5, 0x3, 0x3, 0xfffffffa}, {0xa8, 0x5, 0x10000, 0xffffffff, 0x6b0c, 0x8e2}, {0x6, 0x8, 0x200, 0x1, 0x0, 0xffffffff}, {0x2, 0x3, 0x9, 0x0, 0x1, 0x8}, {0x7, 0x30000000, 0x4, 0xb, 0x5, 0x7}, {0x7fff, 0x6, 0x3, 0x6, 0x64, 0x6}, {0xa, 0x9, 0x6, 0x8, 0xfb}, {0xb1, 0xa37, 0xfffffeff, 0x100, 0x200, 0x7fff}, {0x100, 0x3, 0x8, 0x9, 0x7, 0x8}, {0x4e91, 0x7, 0xffffffff, 0x40f, 0x11, 0x1b}, {0xffff, 0x2, 0xfffffff0, 0x101, 0x7ff, 0x6}, {0x1, 0xb, 0x3, 0x5, 0xfffffffc, 0x5}, {0x2, 0x2, 0x400, 0x1a76, 0xa, 0x800}, {0xa578, 0x5, 0x5, 0x9c, 0x675, 0x88b}, {0xfffff221, 0x101, 0x5, 0xfffffff9, 0x80000000, 0x81}, {0x5, 0x0, 0x7, 0x0, 0xb, 0x3}, {0x3, 0xc11, 0x400, 0x6, 0x53f, 0x9}, {0x3, 0x7, 0x6, 0x4, 0x4, 0x4}, {0x5, 0x401, 0x1, 0x6, 0x4, 0x1ff}, {0xffffffff, 0x40089cf3, 0x5, 0x3, 0x9, 0x800}, {0x0, 0x5, 0x4, 0x9, 0x2}, {0x29f, 0xca, 0x0, 0x1, 0x5, 0xfffffffa}, {0x10001, 0x10001, 0x10, 0x4, 0x10000, 0x6}, {0xae7, 0x800, 0x80000001, 0xf, 0x6, 0x6}, {0x4, 0x4, 0x8, 0x2, 0x9, 0x4c}, {0x4, 0x1, 0xfffffff7, 0xcc, 0x7ff, 0xeb9a}, {0x8001, 0x3, 0x2bd2, 0x1621, 0x3, 0x2}, {0x8, 0xfffffe00, 0x9, 0xd5e, 0x5, 0x2}, {0x6, 0x4, 0x6, 0x11f, 0xc, 0x1}, {0x5, 0x101, 0x721, 0x100, 0x908, 0x8}, {0x2597, 0xa, 0x9, 0x8, 0x80000001, 0x4}, {0x3, 0x7fffffff, 0x200, 0x8ad, 0xd34e}, {0x7fff, 0x800, 0x6, 0x2, 0x7, 0xb2f6}, {0x4, 0xc7, 0x6c, 0xfffffd20, 0x6, 0x1}, {0x401, 0x5, 0x3, 0xdf, 0x8, 0x5}, {0x5, 0x1, 0xe, 0x2, 0x6, 0xa2fe}, {0xfffff685, 0xfff, 0x4, 0xa6c, 0x9, 0x5}, {0x10, 0xc771, 0x1, 0x37, 0xe3f, 0x3ff}, {0x7, 0x0, 0xa, 0x1000, 0x6, 0x401}, {0x5, 0x3ff, 0x5, 0xff, 0x10000, 0x3}, {0x2, 0x9, 0xafa5, 0x0, 0x1, 0x4}, {0x4, 0x40, 0x2, 0xa, 0x2, 0xfffffff7}, {0xb, 0x1, 0x3, 0x100, 0xb, 0x7}, {0x100, 0x995, 0x374e, 0x9, 0x1000, 0xffffdb76}, {0x3, 0x4, 0xa6de, 0x9bf4, 0x3, 0x6}, {0x7ff, 0x0, 0x9, 0x0, 0xfffffffa, 0x1}, {0x7, 0x929, 0x7f, 0xe0000, 0x2, 0x81}, {0x1, 0x34, 0x0, 0x5, 0xe22, 0x6}, {0xfffffffc, 0xaadf, 0xbc7, 0x6, 0x8, 0x2}, {0x6ef, 0x3, 0x9, 0x7, 0x4, 0x8000}, {0x2, 0x1, 0x2, 0xc3c1, 0x7, 0x4bbd}, {0x3ff, 0x4, 0xfffffffe, 0x100, 0x7fffffff, 0x3}, {0x7, 0x2, 0xff, 0x9, 0xb5a1, 0x2}, {0x9, 0x9, 0xffff, 0x100, 0xf8000000, 0x8000}, {0x0, 0xfff, 0x7, 0x7, 0xffffffff, 0xfffffffe}, {0x5, 0x9, 0x80, 0x9, 0x6, 0x9250}, {0x3, 0x5, 0x81, 0x4, 0x1, 0x6}, {0x6, 0x7fffffff, 0x0, 0x1b, 0x39, 0x4}, {0x5, 0x3ff, 0x40, 0xbe, 0xffff, 0x5}, {0x24, 0x53956696, 0x81, 0x4, 0x3, 0x5}, {0x80000001, 0x7, 0x0, 0x5, 0x2, 0x8001}, {0x10000, 0x400, 0x4, 0x1, 0x618, 0x1}, {0xf1, 0x5, 0xfffffbff, 0x5, 0x400, 0xa6}, {0x4, 0x7ff, 0x5, 0x8, 0x800, 0x8}, {0x8, 0x1, 0x1000, 0x100, 0x4, 0x45f2}, {0xd8, 0x8, 0x5, 0xf8b, 0x6, 0xb5}, {0x6, 0x7, 0xe9, 0x80, 0x5, 0xa}, {0x2, 0x0, 0x4, 0x400, 0x1, 0x6}, {0xfa9, 0x3, 0x0, 0xffff, 0x0, 0x3}, {0x99, 0x9, 0x6, 0x3, 0x5, 0x10000}, {0x7fff, 0x4, 0x6, 0x2, 0x48, 0x5}, {0xffffb1c7, 0x7, 0x80000001, 0x1, 0x3, 0xb54f}, {0x2, 0x1, 0x1000, 0x101, 0x9, 0xf7}, {0xfffff000, 0x7, 0x7, 0x6ba, 0x6}, {0x6, 0x0, 0x5, 0x6a7a, 0x545, 0x7}, {0xfffffffc, 0x2c04, 0x7, 0x8000000, 0x4, 0x8000}, {0xffff, 0x7fff, 0x3, 0x3, 0x4, 0x8}, {0x100, 0x400, 0x4800000, 0x835, 0x4, 0x52}, {0x4, 0x7b, 0xff, 0xfff, 0x1, 0x9}, {0x18000000, 0x9, 0x833b, 0xfffff251, 0x5, 0xa}, {0xf, 0x1, 0x8, 0x2, 0x5}, {0x40, 0xfffffffc, 0x4, 0x7f, 0x7, 0x3}, {0x2e, 0x80000001, 0x7fff, 0x3, 0x3, 0x401}, {0x9, 0xacc, 0xd, 0x1, 0x95e, 0x5}, {0x9c2, 0x6, 0x4, 0xffffffff, 0x1000}, {0x7b8, 0x5, 0xb, 0xa, 0x8, 0x200}, {0xf, 0xb7a, 0xe, 0x6, 0xc1, 0x7}, {0x7, 0x5f6b0af1, 0x6, 0x54, 0x0, 0xfff}, {0x78f6, 0x46000000, 0x0, 0x6, 0x8, 0xee96}, {0xfffffffe, 0x7, 0x80000001, 0xff, 0x0, 0x3}, {0x40, 0xf29, 0x9, 0xb, 0xcb, 0x1}, {0x91cb, 0x3, 0x0, 0x7, 0x3}, {0x9, 0xd0f, 0x8, 0xfffffffb, 0x8, 0x2}, {0x401, 0x7fffffff, 0x800, 0xfffff001, 0xc}, {0x6, 0x9, 0xc000, 0x0, 0x8000, 0x7fff}, {0x69, 0xffff, 0x1, 0x6, 0x80, 0x8}, {0x8c7, 0x2, 0xd0, 0x0, 0x4, 0x3}, {0x3ff, 0x4, 0x7, 0xffff, 0x1, 0xff}, {0x4, 0x1ff, 0xd, 0x9, 0x9, 0x2}, {0x7, 0x1, 0xc2, 0x7, 0x4}, {0x22b, 0x7, 0x704e, 0x3, 0x9, 0x6}, {0x80000001, 0x2, 0xffffd611, 0x8, 0x7}, {0x8000, 0x80, 0x9, 0xffff, 0x0, 0x2}, {0x6783edc, 0xaf2, 0x7, 0x8, 0x1, 0xff000000}, {0x7, 0x1, 0x140000, 0x4, 0xd, 0x200}, {0xb, 0x2, 0x8, 0xa, 0x1}, {0x7, 0x69a5, 0x100, 0x236, 0x4, 0x10001}, {0x3, 0xffff0000, 0x144, 0x2, 0x81, 0x8}, {0xde8, 0x2, 0x6, 0x9b, 0x88db, 0x401}, {0x0, 0x6, 0x40, 0x0, 0x9, 0xc9}, {0x2bd1272, 0x59, 0x3921, 0x57, 0x6, 0x80000000}, {0x3, 0x7, 0xb861, 0x1, 0x6, 0x4}, {0x1, 0x3, 0x8, 0x9, 0x4, 0x8}, {0x0, 0x7, 0x80, 0xed2, 0x80000000, 0x8}, {0x2, 0xfffffc01, 0xfc3, 0x8d5, 0x8001, 0x3fffc000}, {0x8d, 0x6, 0x0, 0x5, 0x4, 0x1}, {0x6, 0x9, 0xeec6, 0x6, 0x7, 0x9}, {0x80000000, 0xd6187927, 0x1, 0x2a, 0xa, 0x7fffffff}], [{0x1, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5, 0xd716e616b6744d43}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x3, 0xb4d2ea9c256b621e}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xe270aa78089fc197}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x3}, {0x2}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="d800", 0x2}], 0x1}, 0x20000885) executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xa750, &(0x7f0000000b40)) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r0, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x6, &(0x7f0000003f00), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) socket$unix(0x1, 0x1, 0x0) request_key(0x0, 0x0, &(0x7f0000000000)='/\r\x00\xfaF\x1c\xdd\xd4\x84r\v{\xaez\xf5\x9e\xab16\xee\xddg\b\x00\x00\x00\x00\x00\x00\x00\xa7~', 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c100000000100000000", 0x57}], 0x1) write(r5, &(0x7f0000000600)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000edff00039815fa2c1ec28656aaa7a70a4b46fe000000bc1d03000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d6f0f350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) prctl$PR_SET_PTRACER(0x59616d61, r1) executing program 0: r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='dummy_udc.0', 0xb) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0xc2401, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @local, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x0, 0x1}}, {@can={0xc, {{0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "7c379b1a50101fc6"}}}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRES16, @ANYRES64=r1]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) r5 = socket$inet(0x2, 0x3, 0x8) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff10e8adc4, 0x0, 0x2, 0x3, 0xf409, 0x0, 0x0, 0x2}}, 0x50) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) pwritev2(r1, 0x0, 0x0, 0x2, 0x8, 0xa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x1, 0x87, 0x5, 0x1, {{0x6, 0x4, 0x1, 0x1b, 0x18, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast1, @rand_addr=0x64010102, {[@end]}}}}}) executing program 0: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffffffffffffff9, 0x6) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2007ffb) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) executing program 1: pipe2(&(0x7f0000000100), 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xe0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setuid(0xee01) flistxattr(r2, 0x0, 0x58) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$OCFS2_IOC_INFO(r3, 0x80106f05, &(0x7f0000005a80)={&(0x7f00000058c0)=[&(0x7f0000000300)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000000400)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000000480)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000000500)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000000540)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000001}}, &(0x7f00000005c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000000600)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x20000000}}, &(0x7f0000000640)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, 0x0, &(0x7f00000006c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000000700)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000000740)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000002}}, &(0x7f0000000780)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f00000007c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000001a80)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x4, 0xfffffffffffffff9}, {0x4, 0xf1}, {0x80}, {0x5, 0xb53}, {0x7fffffffffffffff, 0xc9d}, {0x6}, {0x4, 0x9}, {0x2, 0x1}, {0x6, 0xff}, {0x8, 0x9}, {0x9, 0x5}, {0x1, 0x7}, {0x3, 0x4}, {0x3, 0x9}, {0xea8, 0x3}, {0x7fffffff}, {0x0, 0x81}, {0x4, 0x3}, {0x3}, {0x3, 0xfffffffeffffffff}, {0x1, 0xfffffffffffffffa}, {0x8, 0xc12}, {0x0, 0x4}, {0x9, 0x380000000000000}, {0x7fffffff, 0x7fffffffffffffff}, {0x6, 0x2}, {0x0, 0x4}, {0x800, 0xfffffffffffffff6}, {0xe, 0x7}, {0x0, 0xff}, {0xbdc}, {0xd57f, 0x7}, {0xffffffffffffffff, 0x5000000000000}, {0xfffffffffffffffa, 0xffffffffffff9e4f}, {0x95, 0x351e}, {0xfffffffffffffff9, 0x5}, {0x3}, {0x8, 0x2}, {0x26, 0x4}, {0x9, 0x32c}, {0x4, 0x8}, {0x12, 0xcdc9}, {0xff, 0x5}, {0x8, 0x84}, {0x1, 0x9}, {0x1000, 0xd378}, {0x3e7c, 0x9}, {0x9, 0xd445}, {0x100000001, 0x6}, {0x5, 0x6}, {0x2b0, 0x6c}, {0x6, 0x6}, {0xa, 0x200}, {0xbf, 0xb6bb}, {0x4bbf, 0xc13e}, {0xb09, 0x2}, {0x4, 0x10000}, {0x5, 0x7}, {0x891, 0xd}, {0x4, 0x6}, {0xd, 0xf8f}, {0x853, 0x8}, {0x2, 0x400}, {0x0, 0x5}, {0x2, 0x4}, {0x7fffffffffffffff, 0x9}, {0x1}, {0x100000000, 0x2d2}, {0x10000, 0xc10000000}, {0x9, 0x2}, {0xff, 0x40}, {0x3, 0x6}, {0x5, 0xa1b}, {0x0, 0xff}, {0x2, 0x4}, {0x2, 0x2}, {0x40, 0x9}, {0x5, 0x7}, {0x6, 0x7fff}, {0x0, 0x1c}, {0x2, 0xa}, {0x5, 0x93}, {0x5, 0x80000000}, {0x1, 0xd5a}, {0x9}, {0x0, 0x5}, {0x8, 0x571e}, {0x6c9, 0xd9}, {0xa}, {0x3, 0x6}, {0x0, 0x4}, {0x0, 0x80}, {0xdbd4, 0x10}, {0x7fffffff, 0x78}, {0x7, 0x7fffffffffffffff}, {0x0, 0xde3}, {0x7fffffff, 0xd}, {0x100, 0x5}, {0x5, 0x7}, {0x9, 0x7932}, {0xcc, 0x3}, {0x4, 0x9}, {0x6529387b, 0x6}, {0x18, 0xcb3}, {0x2, 0xb}, {0x6, 0x9}, {0x1, 0x7}, {0x200, 0x1}, {0x1, 0x41e}, {0x7fffffffffffffff, 0x1}, {0x5, 0x4}, {0x78fe000000000000, 0x2}, {0x6, 0x6}, {0x8640, 0x3}, {0xfffffffffffffffb, 0x19}, {0x9, 0x10}, {0xe9e9, 0x8}, {0x6d1, 0x3ff}, {0x7fff, 0x7fff}, {0xffffffffffff0001}, {0xf1b, 0x4}, {0x4f, 0x7f}, {0x7ff, 0x380}, {0x7f, 0x6}, {0x5, 0x100000000}, {0xbc9, 0x3ff}, {0x9, 0x8836}, {0x1000, 0x898}, {0x81, 0x4}, {0x4b, 0x300}, {0xfffffffffffffffa, 0x5}, {0x8000000000000000, 0x9}, {0x6401}, {0xb}, {0x7, 0x2f91}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0xa8}, {0x8000, 0xf}, {0xf40a, 0xa97}, {0x8, 0x9}, {0x6, 0x2}, {0x4, 0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x5, 0x7}, {0x5dc, 0x3}, {0x9, 0xf8}, {0x8000000000000000, 0x6}, {0x72, 0x14df43ec}, {0x5, 0x1}, {0x6, 0x9}, {0x142, 0xf064}, {0x4, 0xfffffffffffffff7}, {0x2}, {0x7, 0x2}, {0x3, 0x5}, {0x2, 0xad}, {0x7, 0xad3}, {0x4, 0xffffffff}, {0x40, 0xffff}, {0x8, 0x1}, {0x7, 0x400}, {0x3, 0x3636d9fd}, {0x0, 0x2}, {0x36, 0x6}, {0x5, 0x100}, {0x1, 0x6}, {0x800}, {0x2, 0xed}, {0x7, 0x7}, {0x2, 0x10000}, {0x200, 0x6}, {0x0, 0x2}, {0x4, 0x7fffffffffffffff}, {0x101, 0xc6c}, {0x10, 0x9}, {0x2, 0x80000001}, {0x6, 0xf}, {0xffffffffffffffff, 0x6000}, {0x95, 0x9}, {0x719, 0xffffffffffffff01}, {0x7, 0x6}, {0x3ff, 0x4}, {0x3, 0xc}, {0x100000000, 0x3ff}, {0x10, 0x3}, {0x2, 0x7}, {0xf, 0x4}, {0x9, 0x80000001}, {0x0, 0x7}, {0x2, 0x9}, {0x12, 0x3}, {0x10001, 0x8000000000000001}, {0x800, 0x7}, {0x276, 0x1}, {0x9, 0x3}, {0x2, 0x4}, {0x0, 0x10000}, {0x8001, 0x7}, {0xc, 0x8000}, {0x2, 0x3}, {0x96, 0x9}, {0x0, 0x1}, {0x4, 0xdb4}, {0x0, 0x2}, {0x2, 0x5}, {0x3, 0x4}, {0x4, 0x3}, {0x4, 0x5ed}, {0x6, 0x9}, {0x2, 0x1000}, {0x6, 0x73e}, {0x80, 0x4}, {0x8, 0xfffffffffffffffc}, {0x7, 0x40c0}, {0x1, 0xfffffffffffffffc}, {0xfffffffffffffffa, 0x2f8}, {0x4, 0x7}, {0x4, 0x8}, {0x80000001, 0x6}, {0x3e17, 0x7}, {0x0, 0x6}, {0x0, 0x26d}, {0x7fffffff, 0x8000000000000001}, {}, {0x3, 0x5}, {0xe, 0x7fffffff}, {0x8, 0x41}, {0x5, 0x4}, {0x4, 0x4}, {0x0, 0xcd3c}, {0x1, 0x5}, {0xe934, 0x6}, {0x401, 0x200}, {0x3, 0x5}, {0x5, 0x9}, {0x6, 0x49e}, {0x5, 0x950}, {0x7f, 0xffffffffffffffff}, {0x6, 0x1}, {0x1, 0x9}, {0x7fffffff, 0x1000}, {0x8, 0xfffffffffffffff1}, {0x7, 0xff}, {0x101, 0x13}, {0x200000, 0x280000}, {0x8000, 0x1000}, {0x8, 0x3}, {0x9, 0x27b}, {0x5, 0x2}, {0x3, 0x6}, {0xe, 0x10}, {0xa, 0x9}, {0x1, 0x2}]}, &(0x7f0000002ac0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000002b00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0x2}, &(0x7f0000002c40)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000002c80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x8001}, &(0x7f0000002dc0)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000002e00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000002}}, &(0x7f0000002e40)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000002e80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000002ec0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000002f00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x2b}, &(0x7f0000003040)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000003080)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f00000030c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x6, 0xb7}, {0x100, 0x9}, {0x1, 0xca5}, {0x2, 0x7ff}, {0x3ff, 0x8}, {0x5, 0xfff}, {0x100000000, 0xfffffffffffffffc}, {0x8, 0x8}, {0x0, 0x6}, {0x6, 0xfffffffffffeffff}, {0x8}, {0x2, 0x10000000}, {0x3, 0x100}, {0x95b7, 0x2}, {0x7ff, 0x5}, {0x0, 0x3}, {0x7, 0xb}, {0x6, 0xecf}, {0x1a00000000000000, 0x6}, {0x48, 0x6}, {0x4, 0x6}, {0x2, 0x39}, {0x283f, 0x6}, {0x8000000000000001, 0x3}, {0x81, 0x6}, {0x1, 0x9}, {0x6, 0x101}, {0xd1, 0x7}, {0x4c0, 0x3}, {0x1, 0x2}, {0x3ff, 0x1}, {0x7ff, 0x1}, {0x1, 0x3}, {0x200, 0x2}, {0x1ff, 0x100000001}, {0x7, 0x8}, {0x3, 0x9}, {0x9, 0x1}, {0x8001, 0xd3}, {0x47, 0xc}, {0x8, 0x3}, {0x4, 0x7fff}, {0x4, 0xfffffffffffffff8}, {0xc, 0x20}, {0x8}, {0x8}, {0x800, 0x6}, {0x3, 0x6}, {0x800, 0x2}, {0xa197, 0x4}, {0x5, 0xffffffff}, {0xffffffff}, {0x180a, 0xfffffffffffffff8}, {0x8}, {0x6, 0x7}, {0x9, 0x5}, {0x4}, {0x6, 0x101}, {0x4, 0x2}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x4e8f}, {0x3ff, 0x81}, {0x9, 0x8}, {0xf, 0x6489}, {0xffffffff, 0x3}, {0x2557, 0x4}, {0x40000, 0x6}, {0x7, 0xe3c}, {0x0, 0xb}, {0x2, 0x400000000000}, {0x9, 0x2a7}, {0x4, 0x9}, {0x8001, 0x401}, {0x3, 0x1ff}, {0x100000000}, {0x0, 0x9ec}, {0x9, 0xa73}, {0x2c, 0x8000000000000000}, {0xa5f}, {0x8, 0x1}, {0x7fff, 0x1}, {0x10, 0x2}, {0x3, 0xffffffffffffffc0}, {0xb8b, 0x8}, {0x2, 0x252}, {0x100000000, 0x5}, {0x401, 0x7}, {0x4, 0x6}, {0x3, 0x86d}, {0x7fffffff, 0x1000}, {0x9e, 0xffffffffffffffff}, {0x100000001, 0xfff}, {0x800}, {0x4, 0x749}, {0x4, 0x1}, {0xe, 0x3ff}, {0x94c, 0x2}, {0x5, 0xc17}, {0x8}, {0x2, 0x9}, {0x4, 0x5}, {0xe0fa, 0xe}, {0x4, 0x8001}, {0x7, 0xa54}, {0x9c, 0x9}, {0xfffffffffffffffe, 0x1}, {0x8, 0x723}, {0xc6, 0x9}, {0x2c4d, 0x80}, {0x6, 0xecd8}, {0x2, 0x2}, {0x0, 0x7}, {0x1}, {0x3, 0x4}, {0xa23, 0x1}, {0x10}, {0xffff, 0x8a46}, {0x5, 0x9}, {0xbe, 0x3}, {0x8001, 0x100000000}, {0x7, 0x8}, {0x3a5a, 0x3}, {0x7b5, 0x14425282}, {0x800, 0x9}, {0x2, 0x5}, {0x3, 0x7fff}, {0x8, 0x89}, {0x100, 0x4945}, {0x121faa6e, 0x81}, {0x9aa7, 0x5}, {0xfffffffffffffffa, 0x81}, {0x8000000, 0x731d}, {0xda82, 0x401}, {0x6, 0x6}, {0x4, 0x1}, {0x8, 0x9}, {0x100, 0x99}, {0x2, 0x80}, {0xe, 0x6}, {0x0, 0x4}, {0x1000, 0x200}, {0x9, 0x5}, {0x0, 0x5}, {0x5, 0x400}, {0xfffffffffffffffc, 0xd}, {0x9, 0x6}, {0xffffffffffffffff, 0x6}, {0x6}, {0x9, 0xb}, {0x5, 0x6}, {0x4, 0x2d687c65}, {0xfffffffffffffffc, 0x3}, {0x2, 0x7}, {0x49a, 0x9}, {0x8, 0xc1e}, {0x0, 0x5}, {0x5, 0x3ff}, {0xfffffffffffffeff, 0x7fffffffffffffff}, {0x0, 0x8}, {0x7, 0xf73e}, {0xbf, 0xa7d}, {0x9, 0x9}, {0x101, 0x9}, {0x6, 0x4}, {0x8, 0xd}, {0x2}, {0x2}, {0x800, 0x1}, {0x2b3, 0x3}, {0x7, 0x299}, {0x8, 0x5}, {0x8, 0x423}, {0xff, 0x4}, {0x1ff, 0x9e}, {0x5, 0x4}, {0x8, 0x6}, {0x5}, {0x8, 0x9}, {0x4f, 0x6}, {0x5000000000}, {0x9, 0xfffffffffffffffb}, {0x38d908e5, 0x5}, {0x100, 0x8}, {0x3, 0x3ff}, {0x8001, 0x8}, {0x40, 0x9}, {0x6d2a, 0xfffffffffffffff7}, {0x9, 0x100000001}, {0x1, 0x85}, {0x4, 0xe2f}, {0x8000000000000000, 0x10}, {0x8, 0x4}, {0x3, 0xf}, {0x0, 0x4}, {0x10001, 0xfb}, {0x7}, {0x3, 0x8}, {0x9, 0x40}, {0x4, 0x5}, {0x7, 0x400}, {0x7, 0xfff}, {0x10001, 0x4}, {0x7d91, 0xffffffff7fffffff}, {0x1, 0x6}, {0x4, 0x6}, {0x1, 0x9}, {0xb14, 0xfffffffffffffffe}, {0x5, 0x8}, {0x7, 0x9}, {0x9, 0x9f}, {0x10000, 0xffffffff}, {0x80000000, 0x101}, {0x0, 0x10001}, {0xdbac, 0x8}, {0xffffffffffffff76, 0x100000000}, {0x6, 0x25d}, {0xfff, 0x8001}, {0xcdc, 0x3}, {0x6, 0x9}, {0x6144, 0xc}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x98}, {0x9, 0xab1}, {0x7fffffffffffffff, 0x9}, {0x9}, {0xc0a, 0x4}, {0x0, 0x2}, {0xff, 0x23520000}, {0x1, 0xb2}, {0x4}, {0x0, 0x7}, {0x7f, 0x2aa}, {0x1, 0x6}, {0x6}, {0x0, 0x7}, {0x2, 0x40000000000}, {0x3, 0x6}, {0x9, 0xb}, {0x9, 0x9}, {0xfff, 0x8}, {0x80000001}, {0x100, 0x5}, {0x9, 0x401}, {0x7fffffff, 0xdee1}, {0xfffffffffffffff7, 0x3}, {0x1, 0x6}, {0xfffffffffffffff8, 0x2}, {0xfbef, 0x1}, {0xff, 0x7}, {0x2, 0x6}, {0x8000000000000000, 0x7fffffff}, {0x8, 0xd}]}, &(0x7f0000004100)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004140)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000004180)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f00000041c0)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000004240)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004280)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f00000042c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x20000000}}, &(0x7f0000004300)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004440)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, 0x0, &(0x7f00000044c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004500)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000004540)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000004580)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, 0x0, &(0x7f0000004600)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x4, 0x2}, {0x800, 0x9}, {0xb97, 0x1}, {0x5, 0x8}, {0x6, 0x101}, {0x8}, {0x486, 0x3ff}, {0x6, 0x9}, {0x6}, {0x1, 0x9}, {0x8, 0xd81c}, {0x7, 0x2}, {0x9, 0x3ff}, {0x7, 0x7}, {0x0, 0x8}, {0x5, 0x72}, {0x100, 0x7}, {0xa9d8, 0xa800000}, {0x8, 0x7a}, {0x4, 0x10000}, {0x8, 0x92c}, {0x80000001, 0x2}, {0x8, 0x9}, {0x0, 0x5d0}, {0x9, 0x8000}, {0x6, 0x5}, {0x7fff, 0x6}, {0x4, 0xfffffffffffffffd}, {0x2, 0x6}, {0x0, 0x81}, {0x7, 0x7}, {0x0, 0x8189}, {0x3, 0x4}, {0x31e4, 0x8}, {0x5, 0x3}, {0x7f, 0x6}, {0x3, 0x5}, {0x7, 0xe4}, {0xffffffffffff0001, 0x101}, {0x5, 0x81}, {0x80000000, 0x8f}, {0x4, 0x9}, {0x80000000, 0x5}, {0x722, 0x6}, {0x400, 0xa}, {0x698, 0x79}, {0x4000000, 0x3}, {0xffffffff00000000, 0x7f}, {0x4, 0x7}, {0xd, 0x400}, {0x7, 0x33b7}, {0x800}, {0x64c2, 0x200}, {0x3, 0x6}, {0x80000000, 0x8}, {0x3, 0x6}, {0x1, 0xf}, {0xc361, 0x2ceb}, {0x8}, {0x7}, {0x4, 0x7}, {0xf, 0x5}, {0x4, 0x100000001}, {0x7, 0x3}, {0x6, 0x2}, {0x3, 0x1ff}, {0x8000000000000001, 0x9b6}, {0x2, 0x10001}, {0x100, 0x3}, {0x2, 0x8d78}, {0x6, 0xfffffffffffffa8d}, {0x80000001}, {0x7, 0x6}, {0x10, 0x3f}, {0x7, 0xd}, {0xa2d6, 0x6}, {0x8, 0x24000}, {0x1, 0x8}, {0x9, 0x80}, {0x7fffffff, 0xe0}, {0x8, 0x4}, {0x9, 0x4}, {0x8001, 0x400}, {0x9af2, 0x6}, {0x7fffffff, 0x6}, {0x81, 0x7}, {0x1, 0x7}, {0x3, 0x2}, {0x8b, 0xe}, {0x7, 0x33}, {0x8, 0xcf}, {0x153, 0xc81}, {0x3, 0x80000001}, {0x8000, 0x1}, {0xf, 0x1}, {0x100000000, 0x5}, {0x4, 0x8001}, {0x1, 0x1}, {0x406d, 0x9}, {0x8000000000000000, 0x8}, {0x4, 0x5}, {0x6, 0x3e}, {0x2, 0x6}, {0xfffffffffffffffe, 0x7ff}, {0x6, 0x100000000}, {0x4, 0x1}, {0x9, 0x4}, {0x3, 0xb}, {0x40, 0xc9}, {0x3, 0x80000001}, {0x0, 0x8}, {0x8, 0x2f4}, {0x7, 0x5}, {0xffffffffffffff00, 0xa8f}, {0x1, 0x7}, {0x8, 0x10}, {0xb04, 0x22}, {0x2d2edf24, 0x62}, {0xfffffffffffffff6, 0xb86}, {0x3, 0x6}, {0x81, 0x7}, {0x6, 0x1}, {0x733f, 0x7583}, {0x8001, 0x8}, {0x2, 0xb}, {0x7, 0x8}, {0xb0}, {0x8000, 0xff}, {0x7, 0x5}, {0x8, 0x6}, {0x401, 0xe}, {0x1ff, 0x9}, {0x1, 0x800}, {0x9, 0x6}, {0x9, 0xc5f}, {0x200, 0x6}, {0x5, 0x4}, {0x7a, 0x24f96762}, {0x3, 0x7}, {0xa, 0xfffffffffffffffd}, {0x7435, 0x7}, {0x100000001, 0xffff}, {0x7, 0x4c}, {0x128f, 0x100000000}, {0xffffffff80000001, 0x1}, {0x9, 0x8000000000000001}, {0xfffffffffffff801, 0xd}, {0xe399, 0x86}, {0xa2, 0x8001}, {0x5, 0x1}, {0x7fff, 0xffff}, {0x8, 0x1}, {0xd, 0x5}, {0x6, 0x2}, {0x8, 0x87}, {0x5, 0x1}, {0x80000000, 0x2}, {0x0, 0x800000000000000}, {0x3, 0x27e}, {0x8, 0xfffffffffffffaa1}, {0x101, 0x80}, {0x6, 0x7ff}, {0x452, 0x1}, {0x1ff0, 0x4}, {0x2, 0x3895e5c1}, {0x3, 0x2}, {0x5, 0x8}, {0x9, 0x2}, {0x6, 0x7d0}, {0x4c, 0x9d}, {0xfffffc0000000000, 0x5}, {0x1, 0x168459ed}, {0x9d5, 0x3}, {0xcc2, 0x8}, {0x2, 0x8}, {0x6, 0x1}, {0x2, 0x9}, {0x2f, 0x1}, {0x9, 0x3ff}, {0x4, 0x2c2f}, {0x0, 0xfffffffffffffeff}, {0x5, 0x100000001}, {0xffff, 0x2}, {0x8, 0x607eca40}, {0x0, 0x8000000000000001}, {0x0, 0x8001}, {0x7fffffffffffffff, 0x8}, {0x8, 0x4}, {0x8, 0x5}, {0x8, 0x7}, {0xd8ec, 0x8}, {0x9a0, 0xc1a}, {0x10001, 0x8}, {0xcc, 0xc8}, {0x2, 0x4}, {0xd, 0x9}, {0x1ff, 0xfffffffffffffffc}, {0x6, 0x3}, {0xec8, 0x6}, {0x6, 0x5}, {0x8, 0x6}, {0x8, 0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x9, 0x158}, {0xfffffffffffffffc, 0x3}, {0x8000, 0x9a41}, {0x0, 0x1}, {0x8, 0xb}, {0x1, 0x6}, {0x1b, 0x4}, {0xfffffffffffffffc, 0x6}, {0x1ff}, {0x1, 0x9}, {0x6, 0x200}, {0x2, 0x8}, {0x3, 0x401}, {0x3, 0x8}, {0x8, 0x889}, {0x9, 0xf}, {0x4, 0x20}, {0xc, 0x1400}, {0x48000000000000, 0x9}, {0x9, 0x3}, {0xb, 0x9}, {0x4, 0x70}, {0x7, 0x21e9}, {0xccb, 0x6}, {0x7, 0x6}, {0x89, 0x4}, {0x38e, 0x10}, {0x3, 0x4}, {0x0, 0x31}, {0xcd13, 0x3}, {0x5, 0x7fffffff}, {0xffffffff, 0x2}, {0x2, 0x9}, {0x84a3, 0x15b}, {0x3, 0x88e}, {0x10, 0x7}, {0x2, 0xf}, {0x0, 0x4}, {0x1, 0xc}, {0xfff, 0x7}, {0x5, 0x4475}, {0x0, 0x81}, {0x80000000, 0xff}, {0x17}, {0x7}, {0x9, 0x2}, {0x683e0b48, 0x7}, {0x36, 0x1ff}, {0x1, 0x7}, {0x7, 0x3}, {0x9, 0x4}]}, &(0x7f0000005640)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x5}, &(0x7f0000005780)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000000100)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f0000005800)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000005840)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f0000005880)=@blocksize={{0x4f32494e, 0x2, 0x10}}], 0x32}) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) unshare(0x26020480) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000900)="71ca305b6d785977913e0000417b88594afcdf08f6dee6186e5f1ff38731631801ab95ca3995a4a5289c2aab986a64ffe8944bfb00f3fdeb28ed6a5128b0fe6252d89067c3d498a339d2e0f693775f4b", 0x50}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="280000000401000005000000221c17e87e5acf444a482d6f015b5d0f6abe5bae259bcbbb584400000c00000014000000030000"], 0x74}, 0x4000) fsmount(r6, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r1, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="d800", 0x2}], 0x1}, 0x20000885) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r0, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x6, &(0x7f0000003f00), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) ioperm(0x7ff, 0x8, 0x4) request_key(0x0, 0x0, &(0x7f0000000000)='/\r\x00\xfaF\x1c\xdd\xd4\x84r\v{\xaez\xf5\x9e\xab16\xee\xddg\b\x00\x00\x00\x00\x00\x00\x00\xa7~', 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c100000000100000000", 0x57}], 0x1) write(r5, &(0x7f0000000600)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000edff00039815fa2c1ec28656aaa7a70a4b46fe000000bc1d03000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d6f0f350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) prctl$PR_SET_PTRACER(0x59616d61, r1) executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x0) executing program 4: r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=@newqdisc={0x4c, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5, 0xe}, {0xb, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xc1}}}, @qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004040}, 0x4040040) executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x10000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0214200011000000004000000000000003000500000000"], 0x88}}, 0x20000000) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580), 0xc290, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) sendfile(r3, r3, 0x0, 0x10001) executing program 4: r0 = fsopen(&(0x7f0000000200)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r4 = fsmount(r0, 0x1, 0x0) fchdir(r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000740)=""/138, 0x8a, 0x0) r6 = fsopen(&(0x7f0000000100)='cgroup\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700"], 0x48) r8 = fsmount(r6, 0x1, 0x0) fchdir(r8) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="180100001200010000000000000000007368613338340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000008000100c50000000800010001800000080001997dbebc0c893cc200ff01000008000100080000000800010040e9000007000100020000000800010008000000"], 0x118}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r7}, 0x14) r10 = socket$inet6(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r4], 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmmsg$inet6(r10, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c0c0) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r11, &(0x7f0000000240)={0xa, 0x4e24, 0x80000b, @empty}, 0x1c) r12 = syz_open_procfs(0x0, &(0x7f0000000340)='net/icmp6\x00') pread64(r12, &(0x7f0000000600)=""/92, 0x5c, 0xf7) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r5}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x18, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000006000/0x2000)=nil, 0x3) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002780), 0x2280) fcntl$setstatus(r6, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) executing program 3: pipe2(&(0x7f0000000100), 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xe0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setuid(0xee01) flistxattr(r2, 0x0, 0x58) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xfe}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) socket$nl_generic(0x11, 0x3, 0x10) close(0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) clock_adjtime(0x5, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009040000", @ANYBLOB], 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x181000, 0x64) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780), &(0x7f0000000280), &(0x7f0000000140)) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r7, 0x10c, 0x5, &(0x7f0000000200), &(0x7f0000000280)=0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010102}}}}, &(0x7f0000000080)={0x0, 0x2, [0x829, 0x8cb, 0x3d, 0x66]}) socket$packet(0x11, 0x2, 0x300) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendto$packet(0xffffffffffffffff, &(0x7f0000000640)="000a18000000", 0x6, 0x4000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x40083, 0x100) program crashed: kernel BUG in jffs2_del_ino_cache bisect: bisecting 30 programs bisect: split chunks (needed=false): <30> bisect: split chunk #0 of len 30 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 15, 2, 4, 16, 29, 4, 3, 26, 4, 2, 4, 16, 30, 28, 15, 23, 5, 20, 20] detailed listing: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0xc2401, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @local, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x0, 0x1}}, {@can={0xc, {{0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "7c379b1a50101fc6"}}}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRES16, @ANYRES64=r1]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) r5 = socket$inet(0x2, 0x3, 0x8) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff10e8adc4, 0x0, 0x2, 0x3, 0xf409, 0x0, 0x0, 0x2}}, 0x50) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) pwritev2(r1, 0x0, 0x0, 0x2, 0x8, 0xa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x1, 0x87, 0x5, 0x1, {{0x6, 0x4, 0x1, 0x1b, 0x18, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast1, @rand_addr=0x64010102, {[@end]}}}}}) executing program 0: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffffffffffffff9, 0x6) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2007ffb) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) executing program 1: pipe2(&(0x7f0000000100), 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xe0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setuid(0xee01) flistxattr(r2, 0x0, 0x58) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$OCFS2_IOC_INFO(r3, 0x80106f05, &(0x7f0000005a80)={&(0x7f00000058c0)=[&(0x7f0000000300)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000000400)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000000480)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000000500)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000000540)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000001}}, &(0x7f00000005c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000000600)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x20000000}}, &(0x7f0000000640)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, 0x0, &(0x7f00000006c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000000700)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000000740)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000002}}, &(0x7f0000000780)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f00000007c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000001a80)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x4, 0xfffffffffffffff9}, {0x4, 0xf1}, {0x80}, {0x5, 0xb53}, {0x7fffffffffffffff, 0xc9d}, {0x6}, {0x4, 0x9}, {0x2, 0x1}, {0x6, 0xff}, {0x8, 0x9}, {0x9, 0x5}, {0x1, 0x7}, {0x3, 0x4}, {0x3, 0x9}, {0xea8, 0x3}, {0x7fffffff}, {0x0, 0x81}, {0x4, 0x3}, {0x3}, {0x3, 0xfffffffeffffffff}, {0x1, 0xfffffffffffffffa}, {0x8, 0xc12}, {0x0, 0x4}, {0x9, 0x380000000000000}, {0x7fffffff, 0x7fffffffffffffff}, {0x6, 0x2}, {0x0, 0x4}, {0x800, 0xfffffffffffffff6}, {0xe, 0x7}, {0x0, 0xff}, {0xbdc}, {0xd57f, 0x7}, {0xffffffffffffffff, 0x5000000000000}, {0xfffffffffffffffa, 0xffffffffffff9e4f}, {0x95, 0x351e}, {0xfffffffffffffff9, 0x5}, {0x3}, {0x8, 0x2}, {0x26, 0x4}, {0x9, 0x32c}, {0x4, 0x8}, {0x12, 0xcdc9}, {0xff, 0x5}, {0x8, 0x84}, {0x1, 0x9}, {0x1000, 0xd378}, {0x3e7c, 0x9}, {0x9, 0xd445}, {0x100000001, 0x6}, {0x5, 0x6}, {0x2b0, 0x6c}, {0x6, 0x6}, {0xa, 0x200}, {0xbf, 0xb6bb}, {0x4bbf, 0xc13e}, {0xb09, 0x2}, {0x4, 0x10000}, {0x5, 0x7}, {0x891, 0xd}, {0x4, 0x6}, {0xd, 0xf8f}, {0x853, 0x8}, {0x2, 0x400}, {0x0, 0x5}, {0x2, 0x4}, {0x7fffffffffffffff, 0x9}, {0x1}, {0x100000000, 0x2d2}, {0x10000, 0xc10000000}, {0x9, 0x2}, {0xff, 0x40}, {0x3, 0x6}, {0x5, 0xa1b}, {0x0, 0xff}, {0x2, 0x4}, {0x2, 0x2}, {0x40, 0x9}, {0x5, 0x7}, {0x6, 0x7fff}, {0x0, 0x1c}, {0x2, 0xa}, {0x5, 0x93}, {0x5, 0x80000000}, {0x1, 0xd5a}, {0x9}, {0x0, 0x5}, {0x8, 0x571e}, {0x6c9, 0xd9}, {0xa}, {0x3, 0x6}, {0x0, 0x4}, {0x0, 0x80}, {0xdbd4, 0x10}, {0x7fffffff, 0x78}, {0x7, 0x7fffffffffffffff}, {0x0, 0xde3}, {0x7fffffff, 0xd}, {0x100, 0x5}, {0x5, 0x7}, {0x9, 0x7932}, {0xcc, 0x3}, {0x4, 0x9}, {0x6529387b, 0x6}, {0x18, 0xcb3}, {0x2, 0xb}, {0x6, 0x9}, {0x1, 0x7}, {0x200, 0x1}, {0x1, 0x41e}, {0x7fffffffffffffff, 0x1}, {0x5, 0x4}, {0x78fe000000000000, 0x2}, {0x6, 0x6}, {0x8640, 0x3}, {0xfffffffffffffffb, 0x19}, {0x9, 0x10}, {0xe9e9, 0x8}, {0x6d1, 0x3ff}, {0x7fff, 0x7fff}, {0xffffffffffff0001}, {0xf1b, 0x4}, {0x4f, 0x7f}, {0x7ff, 0x380}, {0x7f, 0x6}, {0x5, 0x100000000}, {0xbc9, 0x3ff}, {0x9, 0x8836}, {0x1000, 0x898}, {0x81, 0x4}, {0x4b, 0x300}, {0xfffffffffffffffa, 0x5}, {0x8000000000000000, 0x9}, {0x6401}, {0xb}, {0x7, 0x2f91}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0xa8}, {0x8000, 0xf}, {0xf40a, 0xa97}, {0x8, 0x9}, {0x6, 0x2}, {0x4, 0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x5, 0x7}, {0x5dc, 0x3}, {0x9, 0xf8}, {0x8000000000000000, 0x6}, {0x72, 0x14df43ec}, {0x5, 0x1}, {0x6, 0x9}, {0x142, 0xf064}, {0x4, 0xfffffffffffffff7}, {0x2}, {0x7, 0x2}, {0x3, 0x5}, {0x2, 0xad}, {0x7, 0xad3}, {0x4, 0xffffffff}, {0x40, 0xffff}, {0x8, 0x1}, {0x7, 0x400}, {0x3, 0x3636d9fd}, {0x0, 0x2}, {0x36, 0x6}, {0x5, 0x100}, {0x1, 0x6}, {0x800}, {0x2, 0xed}, {0x7, 0x7}, {0x2, 0x10000}, {0x200, 0x6}, {0x0, 0x2}, {0x4, 0x7fffffffffffffff}, {0x101, 0xc6c}, {0x10, 0x9}, {0x2, 0x80000001}, {0x6, 0xf}, {0xffffffffffffffff, 0x6000}, {0x95, 0x9}, {0x719, 0xffffffffffffff01}, {0x7, 0x6}, {0x3ff, 0x4}, {0x3, 0xc}, {0x100000000, 0x3ff}, {0x10, 0x3}, {0x2, 0x7}, {0xf, 0x4}, {0x9, 0x80000001}, {0x0, 0x7}, {0x2, 0x9}, {0x12, 0x3}, {0x10001, 0x8000000000000001}, {0x800, 0x7}, {0x276, 0x1}, {0x9, 0x3}, {0x2, 0x4}, {0x0, 0x10000}, {0x8001, 0x7}, {0xc, 0x8000}, {0x2, 0x3}, {0x96, 0x9}, {0x0, 0x1}, {0x4, 0xdb4}, {0x0, 0x2}, {0x2, 0x5}, {0x3, 0x4}, {0x4, 0x3}, {0x4, 0x5ed}, {0x6, 0x9}, {0x2, 0x1000}, {0x6, 0x73e}, {0x80, 0x4}, {0x8, 0xfffffffffffffffc}, {0x7, 0x40c0}, {0x1, 0xfffffffffffffffc}, {0xfffffffffffffffa, 0x2f8}, {0x4, 0x7}, {0x4, 0x8}, {0x80000001, 0x6}, {0x3e17, 0x7}, {0x0, 0x6}, {0x0, 0x26d}, {0x7fffffff, 0x8000000000000001}, {}, {0x3, 0x5}, {0xe, 0x7fffffff}, {0x8, 0x41}, {0x5, 0x4}, {0x4, 0x4}, {0x0, 0xcd3c}, {0x1, 0x5}, {0xe934, 0x6}, {0x401, 0x200}, {0x3, 0x5}, {0x5, 0x9}, {0x6, 0x49e}, {0x5, 0x950}, {0x7f, 0xffffffffffffffff}, {0x6, 0x1}, {0x1, 0x9}, {0x7fffffff, 0x1000}, {0x8, 0xfffffffffffffff1}, {0x7, 0xff}, {0x101, 0x13}, {0x200000, 0x280000}, {0x8000, 0x1000}, {0x8, 0x3}, {0x9, 0x27b}, {0x5, 0x2}, {0x3, 0x6}, {0xe, 0x10}, {0xa, 0x9}, {0x1, 0x2}]}, &(0x7f0000002ac0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000002b00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0x2}, &(0x7f0000002c40)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000002c80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x8001}, &(0x7f0000002dc0)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000002e00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000002}}, &(0x7f0000002e40)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000002e80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000002ec0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000002f00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x2b}, &(0x7f0000003040)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000003080)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f00000030c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x6, 0xb7}, {0x100, 0x9}, {0x1, 0xca5}, {0x2, 0x7ff}, {0x3ff, 0x8}, {0x5, 0xfff}, {0x100000000, 0xfffffffffffffffc}, {0x8, 0x8}, {0x0, 0x6}, {0x6, 0xfffffffffffeffff}, {0x8}, {0x2, 0x10000000}, {0x3, 0x100}, {0x95b7, 0x2}, {0x7ff, 0x5}, {0x0, 0x3}, {0x7, 0xb}, {0x6, 0xecf}, {0x1a00000000000000, 0x6}, {0x48, 0x6}, {0x4, 0x6}, {0x2, 0x39}, {0x283f, 0x6}, {0x8000000000000001, 0x3}, {0x81, 0x6}, {0x1, 0x9}, {0x6, 0x101}, {0xd1, 0x7}, {0x4c0, 0x3}, {0x1, 0x2}, {0x3ff, 0x1}, {0x7ff, 0x1}, {0x1, 0x3}, {0x200, 0x2}, {0x1ff, 0x100000001}, {0x7, 0x8}, {0x3, 0x9}, {0x9, 0x1}, {0x8001, 0xd3}, {0x47, 0xc}, {0x8, 0x3}, {0x4, 0x7fff}, {0x4, 0xfffffffffffffff8}, {0xc, 0x20}, {0x8}, {0x8}, {0x800, 0x6}, {0x3, 0x6}, {0x800, 0x2}, {0xa197, 0x4}, {0x5, 0xffffffff}, {0xffffffff}, {0x180a, 0xfffffffffffffff8}, {0x8}, {0x6, 0x7}, {0x9, 0x5}, {0x4}, {0x6, 0x101}, {0x4, 0x2}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x4e8f}, {0x3ff, 0x81}, {0x9, 0x8}, {0xf, 0x6489}, {0xffffffff, 0x3}, {0x2557, 0x4}, {0x40000, 0x6}, {0x7, 0xe3c}, {0x0, 0xb}, {0x2, 0x400000000000}, {0x9, 0x2a7}, {0x4, 0x9}, {0x8001, 0x401}, {0x3, 0x1ff}, {0x100000000}, {0x0, 0x9ec}, {0x9, 0xa73}, {0x2c, 0x8000000000000000}, {0xa5f}, {0x8, 0x1}, {0x7fff, 0x1}, {0x10, 0x2}, {0x3, 0xffffffffffffffc0}, {0xb8b, 0x8}, {0x2, 0x252}, {0x100000000, 0x5}, {0x401, 0x7}, {0x4, 0x6}, {0x3, 0x86d}, {0x7fffffff, 0x1000}, {0x9e, 0xffffffffffffffff}, {0x100000001, 0xfff}, {0x800}, {0x4, 0x749}, {0x4, 0x1}, {0xe, 0x3ff}, {0x94c, 0x2}, {0x5, 0xc17}, {0x8}, {0x2, 0x9}, {0x4, 0x5}, {0xe0fa, 0xe}, {0x4, 0x8001}, {0x7, 0xa54}, {0x9c, 0x9}, {0xfffffffffffffffe, 0x1}, {0x8, 0x723}, {0xc6, 0x9}, {0x2c4d, 0x80}, {0x6, 0xecd8}, {0x2, 0x2}, {0x0, 0x7}, {0x1}, {0x3, 0x4}, {0xa23, 0x1}, {0x10}, {0xffff, 0x8a46}, {0x5, 0x9}, {0xbe, 0x3}, {0x8001, 0x100000000}, {0x7, 0x8}, {0x3a5a, 0x3}, {0x7b5, 0x14425282}, {0x800, 0x9}, {0x2, 0x5}, {0x3, 0x7fff}, {0x8, 0x89}, {0x100, 0x4945}, {0x121faa6e, 0x81}, {0x9aa7, 0x5}, {0xfffffffffffffffa, 0x81}, {0x8000000, 0x731d}, {0xda82, 0x401}, {0x6, 0x6}, {0x4, 0x1}, {0x8, 0x9}, {0x100, 0x99}, {0x2, 0x80}, {0xe, 0x6}, {0x0, 0x4}, {0x1000, 0x200}, {0x9, 0x5}, {0x0, 0x5}, {0x5, 0x400}, {0xfffffffffffffffc, 0xd}, {0x9, 0x6}, {0xffffffffffffffff, 0x6}, {0x6}, {0x9, 0xb}, {0x5, 0x6}, {0x4, 0x2d687c65}, {0xfffffffffffffffc, 0x3}, {0x2, 0x7}, {0x49a, 0x9}, {0x8, 0xc1e}, {0x0, 0x5}, {0x5, 0x3ff}, {0xfffffffffffffeff, 0x7fffffffffffffff}, {0x0, 0x8}, {0x7, 0xf73e}, {0xbf, 0xa7d}, {0x9, 0x9}, {0x101, 0x9}, {0x6, 0x4}, {0x8, 0xd}, {0x2}, {0x2}, {0x800, 0x1}, {0x2b3, 0x3}, {0x7, 0x299}, {0x8, 0x5}, {0x8, 0x423}, {0xff, 0x4}, {0x1ff, 0x9e}, {0x5, 0x4}, {0x8, 0x6}, {0x5}, {0x8, 0x9}, {0x4f, 0x6}, {0x5000000000}, {0x9, 0xfffffffffffffffb}, {0x38d908e5, 0x5}, {0x100, 0x8}, {0x3, 0x3ff}, {0x8001, 0x8}, {0x40, 0x9}, {0x6d2a, 0xfffffffffffffff7}, {0x9, 0x100000001}, {0x1, 0x85}, {0x4, 0xe2f}, {0x8000000000000000, 0x10}, {0x8, 0x4}, {0x3, 0xf}, {0x0, 0x4}, {0x10001, 0xfb}, {0x7}, {0x3, 0x8}, {0x9, 0x40}, {0x4, 0x5}, {0x7, 0x400}, {0x7, 0xfff}, {0x10001, 0x4}, {0x7d91, 0xffffffff7fffffff}, {0x1, 0x6}, {0x4, 0x6}, {0x1, 0x9}, {0xb14, 0xfffffffffffffffe}, {0x5, 0x8}, {0x7, 0x9}, {0x9, 0x9f}, {0x10000, 0xffffffff}, {0x80000000, 0x101}, {0x0, 0x10001}, {0xdbac, 0x8}, {0xffffffffffffff76, 0x100000000}, {0x6, 0x25d}, {0xfff, 0x8001}, {0xcdc, 0x3}, {0x6, 0x9}, {0x6144, 0xc}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x98}, {0x9, 0xab1}, {0x7fffffffffffffff, 0x9}, {0x9}, {0xc0a, 0x4}, {0x0, 0x2}, {0xff, 0x23520000}, {0x1, 0xb2}, {0x4}, {0x0, 0x7}, {0x7f, 0x2aa}, {0x1, 0x6}, {0x6}, {0x0, 0x7}, {0x2, 0x40000000000}, {0x3, 0x6}, {0x9, 0xb}, {0x9, 0x9}, {0xfff, 0x8}, {0x80000001}, {0x100, 0x5}, {0x9, 0x401}, {0x7fffffff, 0xdee1}, {0xfffffffffffffff7, 0x3}, {0x1, 0x6}, {0xfffffffffffffff8, 0x2}, {0xfbef, 0x1}, {0xff, 0x7}, {0x2, 0x6}, {0x8000000000000000, 0x7fffffff}, {0x8, 0xd}]}, &(0x7f0000004100)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004140)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000004180)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f00000041c0)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000004240)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004280)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f00000042c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x20000000}}, &(0x7f0000004300)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004440)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, 0x0, &(0x7f00000044c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004500)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000004540)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000004580)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, 0x0, &(0x7f0000004600)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x4, 0x2}, {0x800, 0x9}, {0xb97, 0x1}, {0x5, 0x8}, {0x6, 0x101}, {0x8}, {0x486, 0x3ff}, {0x6, 0x9}, {0x6}, {0x1, 0x9}, {0x8, 0xd81c}, {0x7, 0x2}, {0x9, 0x3ff}, {0x7, 0x7}, {0x0, 0x8}, {0x5, 0x72}, {0x100, 0x7}, {0xa9d8, 0xa800000}, {0x8, 0x7a}, {0x4, 0x10000}, {0x8, 0x92c}, {0x80000001, 0x2}, {0x8, 0x9}, {0x0, 0x5d0}, {0x9, 0x8000}, {0x6, 0x5}, {0x7fff, 0x6}, {0x4, 0xfffffffffffffffd}, {0x2, 0x6}, {0x0, 0x81}, {0x7, 0x7}, {0x0, 0x8189}, {0x3, 0x4}, {0x31e4, 0x8}, {0x5, 0x3}, {0x7f, 0x6}, {0x3, 0x5}, {0x7, 0xe4}, {0xffffffffffff0001, 0x101}, {0x5, 0x81}, {0x80000000, 0x8f}, {0x4, 0x9}, {0x80000000, 0x5}, {0x722, 0x6}, {0x400, 0xa}, {0x698, 0x79}, {0x4000000, 0x3}, {0xffffffff00000000, 0x7f}, {0x4, 0x7}, {0xd, 0x400}, {0x7, 0x33b7}, {0x800}, {0x64c2, 0x200}, {0x3, 0x6}, {0x80000000, 0x8}, {0x3, 0x6}, {0x1, 0xf}, {0xc361, 0x2ceb}, {0x8}, {0x7}, {0x4, 0x7}, {0xf, 0x5}, {0x4, 0x100000001}, {0x7, 0x3}, {0x6, 0x2}, {0x3, 0x1ff}, {0x8000000000000001, 0x9b6}, {0x2, 0x10001}, {0x100, 0x3}, {0x2, 0x8d78}, {0x6, 0xfffffffffffffa8d}, {0x80000001}, {0x7, 0x6}, {0x10, 0x3f}, {0x7, 0xd}, {0xa2d6, 0x6}, {0x8, 0x24000}, {0x1, 0x8}, {0x9, 0x80}, {0x7fffffff, 0xe0}, {0x8, 0x4}, {0x9, 0x4}, {0x8001, 0x400}, {0x9af2, 0x6}, {0x7fffffff, 0x6}, {0x81, 0x7}, {0x1, 0x7}, {0x3, 0x2}, {0x8b, 0xe}, {0x7, 0x33}, {0x8, 0xcf}, {0x153, 0xc81}, {0x3, 0x80000001}, {0x8000, 0x1}, {0xf, 0x1}, {0x100000000, 0x5}, {0x4, 0x8001}, {0x1, 0x1}, {0x406d, 0x9}, {0x8000000000000000, 0x8}, {0x4, 0x5}, {0x6, 0x3e}, {0x2, 0x6}, {0xfffffffffffffffe, 0x7ff}, {0x6, 0x100000000}, {0x4, 0x1}, {0x9, 0x4}, {0x3, 0xb}, {0x40, 0xc9}, {0x3, 0x80000001}, {0x0, 0x8}, {0x8, 0x2f4}, {0x7, 0x5}, {0xffffffffffffff00, 0xa8f}, {0x1, 0x7}, {0x8, 0x10}, {0xb04, 0x22}, {0x2d2edf24, 0x62}, {0xfffffffffffffff6, 0xb86}, {0x3, 0x6}, {0x81, 0x7}, {0x6, 0x1}, {0x733f, 0x7583}, {0x8001, 0x8}, {0x2, 0xb}, {0x7, 0x8}, {0xb0}, {0x8000, 0xff}, {0x7, 0x5}, {0x8, 0x6}, {0x401, 0xe}, {0x1ff, 0x9}, {0x1, 0x800}, {0x9, 0x6}, {0x9, 0xc5f}, {0x200, 0x6}, {0x5, 0x4}, {0x7a, 0x24f96762}, {0x3, 0x7}, {0xa, 0xfffffffffffffffd}, {0x7435, 0x7}, {0x100000001, 0xffff}, {0x7, 0x4c}, {0x128f, 0x100000000}, {0xffffffff80000001, 0x1}, {0x9, 0x8000000000000001}, {0xfffffffffffff801, 0xd}, {0xe399, 0x86}, {0xa2, 0x8001}, {0x5, 0x1}, {0x7fff, 0xffff}, {0x8, 0x1}, {0xd, 0x5}, {0x6, 0x2}, {0x8, 0x87}, {0x5, 0x1}, {0x80000000, 0x2}, {0x0, 0x800000000000000}, {0x3, 0x27e}, {0x8, 0xfffffffffffffaa1}, {0x101, 0x80}, {0x6, 0x7ff}, {0x452, 0x1}, {0x1ff0, 0x4}, {0x2, 0x3895e5c1}, {0x3, 0x2}, {0x5, 0x8}, {0x9, 0x2}, {0x6, 0x7d0}, {0x4c, 0x9d}, {0xfffffc0000000000, 0x5}, {0x1, 0x168459ed}, {0x9d5, 0x3}, {0xcc2, 0x8}, {0x2, 0x8}, {0x6, 0x1}, {0x2, 0x9}, {0x2f, 0x1}, {0x9, 0x3ff}, {0x4, 0x2c2f}, {0x0, 0xfffffffffffffeff}, {0x5, 0x100000001}, {0xffff, 0x2}, {0x8, 0x607eca40}, {0x0, 0x8000000000000001}, {0x0, 0x8001}, {0x7fffffffffffffff, 0x8}, {0x8, 0x4}, {0x8, 0x5}, {0x8, 0x7}, {0xd8ec, 0x8}, {0x9a0, 0xc1a}, {0x10001, 0x8}, {0xcc, 0xc8}, {0x2, 0x4}, {0xd, 0x9}, {0x1ff, 0xfffffffffffffffc}, {0x6, 0x3}, {0xec8, 0x6}, {0x6, 0x5}, {0x8, 0x6}, {0x8, 0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x9, 0x158}, {0xfffffffffffffffc, 0x3}, {0x8000, 0x9a41}, {0x0, 0x1}, {0x8, 0xb}, {0x1, 0x6}, {0x1b, 0x4}, {0xfffffffffffffffc, 0x6}, {0x1ff}, {0x1, 0x9}, {0x6, 0x200}, {0x2, 0x8}, {0x3, 0x401}, {0x3, 0x8}, {0x8, 0x889}, {0x9, 0xf}, {0x4, 0x20}, {0xc, 0x1400}, {0x48000000000000, 0x9}, {0x9, 0x3}, {0xb, 0x9}, {0x4, 0x70}, {0x7, 0x21e9}, {0xccb, 0x6}, {0x7, 0x6}, {0x89, 0x4}, {0x38e, 0x10}, {0x3, 0x4}, {0x0, 0x31}, {0xcd13, 0x3}, {0x5, 0x7fffffff}, {0xffffffff, 0x2}, {0x2, 0x9}, {0x84a3, 0x15b}, {0x3, 0x88e}, {0x10, 0x7}, {0x2, 0xf}, {0x0, 0x4}, {0x1, 0xc}, {0xfff, 0x7}, {0x5, 0x4475}, {0x0, 0x81}, {0x80000000, 0xff}, {0x17}, {0x7}, {0x9, 0x2}, {0x683e0b48, 0x7}, {0x36, 0x1ff}, {0x1, 0x7}, {0x7, 0x3}, {0x9, 0x4}]}, &(0x7f0000005640)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x5}, &(0x7f0000005780)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000000100)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f0000005800)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000005840)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f0000005880)=@blocksize={{0x4f32494e, 0x2, 0x10}}], 0x32}) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) unshare(0x26020480) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000900)="71ca305b6d785977913e0000417b88594afcdf08f6dee6186e5f1ff38731631801ab95ca3995a4a5289c2aab986a64ffe8944bfb00f3fdeb28ed6a5128b0fe6252d89067c3d498a339d2e0f693775f4b", 0x50}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="280000000401000005000000221c17e87e5acf444a482d6f015b5d0f6abe5bae259bcbbb584400000c00000014000000030000"], 0x74}, 0x4000) fsmount(r6, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r1, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="d800", 0x2}], 0x1}, 0x20000885) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r0, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x6, &(0x7f0000003f00), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) ioperm(0x7ff, 0x8, 0x4) request_key(0x0, 0x0, &(0x7f0000000000)='/\r\x00\xfaF\x1c\xdd\xd4\x84r\v{\xaez\xf5\x9e\xab16\xee\xddg\b\x00\x00\x00\x00\x00\x00\x00\xa7~', 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c100000000100000000", 0x57}], 0x1) write(r5, &(0x7f0000000600)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000edff00039815fa2c1ec28656aaa7a70a4b46fe000000bc1d03000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d6f0f350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) prctl$PR_SET_PTRACER(0x59616d61, r1) executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x0) executing program 4: r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=@newqdisc={0x4c, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5, 0xe}, {0xb, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xc1}}}, @qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004040}, 0x4040040) executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x10000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0214200011000000004000000000000003000500000000"], 0x88}}, 0x20000000) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580), 0xc290, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) sendfile(r3, r3, 0x0, 0x10001) executing program 4: r0 = fsopen(&(0x7f0000000200)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r4 = fsmount(r0, 0x1, 0x0) fchdir(r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000740)=""/138, 0x8a, 0x0) r6 = fsopen(&(0x7f0000000100)='cgroup\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700"], 0x48) r8 = fsmount(r6, 0x1, 0x0) fchdir(r8) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="180100001200010000000000000000007368613338340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000008000100c50000000800010001800000080001997dbebc0c893cc200ff01000008000100080000000800010040e9000007000100020000000800010008000000"], 0x118}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r7}, 0x14) r10 = socket$inet6(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r4], 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmmsg$inet6(r10, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c0c0) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r11, &(0x7f0000000240)={0xa, 0x4e24, 0x80000b, @empty}, 0x1c) r12 = syz_open_procfs(0x0, &(0x7f0000000340)='net/icmp6\x00') pread64(r12, &(0x7f0000000600)=""/92, 0x5c, 0xf7) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r5}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x18, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000006000/0x2000)=nil, 0x3) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002780), 0x2280) fcntl$setstatus(r6, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) executing program 3: pipe2(&(0x7f0000000100), 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xe0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setuid(0xee01) flistxattr(r2, 0x0, 0x58) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xfe}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) socket$nl_generic(0x11, 0x3, 0x10) close(0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) clock_adjtime(0x5, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009040000", @ANYBLOB], 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x181000, 0x64) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780), &(0x7f0000000280), &(0x7f0000000140)) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r7, 0x10c, 0x5, &(0x7f0000000200), &(0x7f0000000280)=0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010102}}}}, &(0x7f0000000080)={0x0, 0x2, [0x829, 0x8cb, 0x3d, 0x66]}) socket$packet(0x11, 0x2, 0x300) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendto$packet(0xffffffffffffffff, &(0x7f0000000640)="000a18000000", 0x6, 0x4000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x40083, 0x100) program crashed: kernel BUG in jffs2_del_ino_cache bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4, 16, 30, 28, 15, 23, 5, 20, 20] detailed listing: executing program 4: r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=@newqdisc={0x4c, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5, 0xe}, {0xb, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xc1}}}, @qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004040}, 0x4040040) executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x10000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0214200011000000004000000000000003000500000000"], 0x88}}, 0x20000000) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580), 0xc290, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) sendfile(r3, r3, 0x0, 0x10001) executing program 4: r0 = fsopen(&(0x7f0000000200)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r4 = fsmount(r0, 0x1, 0x0) fchdir(r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000740)=""/138, 0x8a, 0x0) r6 = fsopen(&(0x7f0000000100)='cgroup\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700"], 0x48) r8 = fsmount(r6, 0x1, 0x0) fchdir(r8) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="180100001200010000000000000000007368613338340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000008000100c50000000800010001800000080001997dbebc0c893cc200ff01000008000100080000000800010040e9000007000100020000000800010008000000"], 0x118}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r7}, 0x14) r10 = socket$inet6(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r4], 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmmsg$inet6(r10, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c0c0) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r11, &(0x7f0000000240)={0xa, 0x4e24, 0x80000b, @empty}, 0x1c) r12 = syz_open_procfs(0x0, &(0x7f0000000340)='net/icmp6\x00') pread64(r12, &(0x7f0000000600)=""/92, 0x5c, 0xf7) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r5}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x18, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000006000/0x2000)=nil, 0x3) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002780), 0x2280) fcntl$setstatus(r6, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) executing program 3: pipe2(&(0x7f0000000100), 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xe0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setuid(0xee01) flistxattr(r2, 0x0, 0x58) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xfe}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) socket$nl_generic(0x11, 0x3, 0x10) close(0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) clock_adjtime(0x5, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009040000", @ANYBLOB], 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x181000, 0x64) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780), &(0x7f0000000280), &(0x7f0000000140)) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r7, 0x10c, 0x5, &(0x7f0000000200), &(0x7f0000000280)=0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010102}}}}, &(0x7f0000000080)={0x0, 0x2, [0x829, 0x8cb, 0x3d, 0x66]}) socket$packet(0x11, 0x2, 0x300) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendto$packet(0xffffffffffffffff, &(0x7f0000000640)="000a18000000", 0x6, 0x4000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x40083, 0x100) program crashed: kernel BUG in jffs2_del_ino_cache bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 bisect: split chunks (needed=true): <10> bisect: split chunk #0 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 23, 5, 20, 20] detailed listing: executing program 3: pipe2(&(0x7f0000000100), 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xe0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setuid(0xee01) flistxattr(r2, 0x0, 0x58) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xfe}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) socket$nl_generic(0x11, 0x3, 0x10) close(0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) clock_adjtime(0x5, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009040000", @ANYBLOB], 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x181000, 0x64) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780), &(0x7f0000000280), &(0x7f0000000140)) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r7, 0x10c, 0x5, &(0x7f0000000200), &(0x7f0000000280)=0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010102}}}}, &(0x7f0000000080)={0x0, 0x2, [0x829, 0x8cb, 0x3d, 0x66]}) socket$packet(0x11, 0x2, 0x300) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendto$packet(0xffffffffffffffff, &(0x7f0000000640)="000a18000000", 0x6, 0x4000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x40083, 0x100) program crashed: kernel BUG in jffs2_del_ino_cache bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <5> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 20] detailed listing: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780), &(0x7f0000000280), &(0x7f0000000140)) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r7, 0x10c, 0x5, &(0x7f0000000200), &(0x7f0000000280)=0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010102}}}}, &(0x7f0000000080)={0x0, 0x2, [0x829, 0x8cb, 0x3d, 0x66]}) socket$packet(0x11, 0x2, 0x300) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendto$packet(0xffffffffffffffff, &(0x7f0000000640)="000a18000000", 0x6, 0x4000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x40083, 0x100) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 23, 5] detailed listing: executing program 3: pipe2(&(0x7f0000000100), 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xe0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setuid(0xee01) flistxattr(r2, 0x0, 0x58) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xfe}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) socket$nl_generic(0x11, 0x3, 0x10) close(0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) clock_adjtime(0x5, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009040000", @ANYBLOB], 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x181000, 0x64) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) program crashed: kernel BUG in jffs2_del_ino_cache bisect: the chunk can be dropped bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) program crashed: kernel BUG in jffs2_del_ino_cache bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) program crashed: kernel BUG in jffs2_del_ino_cache bisect: concatenation succeeded found reproducer with 5 syscalls minimizing guilty program testing program (duration=1m17.00817789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) program did not crash testing program (duration=1m17.00817789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-lsetxattr$trusted_overlay_redirect detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) program did not crash testing program (duration=1m17.00817789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mount-lsetxattr$trusted_overlay_redirect detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) program did not crash testing program (duration=1m17.00817789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount-lsetxattr$trusted_overlay_redirect detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=1m17.00817789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect detailed listing: executing program 0: mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) program did not crash testing program (duration=1m17.00817789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) program did not crash testing program (duration=1m17.00817789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) program did not crash testing program (duration=1m17.00817789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) program did not crash testing program (duration=1m17.00817789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) program did not crash testing program (duration=1m17.00817789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) program did not crash testing program (duration=1m17.00817789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', 0x0, &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) program did not crash testing program (duration=1m17.00817789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) program did not crash testing program (duration=1m17.00817789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) program did not crash testing program (duration=1m17.00817789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', 0x0, 0x0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m17.00817789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect program crashed: kernel BUG in jffs2_del_ino_cache simplifying C reproducer testing compiled C program (duration=1m17.00817789s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect program crashed: kernel BUG in jffs2_del_ino_cache testing compiled C program (duration=1m17.00817789s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect program crashed: kernel BUG in jffs2_del_ino_cache testing compiled C program (duration=1m17.00817789s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect program crashed: kernel BUG in jffs2_del_ino_cache testing compiled C program (duration=1m17.00817789s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect program crashed: kernel BUG in jffs2_del_ino_cache testing compiled C program (duration=1m17.00817789s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect program did not crash testing compiled C program (duration=1m17.00817789s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect program crashed: kernel BUG in jffs2_del_ino_cache testing compiled C program (duration=1m17.00817789s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect program did not crash testing program (duration=1m17.00817789s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) program crashed: kernel BUG in jffs2_del_ino_cache validation run: crashed=true testing program (duration=1m17.00817789s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) program crashed: kernel BUG in jffs2_del_ino_cache validation run: crashed=true testing program (duration=1m17.00817789s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-lsetxattr$trusted_overlay_redirect detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) program crashed: kernel BUG in jffs2_del_ino_cache validation run: crashed=true reproducing took 1h13m5.426538579s repro crashed as (corrupted=false): ------------[ cut here ]------------ kernel BUG at fs/jffs2/nodelist.c:462! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 4303 Comm: syz-executor Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:jffs2_del_ino_cache+0x2a9/0x2b0 fs/jffs2/nodelist.c:462 Code: 19 ff e9 60 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5a fe ff ff 4c 89 e7 e8 81 07 19 ff e9 4d fe ff ff e8 c7 e4 d3 fe <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 48 RSP: 0018:ffffc9000304fb38 EFLAGS: 00010293 RAX: ffffffff82a517e9 RBX: ffff888071f8d000 RCX: ffff88802af21dc0 RDX: 0000000000000000 RSI: ffff888071f8d000 RDI: ffff88807b934000 RBP: 0000000000000006 R08: ffff88807b93436b R09: 1ffff1100f72686d R10: dffffc0000000000 R11: ffffed100f72686e R12: ffff888071f8d000 R13: dffffc0000000000 R14: ffff888071f8d020 R15: ffff88807b934000 FS: 0000555569da4500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555569dbfa38 CR3: 000000007372c000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: jffs2_do_clear_inode+0x31b/0x390 fs/jffs2/readinode.c:1443 evict+0x4b6/0x8b0 fs/inode.c:647 dispose_list fs/inode.c:680 [inline] evict_inodes+0x650/0x6e0 fs/inode.c:734 generic_shutdown_super+0x93/0x300 fs/super.c:454 kill_mtd_super+0x1f/0x60 drivers/mtd/mtdsuper.c:196 jffs2_kill_sb+0x92/0xb0 fs/jffs2/super.c:349 deactivate_locked_super+0x93/0xf0 fs/super.c:335 cleanup_mnt+0x426/0x4d0 fs/namespace.c:1148 task_work_run+0x125/0x1a0 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] exit_to_user_mode_loop+0x10f/0x130 kernel/entry/common.c:181 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:214 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline] syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:307 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f0157ee0317 Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 RSP: 002b:00007fffd1ef6f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 00007f0157f75474 RCX: 00007f0157ee0317 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd1ef7050 RBP: 00007fffd1ef7050 R08: 00007fffd1ef8050 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffd1ef80e0 R13: 00007f0157f75474 R14: 000000000001419d R15: 00007fffd1ef8120 Modules linked in: ---[ end trace c01e97b61a86697f ]--- RIP: 0010:jffs2_del_ino_cache+0x2a9/0x2b0 fs/jffs2/nodelist.c:462 Code: 19 ff e9 60 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5a fe ff ff 4c 89 e7 e8 81 07 19 ff e9 4d fe ff ff e8 c7 e4 d3 fe <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 48 RSP: 0018:ffffc9000304fb38 EFLAGS: 00010293 RAX: ffffffff82a517e9 RBX: ffff888071f8d000 RCX: ffff88802af21dc0 RDX: 0000000000000000 RSI: ffff888071f8d000 RDI: ffff88807b934000 RBP: 0000000000000006 R08: ffff88807b93436b R09: 1ffff1100f72686d R10: dffffc0000000000 R11: ffffed100f72686e R12: ffff888071f8d000 R13: dffffc0000000000 R14: ffff888071f8d020 R15: ffff88807b934000 FS: 0000555569da4500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555569dbfa38 CR3: 000000007372c000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 final repro crashed as (corrupted=false): ------------[ cut here ]------------ kernel BUG at fs/jffs2/nodelist.c:462! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 4303 Comm: syz-executor Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:jffs2_del_ino_cache+0x2a9/0x2b0 fs/jffs2/nodelist.c:462 Code: 19 ff e9 60 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5a fe ff ff 4c 89 e7 e8 81 07 19 ff e9 4d fe ff ff e8 c7 e4 d3 fe <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 48 RSP: 0018:ffffc9000304fb38 EFLAGS: 00010293 RAX: ffffffff82a517e9 RBX: ffff888071f8d000 RCX: ffff88802af21dc0 RDX: 0000000000000000 RSI: ffff888071f8d000 RDI: ffff88807b934000 RBP: 0000000000000006 R08: ffff88807b93436b R09: 1ffff1100f72686d R10: dffffc0000000000 R11: ffffed100f72686e R12: ffff888071f8d000 R13: dffffc0000000000 R14: ffff888071f8d020 R15: ffff88807b934000 FS: 0000555569da4500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555569dbfa38 CR3: 000000007372c000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: jffs2_do_clear_inode+0x31b/0x390 fs/jffs2/readinode.c:1443 evict+0x4b6/0x8b0 fs/inode.c:647 dispose_list fs/inode.c:680 [inline] evict_inodes+0x650/0x6e0 fs/inode.c:734 generic_shutdown_super+0x93/0x300 fs/super.c:454 kill_mtd_super+0x1f/0x60 drivers/mtd/mtdsuper.c:196 jffs2_kill_sb+0x92/0xb0 fs/jffs2/super.c:349 deactivate_locked_super+0x93/0xf0 fs/super.c:335 cleanup_mnt+0x426/0x4d0 fs/namespace.c:1148 task_work_run+0x125/0x1a0 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] exit_to_user_mode_loop+0x10f/0x130 kernel/entry/common.c:181 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:214 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline] syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:307 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f0157ee0317 Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 RSP: 002b:00007fffd1ef6f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 00007f0157f75474 RCX: 00007f0157ee0317 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd1ef7050 RBP: 00007fffd1ef7050 R08: 00007fffd1ef8050 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffd1ef80e0 R13: 00007f0157f75474 R14: 000000000001419d R15: 00007fffd1ef8120 Modules linked in: ---[ end trace c01e97b61a86697f ]--- RIP: 0010:jffs2_del_ino_cache+0x2a9/0x2b0 fs/jffs2/nodelist.c:462 Code: 19 ff e9 60 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5a fe ff ff 4c 89 e7 e8 81 07 19 ff e9 4d fe ff ff e8 c7 e4 d3 fe <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 48 RSP: 0018:ffffc9000304fb38 EFLAGS: 00010293 RAX: ffffffff82a517e9 RBX: ffff888071f8d000 RCX: ffff88802af21dc0 RDX: 0000000000000000 RSI: ffff888071f8d000 RDI: ffff88807b934000 RBP: 0000000000000006 R08: ffff88807b93436b R09: 1ffff1100f72686d R10: dffffc0000000000 R11: ffffed100f72686e R12: ffff888071f8d000 R13: dffffc0000000000 R14: ffff888071f8d020 R15: ffff88807b934000 FS: 0000555569da4500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555569dbfa38 CR3: 000000007372c000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400