last executing test programs: 14m1.20250422s ago: executing program 32 (id=41): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@nobarrier}, {@dioread_lock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x13}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x18840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x200c4, 0x0, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000035d, 0x20000084) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0xb07, &(0x7f0000000280)=""/16) recvmmsg(r1, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="0200310a08000f0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20044044}, 0x40080c0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) 11m46.948112436s ago: executing program 33 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x44000160) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 11m44.797049811s ago: executing program 34 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x44000160) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 10m27.84426744s ago: executing program 35 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) lseek(r3, 0x289e0cb5, 0x0) 9m56.496421773s ago: executing program 36 (id=445): fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@random={'btrfs.', 'lo\x00'}, &(0x7f0000000180)='\x00', 0x1, 0x1) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x101480, 0x24) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast1, @in=@private=0xa010100, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x4000000001f, 0x2}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 9m54.772942367s ago: executing program 37 (id=455): fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@random={'btrfs.', 'lo\x00'}, &(0x7f0000000180)='\x00', 0x1, 0x1) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x101480, 0x24) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast1, @in=@private=0xa010100, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x4000000001f, 0x2}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 9m24.16728786s ago: executing program 38 (id=513): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r5, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x880) sendmsg$nl_route(r1, 0x0, 0x40008c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) 9m23.00322827s ago: executing program 39 (id=517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m56.290294169s ago: executing program 40 (id=638): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x180080e, &(0x7f0000000440)=ANY=[@ANYBLOB="757466382c616cbd1b601e694f1e037c6f775f7574696d653d30303030303030322030313030309d3030aa5578c7", @ANYRESHEX=0xee00, @ANYBLOB=',errors=continue,fmask=00000000000000000000001,iocharset=cp861,fmask=00000000000000000000005,iocharset=iso8859-14,utf8,namecase=1,\x00'], 0x1, 0x152f, &(0x7f00000005c0)="$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") pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdirat(r0, &(0x7f0000000600)='./file0\x00', 0x2e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x8882) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x400000f4, 0x0, 0x7}]}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003be8c5ee1568812002b000203000aff3f000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a6c1f004a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000027658fc4b59bd2b8e56858977f6701e974d805859b590ce5af649a701102ffff02dfccebf6ba00087b47949a1dd1e040024f0298432d6628dcd87f4e31", 0xb7) r9 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@cgroup, r6, 0x36, 0x0, 0x0, @void, @value=r6}, 0x20) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x437, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20c89}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xffdffffe}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8804}, 0x20000000) 7m44.820059853s ago: executing program 5 (id=674): gettid() socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000440)=ANY=[@ANYBLOB='discard,discard,utf8,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x3, 0x1535, &(0x7f0000001380)="$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") socket$unix(0x1, 0x5, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r6) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) 7m39.922648808s ago: executing program 5 (id=678): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x60040045) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000300)={0x1}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f00000005c0)="306663353a313232373a3f7092c0f0bc085a193376cf620afaf6379a248d1d6534058f1095109d", 0x27) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fsync(r6) 7m37.169896529s ago: executing program 5 (id=684): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) setresuid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000900)={0x0, 0x8001, 0x4, 0x5, 0x3a, 0x7f, 0x7abe074a, 0x1}, &(0x7f0000000940)={0x75a, 0x6, 0x7da9, 0x8, 0x0, 0x2, 0xb, 0x2}, 0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={[0x9]}, 0x8}) execve(&(0x7f00000000c0)='./sys\x00', &(0x7f0000000240)={[&(0x7f0000000200)='cgroup2\x00']}, &(0x7f0000000380)={[&(0x7f0000000280)='\x12\':[&/(:*\x85]$\\{\x00', 0x0, &(0x7f0000000340)='cgroup.procs\x00']}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) setreuid(0x0, 0xee01) 7m35.681290576s ago: executing program 5 (id=686): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000040)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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") fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) connect$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1}, 0x50) dup3(r4, r3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r5}, &(0x7f0000000340), &(0x7f0000000440)=r4}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioprio_get$pid(0x2, r0) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) 7m33.21302866s ago: executing program 5 (id=689): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x97) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 7m26.488055692s ago: executing program 5 (id=697): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000040)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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") fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) connect$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1}, 0x50) dup3(r4, r3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r5}, &(0x7f0000000340), &(0x7f0000000440)=r4}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioprio_get$pid(0x2, r0) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) 7m14.952691627s ago: executing program 8 (id=712): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd25, 0x400000, {0x0, 0x0, 0x0, r7, {0x7, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0xb}}]}}]}, 0x3c}}, 0x20040054) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="800037bb", 0x4, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x4) accept$inet6(r0, 0x0, 0x0) 7m11.271344351s ago: executing program 41 (id=697): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000040)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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") fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) connect$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1}, 0x50) dup3(r4, r3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r5}, &(0x7f0000000340), &(0x7f0000000440)=r4}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioprio_get$pid(0x2, r0) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) 7m9.405731929s ago: executing program 8 (id=721): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000050000000000000700000000000000000000000203000000000000000000000a0000000000000000002e"], 0x0, 0x43}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000200"/28], 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) geteuid() 7m1.94179917s ago: executing program 8 (id=727): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x201, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0xfffffffd, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x100002, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffffd, 0x18b, 0x1000, 0x2, 0x8000005], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0xd82, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4"], 0x1a4}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 7m1.052905563s ago: executing program 8 (id=729): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000050000000000000700000000000000000000000203000000000000000000000a0000000000000000002e"], 0x0, 0x43}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000200"/28], 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x24, &(0x7f0000000140)={[{@data_err_abort}, {@noblock_validity}, {@data_err_ignore}, {@errors_remount}, {@lazytime, 0x0}, {@sb={'sb', 0x3d, 0x80000000}}, {@noload}, {@journal_checksum}, {@stripe={'stripe', 0x3d, 0x1b}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@data_ordered}, {@journal_dev={'journal_dev', 0x3d, 0x769}}, {@norecovery}, {@grpid}, {@dax_never}, {@dax_inode}], [{@fowner_lt}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '\xc6\x92\f\f\xc2\x8d\xafa\bj\xecR]O\xe7\x80\xad\fs*n|\xcf\x97|\'\x06r\x81\xdd\x80*\xd9K\xad\x9b\xe6\x95\xa6\a\xb8Di\xc9\xdc\xd6\xcf\x9f\'L\xc8\x84E$\xce\x84\bp\a\x00N\xacN7\v\x03p\x96\xb2\xcd\x18\x87.\xd2\x81$\x85\xac\xd3\x8fj\xc8\x16\xcf\x16\xaf\xb2\xa5\x8c]\xd9N\x92\x06\xe9\xbd\xd1\x04\xee\xe5U\x91Y\xfa&$z\xb4\xb2J\xcbP\x88\xa5,\xfb\xafS\xef,\xa5\xd7\x12\xbc\x00'/151}}, {@context={'context', 0x3d, 'root'}}, {@measure}], 0x2c}, 0xa, 0x526, &(0x7f00000007c0)="$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") 6m59.876992533s ago: executing program 8 (id=730): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) setresuid(0x0, 0xee01, 0xffffffffffffffff) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000900)={0x0, 0x8001, 0x4, 0x5, 0x3a, 0x7f, 0x7abe074a, 0x1}, &(0x7f0000000940)={0x75a, 0x6, 0x7da9, 0x8, 0x0, 0x2, 0xb, 0x2}, 0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={[0x9]}, 0x8}) execve(&(0x7f00000000c0)='./sys\x00', &(0x7f0000000240)={[&(0x7f0000000200)='cgroup2\x00']}, &(0x7f0000000380)={[&(0x7f0000000280)='\x12\':[&/(:*\x85]$\\{\x00', 0x0, &(0x7f0000000340)='cgroup.procs\x00']}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x2400c01, &(0x7f0000000000), 0xff, 0x5ca, &(0x7f0000000300)="$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") socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) setreuid(0x0, 0xee01) 6m58.686270334s ago: executing program 8 (id=734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) openat$rtc(0xffffffffffffff9c, 0x0, 0x2, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbefa, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, 0x0, 0x0) close(r4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x1, 0x709d2a, 0x25dfdbde}, 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0x4000014) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001180)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c726f6469722c636865636b3d72656c617865642c636f6465706167653d3835372c73686f72746e616d653d6c6f7765722c726f6469722c73686f72746e616d653d77696e39352c696f636861727365743d69736f38383539b6392c756e695f786c6174653d302c73686f72746e616d653d6d697865642c757466383d302c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c72a584873b2c747a3d5554432c00"], 0x7f, 0x2ba, &(0x7f0000001240)="$eJzs3c2KI1UUAOBT6Uo6rUJn4UoEC3ThqpmZJ+ggLQxmpdRCNzo4PSBJGOhAwB/MzMq94Mp3cOcD+ABufAMXLhV3zkIsSSqVn0p6pjN09wzN923qpu49dc+93P4hkJPP3hz27z8cPXj8ze/RbifROI7jeJJEJxpReRQAwE3ypCji76L0rLGttVdp4yrzAgCuzoX//u9dW0oAwBX76ONPPuj2eicfZlk7YvjdOE+ivJb93QfxRQziNG7FYfwbUSyU7dfu9k4izbLqzYDxQeQRw09/nb/u/hkxi78dh9Gpx1fvKGQz8c5wMs6nM0+vzXgliegWSTnkThzG6xFFM+YPKS/v3+2d3Mk24yNvxbtv/zjP/7/TOIrD+O3zeBiDuD97xDL+29tZ9l7xwz9flyvII5LJON+fjVsq/AcEAAAAAAAAAAAAAAAAAAAAAMClOcoWOqv1c6pqgEdH9f40j/hrWMUv6wMdx6w+0LzCz2Slvs6tLMuqMj7jvBllfZ803kgjfVHrBgAAAAAAAAAAAAAAAAAAgJfJ6Muv+vcGg9OztcYvxbRx8NQx9Ua6cqf6WP+zo7Y3+j9F7B51kUbszVMbJBtTJFXXDg/8+Zyu/V0SO9g2aTTO28N0EGXy3+++CW/tusD2hQ9AZ5lqdbr695JY7Pyj+e6uR7W3H5KVSatjeDZKdjiQxZat2zs3qvWcJ6pVW07r1ec9mQexrWu64uZiM9ej2rXNbF7yT0pNcrm/eAAAAAAAAAAAAAAAAAAAgA3LD/3GHxudj19ISgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw7Zbf/79oRKd+p96YzINndxpPH7x/NtoybeealwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAN938AAAD//1ajTes=") open(0x0, 0x101480, 0x24) 6m43.288422557s ago: executing program 42 (id=734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) openat$rtc(0xffffffffffffff9c, 0x0, 0x2, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbefa, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, 0x0, 0x0) close(r4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x1, 0x709d2a, 0x25dfdbde}, 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0x4000014) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001180)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c726f6469722c636865636b3d72656c617865642c636f6465706167653d3835372c73686f72746e616d653d6c6f7765722c726f6469722c73686f72746e616d653d77696e39352c696f636861727365743d69736f38383539b6392c756e695f786c6174653d302c73686f72746e616d653d6d697865642c757466383d302c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c72a584873b2c747a3d5554432c00"], 0x7f, 0x2ba, &(0x7f0000001240)="$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") open(0x0, 0x101480, 0x24) 5m20.944516325s ago: executing program 7 (id=866): r0 = socket$key(0xf, 0x3, 0x2) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x739, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x8}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 5m15.063822775s ago: executing program 7 (id=871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_getres(0x4, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x4048080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) process_vm_writev(r2, &(0x7f0000001980)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f0000001dc0)=[{&(0x7f00000019c0)=""/139, 0x8b}, {&(0x7f0000001a80)=""/79, 0x4f}, {&(0x7f0000001b00)=""/141, 0x8d}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/123, 0x7b}, {&(0x7f0000001d40)=""/107, 0x6b}], 0x6, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setns(0xc9, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pread64(r5, 0x0, 0x0, 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) 5m12.192103109s ago: executing program 7 (id=877): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000040)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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") fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) connect$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r5}, &(0x7f0000000340), &(0x7f0000000440)=r4}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioprio_get$pid(0x2, r0) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) 5m8.422208945s ago: executing program 7 (id=882): fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@random={'btrfs.', 'lo\x00'}, &(0x7f0000000180)='\x00', 0x1, 0x1) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) open(&(0x7f0000000040)='.\x00', 0x101480, 0x24) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast1, @in=@private=0xa010100, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x4000000001f, 0x2}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 5m3.17803843s ago: executing program 1 (id=889): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 5m2.77356449s ago: executing program 1 (id=893): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r5, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x20}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) 5m0.294840773s ago: executing program 7 (id=896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_getres(0x4, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid\x00') ptrace(0x10, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) process_vm_writev(0x0, &(0x7f0000001980)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f0000001dc0)=[{&(0x7f00000019c0)=""/139, 0x8b}, {&(0x7f0000001a80)=""/79, 0x4f}, {&(0x7f0000001b00)=""/141, 0x8d}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/123, 0x7b}, {&(0x7f0000001d40)=""/107, 0x6b}], 0x6, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8881f5c0a000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@nobh}, {@errors_remount}, {@block_validity}]}, 0x0, 0x480, &(0x7f0000000500)="$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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setns(0xc9, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pread64(r4, 0x0, 0x0, 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) 4m58.611664166s ago: executing program 1 (id=897): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 4m58.373676433s ago: executing program 1 (id=898): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000050000000000000700000000000000000000000203000000000000000000000a0000000000000000002e"], 0x0, 0x43}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000200"/28], 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r5 = geteuid() syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x24, &(0x7f0000000140)={[{@data_err_abort}, {@noblock_validity}, {@data_err_ignore}, {@errors_remount}, {@lazytime, 0x0}, {@sb={'sb', 0x3d, 0x80000000}}, {@noload}, {@journal_checksum}, {@stripe={'stripe', 0x3d, 0x1b}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@data_ordered}, {@journal_dev={'journal_dev', 0x3d, 0x769}}, {@norecovery}, {@grpid}, {@dax_never}, {@dax_inode}], [{@fowner_lt={'fowner<', r5}}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '\xc6\x92\f\f\xc2\x8d\xafa\bj\xecR]O\xe7\x80\xad\fs*n|\xcf\x97|\'\x06r\x81\xdd\x80*\xd9K\xad\x9b\xe6\x95\xa6\a\xb8Di\xc9\xdc\xd6\xcf\x9f\'L\xc8\x84E$\xce\x84\bp\a\x00N\xacN7\v\x03p\x96\xb2\xcd\x18\x87.\xd2\x81$\x85\xac\xd3\x8fj\xc8\x16\xcf\x16\xaf\xb2\xa5\x8c]\xd9N\x92\x06\xe9\xbd\xd1\x04\xee\xe5U\x91Y\xfa&$z\xb4\xb2J\xcbP\x88\xa5,\xfb\xafS\xef,\xa5\xd7\x12\xbc\x00'/151}}, {@context={'context', 0x3d, 'root'}}, {@measure}], 0x2c}, 0xa, 0x526, &(0x7f00000007c0)="$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") 4m57.759632308s ago: executing program 7 (id=900): socket$key(0xf, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xd}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7e, 0x800000068ff, 0x7, 0x800000000d, 0x7ff, 0x0, 0x9], 0x8003000, 0x202}) socket(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m57.489842525s ago: executing program 1 (id=902): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 4m57.29306185s ago: executing program 1 (id=904): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x180080e, &(0x7f0000000440)=ANY=[@ANYBLOB="757466382c616cbd1b601e694f1e037c6f775f7574696d653d30303030303030322030313030309d3030aa5578c7", @ANYRESHEX=0xee00, @ANYBLOB=',errors=continue,fmask=00000000000000000000001,iocharset=cp861,fmask=00000000000000000000005,iocharset=iso8859-14,utf8,namecase=1,\x00'], 0x1, 0x152f, &(0x7f00000005c0)="$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") pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdirat(r0, &(0x7f0000000600)='./file0\x00', 0x2e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x8882) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x400000f4, 0x0, 0x7}]}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003be8c5ee1568812002b000203000aff3f000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a6c1f004a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000027658fc4b59bd2b8e56858977f6701e974d805859b590ce5af649a701102ffff02dfccebf6ba00087b47949a1dd1e040024f0298432d6628dcd87f4e31", 0xb7) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x437, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20c89}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xffdffffe}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8804}, 0x20000000) 4m42.419467661s ago: executing program 43 (id=900): socket$key(0xf, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xd}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7e, 0x800000068ff, 0x7, 0x800000000d, 0x7ff, 0x0, 0x9], 0x8003000, 0x202}) socket(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m42.209474296s ago: executing program 44 (id=904): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x180080e, &(0x7f0000000440)=ANY=[@ANYBLOB="757466382c616cbd1b601e694f1e037c6f775f7574696d653d30303030303030322030313030309d3030aa5578c7", @ANYRESHEX=0xee00, @ANYBLOB=',errors=continue,fmask=00000000000000000000001,iocharset=cp861,fmask=00000000000000000000005,iocharset=iso8859-14,utf8,namecase=1,\x00'], 0x1, 0x152f, &(0x7f00000005c0)="$eJzs3AucTtX6OPDnWWvtMSbpbZLLsNZ6Nm9yWSRJLklyqSRJkuSWkCQ5kpAYcksakpDck8sQksvEpHG/3y8JSXImSUJyS9b/MzHH6ej86/xOJ7/fmef7+ezPrDVrP2s/e555923ed77pNLh6gxpV6hER/FvwwpdEAIgFgP4AcA0ABABQJr5MfMZ4domJ/95G2B/r4eQrnQG7krj+WRvXP2vj+mdtXP+sjeuftXH9szauf9bG9WcsK9s0Ld+1vGTdhZ//Z2V8/v8vkl5i9JdrSlzfGSDm94Zw/f/vw38jluv/Xyv4PStx/bM2rn9WFXulE2D/C/DrPyvI9k9HuP5ZG9efsazs758Fx8KVfx79Zy8Q+U/+DcT3uPBT/qfrdLhYhiu3/4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2J/gtL9EAUBm+0rnxRhjjDHGGGOMsT+Oz3alM2CMMcYYY4wxxth/HoIACQoCiIFsEAvZIQ4EQEzm+LUQD9dBLrgeckMeyAv5IAHyQwHQYMACQQgFoRBE4QYoDDdCESgKxaA4OCgBJeEmKAU3Q2m4BcrArVAWboNyUB4qQEW4HSrBHVAZ7oQqcBdUhWpQHWrA3XAP3As14T6oBfdDbXgA6sCDUBcegnrwMNSHR6ABPAoN4TFoBI2hCTSFZv+j+BehG7wE3aEHJEJP6AUvQ2/oA32hH/SHV2AAvAoD4TVIgkEwGF6HIfAGDIU3YRgMhxHwFoyEt2EUjIYxMBbGwXiYAO/ARHgXJsFkmAJTIRmmwXR4D2bATJgF78Ns+ADmwFyYB/MhBT6EBbAQUuEjWAQfQxoshiWwFJbBclgBK2EVrIY1sBbWwXrYABthE2yGLbAVtsF22AGfwE74FHbBbtgDn8Fe+PxfjD/1D/GdERBQoECFCmMwBmMxFuMwDnNgDsyJOTGCEYzHeMyFuTA35sa8mBcTMAELYAE0aJCQsCAWxChGsTAWxiJYBIthMXTosCSWxFJ4M5bG0lgGy2BZLIvlsDyWx4pYESthJayMlbEKVsGqWBWrY3W8G+/GnlgTa2ItrIW1sXbm4ymsh/WwPtbHBtgAG2JDbISNsAk2wWbYDJtjc2yBLbAVtsLW2BrbYBtsi22xHbbD9tgeO2AH7IgdsRN2ws7YBbukv5gN8CV8CXtgVdETe2Ev7I1J2fpiP+yHr+AAfBVfxdcwCQfhYHwdX8c3cCiexGHnh+MIHIGVxNs4CkcjibE4DsfhBJyAE3EiTsLJOBmnYjJOw+k4HWfgTJyJ7+Ns/AA/wLk4F+djCqbgAlyIqZiKi/AUpuFiXIJLcRkux2W4ElfhSlyDa3ENrsf1uBE34mbcjFtxK27H7fgJKgD8FHfjbkzCvbgX9+E+3I/78QAewHRMx4N4EA/hITyMh/EIHsGjeAyP4zE8gSfwJJ7C03gaz+JZPIfPJ3xV/5Oiq5NAZFBCiRgRI2JFrIgTcSKHyCFyipwiIiIiXsSLXCKXyC1yi7wir0gQCaKAKCCMMIJEmHGkEFERFYVFYVFEFBHFRDHhhBMlRUlRSpQSpUVpUUbcKsqK20Q5UV60dBVFRVFJtHKVxZ2iiqgiqopqorqoIWqIe8Q9oqaoKWqJWqK2qC3qiAdFXdET++LDIqMyDcQgbCgGYyPRWMiLR6jmYii2EC1FK/GkGI7DsI1o7tqKZ0Q7MQrbi7+I0fic6CjGYifxgugsuoiu4kXRTbRw3UUPMQl7il5iKvYWfURf0U/MwGrifZydvbp4TSSJQWKweF3MxzfEUPGmGCaGixHiLTFSvC1GidFijBgrxonxYoJ4R0wU74pJYrKYIqaKZDFNTBfviRlippgl3hezxQdijpgr5on5IkV8KBaIhSJVfCQWiY9FmlgsloilYplYLlaIlWKVWC3WiLVinVgvNoiNYpPYLLaIrWKb2C52iE/ETvGp2CV2iz3iM7FXfC72iS/EfvGlOCD+KtLFV+Kg+FocEt+Iw+JbcUR8J46KY+K4+F6cED+Ik+KUOC3OiLPiR3FO/CTOCy9AohRSSiUDGSOzyViZXcbJq2QOGWQe/2W8vE7mktfL3DKPzCvzyQSZXxaQWhppJclQFpSFZFTeIAvLG2URWVQWk8WlkyVkSXmTLCVvlqXlLbKMvFWWlbfJcrK8rCAryttlJXmHhMiFbVSV1WR1WUPeLRPhXllT3idryftlbfmArCMflHXlQ7KefFjWl4/IBvJR2VA+JhvJxrKJbCqbycdlc/mEbCFbylbySdlaPiXbyKdlW/mMbCf9xV+R52RH+bzsJF+QnWUX2VX+JM9LL7vLHhJ6guwlX5a9ZR/ZV/aT/eUrcoB8VQ6Ur8kkOUgOlq/LIfINOVS+KYfJ4XKEfEuOlG/LUXK0HCPHynFyvJwg35ET5btykpwsp8ipMllOk30vzjRLyt+Mf+dX4gf+vPWNcpPcLLfIrXKb3C53yE/kTrlT7pK75B65R+6Ve+U+uU/ul/vlAXlApst0eVAelIfkIXlYHpZH5BF5VB6TZ+T38oT8QZ6Up+QpeUaelWfluYs/A1CohJJKqUDFqGwqVmVXceoqlUNdrXKqa1REXavi1XUql7pe5VZ5VF6VTyWo/KqA0sooq0iFqqAqpKLqBrz4C6OKqeLKqRKqpLrpX4lXhdWNqogq+ov4zPwS/0l+zVQz1Vw1Vy1UC9VKtVKtVWvVRrVRbVVb1U61U+1Ve9VBdVAdVUfVSXVSnVVn1VV1Vd1UN9VddVeJKlH1Ui+r3qqP6qv6qf7qFZGxDwPVQJWkktRgNVgNUUPUUDVUDVPD1Ag1Qo1UI9UoNUqNUWPUODVOTVATlFQT1SQ1SU1RU1SySlbT1XQ1Q81Qs9QsNVvNVnPUHDVPzVMpKkUtUAtUqkpVi9QilaYWq8VqqVqqlqvlaqVaqVar1WqtWqvWq/UqTW1Sm9QWtUVtU9vUDrVD7VQ71S61S+1Re9RetVftU/vUfrVfHVAHVLpKVwfVQXVIHVKH1WF1RB1RR9VRdVwdVyfUCXVSnVSn1Wl1Vp1V59Q5dV6dz7jsC0QgAhWoICaICWKD2CAuiAtyBDmCnEHOIBJEgvggPsgVXB/kDvIEeYN8QUKQPygQ6MAENhAXix4NbggKBzcGRYKiQbGgeOCCEkHJ4KagVHBzUDq4JSgT3BqUDW4LygXlgwpBxeD2oFJwR1A5uDOoEtwVVA2qBdWDGsHdwT3BvUHN4L6gVnB/UDt4IKgTPBjUDR4K6gUPB/WDR4IGwaNBw+CxoFHQOGgSNA2a/aHze38yzxOuu+6hE3VP3Uu/rHvrPrqv7qf761f0AP2qHqhf00l6kB6sX9dD9Bt6qH5TD9PD9Qj9lh6p39aj9Gg9Ro/V4/R4PUG/oyfqd/UkPVlP0VN1sp6mp+v39Aw9U8/S7+vZ+gM9R8/V8/R8naI/1Av0Qp2qP9KL9Mc6TS/WS/RSvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vr1Nb9c79Cd6p/5U79K79R79md6rP9f79Bd6v/5SH9B/1en6K31Qf60P6W/0Yf2tPqK/00f1MV1af69P6B/0SX1Kn9Zn9Fn9oz6nf9Lntc+4uM84vRtllIkxMSbWxJo4E2dymBwmp8lpIiZi4k28yWVymdwmt8lr8poEk2AKmAImAxkyBU1BEzVRU9gUNkVMEVPMFDPOOFPSlDSlTClT2pQ2ZUwZU9aUNeVMOVPBVDC3m9vNHeYOc6e509xl7jLVTDWTeSaqaWqaWqaWqW1qmzqmjqlr6pp6pp6pb+qbBqaBaWgamkamkWlimphmpplpbpqbFqaFaWVamdamtWlj2pi2pq1pZ9qZ9qa96WA6mI6mo+lkOpnOprPparqabqab6W66m0STaHqZXqa36W36mr6mv+lvBpgBZqAZaJJMkhlsBpshZogZaoaaYWa4GZFxoWreNqPMaDPGjDXjzDgzwUwwE81EM8lMMlPMFJNsks10M93MMDPMLDPLzDazzRwzx8wz80yKSTELzAKTalLNIrPIpJk0s8QsMcvMMrPCrDCrzCqzxqwx62Cd2WA2mE1mk9litphtZpvZYXaYnWan2WV2mT1mj9lr9pp9Zp/Zb/abA+aASTfp5qA5aA6ZQ+awOWyOmCPmqDlqjpvj5oQ5YU6ak+a0OW3OmjwXz5fexNrsNs5eZXPYq21Oe439x35em88m2Py2gNU2t83zi76x1haxRW0xW9w6W8KWtDdd1i9ny9sKtqK93Vayd9jKl/XvsffamvY+W8veb2vYu3/Rr20fsHXso7YuIoBtbOvbpraBfdQ2tI/ZRraxbWKb2tb2KdvGPm3b2mdsO/vsZf0FdqFdZVfbNXat3WV329P2jD1kv7Fn7Y+2u+1h+9tX7AD7qh1oX7NJdtBl/RH2LTvSvm1H2dF2jB17WX+KnWqT7TQ73b5nZ9iZl/VT7Id2tk21c+xcO8/O/7mfkVOq/cgush/bNBvAErvULrPL7Qq78m+5LrXr7Qa70e60n9otdqvdZrfbHZkXwna33WM/s3vt5/ag/drut1/aA/awTbdf/dzP2L/D9lt7xH5nj9pj9rj93p6wP6jM6Ix9/97+ZM9bb4GQgCQpCiiGslEsZac4uopy0NWUk66hCF1L8XQd5aLrKTflobyUjxIoPxUgTYYsEYVUkApRlG6gzPSKUXFyVIJK0k1Uim6m0nQLlaFbqSzdRuWoPFWginQ7VaI7qDLdSVXoLqpK1ag61aC76R66l2rSfVSL7qfa9ADVoQepLj1E9ehhqk+PUAN6lBrSY9SIGlMTakrN6HFqTk9QC2pJrehJak1PURt6mtrSM9SOnqX29BfqQM9RR3qeOtEL1Jm6UFd6kbrRS9SdelAi9aRe9DL1pj7Ul/pRf3qFBtCrNJBeoyQaRIPpdRpCb9BQepOG0XAaQW/RSHqbRtFoGkNjaRyNpwn0Dk2kd2kSTaYpNJWSaRpNp/doBs2kWfQ+zaYPaA7NpXk0n1LoQ1pACymVPqJF9DGl0WJaQktpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbacd9AntpE9pF+2mPfQZ7aXPaR99QfvpSzpAf6V0+ooO0td0iL6hw/St70Hf0VE6RsfpezpBP9BJOkWn6QydpR/pHP1E58kThBiKUIYqDMKYMFsYG2YP48Krwhzh1WHO8JowEl4bxofXhbnC68PcYZ4wb5gvTAjzhwVCHZrQhhSGYcGwUBgNbwgLhzeGRcKiYbGweOjCEmHJ8KawVHhzWDq8JSwT3hqWDW8Ly4Xlw0fvrxjeHlYK7wgrh3eGVcK7wqphtbB6WCO8O7wnvDesGd4X1grvD0uHD4R1wgfDuuFDYb3w4bB++EjYIHw0bBg+FjYKG4dNwqZhs/DxsHn4RNgibBm2Cq8KW4dPhW3Cp8O24TNhu/DZn8cfWJg5/uRl44lhz7BX+HL4cuj9fXJedH40JfphdEF0YTQ1+lF0UfTjaFp0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10fXRDdGPU+xrZwKETTjrlAhfjsrlYl93FuatcDne1y+mucRF3rYt317lc7nqX2+VxeV0+l+DyuwJOO+OsIxe6gq6Qi7obXGF3oyviirpirrhzroQr6Zq6Zq6Za+6ecC1cS9fKPemedE+5p9zT7mn3jGvnnnXt3V9cB/ec6+ied8+7F1xn18V1dS+6bm58zguvyUTXy/VyvV1v19f1df1dfzfADXAD3UCX5JLcYDfYDXFD3FA31A1zw9wIN8KNdCPdKDfKjXFj3Dg3zk1wE9xEN9FNcpPcFDfFJbtkN91NdzPcDFdp5oWtzHFz3Dw3z6W4FLfAZVwzprpFbpFLc2luiVvilrllboVb4Va5VW6NW+PWuXVug9vgNrlNbovb4ra5bW6H2+F2up1ul7/mwqRur9vn9rn9br874P7q0t1X7qD72h1y37jD7lt3xH3njrpj7rj73p1wP7iT7pQ77c64s+5Hd8795M4778ZFxkcmRN6JTIy8G5kUmRyZEpkaSY5Mi0yPvBeZEZkZmRV5PzI78kFkTmRuZF5kfiQl8mFkQWRhJDXyUWRR5ONIWmRxZElkaWRZZHnE+/xbQl/QF/JRf4Mv7G/0RXxRX8wX986X8CX9Tb7UhbzTvL/Vl/W3+XK+vK/gH/ONfGPfxDf1zfzjvrl/wrfwLX0r/6Rv7Z/ybfzTvq1/xrfzz/r2/i++g3/Od/TP+07+Bd/Zd/Fd/Yu+m3/Jd/c9fKLv6Xv5l31v38f39f18f/+KH+Bf9QP9az7JD/KD/et+iH/DD/Vv+mF+uB8R85YfmXmLDGP9OD/eT/Dv+In+XT/JT/ZT/FSf7Kf56f49P8PP9LP8+362/8DP8XP9PD/fp/gP/QK/0Kf6j/wi/7FP84szHxr7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x3+E7/Tf+p3+d1+j//M7/Wf+33+C7//fOYn0L7yB/3X/pD/xh/23/oj/jt/1B/zx/33/oT/wZ/0p/xpf8af9T/6c/4nf54/s8YYY4wx9ruMv9QUvxy58Di/56/EiL9buRcAXL01X/rfj2dcUa7LfaHdRyTEZnx9pkenhzOXqlUTExMvrpsmISg0FyDzL0EZfn7rwcX+YmgFT0FbaAmlfjX/PqLLWfqN+aO3AsT9XUxGQpn9S/N/AYCJvzL/40+OWFA2PB3//5l/LkCRQpdissOl/mJo9fPzlZZQ+p/kn6f5b+Sf/ctxAC3+NvMFLS7LvyQ8Ac9C27+NMMYYY4wxxhhjl/QRFTpk3n9mvs/m1+7PE9SlmGxwqf9b9+eMMcYYY4wxxhi78p7r0vXpx9u2bdnhX29U/h9F/e5GQ/hPzcyNX214D5D5HQUAvz887teGADIa8s/ci81/yraSLr50/nFo2RkfwP+OUv4RjSt8YGKMMcYYY4z94S5d9P/y++pKJcQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjGVBf8a/E7vS+8gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdaf8vAAD///qe9gQ=") pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdirat(r0, &(0x7f0000000600)='./file0\x00', 0x2e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x8882) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x400000f4, 0x0, 0x7}]}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003be8c5ee1568812002b000203000aff3f000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a6c1f004a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000027658fc4b59bd2b8e56858977f6701e974d805859b590ce5af649a701102ffff02dfccebf6ba00087b47949a1dd1e040024f0298432d6628dcd87f4e31", 0xb7) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x437, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20c89}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xffdffffe}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8804}, 0x20000000) 4m14.611189323s ago: executing program 4 (id=950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_getres(0x4, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = syz_clone(0x4048080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid\x00') ptrace(0x10, r2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) process_vm_writev(r2, &(0x7f0000001980)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f0000001dc0)=[{&(0x7f00000019c0)=""/139, 0x8b}, {&(0x7f0000001a80)=""/79, 0x4f}, {&(0x7f0000001b00)=""/141, 0x8d}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/123, 0x7b}, {&(0x7f0000001d40)=""/107, 0x6b}], 0x6, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@nobh}, {@errors_remount}, {@block_validity}]}, 0x0, 0x480, &(0x7f0000000500)="$eJzs3M1rXFUbAPDn3ny0ffuRvLV+tFaNFiEoJk1atQs3ioKLioIu6jIm0xI6baSJYkuxqUjdCFLQdXEp+Be4E0HUleBWN66kULSb1uJi5N65N51MMmljJpk0+f1gMufMPTP3eXK/zj1nkgA2rYHsRxKxIyJ+jYi+enV+g4H6083r58f/vn5+PIla7c0/k7zdjevnx8um5fu2F5XBNCL9OClWMt/02XMnx6rVypmiPjxz6t3h6bPnnnn/1NiJyonK6dEjRw4fGnn+udFn25JnlteNfR9O7d/76tuXXxs/dvmdH7/O4t1RLG/Mo10GssT/quWalz3Z7pV12M6GctLdwUBYlq6IyDZXT37890VX3N54ffHKRx0NDlhV2bVpS+vFszVgA0ui0xEAnVFe6LP73/KxRl2PdeHai/UboCzvm8WjvqQ70qJNT9P9bTsNRMSx2VtXskes0jgEAECjT8e/OFrribl7wNv9jzQeyJ9/z3/uKuZQ+iPi/xGxOyLui4g9EXF/RN72wYh4aIXxLOz/pFdX+JFLyvp/LxRzW/P7f2XvL/q7itrOPP+e5PhktXKw+J0MRs+WrD6yxDq+ffmXz1ota+z/ZY9s/WVfsIjjanfTAN3E2MxY3iltg2sXI/Z1L5Z/MjcTkETE3ojYt7yP3lUWJp/6an+rRnfOfwltmGeqfZmlN5vlPxtN+ZeSxvnJyQXzk8Nbo1o5OFzuFQv99POlN1qtf0X5t8G1Sv25Yfs3N+lPGudrp5e/jku/fdLynuY/7v9pb/JWPs/cW7z2wdjMzJmRiN7kaF6f9/ro7feW9bJ9tv8PHlj8+N9dvCfL/+GIyHbiRyLi0Yh4rIj98Yh4IiIOLJH/Dy+1XlbmH+mtK7ULHdj+FyMmFj3/ze3/Tdt/+YWuk99/02r9d7f9D+elweKV/Px3B4uFk50umgNcye8OAAAA7hVp/h34JB2aK6fp0FD9O/x74n9pdWp65unjU++dnqh/V74/etJypKuvGA+tTlYrI8ls8Yn18dHRYqy4HC89VIwbf961La8PjU9VJzqcO2x221sc/5k/ujodHbDKti366mjvmgcCdEDzPHo6v3rh9XAygI3K32vD5nWH4z9dqziAtef6D5vXYsf/haa6uQDYmFz/YfO66+P/nwX/xxK4l6XfdToCoIP0/2FTWsnf9a9iYev6CKMzhfW6UfJCRFlI10U8CqtU6PSZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoD3+DQAA//8I+vHt") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setns(0xc9, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pread64(r5, 0x0, 0x0, 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) 4m13.811969893s ago: executing program 4 (id=951): socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4m12.693129312s ago: executing program 4 (id=953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r3, 0x0, 0xb, &(0x7f00000003c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='.\x02\x00', 0x22000402, &(0x7f00000001c0)={[{@noinit_itable}, {@init_itable}, {@noinit_itable}, {@discard}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@usrquota}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@resgid}, {@nolazytime}], [], 0x2c}, 0x1, 0x4ef, &(0x7f00000025c0)="$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") r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000008140)={0x2020}, 0x2020) pread64(r7, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) read$FUSE(r7, &(0x7f0000002640)={0x2020}, 0x2020) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) fcntl$dupfd(r7, 0x0, r7) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) unshare(0x6020400) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) 4m9.533281732s ago: executing program 4 (id=958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) tkill(0x0, 0x13) waitid(0x1, 0x0, 0x0, 0xb, &(0x7f00000003c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='.\x02\x00', 0x22000402, &(0x7f00000001c0)={[{@noinit_itable}, {@init_itable}, {@noinit_itable}, {@discard}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@usrquota}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@resgid}, {@nolazytime}], [], 0x2c}, 0x1, 0x4ef, &(0x7f00000025c0)="$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") r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000008140)={0x2020}, 0x2020) pread64(r6, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) read$FUSE(r6, &(0x7f0000002640)={0x2020}, 0x2020) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) fcntl$dupfd(r6, 0x0, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) unshare(0x6020400) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) 4m6.715655755s ago: executing program 4 (id=960): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a37d3b31", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x3, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000002100)=0x40) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) getsockname(r5, &(0x7f0000000200)=@caif=@util, &(0x7f0000000340)=0x80) r7 = syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="22d20493ad00000000000000", 0xc, 0x4000a01, 0x0, 0x0) fadvise64(r7, 0x7fffffffffffffff, 0x2, 0x5) ptrace(0x4207, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 4m4.671285217s ago: executing program 4 (id=962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$rtc(0xffffffffffffff9c, 0x0, 0x2, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbefa, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x1, 0x709d2a, 0x25dfdbde}, 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0x4000014) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001180)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c726f6469722c636865636b3d72656c617865642c636f6465706167653d3835372c73686f72746e616d653d6c6f7765722c726f6469722c73686f72746e616d653d77696e39352c696f636861727365743d69736f38383539b6392c756e695f786c6174653d302c73686f72746e616d653d6d697865642c757466383d302c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c72a584873b2c747a3d5554432c00"], 0x7f, 0x2ba, &(0x7f0000001240)="$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") open(0x0, 0x101480, 0x24) 3m49.368140959s ago: executing program 45 (id=962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$rtc(0xffffffffffffff9c, 0x0, 0x2, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbefa, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x1, 0x709d2a, 0x25dfdbde}, 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0x4000014) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001180)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c726f6469722c636865636b3d72656c617865642c636f6465706167653d3835372c73686f72746e616d653d6c6f7765722c726f6469722c73686f72746e616d653d77696e39352c696f636861727365743d69736f38383539b6392c756e695f786c6174653d302c73686f72746e616d653d6d697865642c757466383d302c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c72a584873b2c747a3d5554432c00"], 0x7f, 0x2ba, &(0x7f0000001240)="$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") open(0x0, 0x101480, 0x24) 8.282404066s ago: executing program 6 (id=1612): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0x1, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000280)={0x3fffffff, 0x274, "1d982fdac6a8f359377ab260d57c166ff26d8d8acb8ee03a3568b1671ab32eeb", 0x9, 0x3, 0x7fffffff, 0x3, 0x3, 0x6, 0xe9f, 0x100, [0xd, 0x1, 0x7fff, 0x6]}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000b40)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, 0x0) getgroups(0x6, &(0x7f00000006c0)=[0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01, 0x0]) getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) setregid(r4, r5) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x4402) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000600)) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYBLOB="4200eaff0400"]) ioctl$DVB_DEMUX_DMX_EXPBUF(r6, 0xc00c6f3e, &(0x7f0000000200)={0x8, 0x80000, r3}) ioctl$SIOCGIFHWADDR(r8, 0x8927, &(0x7f00000002c0)={'vlan0\x00'}) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f2, 0x2, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x20000010) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x400, 0x270, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@remote, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv6=@local, [0xff, 0x0, 0xffffff00, 0x970a7a48bfb24042], 0x4d2, 0x3507, 0x32, 0x0, 0x0, 0x8}, {@ipv6=@private2, [0xffffff00, 0xff000000, 0x0, 0xff], @ipv4=@local, [0xffffff00, 0x0, 0xff, 0xff000000], 0x4d2, 0x3500, 0x32, 0x0, 0x2, 0xe}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x22}, [0xffffffff, 0xffffffff, 0xff, 0xff000000], @ipv4=@rand_addr=0x64010101, [0xff, 0xff, 0xff, 0xff000000], 0x4d2, 0x3506, 0x7ac758a21c040589, 0x1, 0x18}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xffffff00, 0xff, 0xffffff00], @ipv6=@loopback, [0xffffff00, 0xff, 0xff, 0xffffff00], 0x4d4, 0x34ff, 0x32, 0x1, 0x1, 0x8}], 0x6, 0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x55f8, 0xcf2c0000, 0x3, '\x00', {0x40}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3, 0x8, {0xfffffffffffffffa}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) rt_sigqueueinfo(0x0, 0x11, &(0x7f0000000200)={0x1f, 0x1, 0xffffffc0}) splice(r1, 0x0, r0, 0x0, 0x4ff9c, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000002280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002240)={&(0x7f0000000d80)=@newtclass={0x14b0, 0x28, 0x211, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3}, {0x8, 0xf}, {0xffe4, 0x6}}, [@tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0xffff}, @TCA_QFQ_LMAX={0x8, 0x2, 0x16e2137f}]}}, @tclass_kind_options=@c_htb={{0x8}, {0x1454, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x8, 0x9d6, 0x4, 0x6, 0x6, 0x4, 0x3, 0x3, 0xd4, 0x894, 0x64, 0x6, 0x9, 0x3, 0x9, 0x8, 0xac2, 0x7fff, 0xb9, 0x9, 0x8, 0x40, 0x4, 0x5, 0x10001, 0x5, 0x1200, 0x8, 0x3, 0x5, 0x8000, 0x5, 0x334a, 0x9, 0x0, 0x7fffffff, 0xfffffffd, 0x80000001, 0x6, 0x1, 0x3ff, 0x9, 0x49f6, 0x7, 0x4, 0x83e, 0x6, 0x68, 0xff, 0x4, 0x0, 0x0, 0x7, 0x5, 0x5, 0x58ae, 0x9, 0x101, 0x7, 0x8001, 0x9, 0x9, 0x3, 0x400, 0x0, 0x5, 0x9, 0xdcb, 0xebca, 0x3ff, 0x2, 0x9, 0x0, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x6, 0x4, 0x8000, 0xffffffff, 0x5bb28d7d, 0x6f67, 0x4a, 0x1, 0x0, 0x6, 0xf, 0x7f, 0xb, 0x100, 0x6, 0x8, 0xe, 0x4, 0x7f, 0x59, 0x80000001, 0x8, 0x0, 0x3ff, 0x1571, 0x6, 0x8, 0x9, 0x1, 0x0, 0x800, 0x5, 0x3d4a7b24, 0x1, 0xc, 0x7, 0x4, 0x2, 0xa, 0xa, 0x80000001, 0x10001, 0x9, 0x401, 0x7bc3, 0x6, 0xfffffff7, 0x4, 0x1, 0xb, 0x0, 0x38000, 0x7, 0xce9b61e, 0x2, 0x200, 0xffff8001, 0x0, 0x1, 0x1, 0x7fffffff, 0x0, 0x8, 0x8001, 0x7, 0x4, 0x6, 0x2, 0x8, 0x4, 0x9, 0x27a, 0x70d081bd, 0xf, 0x9, 0x1, 0x9, 0x4, 0xa75, 0x800, 0x2506, 0xffff, 0x9, 0x3, 0xae, 0x5, 0x7, 0x5f11, 0x7, 0x57, 0x5, 0x800, 0x9e, 0x8, 0x1, 0x2, 0x8, 0x5, 0x9e, 0x8, 0x400, 0x4, 0x9, 0xb, 0x81, 0x3, 0x4ee, 0x9, 0x0, 0x468, 0x0, 0xffffff27, 0x2, 0x8, 0x9, 0xe, 0x8, 0x9, 0x2, 0x7fff, 0x0, 0x9, 0x10000, 0x3, 0x4f2089a6, 0x2, 0x3, 0xbd4, 0xc, 0x3, 0x8, 0x4, 0x4, 0x6, 0x6, 0xa9d, 0xa2, 0xc, 0x413, 0x4, 0x54, 0x20, 0x239, 0xbd44, 0x2, 0xd0, 0x100, 0x2, 0x9, 0xfffffff3, 0x4e, 0x8, 0x5, 0x5, 0x5, 0x68, 0x80000000, 0x5, 0x9, 0x3, 0x3, 0xd, 0x4, 0x9, 0x9, 0x9, 0x1, 0x7, 0x8, 0x7, 0xd, 0x4, 0x0, 0x7, 0x7c4a696d, 0x400, 0x8, 0xc]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1, 0x0, 0x200, 0x5, 0x6bff}, {0x9, 0x1, 0x6, 0x3, 0x2, 0x4}, 0xb, 0x822, 0x8000, 0x9, 0x100}}, @TCA_HTB_CTAB={0x404, 0x3, [0x2, 0x3, 0x7, 0x400, 0x8, 0x4f86, 0xfffffffd, 0x1, 0xfffffffe, 0x33f0, 0x2, 0x0, 0x4, 0xb, 0x6, 0x10001, 0x1, 0xfffffffc, 0x9, 0xa, 0x3, 0x5, 0x81, 0x401, 0x0, 0x6, 0x9, 0x3e87, 0x5, 0x5, 0x8, 0x6, 0x1, 0xfffffff4, 0x200, 0x1d2e7a9, 0x9, 0x1, 0x10000, 0x5, 0x6, 0x5, 0x4, 0x0, 0x1, 0x7ad, 0x561, 0x7fffffff, 0x0, 0x9de2, 0x1ff, 0xc751, 0x40, 0x3, 0xc, 0x5, 0x5, 0x158b, 0x10001, 0x4, 0x4, 0x9, 0xbed, 0x3, 0x0, 0x8, 0x10, 0xfffffe00, 0x414, 0x77, 0x3, 0x3, 0x0, 0xcd, 0xffffffff, 0x9, 0xde, 0x4, 0x7, 0xe5, 0x400, 0x80000000, 0xffffffff, 0x3, 0xffffff81, 0x1, 0xc, 0x9, 0x2, 0x5, 0x8bdf, 0xd54, 0x114a, 0x0, 0xffffff01, 0x3, 0x0, 0xd, 0x10000, 0x31, 0x1ff, 0x1, 0x4, 0x1, 0x7, 0x9, 0x4, 0x0, 0x400, 0x80000, 0x1ff, 0x3, 0xe, 0x8, 0xeedf, 0x7, 0xffffff7f, 0x9, 0x2, 0xf64f, 0x7, 0x6, 0x27d8, 0xed, 0x10, 0x3, 0x8, 0xfffffff0, 0x1, 0x4, 0x0, 0x3ff, 0x10000, 0x0, 0x7, 0x2, 0x9, 0x1, 0x7d, 0x9, 0xe55, 0xe0a9, 0x5, 0xc8a, 0x5, 0x7, 0x4, 0x8, 0x200, 0x10000, 0x1, 0x4, 0x7fff, 0x6, 0x3ff, 0x1, 0x7, 0x0, 0x4, 0x9, 0x6, 0x2249800, 0x1, 0x3, 0x5, 0x10001, 0x9, 0x7fff, 0xfffffffb, 0xdc3, 0x2345b30f, 0x5, 0x1, 0x2, 0x3, 0xd, 0xfff, 0x5, 0x3ff, 0x80, 0x17e, 0x1, 0x422, 0xc353, 0x1, 0x8, 0x3, 0x6, 0x4, 0x401, 0x84, 0x50, 0x0, 0x7, 0x8, 0x8, 0xabd, 0x0, 0x0, 0xe, 0x100, 0x0, 0x45f, 0x7, 0x6c, 0x2, 0x0, 0x3, 0x0, 0x5, 0xc52, 0x1, 0x90000000, 0xe, 0x400, 0x57, 0xa, 0x10, 0x6, 0x8001, 0x6, 0x81, 0xfffffd17, 0xffffffff, 0x8, 0x9, 0x3, 0x2, 0x8, 0x2, 0x3, 0x0, 0x7, 0xfffffffd, 0xf, 0x2, 0x3, 0x10, 0x4, 0x8, 0x8, 0x3, 0x100, 0x5, 0xb4, 0x100, 0x2, 0x4, 0x4, 0xf, 0x5, 0x54, 0x80, 0x3, 0x2]}, @TCA_HTB_CTAB={0x404, 0x3, [0x900, 0x81, 0x64, 0xffffff7f, 0x8001, 0x2, 0x6, 0x5, 0x6, 0x5, 0x7fffffff, 0x5, 0x6, 0x9cd7, 0x7, 0x3, 0x8, 0x8001, 0x0, 0xd2, 0x3800000, 0x4, 0x9, 0x8, 0x4, 0x0, 0x7, 0x323, 0x8, 0x8, 0x1, 0x6, 0x10000, 0x1, 0xb1b8, 0xaff, 0x3, 0x10, 0x7, 0x2, 0xb2, 0x6, 0x100, 0xd8, 0x80000000, 0xfffffffc, 0x9a, 0x7, 0xf05, 0x0, 0x7, 0x100, 0x3, 0xfffffff9, 0x2, 0x400, 0x9, 0x8, 0x4, 0x3, 0x1, 0x80000001, 0xd6, 0x3, 0x6, 0x6, 0x200, 0x23, 0x72, 0x4, 0x1, 0x7, 0x2, 0x0, 0x4e19, 0xb85, 0xdf4d, 0x8, 0x5, 0x4, 0x9, 0x2, 0xfffffffa, 0x1347, 0x5, 0x9e, 0x1, 0x4, 0x8, 0x1ff, 0x6, 0xe8, 0x73, 0x9, 0x53, 0x2, 0x9, 0x5, 0x3, 0xc00000, 0x7, 0x1, 0xbd, 0x3, 0x1, 0x2, 0x8, 0x2, 0x1, 0x5, 0x6, 0x7, 0x6, 0x101, 0x6, 0x5, 0x2, 0x2, 0x6, 0xa6f2, 0x3ff, 0x18, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x1, 0x547b, 0x6d3, 0xe17, 0x38, 0x4, 0x6, 0xb291, 0x0, 0x5, 0x100, 0x83b2, 0xe, 0x3, 0x58101b23, 0xfffff48f, 0x9, 0x3, 0x2, 0x6, 0xffffffc0, 0x8, 0x7fff, 0x1, 0x4, 0x6, 0xa9, 0x10000, 0x5, 0x5ad21646, 0x90a, 0x7254675d, 0x0, 0xc, 0x3, 0xb, 0x1, 0x4d, 0x1, 0x3, 0x3, 0x4, 0x7, 0x1, 0x5, 0x0, 0x80000001, 0xffff, 0x6, 0x81, 0x9, 0xa, 0x80000000, 0x8, 0x5, 0x87dc, 0xfffffff9, 0x3, 0x4, 0xffff, 0x2, 0x8, 0xb, 0x1, 0x1, 0xffffffff, 0x80, 0x4, 0xfffffff9, 0xfdd4, 0x6, 0xa, 0x10, 0x100, 0x8, 0xfff, 0x1ff, 0x6, 0x7fff, 0x9212, 0x2, 0x7, 0x8000, 0x3, 0x6, 0x4, 0x3ff, 0x8, 0xe, 0x4, 0x4, 0x1510, 0xef8d, 0x9442, 0x7, 0x1, 0x8, 0xfffffffd, 0x1, 0x5, 0x4, 0xffffffff, 0x7, 0x3, 0x401, 0x800, 0x86, 0x2af, 0x10000, 0x8, 0xa4f, 0x4, 0x8f6, 0x9, 0x4, 0xc1c, 0xa, 0x1, 0x0, 0x10000, 0xdd9, 0x10, 0x3, 0x3858, 0x10000, 0x6, 0x10001, 0x3, 0x1]}, @TCA_HTB_RTAB={0x404, 0x4, [0x764e, 0x0, 0x3e, 0x5, 0xd2e, 0x800, 0xee, 0xffff159b, 0x5, 0x9e9, 0x1ff, 0x9, 0x6, 0x4d, 0xb, 0x1, 0x8, 0x9f82, 0x238, 0xe2, 0x101, 0x4, 0x9, 0x10000, 0x8f, 0xffffffff, 0x189, 0xfffffff8, 0x2, 0x8, 0x0, 0x1ff, 0x22d, 0x4, 0x0, 0x800, 0x8, 0x2, 0x206, 0x1, 0xc, 0x9, 0x100, 0xaa1, 0x1000, 0x5da, 0x2, 0x6, 0x1, 0x1, 0x7, 0x4, 0x5, 0x1ff, 0x5, 0x74c, 0x9, 0x7fffffff, 0x9, 0x5, 0x8, 0xfffffff9, 0x3, 0x4, 0x1ff, 0x33, 0x3, 0x7, 0x7, 0x9, 0x1, 0x83, 0x1, 0x6, 0x8, 0x521, 0x2, 0x0, 0x6, 0x3ff, 0x6, 0x8, 0x400, 0xffff8001, 0x80000000, 0x8, 0x9, 0x2, 0x9, 0x1, 0x6, 0x6, 0x2, 0x7, 0x3, 0x3, 0xffffffff, 0x3ff, 0x1000, 0x5, 0x7ff, 0x3, 0x4, 0x6, 0x7, 0xd59, 0x48b, 0x7, 0x0, 0x6, 0x3, 0x6, 0x0, 0x3, 0x8001, 0x8000, 0xf9, 0xf, 0x1a, 0x2, 0x7d4, 0x2, 0x1fe9, 0x7, 0x6618, 0x2, 0x6, 0x5, 0x7, 0x9, 0x7fff, 0x3, 0xe0, 0x0, 0x3, 0x2, 0x937, 0xb, 0x8, 0x4cf1, 0x101, 0x9, 0x0, 0x5, 0xffffffff, 0xc0d, 0x10, 0xff, 0x4907, 0x4, 0xfff, 0x1, 0x4, 0x1, 0x0, 0x2, 0x7, 0xb, 0x37bd, 0xff, 0x0, 0x4, 0x6, 0x2, 0x1, 0x6, 0x40, 0x0, 0x8, 0xfffffffe, 0x7fff, 0x652, 0x3, 0x4, 0x3, 0x1, 0x0, 0x5, 0x9, 0x2, 0x18000, 0x9, 0x7, 0x3ec, 0x96, 0xfffffff1, 0xb, 0xe, 0x9, 0x6, 0x4, 0x0, 0x6, 0x5, 0x1, 0x1ff, 0x32a, 0x8000, 0x8, 0x8e, 0x7, 0xfff, 0x3, 0x1, 0x40, 0x9, 0x0, 0x2, 0xfffffffa, 0x0, 0x6, 0xf525e8a, 0x0, 0x5, 0x4, 0x80000001, 0x4, 0x80000000, 0x1, 0x5, 0x1, 0x6, 0x3, 0x0, 0x5, 0x8001, 0x7, 0x200, 0x5ab7f019, 0x9, 0x2, 0x5, 0x7, 0x6, 0x8, 0x34f, 0x3, 0x4, 0x44, 0x267, 0x2, 0x7, 0x4, 0x3, 0x8, 0x1, 0x8, 0x35d, 0x401, 0xd0, 0x4, 0x6, 0xd, 0xc, 0x5, 0x10]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3000, 0x8, 0x7, 0xfffffff0, 0x9, 0x1, 0x1, 0x6, 0xfffffff8, 0xfff, 0x74, 0x600000, 0xf047, 0x0, 0x1ff, 0x0, 0x10001, 0x7, 0x8, 0x6, 0x7, 0xfffffffe, 0x7, 0xe, 0x80000000, 0x8000, 0xfff, 0x8, 0x145, 0x80, 0x1, 0x6, 0x8, 0xc, 0x1, 0x1, 0xf0000000, 0xf, 0x7b50, 0x4, 0x101, 0xd, 0xd2a, 0x0, 0x7, 0x4, 0x9, 0x8, 0x0, 0x200, 0x3, 0x44f7, 0xb, 0xb9d, 0x10001, 0x4, 0x7, 0x5, 0x4, 0x3, 0x9, 0xd63, 0x7, 0x6, 0x1000, 0xc, 0x6, 0x6, 0x19, 0x9, 0x4, 0x1, 0x1, 0x9, 0x0, 0xd8, 0x9, 0xce, 0xb, 0x9, 0x6, 0xfe6, 0xffff263c, 0x10000, 0x7, 0xffffffff, 0x2, 0x800, 0x10, 0xaf16, 0xfffffc00, 0x7, 0xe, 0x3, 0x3e5c, 0x1, 0x80000001, 0x100, 0x1, 0x16, 0x8, 0x0, 0x1, 0x9, 0x6, 0x7, 0x40, 0xc, 0x4, 0xe41, 0xe, 0x5, 0x9, 0x1, 0x10001, 0x4, 0x401, 0x7, 0x1, 0x9, 0x8, 0xff, 0x10, 0x9, 0x0, 0x1b0, 0x401, 0x5, 0x10, 0xffffffff, 0xfffff574, 0x0, 0x9, 0x7, 0x6a, 0x73, 0x80, 0x98, 0x5, 0x101, 0x9, 0xb18, 0x3, 0x9, 0x5, 0x24b, 0xb82, 0x3, 0x0, 0x9, 0x2e, 0x9, 0x40, 0xfffffff9, 0x9, 0x9, 0x7, 0xff, 0xc9, 0x2, 0x89c, 0x4, 0x1858, 0x42, 0x1, 0x5, 0x3, 0x3, 0x4, 0x3, 0x8, 0x3, 0xfff, 0x1b, 0x2227e10d, 0x5, 0x1, 0x7, 0x80000001, 0x9, 0x7, 0x7, 0x5, 0x95a, 0x2, 0x5, 0xfff, 0xad27, 0x0, 0x6a9c, 0x8000, 0x3, 0x8000, 0x5, 0x3, 0x1, 0x804, 0x8, 0x2, 0x7, 0x9, 0x7fff, 0xfffffff7, 0x4, 0x6, 0xffff, 0x8, 0x9, 0x0, 0x7, 0x0, 0x10, 0x45f0, 0xfffffff8, 0x9, 0x7, 0xc, 0xfffffff8, 0x2, 0x5, 0x8, 0x7fff, 0x8, 0x5, 0x80000001, 0x475e, 0xd84, 0x8, 0x8, 0x40, 0x0, 0x8, 0x1, 0x1, 0x10001, 0x6ff81e9d, 0x6, 0x4, 0x2, 0x8, 0x7fff, 0x2, 0x6, 0x3ff, 0x5, 0xc61, 0x0, 0xfffffffb, 0x7fff, 0x3, 0x3, 0x61000000, 0x5, 0x7f, 0xb, 0x6]}, @TCA_HTB_RATE64={0xc, 0x6, 0x3}]}}, @tclass_kind_options=@c_sfb={0x8}]}, 0x14b0}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 7.134371815s ago: executing program 6 (id=1619): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4cc, &(0x7f0000000c80)="$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") keyctl$join(0x1, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000006c0)='.\x00', 0x40001a2) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x4, 0x0, 0x4, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0x12}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000100)=0x4, 0x8112) 6.232055687s ago: executing program 9 (id=1623): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x34, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 5.934138554s ago: executing program 2 (id=1625): r0 = socket(0x10, 0x803, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r0, 0x0, 0x28880) unshare(0x400) fallocate(0xffffffffffffffff, 0x50, 0x1, 0x2000402) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) 5.933704974s ago: executing program 0 (id=1626): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="3f000000010000", 0x7) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x50000, 0x100) fanotify_mark(r0, 0x9, 0x800001a, r2, &(0x7f00000001c0)='./proc\x00') mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, 0x0, 0x0) sendto$l2tp(r3, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r4, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/158, 0x9e}], 0x1, 0x80, 0x800003) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r5, 0x0, &(0x7f0000000a80)) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000080)=0x3, 0x4) recvfrom$l2tp(r3, 0x0, 0x0, 0x10062, 0x0, 0x0) name_to_handle_at(r2, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', &(0x7f0000000300)=@reiserfs_2={0x8, 0x2, {0xa59, 0x6}}, &(0x7f0000000340), 0x1000) syz_emit_ethernet(0x56, &(0x7f0000000600)={@local, @empty, @void, {@canfd={0xd, {{0x2, 0x1}, 0x18, 0x1, 0x0, 0x0, "371e24514946aac7d2cceeb52cc5c621e3dbdfb6d7f5bad76c06497d2eb0053f39928023c9327c03ba4919d4ed5f5cec0c292354ce04195fcae8cf558a9b5568"}}}}, &(0x7f0000000680)={0x2, 0x1, [0x1ff, 0xf27, 0x1ae, 0x7b1]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='* ./ 14 483647 139296 0 0 0\n', 0x1d) socket$nl_generic(0x10, 0x3, 0x10) 5.136513374s ago: executing program 6 (id=1627): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f18a1, 0x0, 0x83, 0x0, &(0x7f0000000480)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x52c00) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000800)={0x40, 0x3, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x40}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x20008044) 5.075224755s ago: executing program 9 (id=1628): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) symlink(0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) r1 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f0000000140)="$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") ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x42021000) 5.053285985s ago: executing program 0 (id=1629): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x4000400) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x38}}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 4.971932138s ago: executing program 2 (id=1630): r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.924462499s ago: executing program 6 (id=1631): socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b40)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) 4.835174721s ago: executing program 2 (id=1632): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 4.694416484s ago: executing program 2 (id=1633): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x884, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x1000003, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xfffffd0b, 0x4, 0x3, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x1, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x80, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x5, 0x56, 0x645ec805, 0x4, 0x3, 0xfffffffb, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x5ffee5c7, 0x8, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0x7, 0x3ff, 0x85f, 0x8, 0x7, 0x3, 0x2000002, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x9, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x5, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x9, 0x8, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58ba, 0x5, 0x59b1, 0x40005, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x5, 0x8, 0x2, 0x3ff, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x5, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x20000000, 0x859, 0xaedb, 0x7, {0x7, 0x2, 0xd, 0x8, 0x204, 0x95a5}, {0x8, 0x2, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x14, 0x5, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0xc, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0xc, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x200043, 0x1, 0x7, 0x38095a10, 0x6, 0x8333f, 0x7, 0xc8a, 0x6, 0x1, 0x3, 0x7f, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x5, 0x4, 0x4, 0x0, 0x7f, 0x9, 0x6, 0x4, 0x4, 0x2, 0x9, 0x2, 0xffffff78, 0x4, 0x4e, 0x3, 0x8004, 0x1ff, 0x4, 0x4, 0x5b3a, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x4000001, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x7, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2002b36, 0x60f63eb, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7d, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x5, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x1, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x6, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) 4.693660904s ago: executing program 2 (id=1634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060300000000000000000000000000140007800800114000000000050015002000000005000100060000000500050002000000050004000000000011000300686173683a6e65742c6e657400000000090002"], 0x60}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', 0x810000, &(0x7f000001fa80)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7bed9440aee9df8636110f251ff75794e847bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c977c01b4a8a4e35f14d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYRES64, @ANYRES64, @ANYRES8, @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRESDEC], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x10003}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) signalfd(0xffffffffffffffff, &(0x7f0000000340)={[0x7]}, 0x8) r6 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001b0001e0000002000000000000000000000000000000000000000000000000000000fe00004000000000000a0000008748f53363c545d3d95f2096e05f9357d0d4a736724cb932ec2eac9f99c45869520b25b5454b8ca97950dc02fe03b5a8e6b0560cd8c2388ee9059a526787cd7a2f159dca003b3f13a57e16c43a7cce66cbe251770abca8d64b57b9899be4dcc7571dccdb08f0962099c571eee03d4e7b96b61fabc8325dd6362ad07ef6c4e9e78bfea26332c45477a269ff7a115b2dc977fec800024edfcb668c2cc7f781c06be2dffa2d0c62aa7ee995230ee0078f15e564a23d45dc2db74fef49c8d2b3d2f992", @ANYRES32=0x0, @ANYRES16=r6, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000fbffffffffffffff0000001000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c0015005a073500c0000000"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) lseek(0xffffffffffffffff, 0x2000, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@noblock_validity}, {@test_dummy_encryption}, {@errors_continue}, {@nolazytime}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000649, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@delalloc}, {@delalloc}, {@dioread_lock}, {@data_writeback}, {@noblock_validity}, {@minixdf}, {@block_validity}, {@acl}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x0, 0x60d, &(0x7f0000000800)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) umount2(&(0x7f0000000040)='.\x00', 0x2) sendfile(r7, r7, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 3.930085443s ago: executing program 0 (id=1635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_getres(0x4, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid\x00') ptrace(0x10, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) process_vm_writev(0x0, &(0x7f0000001980)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f0000001dc0)=[{&(0x7f00000019c0)=""/139, 0x8b}, {&(0x7f0000001a80)=""/79, 0x4f}, {&(0x7f0000001b00)=""/141, 0x8d}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/123, 0x7b}, {&(0x7f0000001d40)=""/107, 0x6b}], 0x6, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8881f5c0a000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setns(0xc9, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pread64(r3, 0x0, 0x0, 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) 3.914479703s ago: executing program 9 (id=1636): socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) 3.861110535s ago: executing program 6 (id=1637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 3.806149226s ago: executing program 0 (id=1638): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ftruncate(r3, 0x51a9497) process_vm_writev(0x0, &(0x7f0000001c80)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 3.318501778s ago: executing program 3 (id=1639): r0 = socket$packet(0x11, 0x2, 0x300) epoll_create1(0x80000) syz_open_procfs(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) socket$pppoe(0x18, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, 0x0, 0x0) lseek(r1, 0xffffffffffffffff, 0x1) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc058560f, &(0x7f0000000140)={0x0, 0x1, 0x0, "18e889d54b38429faa8ff62438efed752e685d72d09382b392b049e339589830"}) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xf, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0xfffffc01}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b40)=""/4113, 0x1011}, {&(0x7f0000000380)=""/201, 0xc9}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000a40)=""/100, 0x64}, {&(0x7f0000004b00)=""/4098, 0x1002}, {&(0x7f0000004ac0)=""/41, 0x29}], 0x6}, 0x19}], 0x3, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r5, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4, 0x6, @multicast}, 0x14) 2.770858082s ago: executing program 9 (id=1640): r0 = socket(0x10, 0x803, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r0, 0x0, 0x28880) unshare(0x400) fallocate(0xffffffffffffffff, 0x50, 0x1, 0x2000402) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) 2.706370763s ago: executing program 6 (id=1641): r0 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@noauto_da_alloc}, {@i_version}, {@init_itable}]}, 0x1, 0x758, &(0x7f00000017c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82441, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$eJzs3c9OE10Yx/HfmSlteeHFUTAmxoVBia4M4Ma4aWKI1+BGI9KaEBqIiImysXFtvAD3bLwAL8KVMXGNK1deALsxZ3pKz7QzbYHQAfl+ktrO9Px5zsy0c56RZgTgwnq0sr93/7d9GClUKOmhFNi3bqok6aquVd9s7qzvNBv1QQ2FUlXJw0hJTdNXZm2zkVXV1ktqOJFdKmnaX4fTEcdx/KvoIFCkqnsOs94MpIr7dIZ+4bOs0rM80bPcCqXWGOM5i8yBDvRWM0XHAQAolmmf3wN3np928/cgkBbcad8////8v+B4T+aODooOoWDe+T/JsmJj9++l5K1uvmc06cp3ssSj9mPnYmW1j6zUBNOks8r+ZDGJJZh8ud5s3FvbatYDfVAtYfy8cE5STXWXs2ZF29/0fMa6tLK/sD+sdK6pZAwTdgzL3fhrNa/IbFanx93aozDfzHfzzET6rPrh/K8UG3/Mbk89nujGv5jX3Narp/Y5apfKGeVluxtK19MbduAow7yMRG5LxaHSFwiidJzlzFpl9dRqj24pryfXzmxmreUhteZsrS9ere7RnF/ztJlP5omZ1x991Yo3/w/s1l5Q/yczu5GkpDsyBo6nlJSM/FWtG5klg6OPBUfU3cYf9UIPNPP63e7GarPZ2B73CxvD2Du9mC8i9a7pHARnJcLjvbDfsf4aRY3t0nh6L59401XdTrGTmf4yld2N1YpfuD3Szgmxt8HOx3qE3jsX8IZGOMZvJRSmu9Pzy7wX/xPzD7NfHqad/3n5ymKS9Nh/ogHz9HjYtM1rcSkjN+heqv/Pa8m46/P5GdBUZgbX0mg5V1L31l3ptrdyf68yKOeKdEWH2fD5Z1b0Q8+5/g8AAAAAAAAAAAAAAAAAAHDejOPXGl53/B05AAAAAAAAAAAAAAAAAAAAAADHkH//36pO8f6/qd8BjHz/394bewI4kb8BAAD//+jIZ98=") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f00000001c0)='./config\x00', &(0x7f0000000280), &(0x7f0000000340)=@v3={0x3000000, [{0xffff, 0x9000}, {0x7, 0x9}], r3}, 0x18, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$CAPI_GET_ERRCODE(r4, 0x80024321, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.546659957s ago: executing program 0 (id=1642): r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.308593663s ago: executing program 0 (id=1643): r0 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@noauto_da_alloc}, {@i_version}, {@init_itable}]}, 0x1, 0x758, &(0x7f00000017c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82441, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$eJzs3c9OE10Yx/HfmSlteeHFUTAmxoVBia4M4Ma4aWKI1+BGI9KaEBqIiImysXFtvAD3bLwAL8KVMXGNK1deALsxZ3pKz7QzbYHQAfl+ktrO9Px5zsy0c56RZgTgwnq0sr93/7d9GClUKOmhFNi3bqok6aquVd9s7qzvNBv1QQ2FUlXJw0hJTdNXZm2zkVXV1ktqOJFdKmnaX4fTEcdx/KvoIFCkqnsOs94MpIr7dIZ+4bOs0rM80bPcCqXWGOM5i8yBDvRWM0XHAQAolmmf3wN3np928/cgkBbcad8////8v+B4T+aODooOoWDe+T/JsmJj9++l5K1uvmc06cp3ssSj9mPnYmW1j6zUBNOks8r+ZDGJJZh8ud5s3FvbatYDfVAtYfy8cE5STXWXs2ZF29/0fMa6tLK/sD+sdK6pZAwTdgzL3fhrNa/IbFanx93aozDfzHfzzET6rPrh/K8UG3/Mbk89nujGv5jX3Narp/Y5apfKGeVluxtK19MbduAow7yMRG5LxaHSFwiidJzlzFpl9dRqj24pryfXzmxmreUhteZsrS9ere7RnF/ztJlP5omZ1x991Yo3/w/s1l5Q/yczu5GkpDsyBo6nlJSM/FWtG5klg6OPBUfU3cYf9UIPNPP63e7GarPZ2B73CxvD2Du9mC8i9a7pHARnJcLjvbDfsf4aRY3t0nh6L59401XdTrGTmf4yld2N1YpfuD3Szgmxt8HOx3qE3jsX8IZGOMZvJRSmu9Pzy7wX/xPzD7NfHqad/3n5ymKS9Nh/ogHz9HjYtM1rcSkjN+heqv/Pa8m46/P5GdBUZgbX0mg5V1L31l3ptrdyf68yKOeKdEWH2fD5Z1b0Q8+5/g8AAAAAAAAAAAAAAAAAAHDejOPXGl53/B05AAAAAAAAAAAAAAAAAAAAAADHkH//36pO8f6/qd8BjHz/394bewI4kb8BAAD//+jIZ98=") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f00000001c0)='./config\x00', &(0x7f0000000280), &(0x7f0000000340)=@v3={0x3000000, [{0xffff, 0x9000}, {0x7, 0x9}], r3}, 0x18, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$CAPI_GET_ERRCODE(r4, 0x80024321, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.208626166s ago: executing program 3 (id=1644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) setrlimit(0x4, &(0x7f0000000040)={0x71, 0x1}) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1.756123737s ago: executing program 3 (id=1645): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r1, r2, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r1, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000340)="10e5a88a22d4", 0x6, 0x8081, 0x0, 0x0) 1.713140998s ago: executing program 9 (id=1646): setns(0xc9, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x81c04a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2f7, &(0x7f0000000880)="$eJzs3E9rHGUYAPBnNrN/aoXNwZMIDujBU2l69ZIiDYg5WXJQD7rYFGQ3CAkEWsQxJ/HmF/ATCIJfQbx68eZR8AN4rFAYmdl3urvN7LZKE7H9/S558r7v877P7AzJ5JDnk9eOpneKuHv2xe8xGmXR243deJDFdvSi9VWs2P02AID/swdVFX9Wcx3Tv33zKLyyMpFFxOgS6gMAnr0n/P5P8kX446WUBQBcoNsffPjezf39W+8XxSj2jr4+Paj/sq+/zudv3o3PYhaHcT3G8TCieVHoR/O2UId7VVWVeVHbjjePytODOvPo41/S/j+/nIKdGMd2EzVb9FKw9+7+rZ1ibim/rOt4KZ0/qM+/EeN4JSWnt5U2/0ZHfhwM4q03luq/FuP49dP4PGZxpzl7kf/lTlG8U7/ifFSXV+dn5enBsFm3UG21h5eXeH8AAAAAAAAAAAAAAAAAAAAAAHg+XSuKouhHMYymf089lPrvbD2sv+lH0dpe7c8zz8/ajZb7A1VVVVbxXdtf53pRFFVauMjP49V8ubEgAAAAAAAAAAAAAAAAAAAAvLhO7t2fTmazw+POoBqvneoM2m4AeUT8dTvi6bLOB7tLI6/H5sXDdOZkNuulcHVNvjwSW+2aLKIZGa7ZOfJHzQz+5VU8dXDlXM0p+P6HrqzB6o3LY2nN6MmH9rvPepZB+3RNJ1l0rhnGdHLWjIzmD0nTCGKxZhBdWW0TiVhMDdaVUcU/efwGnVPjTVl1Lef3udoE5ZpPvg4i21TY23/MrzCNZI9fxaD5VDvT+ymIrsKaZ6P7XjwWxGiefv5nRaZbBwAAAAAAAAAAAAAAAAAAXKjFf/92TJ5tTO1VwwsrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu1clPV1Nw7/50Mssjoglmh8cna4MyJW9ak4JBHJ/8l9cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAi+HvAAAA//9QulZb") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001c00210729bd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="4000000a0a000200aaaaaaaaaa0900000c000e"], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r7 = epoll_create1(0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000000)={0xa0028010}) 1.61088311s ago: executing program 3 (id=1647): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, 0x0, 0x24000880) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x1c3001, 0x11) write$tcp_mem(r2, &(0x7f00000002c0)={0x17, 0x2d, 0x5, 0x3a, 0x73be, 0x2c}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, '\x00', @bt={0x8, 0x7, 0x71c7, 0x5, 0x6, 0x3, 0x15, 0xd}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x902, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x4, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x10, &(0x7f00000010c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000efff85000000630000001500020000000000bf010000000000008500000056000000b70000000200100095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r7, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(0x3) 514.774437ms ago: executing program 3 (id=1648): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x201, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0xfffffffd, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x100002, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffffd, 0x18b, 0x1000, 0x2, 0x8000005], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0xd82, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4"], 0x1a4}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 297.647112ms ago: executing program 9 (id=1649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) setrlimit(0x4, &(0x7f0000000040)={0x71, 0x1}) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 131.395076ms ago: executing program 3 (id=1650): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="010000000400000008000000010000f200010000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="010000000300"/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300)=r4, 0x12) write$cgroup_freezer_state(r3, &(0x7f00000004c0)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) socket$alg(0x26, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000080)={0x10, [0x1, 0x3ff, 0x1], [{0x82, 0x6, 0x0, 0x1, 0x1, 0x1}, {0xa5, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x8000, 0x2, 0x1, 0x1}, {0x1, 0x8, 0x0, 0x1}, {0x4, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x8, 0x1}, {0xd, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x401, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x8, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x4, 0x0, 0x1, 0x1}, {0xc, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x2}], 0x10001}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x5, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0xc, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9ed, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x90000000, 0x7, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffc, 0xffbffff8, 0x1000, 0x100, 0x1, 0x3f8, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x2, 0x4, 0x0, 0x0, 0x6], [0x714, 0x20000, 0x0, 0xffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0xb5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x40, 0x40, 0x5, 0xe, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x5, 0x55], [0x0, 0x0, 0x0, 0x5d71, 0x0, 0xbd8f, 0x1, 0x4, 0x0, 0xfffffffd, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, 0x2, 0x0, 0x10001, 0x810, 0x2, 0x0, 0x10000000, 0x800000, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xc09, 0x6, 0xfffffffc, 0x1, 0x1d, 0x10, 0x0, 0x4, 0x80000000], [0x4, 0x0, 0x2, 0xfffffffe, 0x400, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x0, 0x7ce1, 0x0, 0x0, 0x0, 0x5, 0x7e4, 0x2, 0x0, 0x8, 0xfffffc01, 0x91a, 0x3, 0x0, 0xdca2, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x2001, 0xfffffffd, 0x80, 0xffffffff, 0xffffffff, 0x0, 0xae, 0x0, 0xc, 0x400000, 0x2, 0x0, 0x10200000, 0x0, 0x9, 0x0, 0x0, 0x40008001, 0x40000, 0x2, 0x1]}, 0x45c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000240)={0x0, 0x0, {0x13, 0x2f, 0x6, 0x1f, 0x2, 0x8, 0x5, 0x163, 0xffffffffffffffff}}) 0s ago: executing program 2 (id=1651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) kernel console output (not intermixed with test programs): 4] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.679740][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 728.690759][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 728.738849][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.767972][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 728.778949][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 728.797104][ T9637] ldm_validate_partition_table(): Disk read failed. [ 728.848248][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 728.859245][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 728.915975][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 728.926988][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 729.617084][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 729.628061][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 729.700202][ T154] bond0 (unregistering): Released all slaves [ 729.715428][ T9637] Dev loop7: unable to read RDB block 0 [ 729.731347][ T9637] loop7: unable to read partition table [ 729.737318][ T9637] loop7: partition table beyond EOD, truncated [ 729.810135][T10168] ldm_validate_partition_table(): Disk read failed. [ 729.825813][T10168] Dev loop7: unable to read RDB block 0 [ 729.857080][T10168] loop7: unable to read partition table [ 729.863062][T10168] loop7: partition table beyond EOD, truncated [ 729.878321][T10168] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 729.936073][ T154] team0 (unregistering): Port device team_slave_1 removed [ 730.177664][ T9] Bluetooth: hci4: Frame reassembly failed (-84) [ 730.255902][ T4226] Bluetooth: hci5: command 0x0419 tx timeout [ 730.484316][ T154] team0 (unregistering): Port device team_slave_0 removed [ 730.637081][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.685519][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.182481][T10189] loop6: detected capacity change from 0 to 16 [ 731.281153][T10189] erofs: (device loop6): mounted with root inode @ nid 36. [ 731.318628][T10189] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 731.327870][T10189] overlayfs: missing 'lowerdir' [ 731.711938][ T154] bond0 (unregistering): Released all slaves [ 731.975093][T10196] loop6: detected capacity change from 0 to 512 [ 733.188989][T10201] loop2: detected capacity change from 0 to 512 [ 733.226962][T10200] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[10203] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10200] [ 733.491937][ T4226] Bluetooth: hci4: command 0x1003 tx timeout [ 733.608523][T10196] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 733.754992][ T4198] Bluetooth: hci4: sending frame failed (-49) [ 733.843272][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 735.125174][T10094] chnl_net:caif_netlink_parms(): no params data found [ 735.900660][T10220] loop2: detected capacity change from 0 to 512 [ 736.029898][ T1108] Bluetooth: hci4: command 0x1001 tx timeout [ 736.274120][ T4198] Bluetooth: hci4: sending frame failed (-49) [ 736.546810][T10228] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[10231] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10228] [ 736.575489][T10228] binder: 10227:10228 ioctl c0306201 200000000080 returned -14 [ 736.588142][T10228] binder: 10227:10228 ioctl c0306201 2000000003c0 returned -14 [ 736.599170][T10228] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[10231] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10228] [ 736.682156][ T5157] Bluetooth: hci6: Frame reassembly failed (-84) [ 736.775198][T10242] binder: 10236:10242 ioctl c0306201 200000000080 returned -14 [ 736.785142][T10242] binder: 10236:10242 ioctl c0306201 2000000003c0 returned -14 [ 736.837600][T10094] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.905897][T10094] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.963322][T10094] device bridge_slave_0 entered promiscuous mode [ 737.092489][T10094] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.208607][T10094] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.242879][T10094] device bridge_slave_1 entered promiscuous mode [ 737.437248][T10094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.507665][T10094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.805791][T10094] team0: Port device team_slave_0 added [ 737.824943][T10094] team0: Port device team_slave_1 added [ 737.904482][T10259] loop2: detected capacity change from 0 to 128 [ 738.037521][T10259] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 738.084699][T10259] 9pnet: Insufficient options for proto=fd [ 738.308383][ T4790] Bluetooth: hci4: command 0x1009 tx timeout [ 738.665082][T10094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.709019][ T4790] Bluetooth: hci6: command 0x1003 tx timeout [ 738.715737][T10234] Bluetooth: hci6: sending frame failed (-49) [ 738.739685][T10094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.884585][T10241] FAULT_INJECTION: forcing a failure. [ 738.884585][T10241] name failslab, interval 1, probability 0, space 0, times 0 [ 738.917114][T10094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.960265][T10241] CPU: 1 PID: 10241 Comm: syz.9.1012 Not tainted syzkaller #0 [ 738.967768][T10241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.977823][T10241] Call Trace: [ 738.981108][T10241] [ 738.984040][T10241] dump_stack_lvl+0x188/0x250 [ 738.988732][T10241] ? show_regs_print_info+0x20/0x20 [ 738.993937][T10241] ? load_image+0x410/0x410 [ 738.998472][T10241] ? __might_sleep+0xf0/0xf0 [ 739.003075][T10241] ? __lock_acquire+0x7d40/0x7d40 [ 739.008130][T10241] should_fail+0x383/0x4b0 [ 739.012570][T10241] should_failslab+0x5/0x20 [ 739.017081][T10241] slab_pre_alloc_hook+0x51/0xc0 [ 739.022019][T10241] kmem_cache_alloc_trace+0x47/0x290 [ 739.027300][T10241] ? kernfs_fop_open+0x887/0xba0 [ 739.032281][T10241] kernfs_fop_open+0x887/0xba0 [ 739.037069][T10241] ? kernfs_fop_mmap+0x4a0/0x4a0 [ 739.042015][T10241] do_dentry_open+0x7f7/0xf90 [ 739.046722][T10241] ? vfs_open+0x2b/0x80 [ 739.050884][T10241] path_openat+0x2718/0x2fb0 [ 739.055502][T10241] ? __kasan_slab_alloc+0xa9/0xc0 [ 739.060534][T10241] ? do_filp_open+0x400/0x400 [ 739.065239][T10241] do_filp_open+0x1df/0x400 [ 739.069750][T10241] ? vfs_tmpfile+0x300/0x300 [ 739.074359][T10241] ? _raw_spin_unlock+0x24/0x40 [ 739.079210][T10241] ? alloc_fd+0x59e/0x650 [ 739.083564][T10241] do_sys_openat2+0x14b/0x500 [ 739.088243][T10241] ? __lock_acquire+0x7d40/0x7d40 [ 739.093273][T10241] ? do_sys_open+0xe0/0xe0 [ 739.097692][T10241] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 739.103690][T10241] ? lock_chain_count+0x20/0x20 [ 739.108547][T10241] __x64_sys_openat+0x135/0x160 [ 739.113405][T10241] do_syscall_64+0x4c/0xa0 [ 739.117829][T10241] ? clear_bhb_loop+0x30/0x80 [ 739.122515][T10241] ? clear_bhb_loop+0x30/0x80 [ 739.127193][T10241] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 739.133099][T10241] RIP: 0033:0x7f7babcf01d9 [ 739.137520][T10241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.157385][T10241] RSP: 002b:00007f7ba9f48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 739.165807][T10241] RAX: ffffffffffffffda RBX: 00007f7babf77fa0 RCX: 00007f7babcf01d9 [ 739.173781][T10241] RDX: 0000000000000003 RSI: 0000200000002380 RDI: ffffffffffffff9c [ 739.181750][T10241] RBP: 00007f7babd87888 R08: 0000000000000000 R09: 0000000000000000 [ 739.189720][T10241] R10: 00000000000001ab R11: 0000000000000246 R12: 0000000000000000 [ 739.197689][T10241] R13: 00007f7babf78038 R14: 00007f7babf77fa0 R15: 00007ffe5b98e108 [ 739.205673][T10241] [ 739.230892][T10094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.261198][T10094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.351732][T10094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.557854][T10094] device hsr_slave_0 entered promiscuous mode [ 739.599891][ T8659] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 739.609202][T10094] device hsr_slave_1 entered promiscuous mode [ 739.618610][ T8659] FAT-fs (loop2): Filesystem has been set read-only [ 739.658324][T10094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 739.665920][T10094] Cannot create hsr debugfs directory [ 739.703054][ T8659] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 740.004530][T10279] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[10281] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10279] [ 740.601371][T10292] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[10293] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10292] [ 740.704435][T10292] binder: 10287:10292 ioctl c0306201 200000000080 returned -14 [ 740.762183][T10294] binder: 10287:10294 ioctl c0306201 2000000003c0 returned -14 [ 740.762735][T10094] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 740.778749][ T4790] Bluetooth: hci6: command 0x1001 tx timeout [ 740.784831][ T4194] Bluetooth: hci6: sending frame failed (-49) [ 740.825531][T10274] loop2: detected capacity change from 0 to 32768 [ 740.866141][T10299] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[10300] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10299] [ 740.893506][T10094] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 740.896564][T10292] loop9: detected capacity change from 0 to 512 [ 740.909280][T10274] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1016 (10274) [ 740.939899][T10094] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 740.975533][T10094] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 741.038587][T10292] EXT4-fs (loop9): Ignoring removed nobh option [ 741.039077][T10274] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 741.077162][T10292] EXT4-fs (loop9): orphan cleanup on readonly fs [ 741.091762][T10292] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #15: comm syz.9.1019: corrupted inode contents [ 741.108401][T10292] EXT4-fs (loop9): Remounting filesystem read-only [ 741.114996][T10292] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 741.125963][T10274] BTRFS info (device loop2): setting nodatasum [ 741.130577][T10292] EXT4-fs (loop9): Remounting filesystem read-only [ 741.145037][T10292] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #15: comm syz.9.1019: corrupted inode contents [ 741.159285][T10292] EXT4-fs (loop9): Remounting filesystem read-only [ 741.165879][T10292] EXT4-fs error (device loop9): ext4_evict_inode:332: inode #15: comm syz.9.1019: mark_inode_dirty error [ 741.171560][T10274] BTRFS info (device loop2): force zlib compression, level 3 [ 741.188461][T10292] EXT4-fs (loop9): Remounting filesystem read-only [ 741.208373][T10292] EXT4-fs (loop9): 1 orphan inode deleted [ 741.214129][T10292] EXT4-fs (loop9): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 741.248798][T10274] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 741.266723][T10274] BTRFS info (device loop2): use lzo compression, level 0 [ 741.285823][T10274] BTRFS info (device loop2): turning on flush-on-commit [ 741.307271][T10274] BTRFS info (device loop2): enabling auto defrag [ 741.325024][T10274] BTRFS info (device loop2): max_inline at 4096 [ 741.338986][T10274] BTRFS info (device loop2): using free space tree [ 741.370338][T10274] BTRFS info (device loop2): has skinny extents [ 741.405249][T10094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.498575][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 741.512428][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 741.545049][T10094] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.633591][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 741.715876][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 741.738140][ T4619] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.745267][ T4619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.765316][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 741.846416][T10274] BTRFS info (device loop2): enabling ssd optimizations [ 741.914225][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 741.931251][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 741.947427][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.954568][ T6766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.962958][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 741.977747][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 742.038017][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 742.077778][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 742.087471][T10335] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[10338] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10335] [ 742.127400][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 742.150720][T10335] binder: 10334:10335 ioctl c0306201 200000000080 returned -14 [ 742.170897][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 742.239754][T10344] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[10338] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10344] [ 742.440921][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 742.661021][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 742.860501][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 742.868688][ T4268] Bluetooth: hci6: command 0x1009 tx timeout [ 742.875018][T10335] binder: 10334:10335 ioctl c0306201 2000000003c0 returned -14 [ 742.883551][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 742.929297][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 743.084853][T10094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 743.182144][ T25] audit: type=1800 audit(1791558851.666:7): pid=10274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1016" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 743.733041][T10350] binder: 10348:10350 ioctl c0306201 200000000080 returned -14 [ 743.741119][T10350] binder: 10348:10350 ioctl c0306201 2000000003c0 returned -14 [ 744.696637][T10363] loop9: detected capacity change from 0 to 128 [ 746.603957][T10363] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 746.645537][T10359] 9pnet: Insufficient options for proto=fd [ 746.881470][ T9525] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 746.982608][ T9525] FAT-fs (loop9): Filesystem has been set read-only [ 747.024520][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.069103][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.540305][T10377] loop6: detected capacity change from 0 to 256 [ 748.214547][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 748.248663][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 748.299468][T10094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.426922][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 748.456345][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 748.536608][T10094] device veth0_vlan entered promiscuous mode [ 748.561060][ T9525] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 748.576272][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 748.585534][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 748.600568][T10094] device veth1_vlan entered promiscuous mode [ 748.607413][T10374] overlayfs: filesystem on './file2' not supported [ 748.608810][T10382] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1030'. [ 748.635113][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 748.643319][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 748.743437][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 748.839866][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 748.880198][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 748.927626][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 749.063026][T10094] device veth0_macvtap entered promiscuous mode [ 749.097861][T10094] device veth1_macvtap entered promiscuous mode [ 749.145748][T10397] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[10398] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10397] [ 749.162428][T10397] binder: 10394:10397 ioctl c0306201 200000000080 returned -14 [ 749.171107][T10397] binder: 10394:10397 ioctl c0306201 2000000003c0 returned -14 [ 749.180248][T10395] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[10398] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10395] [ 749.222431][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.237011][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.247760][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.259043][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.269012][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.357658][T10400] loop6: detected capacity change from 0 to 256 [ 749.563965][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.813609][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.860498][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.878812][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.918319][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.947184][T10094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.974012][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.041696][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.070006][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.121943][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.154838][T10413] loop0: detected capacity change from 0 to 256 [ 750.224408][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.268425][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.307947][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.343137][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.353329][T10410] loop2: detected capacity change from 0 to 16 [ 750.380253][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.390948][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.402388][T10094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.418499][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 750.425325][T10410] erofs: (device loop2): mounted with root inode @ nid 36. [ 750.453557][T10405] overlayfs: filesystem on './file2' not supported [ 750.460351][T10399] overlayfs: filesystem on './file2' not supported [ 750.471226][T10410] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 750.471688][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 750.479995][T10410] overlayfs: missing 'lowerdir' [ 750.656041][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 750.737031][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 750.782702][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 750.835166][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 751.003485][T10434] loop9: detected capacity change from 0 to 512 [ 751.572363][T10094] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.768628][T10094] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.823845][T10094] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.832861][T10094] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.763089][T10457] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1044'. [ 753.775755][T10455] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1043'. [ 753.822614][T10462] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1045'. [ 753.823085][ T5157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.888705][ T5157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.897386][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 753.956042][ T7311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.013664][ T7311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.432030][T10476] loop9: detected capacity change from 0 to 16 [ 754.553714][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 754.789533][T10476] erofs: (device loop9): mounted with root inode @ nid 36. [ 754.832643][T10475] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 754.841436][T10475] overlayfs: missing 'lowerdir' [ 754.940243][T10481] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1047'. [ 755.128741][T10487] netlink: 168 bytes leftover after parsing attributes in process `syz.3.986'. [ 755.986732][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.294641][ T5157] Bluetooth: hci4: Frame reassembly failed (-84) [ 756.560002][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.746395][T10519] binder: 10508:10519 ioctl 4018620d 0 returned -22 [ 756.770560][T10519] binder: 10508:10519 ioctl c0306201 200000000080 returned -14 [ 756.784307][T10519] binder: 10508:10519 ioctl c0306201 2000000003c0 returned -14 [ 757.083472][T10530] loop3: detected capacity change from 0 to 128 [ 757.168170][T10528] loop9: detected capacity change from 0 to 512 [ 759.069681][ T4226] Bluetooth: hci4: command 0x1003 tx timeout [ 759.270840][ T4194] Bluetooth: hci4: sending frame failed (-49) [ 759.286597][T10530] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 760.072069][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.709407][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.069016][T10551] loop2: detected capacity change from 0 to 256 [ 761.512968][ T4268] Bluetooth: hci4: command 0x1001 tx timeout [ 761.586745][ T4194] Bluetooth: hci4: sending frame failed (-49) [ 762.025045][T10548] overlayfs: filesystem on './file2' not supported [ 762.246197][T10566] loop3: detected capacity change from 0 to 64 [ 762.396798][T10566] hfs: unable to parse mount options [ 762.796170][T10566] loop3: detected capacity change from 0 to 512 [ 762.859050][T10574] binder: 10573:10574 ioctl 4018620d 0 returned -22 [ 762.867942][T10574] binder: 10573:10574 ioctl c0306201 200000000080 returned -14 [ 762.878562][T10574] binder: 10573:10574 ioctl c0306201 2000000003c0 returned -14 [ 762.892068][T10574] loop2: detected capacity change from 0 to 512 [ 763.016770][T10566] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 763.058718][T10574] EXT4-fs (loop2): Ignoring removed nobh option [ 763.106019][T10566] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.1064: corrupted inode contents [ 763.122894][T10574] EXT4-fs (loop2): orphan cleanup on readonly fs [ 763.130376][T10574] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.1065: corrupted inode contents [ 763.151774][T10574] EXT4-fs (loop2): Remounting filesystem read-only [ 763.158473][T10574] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 763.168541][T10574] EXT4-fs (loop2): Remounting filesystem read-only [ 763.175088][T10574] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.1065: corrupted inode contents [ 763.187479][T10574] EXT4-fs (loop2): Remounting filesystem read-only [ 763.194051][T10574] EXT4-fs error (device loop2): ext4_evict_inode:332: inode #15: comm syz.2.1065: mark_inode_dirty error [ 763.205786][T10574] EXT4-fs (loop2): Remounting filesystem read-only [ 763.212501][T10574] EXT4-fs (loop2): 1 orphan inode deleted [ 763.218324][T10574] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 763.238518][T10566] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #11: comm syz.3.1064: mark_inode_dirty error [ 763.304892][T10566] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1064: invalid indirect mapped block 1 (level 1) [ 763.362414][T10566] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.1064: corrupted inode contents [ 763.427334][T10566] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 763.470522][T10566] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.1064: corrupted inode contents [ 763.538361][T10566] EXT4-fs error (device loop3): ext4_truncate:4286: inode #11: comm syz.3.1064: mark_inode_dirty error [ 763.565957][T10566] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 763.597406][T10566] EXT4-fs (loop3): 1 truncate cleaned up [ 763.617186][T10566] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 763.659142][ T4268] Bluetooth: hci4: command 0x1009 tx timeout [ 763.709225][T10602] binder: 10599:10602 ioctl c0306201 200000000080 returned -14 [ 763.718341][T10602] binder: 10599:10602 ioctl c0306201 2000000003c0 returned -14 [ 764.380725][T10616] loop2: detected capacity change from 0 to 128 [ 767.137691][T10623] binder: 10617:10623 ioctl c0306201 200000000080 returned -14 [ 767.148321][T10623] binder: 10617:10623 ioctl c0306201 2000000003c0 returned -14 [ 767.583051][ T154] device hsr_slave_0 left promiscuous mode [ 767.606332][ T154] device hsr_slave_1 left promiscuous mode [ 768.029530][T10641] loop3: detected capacity change from 0 to 16 [ 768.183858][T10641] erofs: (device loop3): mounted with root inode @ nid 36. [ 768.222992][T10641] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 768.231895][T10641] overlayfs: missing 'lowerdir' [ 768.458014][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.482738][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.590011][T10650] binder: 10646:10650 ioctl c0306201 200000000080 returned -14 [ 768.592094][T10649] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1082'. [ 768.604842][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.615579][T10650] binder: 10646:10650 ioctl c0306201 2000000003c0 returned -14 [ 768.665011][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.707914][ T154] device bridge_slave_1 left promiscuous mode [ 768.816480][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.854144][ T154] device bridge_slave_0 left promiscuous mode [ 768.897480][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.993589][ T154] device veth1_macvtap left promiscuous mode [ 769.000132][ T154] device veth0_macvtap left promiscuous mode [ 769.027213][ T154] device veth1_vlan left promiscuous mode [ 769.445742][ T154] device veth0_vlan left promiscuous mode [ 770.543424][ T154] team0 (unregistering): Port device team_slave_1 removed [ 770.595670][ T154] team0 (unregistering): Port device team_slave_0 removed [ 770.696216][T10681] loop0: detected capacity change from 0 to 128 [ 770.813549][T10681] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 770.903438][T10681] 9pnet: Insufficient options for proto=fd [ 771.008649][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.378331][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.798306][ T154] bond0 (unregistering): Released all slaves [ 772.417286][ T8944] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 772.432751][ T8944] FAT-fs (loop0): Filesystem has been set read-only [ 772.483065][ T8944] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 772.982044][T10697] binder: 10696:10697 ioctl c0306201 200000000080 returned -14 [ 772.993372][T10697] binder: 10696:10697 ioctl c0306201 2000000003c0 returned -14 [ 773.777524][T10725] binder: 10719:10725 ioctl c0306201 200000000080 returned -14 [ 773.796478][T10725] binder: 10719:10725 ioctl c0306201 2000000003c0 returned -14 [ 773.954114][T10731] loop0: detected capacity change from 0 to 256 [ 774.098135][T10731] overlayfs: filesystem on './file2' not supported [ 774.305850][ T7963] Bluetooth: hci4: command 0x1003 tx timeout [ 774.333213][ T4194] Bluetooth: hci4: sending frame failed (-49) [ 776.453368][ T2302] Bluetooth: hci4: command 0x1001 tx timeout [ 776.467195][ T4194] Bluetooth: hci4: sending frame failed (-49) [ 776.677318][T10750] loop6: detected capacity change from 0 to 128 [ 776.787245][T10750] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 776.811038][T10758] binder: 10755:10758 ioctl c0306201 200000000080 returned -14 [ 776.820528][T10758] binder: 10755:10758 ioctl c0306201 2000000003c0 returned -14 [ 776.875251][T10750] 9pnet: Insufficient options for proto=fd [ 778.057766][ T9532] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 778.080164][ T9532] FAT-fs (loop6): Filesystem has been set read-only [ 778.146052][ T9532] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 778.239460][T10776] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1110'. [ 778.590598][ T7963] Bluetooth: hci4: command 0x1009 tx timeout [ 779.690016][T10816] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1118'. [ 779.790050][T10817] loop0: detected capacity change from 0 to 128 [ 782.288911][T10817] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 783.754310][T10843] binder: 10839:10843 ioctl c0306201 200000000080 returned -14 [ 783.763613][T10843] binder: 10839:10843 ioctl c0306201 2000000003c0 returned -14 [ 784.530272][T10868] loop3: detected capacity change from 0 to 512 [ 784.553444][T10870] loop2: detected capacity change from 0 to 128 [ 786.249559][ T2302] Bluetooth: hci4: command 0x1003 tx timeout [ 786.255745][ T4194] Bluetooth: hci4: sending frame failed (-49) [ 786.285496][T10870] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 787.793033][T10880] binder: 10865:10880 ioctl c0306201 200000000080 returned -14 [ 787.804331][T10880] binder: 10865:10880 ioctl c0306201 2000000003c0 returned -14 [ 788.309075][ T2302] Bluetooth: hci4: command 0x1001 tx timeout [ 788.315181][ T4194] Bluetooth: hci4: sending frame failed (-49) [ 789.024416][T10907] loop3: detected capacity change from 0 to 512 [ 789.570597][T10909] binder: 10904:10909 ioctl c0306201 200000000080 returned -14 [ 789.590263][T10909] binder: 10904:10909 ioctl c0306201 2000000003c0 returned -14 [ 790.303595][T10921] loop2: detected capacity change from 0 to 64 [ 790.337077][T10921] hfs: unable to parse mount options [ 790.576235][T10930] loop3: detected capacity change from 0 to 128 [ 790.648867][T10930] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 790.717110][T10930] 9pnet: Insufficient options for proto=fd [ 791.276676][ T2302] Bluetooth: hci4: command 0x1009 tx timeout [ 791.696355][T10951] loop9: detected capacity change from 0 to 512 [ 792.372959][T10976] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[10979] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10976] [ 793.002991][T10982] loop9: detected capacity change from 0 to 512 [ 793.076122][T10980] loop6: detected capacity change from 0 to 512 [ 793.102481][T10985] binder: 10969:10985 ioctl c0306201 200000000080 returned -14 [ 793.117167][T10985] binder: 10969:10985 ioctl c0306201 2000000003c0 returned -14 [ 793.862022][T10995] binder: 10991:10995 ioctl c0306201 200000000080 returned -14 [ 793.871240][T10995] binder: 10991:10995 ioctl c0306201 2000000003c0 returned -14 [ 794.612208][T11018] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1159'. [ 794.893133][T11025] loop6: detected capacity change from 0 to 128 [ 795.372413][T11023] binder: 11022:11023 ioctl c0306201 200000000080 returned -14 [ 795.383907][T11023] binder: 11022:11023 ioctl c0306201 2000000003c0 returned -14 [ 795.515094][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 795.538595][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 796.268623][T11025] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 796.283722][T11025] 9pnet: Insufficient options for proto=fd [ 796.535153][T11031] binder: 11029:11031 ioctl c0306201 200000000080 returned -14 [ 796.543830][T11031] binder: 11029:11031 ioctl c0306201 2000000003c0 returned -14 [ 796.773600][T11006] loop9: detected capacity change from 0 to 32768 [ 796.990076][T11006] XFS (loop9): Mounting V5 Filesystem [ 797.169111][T11006] XFS (loop9): Ending clean mount [ 797.280947][ T9525] XFS (loop9): Unmounting Filesystem [ 797.484923][T11054] loop6: detected capacity change from 0 to 512 [ 798.330265][T11059] binder: 11057:11059 ioctl c0306201 200000000080 returned -14 [ 798.339419][T11059] binder: 11057:11059 ioctl c0306201 2000000003c0 returned -14 [ 799.003386][T11073] loop3: detected capacity change from 0 to 512 [ 799.812526][T11049] loop2: detected capacity change from 0 to 32768 [ 800.629351][T11094] overlayfs: missing 'lowerdir' [ 800.794989][ T4790] Bluetooth: hci4: command 0x1003 tx timeout [ 800.803640][T10234] Bluetooth: hci4: sending frame failed (-49) [ 803.267707][ T4790] Bluetooth: hci4: command 0x1001 tx timeout [ 803.273988][T10234] Bluetooth: hci4: sending frame failed (-49) [ 803.287562][T11115] loop2: detected capacity change from 0 to 128 [ 804.264088][T11115] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 804.297009][T11112] 9pnet: Insufficient options for proto=fd [ 804.515345][ T8659] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 804.564695][ T8659] FAT-fs (loop2): Filesystem has been set read-only [ 805.348635][ T4790] Bluetooth: hci4: command 0x1009 tx timeout [ 805.509968][ T8659] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 805.534910][T11121] loop9: detected capacity change from 0 to 32768 [ 805.634354][T11121] XFS (loop9): Mounting V5 Filesystem [ 805.828560][T11149] loop2: detected capacity change from 0 to 512 [ 805.894619][T11121] XFS (loop9): Ending clean mount [ 806.362567][ T25] audit: type=1800 audit(1791558914.846:8): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1177" name="file1" dev="loop9" ino=4422 res=0 errno=0 [ 806.446461][T11153] loop0: detected capacity change from 0 to 256 [ 806.524815][T11153] overlayfs: filesystem on './file2' not supported [ 807.106752][ T9525] XFS (loop9): Unmounting Filesystem [ 807.182894][T11160] loop2: detected capacity change from 0 to 32768 [ 807.275032][T11160] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1182 (11160) [ 807.336689][T11160] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 807.354978][T11160] BTRFS info (device loop2): setting nodatasum [ 807.375592][T11160] BTRFS info (device loop2): force zlib compression, level 3 [ 807.414981][T11160] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 807.427882][T11172] loop3: detected capacity change from 0 to 64 [ 807.430166][T11160] BTRFS info (device loop2): use lzo compression, level 0 [ 807.461373][T11172] hfs: unable to parse mount options [ 807.494248][T11160] BTRFS info (device loop2): turning on flush-on-commit [ 807.542899][T11160] BTRFS info (device loop2): enabling auto defrag [ 807.570279][T11160] BTRFS info (device loop2): max_inline at 4096 [ 807.600240][T11160] BTRFS info (device loop2): using free space tree [ 807.605345][T11172] loop3: detected capacity change from 0 to 512 [ 807.624717][T11160] BTRFS info (device loop2): has skinny extents [ 807.681249][T11172] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 807.774954][T11172] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.1184: corrupted inode contents [ 807.811421][T11172] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #11: comm syz.3.1184: mark_inode_dirty error [ 807.833106][T11172] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1184: invalid indirect mapped block 1 (level 1) [ 807.878709][T11172] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.1184: corrupted inode contents [ 807.904289][T11197] overlayfs: missing 'lowerdir' [ 807.922219][T11172] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 808.169475][T11160] BTRFS info (device loop2): enabling ssd optimizations [ 808.288084][T11172] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.1184: corrupted inode contents [ 808.463070][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.469823][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.536857][T11172] EXT4-fs error (device loop3): ext4_truncate:4286: inode #11: comm syz.3.1184: mark_inode_dirty error [ 808.565307][T11172] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 809.038724][T11211] loop0: detected capacity change from 0 to 512 [ 809.318630][T11172] EXT4-fs (loop3): 1 truncate cleaned up [ 809.324320][T11172] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 809.786343][T11222] loop9: detected capacity change from 0 to 256 [ 809.957025][T11222] overlayfs: filesystem on './file2' not supported [ 811.147466][T11231] binder: 11230:11231 ioctl c0306201 200000000080 returned -14 [ 811.158488][T11231] binder: 11230:11231 ioctl c0306201 2000000003c0 returned -14 [ 812.531330][T11242] loop9: detected capacity change from 0 to 512 [ 814.703211][T11263] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[11271] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11263] [ 814.728765][T11263] binder: 11262:11263 ioctl c0306201 0 returned -14 [ 814.915613][T11276] loop9: detected capacity change from 0 to 256 [ 815.154959][T11276] overlayfs: filesystem on './file2' not supported [ 815.211636][ T4285] Bluetooth: hci4: Frame reassembly failed (-84) [ 815.382499][T11263] loop0: detected capacity change from 0 to 512 [ 815.582262][T11283] binder: 11282:11283 ioctl c0306201 200000000080 returned -14 [ 815.590453][T11283] binder: 11282:11283 ioctl c0306201 2000000003c0 returned -14 [ 815.607756][T11263] EXT4-fs (loop0): Ignoring removed nobh option [ 815.634531][T11263] EXT4-fs (loop0): orphan cleanup on readonly fs [ 815.643702][T11263] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.1198: corrupted inode contents [ 815.668723][T11263] EXT4-fs (loop0): Remounting filesystem read-only [ 815.675332][T11263] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 815.685345][T11263] EXT4-fs (loop0): Remounting filesystem read-only [ 815.691986][T11263] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.1198: corrupted inode contents [ 815.705370][T11263] EXT4-fs (loop0): Remounting filesystem read-only [ 815.711986][T11263] EXT4-fs error (device loop0): ext4_evict_inode:332: inode #15: comm syz.0.1198: mark_inode_dirty error [ 815.754609][T11263] EXT4-fs (loop0): Remounting filesystem read-only [ 815.761386][T11263] EXT4-fs (loop0): 1 orphan inode deleted [ 815.767274][T11263] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 816.627528][T11304] loop0: detected capacity change from 0 to 512 [ 817.042614][ T4268] Bluetooth: hci4: command 0x1003 tx timeout [ 817.065724][T10234] Bluetooth: hci4: sending frame failed (-49) [ 817.411275][T11313] loop0: detected capacity change from 0 to 64 [ 817.464670][T11313] hfs: unable to parse mount options [ 817.584511][T11313] loop0: detected capacity change from 0 to 512 [ 817.654816][T11313] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 817.875459][T11313] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.1205: corrupted inode contents [ 817.876819][T11326] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[11327] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11326] [ 818.028945][T11313] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #11: comm syz.0.1205: mark_inode_dirty error [ 818.080497][T11328] binder: 11323:11328 ioctl c0306201 0 returned -14 [ 818.157116][T11313] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1205: invalid indirect mapped block 1 (level 1) [ 818.214077][T11313] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.1205: corrupted inode contents [ 818.264231][T11313] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 818.282828][T11313] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.1205: corrupted inode contents [ 818.347154][T11313] EXT4-fs error (device loop0): ext4_truncate:4286: inode #11: comm syz.0.1205: mark_inode_dirty error [ 818.388211][T11313] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 818.420023][T11335] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[11337] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11335] [ 818.438183][T11324] loop3: detected capacity change from 0 to 512 [ 818.446578][T11313] EXT4-fs (loop0): 1 truncate cleaned up [ 818.463767][T11313] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 818.478492][T11339] binder: 11334:11339 ioctl c0306201 200000000080 returned -14 [ 818.487050][T11339] binder: 11334:11339 ioctl c0306201 2000000003c0 returned -14 [ 818.496773][T11335] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[11337] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11335] [ 818.511254][T11324] EXT4-fs (loop3): Ignoring removed nobh option [ 818.544611][T11324] EXT4-fs (loop3): orphan cleanup on readonly fs [ 818.593147][T11324] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.1206: corrupted inode contents [ 818.613801][T11324] EXT4-fs (loop3): Remounting filesystem read-only [ 818.620698][T11324] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 818.702687][T11324] EXT4-fs (loop3): Remounting filesystem read-only [ 818.711559][T11324] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.1206: corrupted inode contents [ 818.726593][T11324] EXT4-fs (loop3): Remounting filesystem read-only [ 818.733391][T11324] EXT4-fs error (device loop3): ext4_evict_inode:332: inode #15: comm syz.3.1206: mark_inode_dirty error [ 818.775310][T11324] EXT4-fs (loop3): Remounting filesystem read-only [ 818.782080][T11324] EXT4-fs (loop3): 1 orphan inode deleted [ 818.787952][T11324] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 819.281241][T11351] loop0: detected capacity change from 0 to 16 [ 819.293744][ T4268] Bluetooth: hci4: command 0x1001 tx timeout [ 819.330578][T10234] Bluetooth: hci4: sending frame failed (-49) [ 819.399742][T11351] erofs: (device loop0): mounted with root inode @ nid 36. [ 819.437543][T11351] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 819.446492][T11351] overlayfs: missing 'lowerdir' [ 819.755658][T11355] binder: 11354:11355 ioctl c0306201 200000000080 returned -14 [ 819.763885][T11355] binder: 11354:11355 ioctl c0306201 2000000003c0 returned -14 [ 820.118098][T11372] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[11373] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11372] [ 820.462337][T11366] binder: 11364:11366 ioctl c0306201 0 returned -14 [ 820.474836][T11366] loop0: detected capacity change from 0 to 512 [ 820.539009][T11366] EXT4-fs (loop0): Ignoring removed nobh option [ 820.707423][T11383] loop9: detected capacity change from 0 to 512 [ 820.918947][T11366] EXT4-fs (loop0): orphan cleanup on readonly fs [ 820.937061][T11366] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.1213: corrupted inode contents [ 820.990094][T11366] EXT4-fs (loop0): Remounting filesystem read-only [ 820.996716][T11366] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 821.007386][T11366] EXT4-fs (loop0): Remounting filesystem read-only [ 821.014142][T11366] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.1213: corrupted inode contents [ 821.047144][T11366] EXT4-fs (loop0): Remounting filesystem read-only [ 821.053787][T11366] EXT4-fs error (device loop0): ext4_evict_inode:332: inode #15: comm syz.0.1213: mark_inode_dirty error [ 821.067912][T11366] EXT4-fs (loop0): Remounting filesystem read-only [ 821.074994][T11366] EXT4-fs (loop0): 1 orphan inode deleted [ 821.080912][T11366] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 821.368252][ T7963] Bluetooth: hci4: command 0x1009 tx timeout [ 821.639946][T11397] loop9: detected capacity change from 0 to 512 [ 822.344903][T11375] loop2: detected capacity change from 0 to 32768 [ 822.409007][T11403] netlink: 168 bytes leftover after parsing attributes in process `syz.9.1221'. [ 822.482744][T11375] XFS (loop2): Mounting V5 Filesystem [ 822.521793][T11414] loop0: detected capacity change from 0 to 64 [ 822.571679][T11414] hfs: unable to parse mount options [ 822.702496][T11375] XFS (loop2): Ending clean mount [ 822.777245][ T25] audit: type=1800 audit(1791558931.256:9): pid=11375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1215" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 822.846478][T11395] loop3: detected capacity change from 0 to 32768 [ 823.009937][T11429] loop9: detected capacity change from 0 to 512 [ 823.587831][T11395] XFS (loop3): Mounting V5 Filesystem [ 823.701197][ T8659] XFS (loop2): Unmounting Filesystem [ 823.715708][T11450] binder: 11449:11450 ioctl c0306201 200000000080 returned -14 [ 823.726526][T11450] binder: 11449:11450 ioctl c0306201 2000000003c0 returned -14 [ 823.974264][T11395] XFS (loop3): Ending clean mount [ 824.842271][T10094] XFS (loop3): Unmounting Filesystem [ 824.927254][T11462] loop9: detected capacity change from 0 to 512 [ 825.430140][T11468] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[11470] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11468] [ 825.770591][T11473] binder: 11466:11473 ioctl c0306201 200000000080 returned -14 [ 825.786799][T11473] binder: 11466:11473 ioctl c0306201 2000000003c0 returned -14 [ 825.802807][T11473] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[11470] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11473] [ 828.515622][T11507] loop2: detected capacity change from 0 to 512 [ 829.560415][T11519] loop3: detected capacity change from 0 to 512 [ 830.594395][T11526] loop2: detected capacity change from 0 to 16 [ 830.968079][T11526] erofs: (device loop2): mounted with root inode @ nid 36. [ 831.011435][T11524] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 831.021075][T11524] overlayfs: missing 'lowerdir' [ 831.966739][T11536] loop6: detected capacity change from 0 to 64 [ 832.001737][T11539] loop0: detected capacity change from 0 to 64 [ 832.070657][T11536] hfs: unable to parse mount options [ 832.270827][T11546] loop3: detected capacity change from 0 to 512 [ 832.384682][T11539] hfs: unable to parse mount options [ 832.956776][T11534] loop0: detected capacity change from 0 to 512 [ 832.988491][T11530] binder: 11529:11530 ioctl c0306201 0 returned -14 [ 833.000643][T11530] loop9: detected capacity change from 0 to 512 [ 833.775360][T11559] loop3: detected capacity change from 0 to 512 [ 834.349313][T11534] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 834.448307][T11534] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.1243: corrupted inode contents [ 834.538389][T11534] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #11: comm syz.0.1243: mark_inode_dirty error [ 834.577833][T11573] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[11575] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11573] [ 834.988286][T11579] loop9: detected capacity change from 0 to 16 [ 835.016601][T11580] binder: 11572:11580 ioctl c0306201 200000000080 returned -14 [ 835.030857][T11580] binder: 11572:11580 ioctl c0306201 2000000003c0 returned -14 [ 835.045393][T11580] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[11575] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11580] [ 835.136095][T11579] erofs: (device loop9): mounted with root inode @ nid 36. [ 835.238611][T11534] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1243: invalid indirect mapped block 1 (level 1) [ 835.365970][T11534] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.1243: corrupted inode contents [ 835.418290][T11534] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 835.438285][T11534] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.1243: corrupted inode contents [ 835.463480][T11534] EXT4-fs error (device loop0): ext4_truncate:4286: inode #11: comm syz.0.1243: mark_inode_dirty error [ 835.513902][T11534] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 835.534351][T11587] binder: 11584:11587 ioctl c0306201 200000000080 returned -14 [ 835.539146][T11534] EXT4-fs (loop0): 1 truncate cleaned up [ 835.674712][T11534] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 836.137985][T11591] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[11592] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11591] [ 836.196250][T11596] binder: 11589:11596 ioctl c0306201 0 returned -14 [ 837.052864][T11590] loop9: detected capacity change from 0 to 512 [ 837.124020][T11566] loop2: detected capacity change from 0 to 32768 [ 837.234347][T11590] EXT4-fs (loop9): Ignoring removed nobh option [ 837.372303][T11590] EXT4-fs (loop9): orphan cleanup on readonly fs [ 837.383675][T11590] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #15: comm syz.9.1255: corrupted inode contents [ 837.404442][T11590] EXT4-fs (loop9): Remounting filesystem read-only [ 837.412013][T11590] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 837.429579][T11590] EXT4-fs (loop9): Remounting filesystem read-only [ 837.436243][T11590] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #15: comm syz.9.1255: corrupted inode contents [ 837.453968][T11590] EXT4-fs (loop9): Remounting filesystem read-only [ 837.460669][T11590] EXT4-fs error (device loop9): ext4_evict_inode:332: inode #15: comm syz.9.1255: mark_inode_dirty error [ 837.474286][T11590] EXT4-fs (loop9): Remounting filesystem read-only [ 837.481934][T11590] EXT4-fs (loop9): 1 orphan inode deleted [ 837.487768][T11590] EXT4-fs (loop9): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 838.806721][T11618] loop9: detected capacity change from 0 to 16 [ 838.913391][T11620] loop6: detected capacity change from 0 to 512 [ 839.051933][T11618] erofs: (device loop9): mounted with root inode @ nid 36. [ 839.820176][T11629] loop2: detected capacity change from 0 to 64 [ 841.267510][T11629] hfs: unable to parse mount options [ 841.289859][T11637] loop6: detected capacity change from 0 to 16 [ 841.374036][T11637] erofs: (device loop6): mounted with root inode @ nid 36. [ 841.463469][T11641] loop9: detected capacity change from 0 to 64 [ 841.583233][T11625] loop2: detected capacity change from 0 to 512 [ 841.611522][T11641] hfs: unable to parse mount options [ 841.656185][T11648] binder: 11644:11648 ioctl c0306201 200000000080 returned -14 [ 842.750529][T11625] EXT4-fs: failed to create workqueue [ 842.792934][T11625] EXT4-fs (loop2): mount failed [ 843.064900][T11653] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[11663] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11653] [ 843.079343][ T7963] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 843.091705][T11653] binder: 11649:11653 ioctl c0306201 0 returned -14 [ 843.111982][T11653] loop0: detected capacity change from 0 to 512 [ 843.860376][ T7963] usb 7-1: Using ep0 maxpacket: 32 [ 843.894485][T11674] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1275'. [ 843.940877][T11653] EXT4-fs (loop0): Ignoring removed nobh option [ 843.952093][T11653] EXT4-fs (loop0): orphan cleanup on readonly fs [ 843.963474][T11653] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.1270: corrupted inode contents [ 843.976064][T11653] EXT4-fs (loop0): Remounting filesystem read-only [ 843.983014][T11653] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 843.992685][T11653] EXT4-fs (loop0): Remounting filesystem read-only [ 843.999349][T11653] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.1270: corrupted inode contents [ 844.011508][ T7963] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 844.020622][T11653] EXT4-fs (loop0): Remounting filesystem read-only [ 844.027152][T11653] EXT4-fs error (device loop0): ext4_evict_inode:332: inode #15: comm syz.0.1270: mark_inode_dirty error [ 844.039387][T11653] EXT4-fs (loop0): Remounting filesystem read-only [ 844.046008][T11653] EXT4-fs (loop0): 1 orphan inode deleted [ 844.051828][T11653] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 844.096561][ T7963] usb 7-1: config 0 has no interface number 0 [ 844.125756][ T7963] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 846.669993][T11684] loop3: detected capacity change from 0 to 512 [ 846.711571][T11685] loop2: detected capacity change from 0 to 16 [ 846.762866][T11685] erofs: (device loop2): mounted with root inode @ nid 36. [ 846.788517][ T7963] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 846.798038][T11690] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1279'. [ 846.830189][ T7963] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.850617][ T7963] usb 7-1: Product: syz [ 846.865044][ T7963] usb 7-1: config 0 descriptor?? [ 846.948950][ T7963] usb 7-1: can't set config #0, error -71 [ 846.981946][ T7963] usb 7-1: USB disconnect, device number 3 [ 847.268391][ T7963] Bluetooth: hci5: command 0x0406 tx timeout [ 848.096562][T11711] loop3: detected capacity change from 0 to 256 [ 848.216516][T11714] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[11715] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11714] [ 848.294147][T11719] binder: 11709:11719 ioctl c0306201 200000000080 returned -14 [ 848.310296][T11719] binder: 11709:11719 ioctl c0306201 2000000003c0 returned -14 [ 848.325877][T11719] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[11715] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11719] [ 848.908661][T11711] FAT-fs (loop3): Directory bread(block 64) failed [ 848.934410][T11711] FAT-fs (loop3): Directory bread(block 65) failed [ 848.989212][T11711] FAT-fs (loop3): Directory bread(block 66) failed [ 848.996175][T11711] FAT-fs (loop3): Directory bread(block 67) failed [ 849.050211][T11711] FAT-fs (loop3): Directory bread(block 68) failed [ 849.065051][T11724] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1287'. [ 849.086223][T11711] FAT-fs (loop3): Directory bread(block 69) failed [ 849.108342][T11711] FAT-fs (loop3): Directory bread(block 70) failed [ 849.164769][T11711] FAT-fs (loop3): Directory bread(block 71) failed [ 849.177869][T11731] loop2: detected capacity change from 0 to 512 [ 849.196973][T11691] loop6: detected capacity change from 0 to 32768 [ 849.218561][T11711] FAT-fs (loop3): Directory bread(block 72) failed [ 849.225128][T11711] FAT-fs (loop3): Directory bread(block 73) failed [ 850.252369][T11731] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 850.382993][T11746] device syzkaller0 entered promiscuous mode [ 850.439431][T11744] loop9: detected capacity change from 0 to 64 [ 850.508397][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 850.529471][T11744] hfs: unable to parse mount options [ 851.460035][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 851.548311][ T7] usb 4-1: device descriptor read/all, error -71 [ 851.604987][T11766] device syzkaller0 entered promiscuous mode [ 852.123648][T11754] loop0: detected capacity change from 0 to 32768 [ 852.135705][T11755] loop2: detected capacity change from 0 to 32768 [ 852.254215][T11754] XFS (loop0): Mounting V5 Filesystem [ 852.280507][T11755] XFS (loop2): Mounting V5 Filesystem [ 852.327284][T11762] loop9: detected capacity change from 0 to 32768 [ 852.432190][T11755] XFS (loop2): Ending clean mount [ 852.497103][T11754] XFS (loop0): Ending clean mount [ 852.527656][ T25] audit: type=1800 audit(1791558961.006:10): pid=11755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1292" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 852.565693][T11762] XFS (loop9): Mounting V5 Filesystem [ 852.628595][ T25] audit: type=1800 audit(1791558961.036:11): pid=11754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1293" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 852.667976][T11778] loop6: detected capacity change from 0 to 32768 [ 852.687061][T11762] XFS (loop9): Ending clean mount [ 852.738519][T11816] device syzkaller0 entered promiscuous mode [ 852.787789][ T25] audit: type=1800 audit(1791558961.266:12): pid=11762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1295" name="file1" dev="loop9" ino=4422 res=0 errno=0 [ 852.883951][T11778] XFS (loop6): Mounting V5 Filesystem [ 852.913939][ T9525] XFS (loop9): Unmounting Filesystem [ 852.936033][ T8944] XFS (loop0): Unmounting Filesystem [ 853.062196][ T8659] XFS (loop2): Unmounting Filesystem [ 853.071965][T11831] device syzkaller0 entered promiscuous mode [ 853.087569][T11778] XFS (loop6): Ending clean mount [ 853.163148][ T25] audit: type=1800 audit(1791558961.646:13): pid=11778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1298" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 853.500100][T11845] device syzkaller0 entered promiscuous mode [ 853.633708][ T9532] XFS (loop6): Unmounting Filesystem [ 854.259780][T11863] loop9: detected capacity change from 0 to 16 [ 854.386067][T11863] erofs: (device loop9): mounted with root inode @ nid 36. [ 854.685449][T11860] loop3: detected capacity change from 0 to 64 [ 854.763287][T11860] hfs: unable to parse mount options [ 854.849184][T11869] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1307'. [ 854.923332][T11872] loop9: detected capacity change from 0 to 512 [ 855.614547][T11872] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 856.098101][T11876] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[11887] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11876] [ 856.114921][T11876] binder: 11875:11876 ioctl c0306201 0 returned -14 [ 856.122886][T11876] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[11887] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11876] [ 856.142987][T11876] loop3: detected capacity change from 0 to 512 [ 856.182447][T11894] loop9: detected capacity change from 0 to 64 [ 856.202332][T11876] EXT4-fs (loop3): Ignoring removed nobh option [ 856.222491][T11876] EXT4-fs (loop3): orphan cleanup on readonly fs [ 856.239425][T11876] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.1310: corrupted inode contents [ 856.253904][T11876] EXT4-fs (loop3): Remounting filesystem read-only [ 856.260628][T11876] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 856.269980][T11876] EXT4-fs (loop3): Remounting filesystem read-only [ 856.276520][T11876] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.1310: corrupted inode contents [ 856.292764][T11894] hfs: unable to parse mount options [ 856.298665][T11876] EXT4-fs (loop3): Remounting filesystem read-only [ 856.305227][T11876] EXT4-fs error (device loop3): ext4_evict_inode:332: inode #15: comm syz.3.1310: mark_inode_dirty error [ 856.323282][T11876] EXT4-fs (loop3): Remounting filesystem read-only [ 856.330005][T11876] EXT4-fs (loop3): 1 orphan inode deleted [ 856.335744][T11876] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 856.342045][T11853] loop0: detected capacity change from 0 to 32768 [ 856.482241][T11853] XFS (loop0): Mounting V5 Filesystem [ 856.594763][T11853] XFS (loop0): Ending clean mount [ 856.627795][ T25] audit: type=1800 audit(1791558965.106:14): pid=11853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1301" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 856.647250][T11908] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1313'. [ 856.669765][T11889] EXT4-fs error (device loop9): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 856.688592][T11889] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #11: comm syz.9.1312: corrupted inode contents [ 856.783003][T11889] EXT4-fs error (device loop9): ext4_dirty_inode:6087: inode #11: comm syz.9.1312: mark_inode_dirty error [ 856.952781][T11889] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1312: invalid indirect mapped block 1 (level 1) [ 856.997408][T11889] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #11: comm syz.9.1312: corrupted inode contents [ 857.015338][T11889] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 857.024799][T11889] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #11: comm syz.9.1312: corrupted inode contents [ 857.236854][T11889] EXT4-fs error (device loop9): ext4_truncate:4286: inode #11: comm syz.9.1312: mark_inode_dirty error [ 857.274862][T11884] XFS (loop2): Mounting V5 Filesystem [ 857.491339][T11889] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 857.783829][T11889] EXT4-fs (loop9): 1 truncate cleaned up [ 857.791963][T11884] XFS (loop2): Ending clean mount [ 857.820399][ T8944] XFS (loop0): Unmounting Filesystem [ 857.840372][T11889] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 857.997511][ T25] audit: type=1800 audit(1791558966.476:15): pid=11884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1311" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 858.789584][T11939] set_capacity_and_notify: 2 callbacks suppressed [ 858.789610][T11939] loop3: detected capacity change from 0 to 512 [ 859.333968][T11944] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[11945] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11944] [ 859.382861][T11947] binder: 11942:11947 ioctl c0306201 200000000080 returned -14 [ 859.391635][T11947] binder: 11942:11947 ioctl c0306201 2000000003c0 returned -14 [ 859.401098][T11947] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[11945] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11947] [ 859.416831][ T8659] XFS (loop2): Unmounting Filesystem [ 859.518997][T11953] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1318'. [ 859.561650][T11953] loop9: detected capacity change from 0 to 512 [ 859.607776][T11953] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 861.328968][T11986] overlayfs: overlapping lowerdir path [ 861.356800][T11984] loop3: detected capacity change from 0 to 512 [ 862.395782][T11995] loop2: detected capacity change from 0 to 512 [ 864.818412][T12026] loop2: detected capacity change from 0 to 256 [ 864.937656][T12026] FAT-fs (loop2): Directory bread(block 64) failed [ 864.997261][T12026] FAT-fs (loop2): Directory bread(block 65) failed [ 865.004694][T12026] FAT-fs (loop2): Directory bread(block 66) failed [ 865.011995][T12026] FAT-fs (loop2): Directory bread(block 67) failed [ 865.019347][T12026] FAT-fs (loop2): Directory bread(block 68) failed [ 865.038772][T12026] FAT-fs (loop2): Directory bread(block 69) failed [ 865.047043][T12026] FAT-fs (loop2): Directory bread(block 70) failed [ 865.054136][T12026] FAT-fs (loop2): Directory bread(block 71) failed [ 865.062396][T12026] FAT-fs (loop2): Directory bread(block 72) failed [ 865.069272][T12026] FAT-fs (loop2): Directory bread(block 73) failed [ 866.058620][ T4226] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 866.388406][ T4226] usb 3-1: Using ep0 maxpacket: 32 [ 866.552457][ T4226] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 866.613822][ T4226] usb 3-1: config 0 has no interface number 0 [ 866.710529][ T4226] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 866.961932][ T4226] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 866.988214][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.996257][ T4226] usb 3-1: Product: syz [ 867.037776][ T4226] usb 3-1: Manufacturer: syz [ 867.044294][ T4226] usb 3-1: SerialNumber: syz [ 867.056249][T12033] loop3: detected capacity change from 0 to 32768 [ 867.076943][ T4226] usb 3-1: config 0 descriptor?? [ 867.082886][T12062] loop0: detected capacity change from 0 to 1024 [ 867.119542][T12049] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 867.121215][T12062] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 867.210252][T12062] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 867.254164][T12033] XFS (loop3): Mounting V5 Filesystem [ 867.376826][T12045] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 867.427764][T12062] EXT4-fs (loop0): shut down requested (2) [ 867.454694][T12033] XFS (loop3): Ending clean mount [ 867.477190][ T25] audit: type=1800 audit(1791558975.956:16): pid=12033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1332" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 867.530168][T10094] XFS (loop3): Unmounting Filesystem [ 867.617192][T12060] loop9: detected capacity change from 0 to 32768 [ 868.006922][T12060] XFS (loop9): Mounting V5 Filesystem [ 868.273739][T12084] binder: 12080:12084 ioctl c0306201 0 returned -14 [ 868.294221][T12060] XFS (loop9): Ending clean mount [ 868.453275][T12084] loop0: detected capacity change from 0 to 512 [ 868.477338][ T25] audit: type=1800 audit(1791558976.956:17): pid=12060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1337" name="file1" dev="loop9" ino=4422 res=0 errno=0 [ 868.508349][T12084] EXT4-fs (loop0): Ignoring removed nobh option [ 868.534282][T12084] EXT4-fs (loop0): orphan cleanup on readonly fs [ 868.542553][T12084] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.1339: corrupted inode contents [ 868.556677][T12084] EXT4-fs (loop0): Remounting filesystem read-only [ 868.563368][T12084] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 868.574704][T12084] EXT4-fs (loop0): Remounting filesystem read-only [ 868.581321][T12084] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.1339: corrupted inode contents [ 868.594387][T12084] EXT4-fs (loop0): Remounting filesystem read-only [ 868.600994][T12084] EXT4-fs error (device loop0): ext4_evict_inode:332: inode #15: comm syz.0.1339: mark_inode_dirty error [ 868.613278][T12084] EXT4-fs (loop0): Remounting filesystem read-only [ 868.620022][T12084] EXT4-fs (loop0): 1 orphan inode deleted [ 868.625775][T12084] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 868.668388][ T4226] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 868.740463][ T4226] asix: probe of 3-1:0.188 failed with error -71 [ 868.787298][ T4226] usb 3-1: USB disconnect, device number 2 [ 869.003102][ T9525] XFS (loop9): Unmounting Filesystem [ 869.912091][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.919242][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.338167][T12134] loop6: detected capacity change from 0 to 256 [ 871.217584][T12114] loop3: detected capacity change from 0 to 40427 [ 871.531210][T12132] overlayfs: filesystem on './file2' not supported [ 871.538058][T12114] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 871.558090][T12114] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 871.632455][T12114] F2FS-fs (loop3): invalid crc value [ 871.763314][T12114] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 872.982683][T12183] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 873.024397][T12165] loop9: detected capacity change from 0 to 32768 [ 873.200907][T12165] XFS (loop9): Mounting V5 Filesystem [ 873.390389][T12165] XFS (loop9): Ending clean mount [ 873.446776][ T25] audit: type=1800 audit(1791558981.926:18): pid=12165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1353" name="file1" dev="loop9" ino=4422 res=0 errno=0 [ 873.479386][T12186] loop3: detected capacity change from 0 to 32768 [ 873.726855][T12186] XFS (loop3): Mounting V5 Filesystem [ 873.829610][T12186] XFS (loop3): Ending clean mount [ 873.878674][ T25] audit: type=1800 audit(1791558982.366:19): pid=12186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1357" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 873.895332][T12156] ODEBUG: Out of memory. ODEBUG disabled [ 873.945081][ T9525] XFS (loop9): Unmounting Filesystem [ 874.108456][T12222] device syzkaller0 entered promiscuous mode [ 874.389481][T10094] XFS (loop3): Unmounting Filesystem [ 875.222571][T12230] loop6: detected capacity change from 0 to 32768 [ 875.455633][T12230] XFS (loop6): Mounting V5 Filesystem [ 875.576799][T12230] XFS (loop6): Ending clean mount [ 875.583216][T12238] loop9: detected capacity change from 0 to 40427 [ 875.645596][ T25] audit: type=1800 audit(1791558984.126:20): pid=12230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1363" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 875.647726][T12238] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 875.778370][T12238] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 875.817569][T12238] F2FS-fs (loop9): invalid crc value [ 875.884844][T12238] F2FS-fs (loop9): Found nat_bits in checkpoint [ 875.947431][T12250] loop3: detected capacity change from 0 to 32768 [ 876.027646][ T9532] XFS (loop6): Unmounting Filesystem [ 876.085632][T12238] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 876.109935][T12238] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 876.196537][T12250] XFS (loop3): Mounting V5 Filesystem [ 876.427124][T12250] XFS (loop3): Ending clean mount [ 876.525620][ T25] audit: type=1800 audit(1791558985.006:21): pid=12250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1367" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 876.601198][T12267] loop0: detected capacity change from 0 to 40427 [ 876.640395][T12267] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 876.698629][T12267] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 876.744739][T12267] F2FS-fs (loop0): invalid crc value [ 876.828610][T12267] F2FS-fs (loop0): Found nat_bits in checkpoint [ 876.902945][T10094] XFS (loop3): Unmounting Filesystem [ 877.068268][T12267] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 877.075361][T12267] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 877.596011][T12301] loop2: detected capacity change from 0 to 32768 [ 877.672619][T12301] XFS (loop2): Mounting V5 Filesystem [ 877.760466][T12301] XFS (loop2): Ending clean mount [ 877.849632][ T8659] XFS (loop2): Unmounting Filesystem [ 877.876303][T12341] loop6: detected capacity change from 0 to 256 [ 878.004456][T12341] FAT-fs (loop6): Directory bread(block 64) failed [ 878.048251][T12341] FAT-fs (loop6): Directory bread(block 65) failed [ 878.055803][T12341] FAT-fs (loop6): Directory bread(block 66) failed [ 878.063334][T12341] FAT-fs (loop6): Directory bread(block 67) failed [ 878.070130][T12341] FAT-fs (loop6): Directory bread(block 68) failed [ 878.076770][T12341] FAT-fs (loop6): Directory bread(block 69) failed [ 878.098297][T12341] FAT-fs (loop6): Directory bread(block 70) failed [ 878.104952][T12341] FAT-fs (loop6): Directory bread(block 71) failed [ 878.127652][T12341] FAT-fs (loop6): Directory bread(block 72) failed [ 878.141305][T12341] FAT-fs (loop6): Directory bread(block 73) failed [ 878.442220][T12350] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 879.008372][ T4290] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 879.316865][T12359] loop2: detected capacity change from 0 to 256 [ 879.378316][ T4290] usb 7-1: Using ep0 maxpacket: 32 [ 879.408017][T12359] FAT-fs (loop2): Directory bread(block 64) failed [ 879.426443][T12359] FAT-fs (loop2): Directory bread(block 65) failed [ 879.436441][T12359] FAT-fs (loop2): Directory bread(block 66) failed [ 879.456708][T12359] FAT-fs (loop2): Directory bread(block 67) failed [ 879.466909][T12359] FAT-fs (loop2): Directory bread(block 68) failed [ 879.485107][T12359] FAT-fs (loop2): Directory bread(block 69) failed [ 879.516970][T12359] FAT-fs (loop2): Directory bread(block 70) failed [ 879.638688][T12367] loop0: detected capacity change from 0 to 512 [ 879.646885][ T4290] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 879.868082][ T4290] usb 7-1: config 0 has no interface number 0 [ 879.895544][T12359] FAT-fs (loop2): Directory bread(block 71) failed [ 880.033674][ T4290] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 880.092793][T12359] FAT-fs (loop2): Directory bread(block 72) failed [ 880.186182][T12359] FAT-fs (loop2): Directory bread(block 73) failed [ 881.372496][ T4290] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 881.383043][ T4290] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.394640][ T4290] usb 7-1: Product: syz [ 881.402935][ T4290] usb 7-1: Manufacturer: syz [ 881.407568][ T4290] usb 7-1: SerialNumber: syz [ 881.429108][ T4290] usb 7-1: config 0 descriptor?? [ 881.451919][ T4290] usb 7-1: can't set config #0, error -71 [ 881.499179][ T4290] usb 7-1: USB disconnect, device number 4 [ 881.629224][T12392] loop3: detected capacity change from 0 to 512 [ 881.699386][ T7963] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 881.709349][T12392] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 881.832366][T12392] EXT4-fs (loop3): orphan cleanup on readonly fs [ 881.865287][T12392] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.1384: bad orphan inode 15 [ 881.924721][T12392] ext4_test_bit(bit=14, block=18) = 1 [ 881.944992][T12392] is_bad_inode(inode)=0 [ 881.965446][T12392] NEXT_ORPHAN(inode)=1023 [ 881.981134][T12392] max_ino=32 [ 881.984374][T12392] i_nlink=0 [ 882.026009][T12392] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2928: inode #15: comm syz.3.1384: corrupted xattr block 19 [ 882.110165][T12392] EXT4-fs warning (device loop3): ext4_evict_inode:304: xattr delete (err -117) [ 882.120207][ T7963] usb 3-1: Using ep0 maxpacket: 32 [ 882.126922][T12392] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 882.190427][T12388] loop6: detected capacity change from 0 to 32768 [ 882.289908][ T7963] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 882.461532][ T7963] usb 3-1: config 0 has no interface number 0 [ 882.494001][ T7963] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 882.624431][T12388] XFS (loop6): Mounting V5 Filesystem [ 882.682167][ T7963] usb 3-1: string descriptor 0 read error: -71 [ 882.691647][ T7963] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 882.700795][ T7963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.748956][ T7963] usb 3-1: config 0 descriptor?? [ 882.888794][ T7963] usb 3-1: can't set config #0, error -71 [ 883.071104][ T7963] usb 3-1: USB disconnect, device number 3 [ 883.229244][T12388] XFS (loop6): Ending clean mount [ 883.283908][T12390] loop0: detected capacity change from 0 to 32768 [ 883.377784][T12390] XFS (loop0): Mounting V5 Filesystem [ 883.454319][ T9532] XFS (loop6): Unmounting Filesystem [ 883.614162][T12390] XFS (loop0): Ending clean mount [ 883.693346][T12448] loop9: detected capacity change from 0 to 128 [ 883.726139][ T25] audit: type=1800 audit(1791558992.196:22): pid=12390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1383" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 883.800331][T12448] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 883.816106][T12448] 9pnet: Insufficient options for proto=fd [ 884.166045][ T8944] XFS (loop0): Unmounting Filesystem [ 884.387776][ T9525] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 884.416674][ T9525] FAT-fs (loop9): Filesystem has been set read-only [ 884.455398][ T9525] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 886.343066][T12478] loop0: detected capacity change from 0 to 32768 [ 886.631301][T12518] loop9: detected capacity change from 0 to 512 [ 887.301119][T12478] XFS (loop0): Mounting V5 Filesystem [ 887.451062][T12478] XFS (loop0): Ending clean mount [ 887.558171][ T25] audit: type=1800 audit(1791558996.026:23): pid=12478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1392" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 887.833982][T12535] loop9: detected capacity change from 0 to 128 [ 887.952378][T12535] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 887.965870][T12535] 9pnet: Insufficient options for proto=fd [ 888.103425][ T8944] XFS (loop0): Unmounting Filesystem [ 888.284592][T12514] loop3: detected capacity change from 0 to 40427 [ 888.335411][T12514] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 888.362260][T12514] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 888.404160][T12514] F2FS-fs (loop3): invalid crc value [ 888.440062][T12514] F2FS-fs (loop3): Found nat_bits in checkpoint [ 889.256693][ T9525] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 889.325898][ T9525] FAT-fs (loop9): Filesystem has been set read-only [ 889.416418][T12514] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 889.432032][ T9525] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 889.448595][T12514] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 890.011690][T12580] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 890.122339][T12586] loop0: detected capacity change from 0 to 512 [ 890.154212][T12586] EXT4-fs (loop0): Ignoring removed nobh option [ 890.217042][T12586] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1414: invalid indirect mapped block 256 (level 2) [ 890.238689][T12586] EXT4-fs (loop0): 2 truncates cleaned up [ 890.245951][T12586] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 891.219463][T12585] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1414: bg 0: block 5: invalid block bitmap [ 891.239565][T12585] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 891.252966][T12585] EXT4-fs (loop0): This should not happen!! Data will be lost [ 891.252966][T12585] [ 891.262710][T12585] EXT4-fs (loop0): Total free blocks count 0 [ 891.269602][T12585] EXT4-fs (loop0): Free/Dirty block details [ 891.275560][T12585] EXT4-fs (loop0): free_blocks=0 [ 891.280613][T12585] EXT4-fs (loop0): dirty_blocks=33 [ 891.285731][T12585] EXT4-fs (loop0): Block reservation details [ 891.291801][T12585] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 891.416158][T12576] loop6: detected capacity change from 0 to 32768 [ 891.614768][T12608] loop2: detected capacity change from 0 to 128 [ 891.665648][T12608] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 891.680405][T12576] XFS (loop6): Mounting V5 Filesystem [ 891.693582][T12608] 9pnet: Insufficient options for proto=fd [ 891.864923][T12627] loop0: detected capacity change from 0 to 164 [ 891.882178][T12576] XFS (loop6): Ending clean mount [ 891.960481][ T25] audit: type=1800 audit(1791559000.446:24): pid=12576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1411" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 892.307152][ T8659] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 892.338357][ T8659] FAT-fs (loop2): Filesystem has been set read-only [ 892.350455][ T8659] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 892.390323][ T9532] XFS (loop6): Unmounting Filesystem [ 892.590024][T12647] loop3: detected capacity change from 0 to 512 [ 892.643879][T12647] EXT4-fs (loop3): Ignoring removed nobh option [ 892.700469][T12647] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1425: invalid indirect mapped block 256 (level 2) [ 892.774351][T12647] EXT4-fs (loop3): 2 truncates cleaned up [ 892.851564][T12647] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 893.071438][T12663] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1424'. [ 893.134632][T12664] loop6: detected capacity change from 0 to 512 [ 893.873188][T12646] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1425: bg 0: block 5: invalid block bitmap [ 893.891422][T12646] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 893.903761][T12646] EXT4-fs (loop3): This should not happen!! Data will be lost [ 893.903761][T12646] [ 893.913512][T12646] EXT4-fs (loop3): Total free blocks count 0 [ 893.919535][T12646] EXT4-fs (loop3): Free/Dirty block details [ 893.925433][T12646] EXT4-fs (loop3): free_blocks=0 [ 893.930449][T12646] EXT4-fs (loop3): dirty_blocks=33 [ 893.936375][T12646] EXT4-fs (loop3): Block reservation details [ 893.940630][T12664] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 893.942423][T12646] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 894.893165][T12683] loop2: detected capacity change from 0 to 512 [ 894.956266][T12685] loop6: detected capacity change from 0 to 512 [ 894.997823][T12688] device syzkaller0 entered promiscuous mode [ 895.034485][T12683] EXT4-fs (loop2): Ignoring removed nobh option [ 895.041989][T12685] EXT4-fs (loop6): Ignoring removed nobh option [ 895.086694][T12683] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1431: invalid indirect mapped block 256 (level 2) [ 895.118529][T12685] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1430: invalid indirect mapped block 256 (level 2) [ 895.170982][T12683] EXT4-fs (loop2): 2 truncates cleaned up [ 895.176900][T12683] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 895.210137][T12685] EXT4-fs (loop6): 2 truncates cleaned up [ 895.217715][T12685] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 895.266988][T12659] loop9: detected capacity change from 0 to 32768 [ 895.562613][T12710] loop0: detected capacity change from 0 to 128 [ 895.950191][T12684] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1430: bg 0: block 5: invalid block bitmap [ 896.069879][T12710] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 896.079499][T12684] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 896.091855][T12684] EXT4-fs (loop6): This should not happen!! Data will be lost [ 896.091855][T12684] [ 896.101546][T12684] EXT4-fs (loop6): Total free blocks count 0 [ 896.107542][T12684] EXT4-fs (loop6): Free/Dirty block details [ 896.113504][T12684] EXT4-fs (loop6): free_blocks=0 [ 896.118469][T12684] EXT4-fs (loop6): dirty_blocks=33 [ 896.123580][T12684] EXT4-fs (loop6): Block reservation details [ 896.129573][T12684] EXT4-fs (loop6): i_reserved_data_blocks=33 [ 896.143761][T12710] 9pnet: Insufficient options for proto=fd [ 896.275497][T12715] loop3: detected capacity change from 0 to 512 [ 896.374836][T12715] EXT4-fs (loop3): Ignoring removed nobh option [ 896.482249][ T4274] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 896.508643][T12715] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1434: invalid indirect mapped block 256 (level 2) [ 896.583637][T12715] EXT4-fs (loop3): 2 truncates cleaned up [ 896.602911][T12715] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 896.933040][ T8944] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 896.951475][ T8944] FAT-fs (loop0): Filesystem has been set read-only [ 897.147563][T12714] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1434: bg 0: block 5: invalid block bitmap [ 897.161030][T12714] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 897.173345][T12714] EXT4-fs (loop3): This should not happen!! Data will be lost [ 897.173345][T12714] [ 897.184482][T12714] EXT4-fs (loop3): Total free blocks count 0 [ 897.190582][T12714] EXT4-fs (loop3): Free/Dirty block details [ 897.196489][T12714] EXT4-fs (loop3): free_blocks=0 [ 897.201505][T12714] EXT4-fs (loop3): dirty_blocks=33 [ 897.206629][T12714] EXT4-fs (loop3): Block reservation details [ 897.213459][T12714] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 897.262098][T12680] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1431: bg 0: block 5: invalid block bitmap [ 897.275090][T12680] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 897.287617][T12680] EXT4-fs (loop2): This should not happen!! Data will be lost [ 897.287617][T12680] [ 897.297325][T12680] EXT4-fs (loop2): Total free blocks count 0 [ 897.303369][T12680] EXT4-fs (loop2): Free/Dirty block details [ 897.309322][T12680] EXT4-fs (loop2): free_blocks=0 [ 897.315308][T12680] EXT4-fs (loop2): dirty_blocks=33 [ 897.320512][T12680] EXT4-fs (loop2): Block reservation details [ 897.326572][T12680] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 897.488849][T12740] loop3: detected capacity change from 0 to 512 [ 897.527400][T12740] EXT4-fs (loop3): Ignoring removed nobh option [ 897.615686][T12740] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1439: invalid indirect mapped block 256 (level 2) [ 897.732268][T12740] EXT4-fs (loop3): 2 truncates cleaned up [ 897.764128][T12740] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 898.287990][T12739] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1439: bg 0: block 5: invalid block bitmap [ 898.302861][T12739] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 898.315285][T12739] EXT4-fs (loop3): This should not happen!! Data will be lost [ 898.315285][T12739] [ 898.325009][T12739] EXT4-fs (loop3): Total free blocks count 0 [ 898.331085][T12739] EXT4-fs (loop3): Free/Dirty block details [ 898.337389][T12739] EXT4-fs (loop3): free_blocks=0 [ 898.342429][T12739] EXT4-fs (loop3): dirty_blocks=33 [ 898.347559][T12739] EXT4-fs (loop3): Block reservation details [ 898.353604][T12739] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 898.737728][T12766] loop6: detected capacity change from 0 to 512 [ 898.774843][T12766] EXT4-fs (loop6): Ignoring removed nobh option [ 898.826054][T12766] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1443: invalid indirect mapped block 256 (level 2) [ 898.918580][T12766] EXT4-fs (loop6): 2 truncates cleaned up [ 898.924453][T12766] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 900.008942][T12765] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1443: bg 0: block 5: invalid block bitmap [ 900.027463][T12765] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 900.039889][T12765] EXT4-fs (loop6): This should not happen!! Data will be lost [ 900.039889][T12765] [ 900.049598][T12765] EXT4-fs (loop6): Total free blocks count 0 [ 900.055588][T12765] EXT4-fs (loop6): Free/Dirty block details [ 900.061553][T12765] EXT4-fs (loop6): free_blocks=0 [ 900.066487][T12765] EXT4-fs (loop6): dirty_blocks=33 [ 900.071655][T12765] EXT4-fs (loop6): Block reservation details [ 900.078258][T12765] EXT4-fs (loop6): i_reserved_data_blocks=33 [ 900.595756][T12795] loop6: detected capacity change from 0 to 128 [ 900.614242][T12778] loop2: detected capacity change from 0 to 32768 [ 900.652724][T12795] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 900.666746][T12795] 9pnet: Insufficient options for proto=fd [ 900.857832][T12802] loop9: detected capacity change from 0 to 512 [ 900.897502][T12778] XFS (loop2): Mounting V5 Filesystem [ 900.962566][T12802] EXT4-fs (loop9): Ignoring removed nobh option [ 901.078058][T12778] XFS (loop2): Ending clean mount [ 901.084521][T12802] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1450: invalid indirect mapped block 256 (level 2) [ 901.223101][T12802] EXT4-fs (loop9): 2 truncates cleaned up [ 901.281154][T12802] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 901.295086][T12778] 9pnet_virtio: no channels available for device 127.0.0.1 [ 901.701219][ T8659] XFS (loop2): Unmounting Filesystem [ 902.502474][ T9532] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 902.580237][ T9532] FAT-fs (loop6): Filesystem has been set read-only [ 902.648682][ T9532] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 902.653729][T12815] loop3: detected capacity change from 0 to 32768 [ 902.804226][T12828] loop6: detected capacity change from 0 to 164 [ 902.908356][T12815] XFS (loop3): Mounting V5 Filesystem [ 903.062060][T12815] XFS (loop3): Ending clean mount [ 903.135091][ T25] audit: type=1326 audit(1791559011.616:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.2.1454" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7ff6d91d9 code=0x0 [ 903.284298][T10094] XFS (loop3): Unmounting Filesystem [ 905.308461][T12878] loop6: detected capacity change from 0 to 128 [ 905.354118][T12878] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 905.412019][T12878] 9pnet: Insufficient options for proto=fd [ 905.754266][ T25] audit: type=1326 audit(1791559014.236:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.9.1469" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7babcf01d9 code=0x0 [ 905.830404][ T9532] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 905.863690][ T9532] FAT-fs (loop6): Filesystem has been set read-only [ 905.888947][ T9532] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 906.090934][T12915] loop0: detected capacity change from 0 to 512 [ 906.149918][T12915] EXT4-fs (loop0): Ignoring removed nobh option [ 906.179753][T12915] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1471: invalid indirect mapped block 256 (level 2) [ 906.253465][T12915] EXT4-fs (loop0): 2 truncates cleaned up [ 906.272193][T12922] binder: 12920:12922 ioctl c0306201 200000000080 returned -14 [ 906.278293][T12915] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 906.295118][T12922] binder: 12920:12922 ioctl c0306201 2000000003c0 returned -14 [ 908.084938][T12931] loop6: detected capacity change from 0 to 512 [ 908.399143][T12931] EXT4-fs (loop6): Ignoring removed nobh option [ 908.431234][T12936] loop0: detected capacity change from 0 to 8 [ 908.470278][T12931] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1476: invalid indirect mapped block 256 (level 2) [ 908.490633][T12931] EXT4-fs (loop6): 2 truncates cleaned up [ 908.496584][T12931] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 908.511644][T12936] squashfs: Unknown parameter 'nl80211' [ 909.756477][T12930] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1476: bg 0: block 5: invalid block bitmap [ 910.633573][T12955] loop9: detected capacity change from 0 to 128 [ 910.648559][T12930] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 910.661041][T12930] EXT4-fs (loop6): This should not happen!! Data will be lost [ 910.661041][T12930] [ 910.670780][T12930] EXT4-fs (loop6): Total free blocks count 0 [ 910.676795][T12930] EXT4-fs (loop6): Free/Dirty block details [ 910.684131][T12930] EXT4-fs (loop6): free_blocks=0 [ 910.689167][T12930] EXT4-fs (loop6): dirty_blocks=33 [ 910.694283][T12930] EXT4-fs (loop6): Block reservation details [ 910.700306][T12930] EXT4-fs (loop6): i_reserved_data_blocks=33 [ 910.747319][T12955] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 910.763223][T12955] 9pnet: Insufficient options for proto=fd [ 910.853086][ T9525] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 910.869125][ T9525] FAT-fs (loop9): Filesystem has been set read-only [ 910.884879][T12962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1481'. [ 910.912233][ T9525] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 911.083410][T12972] device syzkaller0 entered promiscuous mode [ 911.248470][T12980] binder: 12976:12980 ioctl c0306201 200000000080 returned -14 [ 911.257266][T12980] binder: 12976:12980 ioctl c0306201 2000000003c0 returned -14 [ 912.407303][T12995] loop3: detected capacity change from 0 to 512 [ 912.486839][T12995] EXT4-fs (loop3): Ignoring removed nobh option [ 912.863804][T12995] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1490: invalid indirect mapped block 256 (level 2) [ 913.156488][T12995] EXT4-fs (loop3): 2 truncates cleaned up [ 913.181143][T12995] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 913.201455][T13003] loop9: detected capacity change from 0 to 512 [ 913.301662][T13003] EXT4-fs (loop9): Ignoring removed nobh option [ 914.284033][T12992] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1490: bg 0: block 5: invalid block bitmap [ 914.327838][T12992] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 914.340358][T12992] EXT4-fs (loop3): This should not happen!! Data will be lost [ 914.340358][T12992] [ 914.350072][T12992] EXT4-fs (loop3): Total free blocks count 0 [ 914.356062][T12992] EXT4-fs (loop3): Free/Dirty block details [ 914.362014][T12992] EXT4-fs (loop3): free_blocks=0 [ 914.366960][T12992] EXT4-fs (loop3): dirty_blocks=33 [ 914.372124][T12992] EXT4-fs (loop3): Block reservation details [ 914.378132][T12992] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 914.839775][T13003] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1491: invalid indirect mapped block 256 (level 2) [ 914.910812][T13003] EXT4-fs (loop9): 2 truncates cleaned up [ 914.948336][T13003] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 915.075307][T13016] loop6: detected capacity change from 0 to 256 [ 915.235244][T13016] FAT-fs (loop6): Directory bread(block 64) failed [ 915.318355][T13016] FAT-fs (loop6): Directory bread(block 65) failed [ 915.325148][T13016] FAT-fs (loop6): Directory bread(block 66) failed [ 915.344757][T13016] FAT-fs (loop6): Directory bread(block 67) failed [ 915.855266][T13020] loop3: detected capacity change from 0 to 128 [ 915.882151][T13016] FAT-fs (loop6): Directory bread(block 68) failed [ 915.911880][T13020] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 915.924659][T13002] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.1491: bg 0: block 5: invalid block bitmap [ 915.927226][T13020] 9pnet: Insufficient options for proto=fd [ 915.944318][T13002] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 915.958380][T13002] EXT4-fs (loop9): This should not happen!! Data will be lost [ 915.958380][T13002] [ 915.968050][T13002] EXT4-fs (loop9): Total free blocks count 0 [ 915.974119][T13002] EXT4-fs (loop9): Free/Dirty block details [ 915.981029][T13002] EXT4-fs (loop9): free_blocks=0 [ 915.986166][T13002] EXT4-fs (loop9): dirty_blocks=33 [ 915.991320][T13002] EXT4-fs (loop9): Block reservation details [ 915.997299][T13002] EXT4-fs (loop9): i_reserved_data_blocks=33 [ 916.081266][T13016] FAT-fs (loop6): Directory bread(block 69) failed [ 916.087916][T13016] FAT-fs (loop6): Directory bread(block 70) failed [ 916.092236][T10094] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 916.104155][T10094] FAT-fs (loop3): Filesystem has been set read-only [ 916.112702][T10094] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 916.124042][T13016] FAT-fs (loop6): Directory bread(block 71) failed [ 916.182477][T13025] loop2: detected capacity change from 0 to 512 [ 916.219248][T13016] FAT-fs (loop6): Directory bread(block 72) failed [ 916.229929][T13016] FAT-fs (loop6): Directory bread(block 73) failed [ 916.261261][T13031] loop9: detected capacity change from 0 to 8 [ 916.287281][T13025] EXT4-fs (loop2): Ignoring removed nobh option [ 916.299280][T13031] squashfs: Unknown parameter 'nl80211' [ 916.354940][T13025] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1495: invalid indirect mapped block 256 (level 2) [ 916.375970][T13025] EXT4-fs (loop2): 2 truncates cleaned up [ 916.434584][T13025] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 918.070457][T13024] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1495: bg 0: block 5: invalid block bitmap [ 918.120386][T13024] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 918.132781][T13024] EXT4-fs (loop2): This should not happen!! Data will be lost [ 918.132781][T13024] [ 918.142462][T13024] EXT4-fs (loop2): Total free blocks count 0 [ 918.148525][T13024] EXT4-fs (loop2): Free/Dirty block details [ 918.154415][T13024] EXT4-fs (loop2): free_blocks=0 [ 918.159388][T13024] EXT4-fs (loop2): dirty_blocks=33 [ 918.164493][T13024] EXT4-fs (loop2): Block reservation details [ 918.170627][T13024] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 918.406471][T13057] loop3: detected capacity change from 0 to 256 [ 918.549779][T13063] loop6: detected capacity change from 0 to 512 [ 918.601783][T13069] loop2: detected capacity change from 0 to 256 [ 918.695369][T13069] FAT-fs (loop2): Directory bread(block 64) failed [ 918.707297][T13069] FAT-fs (loop2): Directory bread(block 65) failed [ 918.733688][T13069] FAT-fs (loop2): Directory bread(block 66) failed [ 918.774851][T13069] FAT-fs (loop2): Directory bread(block 67) failed [ 918.795233][T13063] EXT4-fs (loop6): Ignoring removed nobh option [ 918.812043][T13076] loop0: detected capacity change from 0 to 128 [ 918.833074][T13069] FAT-fs (loop2): Directory bread(block 68) failed [ 918.840474][T13069] FAT-fs (loop2): Directory bread(block 69) failed [ 918.847073][T13069] FAT-fs (loop2): Directory bread(block 70) failed [ 918.857960][T13063] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1502: invalid indirect mapped block 256 (level 2) [ 918.875014][T13069] FAT-fs (loop2): Directory bread(block 71) failed [ 918.881765][T13069] FAT-fs (loop2): Directory bread(block 72) failed [ 918.899478][T13076] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 918.901328][T13063] EXT4-fs (loop6): 2 truncates cleaned up [ 918.914987][T13069] FAT-fs (loop2): Directory bread(block 73) failed [ 918.926536][T13076] 9pnet: Insufficient options for proto=fd [ 918.965925][T13063] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 919.011496][ T8944] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 919.039316][ T8944] FAT-fs (loop0): Filesystem has been set read-only [ 919.062994][ T8944] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 919.963599][T13062] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1502: bg 0: block 5: invalid block bitmap [ 919.977595][T13062] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 919.990374][T13062] EXT4-fs (loop6): This should not happen!! Data will be lost [ 919.990374][T13062] [ 920.000072][T13062] EXT4-fs (loop6): Total free blocks count 0 [ 920.006076][T13062] EXT4-fs (loop6): Free/Dirty block details [ 920.012061][T13062] EXT4-fs (loop6): free_blocks=0 [ 920.017006][T13062] EXT4-fs (loop6): dirty_blocks=33 [ 920.022180][T13062] EXT4-fs (loop6): Block reservation details [ 920.028237][T13062] EXT4-fs (loop6): i_reserved_data_blocks=33 [ 920.275957][T13105] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1512'. [ 920.590966][T13107] loop6: detected capacity change from 0 to 8 [ 920.638508][ T4226] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 920.825999][T13107] squashfs: Unknown parameter 'nl80211' [ 921.007699][ T4226] usb 3-1: Using ep0 maxpacket: 32 [ 921.128880][ T4226] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 921.137393][ T4226] usb 3-1: config 0 has no interface number 0 [ 921.145492][ T4226] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 921.349005][ T4226] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 921.446254][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.702387][ T4226] usb 3-1: Product: syz [ 921.803367][ T4226] usb 3-1: Manufacturer: syz [ 921.866716][ T4226] usb 3-1: SerialNumber: syz [ 921.905039][ T4226] usb 3-1: config 0 descriptor?? [ 921.998832][ T4226] usb 3-1: can't set config #0, error -71 [ 922.013702][ T4226] usb 3-1: USB disconnect, device number 4 [ 922.172651][T13148] loop2: detected capacity change from 0 to 128 [ 922.233619][T13148] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 922.245234][T13146] loop9: detected capacity change from 0 to 128 [ 922.257540][T13148] 9pnet: Insufficient options for proto=fd [ 922.394105][T13146] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 922.443587][T13150] loop6: detected capacity change from 0 to 164 [ 922.458411][T13146] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 923.507746][T13234] loop3: detected capacity change from 0 to 164 [ 923.825785][ T8659] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 923.871417][ T8659] FAT-fs (loop2): Filesystem has been set read-only [ 923.931027][ T8659] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 924.094928][T13248] loop6: detected capacity change from 0 to 1024 [ 924.219608][T13255] loop2: detected capacity change from 0 to 512 [ 924.269753][T13255] EXT4-fs (loop2): Ignoring removed nobh option [ 924.466317][T13255] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1542: invalid indirect mapped block 256 (level 2) [ 924.501821][T13255] EXT4-fs (loop2): 2 truncates cleaned up [ 924.522387][T13255] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 924.542813][T13266] loop9: detected capacity change from 0 to 8 [ 924.553711][T13266] squashfs: Unknown parameter 'nl80211' [ 924.702809][T13272] loop0: detected capacity change from 0 to 128 [ 924.799494][T13272] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 924.813576][T13272] 9pnet: Insufficient options for proto=fd [ 925.938011][T13290] binder: 13285:13290 ioctl c0306201 200000000080 returned -14 [ 925.946288][T13290] binder: 13285:13290 ioctl c0306201 2000000003c0 returned -14 [ 926.543699][ T8944] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 926.592648][ T8944] FAT-fs (loop0): Filesystem has been set read-only [ 926.626824][ T8944] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 927.865422][T13315] loop6: detected capacity change from 0 to 8 [ 927.925764][T13315] squashfs: Unknown parameter 'nl80211' [ 927.984401][T13317] loop3: detected capacity change from 0 to 8 [ 928.028637][T13317] squashfs: Unknown parameter 'nl80211' [ 928.232664][T13337] loop2: detected capacity change from 0 to 128 [ 928.356203][T13344] loop0: detected capacity change from 0 to 512 [ 928.938286][T13227] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 929.148248][T13227] usb 4-1: device descriptor read/64, error -71 [ 929.428219][T13227] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 929.538438][T13344] EXT4-fs (loop0): Ignoring removed nobh option [ 929.564421][T13337] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 929.591684][T13337] 9pnet: Insufficient options for proto=fd [ 929.618229][T13227] usb 4-1: device descriptor read/64, error -71 [ 929.706342][ T8659] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 929.737930][T13344] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1567: invalid indirect mapped block 256 (level 2) [ 929.745788][ T8659] FAT-fs (loop2): Filesystem has been set read-only [ 929.753346][T13227] usb usb4-port1: attempt power cycle [ 929.770013][T13344] EXT4-fs (loop0): 2 truncates cleaned up [ 929.798267][T13344] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 929.842618][ T8659] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 930.411971][T13368] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 930.828422][T13340] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 930.828766][T13379] binder: 13372:13379 ioctl c0306201 200000000080 returned -14 [ 930.840738][T13340] EXT4-fs (loop0): This should not happen!! Data will be lost [ 930.840738][T13340] [ 930.840763][T13340] EXT4-fs (loop0): Total free blocks count 0 [ 930.840775][T13340] EXT4-fs (loop0): Free/Dirty block details [ 930.840787][T13340] EXT4-fs (loop0): free_blocks=0 [ 930.840800][T13340] EXT4-fs (loop0): dirty_blocks=33 [ 930.840812][T13340] EXT4-fs (loop0): Block reservation details [ 930.840822][T13340] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 930.898439][T13227] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 930.917469][T13377] binder: 13372:13377 ioctl c0306201 2000000003c0 returned -14 [ 931.058481][T13227] usb 4-1: device descriptor read/8, error -71 [ 931.343784][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.354480][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.075347][ T7311] Bluetooth: hci4: Frame reassembly failed (-84) [ 933.493353][T13405] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1576'. [ 933.611868][T13405] loop6: detected capacity change from 0 to 512 [ 933.730745][T13405] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 935.168411][ T7963] Bluetooth: hci4: command 0x1003 tx timeout [ 935.191505][ T4198] Bluetooth: hci4: sending frame failed (-49) [ 936.023031][T13451] binder: 13450:13451 ioctl c0306201 200000000080 returned -14 [ 936.031200][T13451] binder: 13450:13451 ioctl c0306201 2000000003c0 returned -14 [ 936.777862][T13482] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1593'. [ 936.808822][T13482] loop2: detected capacity change from 0 to 512 [ 936.853460][T13482] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 936.933830][T13486] loop9: detected capacity change from 0 to 512 [ 937.015163][T13486] EXT4-fs (loop9): Ignoring removed nobh option [ 937.067893][T13486] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1594: invalid indirect mapped block 256 (level 2) [ 937.082234][T13486] EXT4-fs (loop9): 2 truncates cleaned up [ 937.101479][T13486] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 937.258415][ T4268] Bluetooth: hci4: command 0x1001 tx timeout [ 937.270481][ T4198] Bluetooth: hci4: sending frame failed (-49) [ 937.380591][ T25] audit: type=1326 audit(1791559045.866:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13500 comm="syz.2.1597" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7ff6d91d9 code=0x0 [ 938.156060][T13484] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.1594: bg 0: block 5: invalid block bitmap [ 938.178748][T13484] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 938.191029][T13508] loop3: detected capacity change from 0 to 1024 [ 938.197423][T13484] EXT4-fs (loop9): This should not happen!! Data will be lost [ 938.197423][T13484] [ 938.207141][T13484] EXT4-fs (loop9): Total free blocks count 0 [ 938.213194][T13484] EXT4-fs (loop9): Free/Dirty block details [ 938.219135][T13484] EXT4-fs (loop9): free_blocks=0 [ 938.224085][T13484] EXT4-fs (loop9): dirty_blocks=33 [ 938.229260][T13484] EXT4-fs (loop9): Block reservation details [ 938.235246][T13484] EXT4-fs (loop9): i_reserved_data_blocks=33 [ 938.349339][T13508] hfsplus: unable to parse mount options [ 938.503342][T13508] loop3: detected capacity change from 0 to 512 [ 938.521625][T13508] EXT4-fs (loop3): Ignoring removed nobh option [ 938.555007][T13508] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 938.605632][T13508] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 938.658011][T13508] EXT4-fs (loop3): orphan cleanup on readonly fs [ 938.711976][T13508] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1596: attempt to clear invalid blocks 1024 len 1 [ 938.755734][T13508] EXT4-fs (loop3): Remounting filesystem read-only [ 938.765178][T13508] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1596: bg 0: block 361: padding at end of block bitmap is not set [ 938.780244][T13508] EXT4-fs (loop3): Remounting filesystem read-only [ 938.787624][T13508] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 938.816880][T13508] EXT4-fs (loop3): Remounting filesystem read-only [ 938.921431][T13508] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1596: invalid indirect mapped block 1811939328 (level 0) [ 939.319804][T13508] EXT4-fs (loop3): Remounting filesystem read-only [ 939.423723][ T9880] Bluetooth: hci4: command 0x1009 tx timeout [ 939.430740][T13508] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1596: invalid indirect mapped block 2185560079 (level 1) [ 939.447522][T13508] EXT4-fs (loop3): Remounting filesystem read-only [ 939.454499][T13508] EXT4-fs (loop3): 1 truncate cleaned up [ 939.460784][T13508] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 939.655381][T13507] loop6: detected capacity change from 0 to 32768 [ 939.837156][T13507] ERROR: (device loop6): dbAllocAG: unable to allocate blocks [ 939.837156][T13507] [ 939.862156][T13507] ERROR: (device loop6): dbDiscardAG: -EIO [ 939.862156][T13507] [ 939.897217][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1598'. [ 939.912122][T13543] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1605'. [ 939.971389][T13543] loop9: detected capacity change from 0 to 512 [ 940.034376][T13543] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 940.160339][T13507] jfs: Unrecognized mount option "debug" or missing value [ 940.273891][T13507] jfs: Unrecognized mount option "debug" or missing value [ 940.725618][T13571] loop6: detected capacity change from 0 to 512 [ 940.813136][T13571] EXT4-fs (loop6): Ignoring removed nobh option [ 940.853177][T13571] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1609: invalid indirect mapped block 256 (level 2) [ 940.889762][T13571] EXT4-fs (loop6): 2 truncates cleaned up [ 940.909183][T13571] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 941.018261][T13491] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 942.019867][T13582] loop2: detected capacity change from 0 to 1024 [ 942.083432][T13582] hfsplus: unable to parse mount options [ 942.170867][T13582] loop2: detected capacity change from 0 to 512 [ 942.213920][T13582] EXT4-fs (loop2): Ignoring removed nobh option [ 942.255954][T13582] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 942.300306][T13592] loop6: detected capacity change from 0 to 128 [ 942.338369][T13582] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 942.347258][T13582] EXT4-fs (loop2): orphan cleanup on readonly fs [ 942.414919][T13592] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 942.428412][T13592] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 942.449019][T13582] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1610: attempt to clear invalid blocks 1024 len 1 [ 942.488892][T13582] EXT4-fs (loop2): Remounting filesystem read-only [ 942.496625][T13582] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1610: bg 0: block 361: padding at end of block bitmap is not set [ 942.531328][T13582] EXT4-fs (loop2): Remounting filesystem read-only [ 942.537885][T13582] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 942.592994][T13582] EXT4-fs (loop2): Remounting filesystem read-only [ 942.611088][T13582] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1610: invalid indirect mapped block 1811939328 (level 0) [ 942.653441][T13582] EXT4-fs (loop2): Remounting filesystem read-only [ 942.668450][T13582] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1610: invalid indirect mapped block 2185560079 (level 1) [ 942.801815][T13582] EXT4-fs (loop2): Remounting filesystem read-only [ 942.811866][T13582] EXT4-fs (loop2): 1 truncate cleaned up [ 942.829170][T13582] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 942.977956][T13616] loop3: detected capacity change from 0 to 256 [ 943.103148][T13616] FAT-fs (loop3): Directory bread(block 64) failed [ 943.125881][T13616] FAT-fs (loop3): Directory bread(block 65) failed [ 943.146121][T13616] FAT-fs (loop3): Directory bread(block 66) failed [ 943.173217][T13616] FAT-fs (loop3): Directory bread(block 67) failed [ 943.192334][T13616] FAT-fs (loop3): Directory bread(block 68) failed [ 943.232381][T13616] FAT-fs (loop3): Directory bread(block 69) failed [ 943.270697][T13616] FAT-fs (loop3): Directory bread(block 70) failed [ 943.309220][T13616] FAT-fs (loop3): Directory bread(block 71) failed [ 943.315855][T13616] FAT-fs (loop3): Directory bread(block 72) failed [ 943.322594][T13616] FAT-fs (loop3): Directory bread(block 73) failed [ 943.656328][T13636] loop0: detected capacity change from 0 to 128 [ 943.907819][T13636] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 943.919831][T13192] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 944.180177][T13636] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 944.248904][T13642] loop6: detected capacity change from 0 to 512 [ 944.282827][T13192] usb 4-1: Using ep0 maxpacket: 32 [ 944.295736][T13642] EXT4-fs (loop6): Ignoring removed nobh option [ 944.505861][T13642] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1619: invalid indirect mapped block 256 (level 2) [ 944.518284][T13192] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 944.535125][T13192] usb 4-1: config 0 has no interface number 0 [ 944.541953][T13192] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 944.568616][T13642] EXT4-fs (loop6): 2 truncates cleaned up [ 944.601501][T13642] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 945.103413][T13640] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1619: bg 0: block 5: invalid block bitmap [ 945.149216][T13192] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 945.158634][T13192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.166705][T13192] usb 4-1: Product: syz [ 945.170957][T13192] usb 4-1: Manufacturer: syz [ 945.175664][T13192] usb 4-1: SerialNumber: syz [ 945.183340][T13192] usb 4-1: config 0 descriptor?? [ 945.216144][T13640] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 945.228669][T13640] EXT4-fs (loop6): This should not happen!! Data will be lost [ 945.228669][T13640] [ 945.238873][T13640] EXT4-fs (loop6): Total free blocks count 0 [ 945.244869][T13640] EXT4-fs (loop6): Free/Dirty block details [ 945.250829][T13640] EXT4-fs (loop6): free_blocks=0 [ 945.255781][T13640] EXT4-fs (loop6): dirty_blocks=33 [ 945.261100][T13640] EXT4-fs (loop6): Block reservation details [ 945.267090][T13640] EXT4-fs (loop6): i_reserved_data_blocks=33 [ 945.278077][T13667] loop0: detected capacity change from 0 to 512 [ 945.289151][T13638] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 945.505162][T13674] loop9: detected capacity change from 0 to 512 [ 945.549138][T13633] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 945.592971][ T25] audit: type=1326 audit(1791559054.076:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13679 comm="syz.0.1629" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffaa62f71d9 code=0x0 [ 945.681786][T13674] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 945.728448][T13674] ext4 filesystem being mounted at /143/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 945.905584][T13674] EXT4-fs error (device loop9): ext4_map_blocks:631: inode #2: block 3: comm syz.9.1628: lblock 0 mapped to illegal pblock 3 (length 1) [ 946.084893][T13674] EXT4-fs warning (device loop9): ext4_empty_dir:3141: inode #2: lblock 0: comm syz.9.1628: error -117 reading directory block [ 946.388524][ T4790] Bluetooth: hci5: command 0x0405 tx timeout [ 946.670705][T13700] binder: 13699:13700 ioctl c0306201 200000000080 returned -14 [ 946.678975][T13700] binder: 13699:13700 ioctl c0306201 2000000003c0 returned -14 [ 946.785113][T13703] device syzkaller0 entered promiscuous mode [ 946.798271][T13192] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 946.956208][T13192] asix: probe of 4-1:0.188 failed with error -71 [ 946.965571][T13192] usb 4-1: USB disconnect, device number 12 [ 948.041378][T13724] loop6: detected capacity change from 0 to 2048 [ 948.128300][T13724] EXT4-fs (loop6): unsupported inode size: 0 [ 948.176273][T13724] EXT4-fs (loop6): blocksize: 4096 [ 948.326911][T13733] loop0: detected capacity change from 0 to 2048 [ 948.473416][T13724] loop6: detected capacity change from 0 to 64 [ 948.484155][T13733] EXT4-fs (loop0): unsupported inode size: 0 [ 948.498853][T13733] EXT4-fs (loop0): blocksize: 4096 [ 948.605484][T13693] loop2: detected capacity change from 0 to 32768 [ 948.835342][T13693] ERROR: (device loop2): dbAllocAG: unable to allocate blocks [ 948.835342][T13693] [ 948.900434][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1634'. [ 948.915400][T13742] loop9: detected capacity change from 0 to 256 [ 948.922101][T13693] ERROR: (device loop2): dbDiscardAG: -EIO [ 948.922101][T13693] [ 949.091529][T13747] kernel profiling enabled (shift: 23) [ 949.976841][ T4173] af_packet: tpacket_rcv: packet too big, clamped from 7106 to 3966. macoff=82 [ 950.511889][ T4285] ------------[ cut here ]------------ [ 950.576336][ T4285] kernel BUG at fs/hfs/inode.c:443! [ 950.581701][ T4285] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 950.587772][ T4285] CPU: 1 PID: 4285 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 950.595404][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 950.605465][ T4285] Workqueue: writeback wb_workfn (flush-7:6) [ 950.611541][ T4285] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 950.617169][ T4285] Code: 8d ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 f1 bf 8d ff e9 43 fe ff ff e8 f7 7a 48 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 950.636784][ T4285] RSP: 0018:ffffc9000328f300 EFLAGS: 00010293 [ 950.642866][ T4285] RAX: ffffffff8230a869 RBX: ffff88801fec0dc8 RCX: ffff888026861dc0 [ 950.650847][ T4285] RDX: 0000000000000000 RSI: ffffffff8d2e2d40 RDI: 0000000000000000 [ 950.658820][ T4285] RBP: ffffc9000328f490 R08: ffff888026861dc0 R09: 0000000000000003 [ 950.666797][ T4285] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 950.672882][T13775] hfs: hfs: Invalid key length: 94 [ 950.674901][ T4285] R13: 1ffff92000651e64 R14: 0000000000000000 R15: ffff88801fec0d88 [ 950.674917][ T4285] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 950.674932][ T4285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 950.703461][ T4285] CR2: 0000001b2fc20ff8 CR3: 000000004ecca000 CR4: 00000000003506e0 [ 950.711439][ T4285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 950.719420][ T4285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 950.727399][ T4285] Call Trace: [ 950.730678][ T4285] [ 950.733611][ T4285] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 950.739004][ T4285] ? __writeback_single_inode+0x46d/0xda0 [ 950.744733][ T4285] ? __rwlock_init+0x140/0x140 [ 950.749506][ T4285] __writeback_single_inode+0x6c4/0xda0 [ 950.755057][ T4285] writeback_sb_inodes+0xaaa/0x1750 [ 950.760270][ T4285] ? queue_io+0x530/0x530 [ 950.764698][ T4285] ? up_read+0x20/0x20 [ 950.768775][ T4285] __writeback_inodes_wb+0x12a/0x3f0 [ 950.774065][ T4285] wb_writeback+0x45e/0xbc0 [ 950.778583][ T4285] ? rcu_lock_release+0x20/0x20 [ 950.783446][ T4285] ? __lock_acquire+0x7d40/0x7d40 [ 950.788477][ T4285] ? cpumask_next+0xb3/0xd0 [ 950.793239][ T4285] wb_workfn+0xbd6/0xf20 [ 950.797498][ T4285] ? inode_wait_for_writeback+0x220/0x220 [ 950.803231][ T4285] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 950.809219][ T4285] ? __lock_acquire+0x7d40/0x7d40 [ 950.814255][ T4285] ? read_lock_is_recursive+0x10/0x10 [ 950.819721][ T4285] ? _raw_spin_unlock_irq+0x1f/0x40 [ 950.824921][ T4285] process_one_work+0x867/0xff0 [ 950.829789][ T4285] ? worker_detach_from_pool+0x240/0x240 [ 950.835426][ T4285] ? lockdep_hardirqs_off+0x70/0x100 [ 950.840857][ T4285] ? _raw_spin_lock_irq+0xb7/0xf0 [ 950.845889][ T4285] ? _raw_spin_lock_irqsave+0x100/0x100 [ 950.851448][ T4285] ? wq_worker_running+0x97/0x170 [ 950.856479][ T4285] worker_thread+0xad7/0x12a0 [ 950.861256][ T4285] kthread+0x42e/0x520 [ 950.865340][ T4285] ? rcu_lock_release+0x20/0x20 [ 950.870201][ T4285] ? kthread_blkcg+0xd0/0xd0 [ 950.874798][ T4285] ret_from_fork+0x1f/0x30 [ 950.879226][ T4285] [ 950.882254][ T4285] Modules linked in: [ 951.185021][ T4285] ---[ end trace c3ca659a5c7dfa88 ]--- [ 951.190563][ T4285] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 951.196170][ T4285] Code: 8d ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 f1 bf 8d ff e9 43 fe ff ff e8 f7 7a 48 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 951.242092][ T4285] RSP: 0018:ffffc9000328f300 EFLAGS: 00010293 [ 951.287028][ T4285] RAX: ffffffff8230a869 RBX: ffff88801fec0dc8 RCX: ffff888026861dc0 [ 951.330883][ T4285] RDX: 0000000000000000 RSI: ffffffff8d2e2d40 RDI: 0000000000000000 [ 951.352707][ T4285] RBP: ffffc9000328f490 R08: ffff888026861dc0 R09: 0000000000000003 [ 951.371169][ T4285] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 951.377208][T13783] device syzkaller0 entered promiscuous mode [ 951.402042][ T4285] R13: 1ffff92000651e64 R14: 0000000000000000 R15: ffff88801fec0d88 [ 951.422237][ T4285] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 951.459640][ T4285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.476425][ T4285] CR2: 00002000000012c0 CR3: 0000000028bd0000 CR4: 00000000003506f0 [ 951.499618][ T4285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 951.522924][ T4285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 951.539583][ T4285] Kernel panic - not syncing: Fatal exception [ 951.545875][ T4285] Kernel Offset: disabled [ 951.550212][ T4285] Rebooting in 86400 seconds..