last executing test programs: 28m3.745792349s ago: executing program 32 (id=79): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 28m1.904711174s ago: executing program 33 (id=91): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1002}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="ffffffffffffaabbccddeeff88ca5b0000000000000000000100010000007fed0c886c3fa6e43c0c97d900fe89b6", 0x2e) 27m59.825356535s ago: executing program 34 (id=99): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="0500000002"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000380)=ANY=[], 0x6) 27m42.130449081s ago: executing program 35 (id=165): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000280)={'veth1_macvtap\x00', 0x6c0}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000240), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 27m39.942399984s ago: executing program 36 (id=176): memfd_secret(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setaffinity(r2, 0x0, 0x0) mkdir(&(0x7f0000019e80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000019ec0)='./config\x00', &(0x7f0000019f00)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000019f40)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000019f80)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f000001a080)={0x20080522}, 0x0) write(r0, &(0x7f0000000180)="72f6746573742f6576656e7431202e2f66696c65303a30", 0x17) 27m0.308829579s ago: executing program 37 (id=413): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000040000000004000008"], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket(0x10, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x7, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="720ac4ff000000007110a90000000000720ac0ff0100000095"], &(0x7f0000000580)='GPL\x00'}, 0x94) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r0], 0x38}}, 0x10) 26m11.619848016s ago: executing program 38 (id=667): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@block_validity}, {@nodiscard}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}], [{@dont_measure}, {@audit}]}, 0x3, 0x4fe, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000680)={0xa, 0x4e23, 0x2, @local, 0x7ff}, 0x1c, &(0x7f00000014c0)}}], 0x1, 0x40801) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000001640)=ANY=[@ANYRES64=r2, @ANYRESDEC=r0, @ANYRES16, @ANYRESOCT=r3, @ANYBLOB="621df7484119a8e68750f898534ead59a145fc2bc19cd14161f180c7b396b4f054cadc9d2bd2b29be1aaf704ed9a097bf210caa841e3cbe8070c7d0f5f9334e8d8f65079347fbc6584df22ac0d2aef0799facbe7f756499a6f18919e7bae05110f220ff27da11be12487372fae18d309cb104f347edb5c5ce96c644823c609581f70a06ae465aa4b924087d6ddc708fc9ec06e7687f96f018f6acaa5019a18f80db5e9ea409dfa08c1f1a1eee5197423b3b878d8c00dcc484ae3b190690b47ce4a8503d6f1488d17a28fe6", @ANYRESOCT, @ANYRESHEX=r0, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r5, @ANYRESDEC=r1], 0x2, 0x576, &(0x7f00000006c0)="$eJzs3V1v094dwPGfS7tGmdRN+08IVQUOZZOKVIKTQFDEleecpAcSO7Id1F6hiqaoIoWJMmntDfSGbdL2ItjlXsTeEdpLYPJD+pgHoI9U30/UHsc+PudnN/Kvbu1jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYrk12y5a0jReZ1kN59YCv7X/Nlv72Ay5d6gY0a+IFX9JLic30lk3fr+/+Lol8nHv3Zzk4iInO7++/tsnv0xO9NcfEfB3+fcPtrS1vfN6tdfrvjutQC6hm9PDlzW0Z0LftJyGVib0VbVSsR8s1UNVN00droSRbik30E7kB2rBvaeK1WpZ6cKK3/EaNaep+zMf3y/ZdkU9LbS1E4S+9+BpIXSXTLNpvEZSJ14c13kcfxCfmUhF2mkptb7R65bHbUBcqfgtlUrjKpXsUqlYLJWKlUfVR49te/LYDPsIOVbj9D60+Dmd2rEbOKmJLP9LU4x40pFlUQNfrtQkEF9aQ5Zn+vn/jw/0yH4P5v+5dNbcjf3Fs/G3ebmVvrs1LP8PieWUX5P9qI4v25Jt2ZHXsio96UlX3p1PRJfm1RAtnhgJxRcjLXGSOSqbo6QqFamILS9kSepT8T6si5GmaAllRUKJRCefKFcC0eJIJL4EomRBXLknSopSlaqURYmWgqyILx3xpCE1cZJW1mUj2e9lUdawGPcqFYduRr7/E+5KacTWkv9xcqd05AZO7ms//wMAAAAAgCvLSv76PpV83Uze101T2xcdFgAAAAAAOEXJf/7n4iK5OuumWJz/AwAAAABw1Uwn3y0RycvtdGpdrOR2qW/4I8DHsw8QAAAAAACcWPL//1txkYyBclusveFSuAgAAAAAAIAr4u97o+8OG2M3bE9b//2fBMGUtdte/oO1mYzN62xeS9e7drTFqD5rzWSNJEUlLSYnXT1n5dJKe4NgfsmK9XFxWPsBOHsBfPyeAH6ZlH/KnbTOnbW0XMuW/CbtJV83TV1w/eaTojjOzESkl6O/vNn4qySb/w+vNWPlZKPXLbx821tLYtmNW9ndzAZQPDaO4ohY3ifjLST3XAzc4qnkRoys37wl6xu9rt1ens5adjYn0ss3Jg73+GFmRJ+fZD6tNZ+NeJvvL0n7zMV9FgvDtj6LonjCLf8kd9M6dxfupsWAKErjoigdjCLbCROnHUV5XBTlE0YBABdlPctCUzIs/x/Luz9wlDuS3ePD3jdkd/nO7P5JFtI6C7PJgXVydsAR3R53RLdPmN3+c+wZSMNybNzvv45k1c/xCp+H9hs2S1a8C6+93/yzXN/a3rm/sbn6qvuq+6ZUKlfsh7b9qCRTyWZkBbkHADDAwWfsWAPz/6in8Hz9Gufuh9lZ9e7Rs+os4/1u75KCgryUt9KTNVlM7jZIrjgY+HtH/sBlCItjzlrzSZpMn/CyOOKs7lfJXQ79dksj6x6OoXwePwoAAM7N/Jg8PDr/p+fui2POuw/n8tFnx/kDT2sDAABnQwdfrHz0NysITPtFsVotOtGSVkFOnqnA1BpaGS/SgbvkeA2t2oEf+a7fjCeem5oOVdhpt/0gUnU/UG0/NMvJ8IEqe/R7qFuOFxk3bDe1E2rl+l7kuJGqmdBV7c6fmiZc0kGyctjWrqkb14mM76nQ7wSuLigVan2goqlpLzJ1E096qh2YlhPk1HO/2WlpVdOhG5h25KcN9vsyXt0PWkmzhYve2QAAXBJb2zuvV3u97rsznBjYce7cNxUAAGTGZGkAAAAAAAAAAAAAAAAAAAAAAHAJnMf9f0xc8Yn+UNA/3k5Ozi5CSy56//yUE2MPHR/O/OAE4Ez9PwAA//9euU4t") ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000000)={0x0, 0x4, 0xfffffff7, 0x9, 0x101, 0xff, 0x8001, 0x0, 0x7, 0x8, 0x45a, 0x1}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14", @ANYBLOB], 0x14}}, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000080)={[{@nodioread_nolock}, {@errors_remount}, {@grpid}, {@data_err_ignore}, {@jqfmt_vfsold}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0xe4d}}]}, 0x0, 0x474, &(0x7f0000000200)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 24m12.938654824s ago: executing program 39 (id=1139): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x0, 0x42) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x5, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x93, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23m26.254139691s ago: executing program 40 (id=1354): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'bond0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000780)={0x1, 0x3, [0x1e0, 0x2d8, 0x40e, 0xa7e]}) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4ea3, 0x0, @mcast1, 0x7}, 0x1c) sendmsg(r0, &(0x7f0000000640)={0x0, 0x9511, &(0x7f0000000680)=[{&(0x7f00000006c0)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 20m30.556762281s ago: executing program 41 (id=2462): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000380)={0x0, 0xd, 0x2, "e545"}, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000300)={0x14, &(0x7f0000000180)={0x40, 0x21, 0x96, {0x96, 0x4, "b53b24f7e2c02b84c2a553aed6a2868d486b2f1d3adf99014f03a8a31ad60100e5e541a473f538e2d1a60cd4b8ff8917871bf24c173eca8b1f71b8d91f8af4165abf62b9200b7dd7c774d6fb5f79fa0c85f5c5b84c848908deaf1c70adce1ce3348e7e41a0e73826d36fa57160f3d6a1438b7f03937ed919da4e70767e60aaf4396c27aa724cdc2609ceb4041878bbd084729715"}}, 0x0}, 0x0) 20m28.93051988s ago: executing program 42 (id=2471): socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x28000600) socket$inet(0x2, 0x2, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x3, 0x8, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002680)={@cgroup=r0, r1, 0x2f, 0x10, 0x4, @void, @value=r1}, 0x20) 17m20.539564512s ago: executing program 4 (id=3198): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000580)='./security\x00', &(0x7f00000005c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./security/tomoyo/domain_policy\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17m19.969101397s ago: executing program 4 (id=3201): mprotect(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001300)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001440)='>', 0x33fe0}], 0x1}, 0x0) 17m16.355381175s ago: executing program 4 (id=3204): socket$kcm(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @broadcast}, 0x10) shutdown(r3, 0x1) recvfrom(r3, 0x0, 0x0, 0x3, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000440)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x4) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4010d00, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x2200002, &(0x7f0000000640)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000000700)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") syz_mount_image$fuse(0x0, &(0x7f0000000c80)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000d00)='./bus\x00', 0x0, 0x8, &(0x7f0000000d80)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x842, 0x40) syz_mount_image$vfat(&(0x7f0000000dc0), &(0x7f0000000e00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x3, 0x0, &(0x7f0000000e80)) socket(0x2, 0x2, 0x0) 17m10.326219864s ago: executing program 4 (id=3206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc8}}, 0x0) 17m9.954733243s ago: executing program 4 (id=3210): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r6, 0x0, 0x11}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r7, 0x8, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @random="44328a67ad89"}]}, 0x3c}}, 0x20024090) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, 0x0) sendmmsg$inet(r2, &(0x7f0000000700)=[{{&(0x7f00000007c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000940)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000a40)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000800)="c92176a4f4430dd6dae3faa28ee832", 0xf}], 0x1}}], 0x3, 0x2400c031) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x1, 0x2, &(0x7f0000001580)=ANY=[@ANYBLOB="79b048000000000095"], &(0x7f00000015c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)={0x54, r10, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) 17m9.614146261s ago: executing program 4 (id=3215): r0 = socket$kcm(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @broadcast}, 0x10) shutdown(r4, 0x1) recvfrom(r4, 0x0, 0x0, 0x3, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000440)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x4) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x4010d00, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x2200002, &(0x7f0000000640)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000000700)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") syz_mount_image$fuse(0x0, &(0x7f0000000c80)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000d00)='./bus\x00', 0x0, 0x8, &(0x7f0000000d80)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x842, 0x40) syz_mount_image$vfat(&(0x7f0000000dc0), &(0x7f0000000e00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x3, 0x0, &(0x7f0000000e80)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) 16m53.209709665s ago: executing program 43 (id=3215): r0 = socket$kcm(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @broadcast}, 0x10) shutdown(r4, 0x1) recvfrom(r4, 0x0, 0x0, 0x3, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000440)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x4) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x4010d00, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x2200002, &(0x7f0000000640)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000000700)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000c80)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000d00)='./bus\x00', 0x0, 0x8, &(0x7f0000000d80)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x842, 0x40) syz_mount_image$vfat(&(0x7f0000000dc0), &(0x7f0000000e00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x3, 0x0, &(0x7f0000000e80)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) 9m5.903432054s ago: executing program 8 (id=4935): syz_open_dev$dri(&(0x7f0000000a80), 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x1, 0x102) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x800048, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 9m5.729852129s ago: executing program 8 (id=4938): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x2c4900, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) mount(0x0, &(0x7f0000000380)='./my_debugfs\x00', &(0x7f00000003c0)='debugfs\x00', 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000007c0)={0xc}) r4 = memfd_create(&(0x7f0000000400)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) fallocate(r4, 0x3, 0x1, 0xfffffffb) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000840), 0x0, 0x20000081, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r6, 0x89e0, &(0x7f0000000000)={'vcan0\x00', 0x6, 0xae4}) 9m4.637881186s ago: executing program 8 (id=4944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001c80)={'syzkaller1\x00', @broadcast}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001cc0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001e40)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100000208004500005c000040000006"], 0x6e) 9m4.192171317s ago: executing program 8 (id=4948): socket$nl_route(0x10, 0x3, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x15) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x4, &(0x7f0000000100), 0x0, 0x24f, &(0x7f00000006c0)="$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") mount$bind(&(0x7f0000000c00)='.\x00', &(0x7f0000000c40)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f0000000c80)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000cc0)='.\x00', &(0x7f0000000d00)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x89901) 9m3.67080221s ago: executing program 8 (id=4952): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x2c4900, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) mount(0x0, &(0x7f0000000380)='./my_debugfs\x00', &(0x7f00000003c0)='debugfs\x00', 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000007c0)={0xc}) r4 = memfd_create(&(0x7f0000000400)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) fallocate(r4, 0x3, 0x1, 0xfffffffb) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000840), 0x0, 0x20000081, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r6, 0x89e0, &(0x7f0000000000)={'vcan0\x00', 0x6, 0xae4}) 9m3.125139923s ago: executing program 8 (id=4953): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x4, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x23e}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r1, 0x0, &(0x7f00000004c0)="263fe0", 0x3, 0x40}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r1, 0x0, &(0x7f0000000540)='>', 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000580)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000005c0)={0x28, 0x3, r1, 0x0, &(0x7f0000000600)="af", 0x1, 0x8000000000000000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000640)={0x28, 0x2, r1, 0x0, &(0x7f0000000680)='%', 0x1, 0x33e2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000740)={0x18, r1}) 9m2.578825147s ago: executing program 44 (id=4953): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x4, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x23e}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r1, 0x0, &(0x7f00000004c0)="263fe0", 0x3, 0x40}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r1, 0x0, &(0x7f0000000540)='>', 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000580)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000005c0)={0x28, 0x3, r1, 0x0, &(0x7f0000000600)="af", 0x1, 0x8000000000000000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000640)={0x28, 0x2, r1, 0x0, &(0x7f0000000680)='%', 0x1, 0x33e2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000740)={0x18, r1}) 8m53.494470372s ago: executing program 3 (id=4993): setresuid(0xee00, 0xee00, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09b38, 0xffffffffffffffff, 0xfffff000) 8m53.370828945s ago: executing program 3 (id=4995): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x2c4900, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) mount(0x0, &(0x7f0000000380)='./my_debugfs\x00', &(0x7f00000003c0)='debugfs\x00', 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000007c0)={0xc}) r4 = memfd_create(&(0x7f0000000400)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) fallocate(r4, 0x3, 0x1, 0xfffffffb) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000840), 0x0, 0x20000081, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r6, 0x89e0, &(0x7f0000000000)={'vcan0\x00', 0x6, 0xae4}) 8m52.396537929s ago: executing program 3 (id=4996): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 8m52.312078682s ago: executing program 3 (id=4997): socket$nl_route(0x10, 0x3, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x15) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x4, &(0x7f0000000100), 0x0, 0x24f, &(0x7f00000006c0)="$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") mount$bind(&(0x7f0000000c00)='.\x00', &(0x7f0000000c40)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f0000000c80)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000cc0)='.\x00', &(0x7f0000000d00)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x89901) 8m52.036078589s ago: executing program 3 (id=4998): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000200)}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) socket$igmp(0x2, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000800)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0xc, 0x2}, {0x2}}]}}, 0xf) 8m50.961433845s ago: executing program 3 (id=5000): syz_mount_image$fuse(0x0, &(0x7f0000000980)='./file0\x00', 0x1484a8, 0x0, 0x21, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001900)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001940)='./file0\x00', &(0x7f0000001980), 0x8, &(0x7f00000019c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000001a00)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000780)='.\x00', 0xfffffef1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 8m50.060673498s ago: executing program 45 (id=5000): syz_mount_image$fuse(0x0, &(0x7f0000000980)='./file0\x00', 0x1484a8, 0x0, 0x21, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001900)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001940)='./file0\x00', &(0x7f0000001980), 0x8, &(0x7f00000019c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000001a00)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000780)='.\x00', 0xfffffef1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 8m38.537834204s ago: executing program 2 (id=5024): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000780)={'virt_wifi0\x00', @ifru_addrs=@llc={0x1a, 0xd, 0xe, 0xf, 0x2, 0x0, @remote}}) 8m38.071362625s ago: executing program 2 (id=5025): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0xe, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file2\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000680)="$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") openat(r1, &(0x7f0000000a40)='./file2\x00', 0xa40, 0x4) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000340), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000540)={&(0x7f0000000580)={0x1d, r3}, 0x10, &(0x7f00000005c0)={&(0x7f0000000a80)=ANY=[@ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 8m30.258458249s ago: executing program 2 (id=5034): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f0000000680)="$eJzs3MtvVNUfAPDvvX3xbn8/8QGCVjGR+GhpeS7cYDRxoYmJLjCualsIUqjSmgghAV3g0pC4Ny5N/Atc4caoKxMTV7o3JMSwEU1Mxtw7984M0xnowMBQ5vNJBs6Ze4ZzvnPOua8zlwD61nj2RxKxKSJ+i4h11eyNBcarf12/dm7272vnZpOoVN76M8nL/XXt3GxZtPzcxmqmUinyIy3qvfhuxMzCwvzpIj+5fPKDyaUzZ188fnLm2Pyx+VPThw7t27tz+MD0/q7EOZq1dSQWd2x77Z1Lb8weufTej99k7d1UbG+Mo1vGq9/uSgPdrqn3Njekk8EeNoSOZEMx666hfP6PxkCsr20bjVc/7WnjgLuqUqlUWh2fCxcqwAMsiV63AOiN8kCfXf+Wr3t06nFfuHo44sOD1fivF6/qlsFIizJDTde33TQeEUcu/PNl9oq7dB8CAKDR5cMR8UKr8780Hmkot6VYQxmLiP9FxP8j4qGI2BoRD0fkZR+NiMc6rL95hWTl+U965bYCW6Xs/O+lYm2rdv73byWPvzA2UOQ25/EPJUePL8zvKb6T3TE0kuWnblLHd6/88nm7bY3nf9krq788F6xKrww23aCbm1meucOwa65+ErF9sCn+XBLlMk4SEdsiYntH/3L9CuP4c1/vaFeqHv/6iGgV/010YZ2p8lXEs9X+vxBN8ZeStuuTUwcPTO+fXBcL83smy1Gx0k8/X3yzXf237v+7K+v/Dc3jv95757Mhn6yLWDpz9kS+XrvUeR0Xf/+s+Zrmcjk4bnf8Dydv5+nh4r2PZ5aXT09FDCevr3x/uv7ZMl+Wz+LfvavV+E/zfVwU/f94RGSDeGdEPBERTxZ991REPB0Ru24S/w8vP/N+u23N8df2Oi1Xzbsvi3+uRf83jP+xLFXv/84TAye+/7Zd/avr/315anfxzi32f9nleqy2gXf6/QEAAMBakOa/gU/SiVo6TScmqr/h3xob0oXFpeXnjy5+dGqu+lv5sRhKyztdow33Q6eKe8Nlfropv7e4b/zFwPo8PzG7uDDX6+Chz21sM/8zfzyAz6kATTyvBf3L/If+Zf5D/6rP/wM9bQdw7zn+Q/9qNf/P96AdwL3n+A/9y/yH/mX+Q/8y/6Ev3fhI/HDUno1P7+iR/zWb+HXLfdGMNZCItPNPDUYv2zzc09pvOzG46v/MorPEaLELODPSskyPd0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABd8l8AAAD//wcu8Cs=") chdir(&(0x7f0000001400)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001440)='.\x00', 0x101000, 0x10a) getdents64(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) getdents64(r0, &(0x7f00000014c0)=""/88, 0x58) 8m28.953515631s ago: executing program 2 (id=5037): socket$nl_route(0x10, 0x3, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x15) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x4, &(0x7f0000000100), 0x0, 0x24f, &(0x7f00000006c0)="$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") mount$bind(&(0x7f0000000c00)='.\x00', &(0x7f0000000c40)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000cc0)='.\x00', &(0x7f0000000d00)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x89901) 8m28.077943993s ago: executing program 2 (id=5040): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, r2, 0xffffffffffffff3d, 0x0, 0x0}) 8m27.436306659s ago: executing program 2 (id=5042): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 8m27.057886618s ago: executing program 46 (id=5042): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 7m48.386740318s ago: executing program 9 (id=5224): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000013c0)='./bus\x00', 0x153) chdir(&(0x7f0000001400)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001440)='.\x00', 0x101000, 0x10a) getdents64(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getdents64(r0, &(0x7f00000014c0)=""/88, 0x58) 7m47.432589491s ago: executing program 9 (id=5226): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x9, 0x3) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 7m45.427390891s ago: executing program 9 (id=5228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(0x0, 0x0, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r4 = syz_io_uring_setup(0xefd, &(0x7f00000002c0)={0x0, 0xaa32, 0x10000, 0x5, 0x59}, &(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f0000000740)=0x0) syz_io_uring_submit(0x0, r5, r6, &(0x7f00000008c0)=@IORING_OP_PIPE={0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x6}}) io_uring_enter(r4, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000940)={0x72, 0xba}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r7, 0x84, 0x1e, 0xfffffffffffffffe, &(0x7f0000000280)=0x5a) 7m44.161165573s ago: executing program 9 (id=5230): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x4, &(0x7f0000000100), 0x0, 0x24f, &(0x7f00000006c0)="$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") mount$bind(&(0x7f0000000c00)='.\x00', &(0x7f0000000c40)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000cc0)='.\x00', &(0x7f0000000d00)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x89901) 7m43.47705152s ago: executing program 9 (id=5232): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000001480)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000001380)=[@reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000012c0)={@fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1e}, @fda={0x66646185, 0x9, 0x1, 0x31}}, &(0x7f0000001340)={0x0, 0x18, 0x40}}}]}) 7m42.490807524s ago: executing program 9 (id=5239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001c80)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001cc0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001e40)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100000208004500005c000040000006"], 0x6e) 7m41.983414647s ago: executing program 47 (id=5239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001c80)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001cc0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001e40)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100000208004500005c000040000006"], 0x6e) 7m22.564935948s ago: executing program 6 (id=5285): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}]}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) 7m22.427704561s ago: executing program 6 (id=5286): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="667361343438302099", 0x9) 7m22.211655567s ago: executing program 6 (id=5288): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) prctl$PR_MCE_KILL(0x4e, 0xd8fb45a92c88f6c8, 0x0) fallocate(0xffffffffffffffff, 0x22, 0x0, 0xfffffffffffffffb) getpriority(0xfffffffffffffffe, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa000000}]}}, &(0x7f0000000040)=""/3, 0x26, 0x3, 0x1, 0x7}, 0x28) 7m20.89930431s ago: executing program 6 (id=5291): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x4, &(0x7f0000000100), 0x0, 0x24f, &(0x7f00000006c0)="$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") mount$bind(&(0x7f0000000c00)='.\x00', &(0x7f0000000c40)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f0000000c80)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000cc0)='.\x00', &(0x7f0000000d00)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 7m20.287344205s ago: executing program 6 (id=5292): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r2, r1, 0x15, 0x0, @void}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) 7m19.902414124s ago: executing program 6 (id=5293): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}]}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) 7m19.335891718s ago: executing program 48 (id=5293): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}]}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) 4.055041959s ago: executing program 5 (id=7364): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./file1\x00', 0x42, 0x98) write$P9_RREADLINK(r0, &(0x7f00000015c0)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0xfe53, 0x0, 0x4) 3.824003085s ago: executing program 7 (id=7367): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f0000000500)=[@free_buffer={0x40086303, r4}]}) 3.562100991s ago: executing program 7 (id=7368): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000011c0)=@filter={'filter\x00', 0xe, 0x2, 0x278, [0x0, 0x20000f00, 0x20000f30, 0x20000f60], 0x0, 0x0, &(0x7f0000000f00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x6, 0x8809, 'vlan1\x00', 'batadv_slave_1\x00', 'erspan0\x00', 'dummy0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x0, 0xfffe, 0x8, 0x0, 0x0, "53ec4e6fade8ee631953e82ce872a1e8186997a5c7a5dc7a28d6f79f8eb20b9ea0ea536b20a5f206a0fb392b28fd05b816761336dd62d6f7393a8e3e198a220d"}}}}, {0x11, 0x42, 0x800, 'veth1_macvtap\x00', 'ipvlan1\x00', 'netpci0\x00', 'vlan0\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0xff], @multicast, [0xff, 0xff, 0xff], 0x0, 0xd0, 0xd0, 0x100, [@state={{'state\x00', 0x0, 0x8}, {{0x566}}}, @cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x5, 0x1}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x5}}}}]}]}, 0x2f0) 3.406282125s ago: executing program 0 (id=7369): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005180)={0x2020}, 0x2020) 3.339090907s ago: executing program 7 (id=7370): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="19", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 3.258711729s ago: executing program 0 (id=7371): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={[{@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8}, {@uni_xlateno}, {@uni_xlateno}, {@shortname_lower}, {@utf8}, {@uni_xlate}, {@shortname_winnt}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x81, 0x2b6, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) 3.19899014s ago: executing program 7 (id=7372): r0 = syz_open_dev$ndb(&(0x7f0000000440), 0x0, 0x41) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_open_dev$ndb(&(0x7f0000000580), 0x0, 0x21c0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) 3.019435325s ago: executing program 0 (id=7373): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='+p', 0x2) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f00000005c0)=0x8, 0x4) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000540)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getaddr={0x14, 0x16, 0x100, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000805) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000580)={'bridge_slave_1\x00', {0x2, 0x4e23, @broadcast}}) sync_file_range(r3, 0x6, 0x8, 0x288d04f7f76becaf) 2.957478707s ago: executing program 5 (id=7375): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000008c0)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x8, 0x0, &(0x7f0000000980)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000a00)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a40)={0x8, 0x0, &(0x7f0000000a80)=[@acquire]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000ac0)={0x4c, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0xffffffffffffff2b}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000c80)={0x4c, 0x0, &(0x7f0000000cc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800}], 0xf0, 0x1000000000000}) 2.651492144s ago: executing program 0 (id=7376): r0 = socket(0x2, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000010c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000010c80)=ANY=[@ANYBLOB="200000000000000084000000020000000700040001000100ff8c0000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000007000000ac14142a0000000018000000000000008400000005000000005548"], 0x98, 0x8004084}, 0x4041) 2.513737248s ago: executing program 0 (id=7377): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f0000000500)=[@free_buffer]}) 2.39537314s ago: executing program 5 (id=7378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) r1 = syz_io_uring_setup(0x2170, &(0x7f0000000500)={0x0, 0x0, 0x2, 0x4004}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) io_uring_enter(r1, 0x66a8, 0x4000, 0xf, 0x0, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r2 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback, 0x7f}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f00000003c0)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @mcast1, 0x7}}}, 0x108) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) 2.332193652s ago: executing program 0 (id=7379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x7, 0x163, 0x6, 0xfffffff0, 0x7, 0x9, 0x8, 0xffffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000008, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000580), 0x56) sendmsg$kcm(r5, &(0x7f00000005c0)={&(0x7f0000000600)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)="27030200dc0f14000e0005000024c1020009ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 1.247584019s ago: executing program 5 (id=7380): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="19", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 1.075262363s ago: executing program 7 (id=7381): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.023780055s ago: executing program 5 (id=7382): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2, 0x28a, &(0x7f0000000480)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x17) 889.246268ms ago: executing program 1 (id=7383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30180000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) 874.813658ms ago: executing program 7 (id=7384): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write(r1, &(0x7f0000000140)="00000003", 0x4) 631.437164ms ago: executing program 1 (id=7385): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b40a0000000000006111480000000000850000008b00000095000000000000000b431a53c4093a433593478d1fea04309aacf8e195cc3fd83ce881ec3c4fb246ef8b790bc321f123f89a00c5441a25e638c6a5e10e4374115da4470584042ae49ff013be4b2a1030cc84c54b4cf8b6410cc4d0acb77b4612cd160efd22ffc2833d88d9c9dceb70538a6c38b63c62af8ee6ed5c5db254837987a84572618cf1617e"], &(0x7f0000000740)='GPL\x00', 0x4, 0x16, &(0x7f0000000780)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000880), 0x0, 0x10, &(0x7f00000008c0), 0x76}, 0x21) 526.106127ms ago: executing program 1 (id=7386): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000008c0)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000a00)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a40)={0x8, 0x0, &(0x7f0000000a80)=[@acquire]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000ac0)={0x4c, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0xffffffffffffff2b}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000c80)={0x4c, 0x0, &(0x7f0000000cc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800}], 0xf0, 0x1000000000000}) 299.987842ms ago: executing program 1 (id=7387): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) r2 = socket$unix(0x1, 0x1, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 161.956026ms ago: executing program 1 (id=7388): syz_emit_ethernet(0x46, &(0x7f0000000240)={@random="01008040000b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}}}}, 0x0) 19.13005ms ago: executing program 5 (id=7389): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='p0,0x8000000000000000,0x1000', 0x1c) 0s ago: executing program 1 (id=7390): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="19", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) kernel console output (not intermixed with test programs): 523.176629][T29408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1523.182513][T29408] RIP: 0033:0x7f8a2cf9e559 [ 1523.186915][T29408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1523.206510][T29408] RSP: 002b:00007f8a2ddce0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1523.214909][T29408] RAX: ffffffffffffffda RBX: 00007f8a2d225fa8 RCX: 00007f8a2cf9e559 [ 1523.222864][T29408] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8a2d225fa8 [ 1523.230820][T29408] RBP: 00007f8a2d225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1523.238801][T29408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1523.246757][T29408] R13: 00007f8a2d226038 R14: 00007ffd235d30d0 R15: 00007ffd235d31b8 [ 1523.254728][T29408] [ 1523.257830][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.270605][T29405] fido_id[29405]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1525.364945][T29460] 9pnet_fd: Insufficient options for proto=fd [ 1525.493745][T29463] binder: 29462:29463 ioctl c0306201 2000000005c0 returned -14 [ 1528.026624][T29480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.034084][T29480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.107099][T29515] 9pnet_fd: Insufficient options for proto=fd [ 1529.421479][T29480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1529.459362][T29523] binder: BINDER_SET_CONTEXT_MGR already set [ 1529.491747][T29523] binder: 29522:29523 ioctl 4018620d 200000000340 returned -16 [ 1529.507778][T29480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1529.537563][T29523] binder: 29522:29523 ioctl c0306201 0 returned -14 [ 1529.941025][T29480] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.953846][T29480] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.975701][T29480] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.985239][T29480] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.734866][T29542] binder: 29541:29542 unknown command 1074291477 [ 1530.766953][T29542] binder: 29541:29542 ioctl c0306201 200000000100 returned -22 [ 1531.256120][T29558] binder: BINDER_SET_CONTEXT_MGR already set [ 1531.272469][T29558] binder: 29557:29558 ioctl 4018620d 200000000500 returned -16 [ 1531.982435][T29551] loop5: detected capacity change from 0 to 32768 [ 1532.392852][ T27] audit: type=1800 audit(1792188254.094:176): pid=29573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5834" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 1532.417235][T29573] ERROR: (device loop5): dbAllocBits: leaf page corrupt [ 1532.417235][T29573] [ 1532.428470][T29573] ERROR: (device loop5): remounting filesystem as read-only [ 1532.613957][T29560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.621425][T29560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.734126][T29560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1533.823311][T29560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1533.835682][T29599] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5843'. [ 1533.880285][T29599] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5843'. [ 1534.490903][T29560] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.503119][T29560] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.515014][T29560] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.529888][T29560] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.568429][T29654] fuse: Bad value for 'fd' [ 1537.834132][T15788] Bluetooth: hci0: unexpected event for opcode 0x200a [ 1540.237250][T29698] qrtr: Invalid version 0 [ 1542.556036][T29734] loop7: detected capacity change from 0 to 2048 [ 1542.606701][T29734] loop7: p1 < > [ 1543.967729][T29756] binder: BINDER_SET_CONTEXT_MGR already set [ 1543.996562][T29756] binder: 29753:29756 ioctl 4018620d 200000001000 returned -16 [ 1546.866470][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.872776][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.321430][T29790] netlink: 404 bytes leftover after parsing attributes in process `syz.0.5888'. [ 1548.456021][T29796] binder: 29794:29796 ioctl c0306201 0 returned -14 [ 1553.764161][T15528] IPVS: starting estimator thread 0... [ 1553.876173][T29853] IPVS: using max 34 ests per chain, 81600 per kthread [ 1554.396367][T29874] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1557.947301][T29964] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5932'. [ 1560.102119][T29993] loop1: detected capacity change from 0 to 512 [ 1560.260660][T29993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1560.359608][T30005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5943'. [ 1560.392072][T29993] EXT4-fs error (device loop1): ext4_validate_block_bitmap:421: comm syz.1.5940: bg 0: bad block bitmap checksum [ 1560.519428][T29993] Quota error (device loop1): write_blk: dquota write failed [ 1560.561628][T29993] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1560.622745][T29993] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.5940: Failed to acquire dquot type 0 [ 1560.811103][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1561.468756][T30038] loop7: detected capacity change from 0 to 128 [ 1561.485942][T30035] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1561.734241][T30044] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5953'. [ 1562.429355][T30063] FAULT_INJECTION: forcing a failure. [ 1562.429355][T30063] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1562.519056][T30063] CPU: 0 PID: 30063 Comm: syz.7.5958 Not tainted syzkaller #0 [ 1562.526548][T30063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1562.536613][T30063] Call Trace: [ 1562.539883][T30063] [ 1562.542802][T30063] dump_stack_lvl+0x18c/0x250 [ 1562.547472][T30063] ? show_regs_print_info+0x20/0x20 [ 1562.552666][T30063] ? load_image+0x420/0x420 [ 1562.557179][T30063] ? __lock_acquire+0x7eb0/0x7eb0 [ 1562.562211][T30063] ? mark_lock+0x94/0x320 [ 1562.566538][T30063] should_fail_ex+0x394/0x4c0 [ 1562.571223][T30063] prepare_alloc_pages+0x1e1/0x5b0 [ 1562.576334][T30063] __alloc_pages+0x134/0x460 [ 1562.580929][T30063] ? zone_statistics+0x170/0x170 [ 1562.585880][T30063] ? do_wp_page+0x733/0x34d0 [ 1562.590461][T30063] ? do_wp_page+0xf17/0x34d0 [ 1562.595053][T30063] ? __lock_acquire+0x7eb0/0x7eb0 [ 1562.600068][T30063] __folio_alloc+0x10/0x20 [ 1562.604471][T30063] vma_alloc_folio+0x474/0x8f0 [ 1562.609227][T30063] do_wp_page+0x118d/0x34d0 [ 1562.613743][T30063] ? folio_put+0xd0/0xd0 [ 1562.617972][T30063] ? do_raw_spin_lock+0x11f/0x2b0 [ 1562.622996][T30063] ? __rwlock_init+0x150/0x150 [ 1562.627754][T30063] handle_mm_fault+0x1306/0x4a50 [ 1562.632685][T30063] ? handle_mm_fault+0xe6/0x4a50 [ 1562.637616][T30063] ? numa_migrate_prep+0x350/0x350 [ 1562.642750][T30063] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1562.648031][T30063] do_user_addr_fault+0x736/0x12d0 [ 1562.653142][T30063] exc_page_fault+0x64/0x100 [ 1562.657738][T30063] asm_exc_page_fault+0x26/0x30 [ 1562.662575][T30063] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1562.668375][T30063] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 1562.687999][T30063] RSP: 0018:ffffc9000441f958 EFLAGS: 00050206 [ 1562.694077][T30063] RAX: ffffffff84326101 RBX: 1ffff92000883fb7 RCX: 0000000000000880 [ 1562.702083][T30063] RDX: 0000000000000000 RSI: ffff8880268dd780 RDI: 000020000000d000 [ 1562.710049][T30063] RBP: ffffc9000441fab8 R08: ffff8880268ddfff R09: 1ffff11004d1bbff [ 1562.718010][T30063] R10: dffffc0000000000 R11: ffffed1004d1bc00 R12: ffff8880268dd000 [ 1562.725975][T30063] R13: 0000000000001000 R14: 0000000000001000 R15: ffffc9000441fdc8 [ 1562.734031][T30063] ? _copy_to_iter+0x171/0x1110 [ 1562.738888][T30063] _copy_to_iter+0x24f/0x1110 [ 1562.743562][T30063] ? mark_lock+0x94/0x320 [ 1562.747901][T30063] ? iov_iter_init+0x1e0/0x1e0 [ 1562.752668][T30063] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1562.758638][T30063] ? __lock_acquire+0x7eb0/0x7eb0 [ 1562.763652][T30063] ? lock_chain_count+0x20/0x20 [ 1562.768506][T30063] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1562.773520][T30063] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1562.779074][T30063] ? page_copy_sane+0x4e/0x270 [ 1562.783832][T30063] copy_page_to_iter+0xa7/0x150 [ 1562.788699][T30063] pipe_read+0x539/0x1330 [ 1562.793069][T30063] ? futex_wait_queue+0x27/0x1b0 [ 1562.798036][T30063] ? pipe_wait_writable+0x5c0/0x5c0 [ 1562.803242][T30063] ? end_current_label_crit_section+0x149/0x170 [ 1562.809482][T30063] ? common_file_perm+0x198/0x1f0 [ 1562.814505][T30063] vfs_read+0x486/0x990 [ 1562.818701][T30063] ? kernel_read+0x1e0/0x1e0 [ 1562.823317][T30063] ? __fget_files+0x3fc/0x460 [ 1562.828002][T30063] ? __fdget_pos+0x1d8/0x330 [ 1562.832606][T30063] ? ksys_read+0x74/0x260 [ 1562.836935][T30063] ksys_read+0x151/0x260 [ 1562.841211][T30063] ? vfs_write+0x9a0/0x9a0 [ 1562.845635][T30063] ? lockdep_hardirqs_on+0x98/0x150 [ 1562.850847][T30063] do_syscall_64+0x55/0xb0 [ 1562.855271][T30063] ? clear_bhb_loop+0x40/0x90 [ 1562.859964][T30063] ? clear_bhb_loop+0x40/0x90 [ 1562.864647][T30063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1562.870560][T30063] RIP: 0033:0x7fc2e199e559 [ 1562.874994][T30063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1562.894605][T30063] RSP: 002b:00007fc2e293d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1562.903009][T30063] RAX: ffffffffffffffda RBX: 00007fc2e1c25fa0 RCX: 00007fc2e199e559 [ 1562.910976][T30063] RDX: 000000000000fdef RSI: 0000200000000880 RDI: 0000000000000006 [ 1562.918941][T30063] RBP: 00007fc2e1a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1562.926916][T30063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1562.934930][T30063] R13: 00007fc2e1c26038 R14: 00007fc2e1c25fa0 R15: 00007ffe161632e8 [ 1562.942919][T30063] [ 1565.321282][T30075] loop1: detected capacity change from 0 to 1024 [ 1567.052265][T30075] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1. [ 1567.222291][T30085] 9pnet_fd: Insufficient options for proto=fd [ 1568.178616][T30108] loop7: detected capacity change from 0 to 1024 [ 1568.240706][T30108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1568.360190][T30108] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1568.655560][T30121] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1568.693580][T30122] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1568.910882][T30128] binder: 30127:30128 ioctl c0306201 200000000780 returned -14 [ 1568.956018][T30128] binder: 30127:30128 ioctl c0306201 200000000880 returned -14 [ 1569.313675][T27024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1571.296901][T30181] FAULT_INJECTION: forcing a failure. [ 1571.296901][T30181] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.390035][T30181] CPU: 0 PID: 30181 Comm: syz.7.5987 Not tainted syzkaller #0 [ 1571.397523][T30181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1571.407571][T30181] Call Trace: [ 1571.410841][T30181] [ 1571.413764][T30181] dump_stack_lvl+0x18c/0x250 [ 1571.418452][T30181] ? show_regs_print_info+0x20/0x20 [ 1571.423636][T30181] ? load_image+0x420/0x420 [ 1571.428144][T30181] ? __might_sleep+0xe0/0xe0 [ 1571.432723][T30181] ? __lock_acquire+0x7eb0/0x7eb0 [ 1571.437736][T30181] should_fail_ex+0x394/0x4c0 [ 1571.442412][T30181] should_failslab+0x9/0x20 [ 1571.446906][T30181] slab_pre_alloc_hook+0x59/0x300 [ 1571.451933][T30181] ? d_instantiate+0x6f/0x90 [ 1571.456528][T30181] kmem_cache_alloc+0x5a/0x2c0 [ 1571.461298][T30181] ? alloc_empty_file+0x9e/0x1d0 [ 1571.466243][T30181] alloc_empty_file+0x9e/0x1d0 [ 1571.471015][T30181] alloc_file+0x5b/0x600 [ 1571.475246][T30181] alloc_file_pseudo+0x184/0x210 [ 1571.480170][T30181] ? fput+0x1a0/0x1a0 [ 1571.484141][T30181] ? alloc_fd+0x590/0x640 [ 1571.488481][T30181] sock_alloc_file+0xb7/0x280 [ 1571.493149][T30181] __sys_socket+0x140/0x1b0 [ 1571.497657][T30181] __x64_sys_socket+0x7a/0x90 [ 1571.502325][T30181] do_syscall_64+0x55/0xb0 [ 1571.506744][T30181] ? clear_bhb_loop+0x40/0x90 [ 1571.511406][T30181] ? clear_bhb_loop+0x40/0x90 [ 1571.516073][T30181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1571.521964][T30181] RIP: 0033:0x7fc2e199e559 [ 1571.526379][T30181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1571.545975][T30181] RSP: 002b:00007fc2e293cfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1571.554377][T30181] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fc2e199e559 [ 1571.562347][T30181] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000027 [ 1571.570322][T30181] RBP: 00007fc2e1a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1571.578322][T30181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1571.586288][T30181] R13: 00007fc2e1c26038 R14: 00007fc2e1c25fa0 R15: 00007ffe161632e8 [ 1571.594261][T30181] [ 1571.597403][ C0] vkms_vblank_simulate: vblank timer overrun [ 1572.897553][ T8] IPVS: starting estimator thread 0... [ 1572.995798][T30211] IPVS: using max 34 ests per chain, 81600 per kthread [ 1573.017256][T30213] binder_alloc: 30212: pid 30212 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1573.720914][ T8] IPVS: starting estimator thread 0... [ 1573.771614][T30247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6006'. [ 1573.826148][T30243] IPVS: using max 34 ests per chain, 81600 per kthread [ 1573.954843][T30256] loop7: detected capacity change from 0 to 1024 [ 1573.962452][T30254] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1574.065107][T30256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1574.209194][T30256] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1575.000950][T30290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6020'. [ 1575.070058][T27024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.205699][T30296] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1575.571240][T30301] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6021'. [ 1576.484089][T30325] binder: 30323:30325 ioctl c0306201 200000000780 returned -14 [ 1576.511447][T30326] loop1: detected capacity change from 0 to 1024 [ 1576.527914][T30328] tipc: Enabled bearer , priority 13 [ 1576.539795][T30325] binder: 30323:30325 ioctl c0306201 200000000880 returned -14 [ 1576.553247][T30326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1576.618992][T30326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1577.342344][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.500064][T15788] block nbd0: Receive control failed (result -32) [ 1578.512049][ T51] block nbd0: Receive control failed (result -32) [ 1578.711169][T30392] loop1: detected capacity change from 0 to 1024 [ 1578.780424][T30392] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1578.892786][T30392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1579.440262][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1579.771374][T30422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6053'. [ 1580.134430][T30429] FAULT_INJECTION: forcing a failure. [ 1580.134430][T30429] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.206816][T30429] CPU: 0 PID: 30429 Comm: syz.0.6056 Not tainted syzkaller #0 [ 1580.214317][T30429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1580.224365][T30429] Call Trace: [ 1580.227641][T30429] [ 1580.230586][T30429] dump_stack_lvl+0x18c/0x250 [ 1580.235274][T30429] ? show_regs_print_info+0x20/0x20 [ 1580.240490][T30429] ? load_image+0x420/0x420 [ 1580.245002][T30429] ? __might_sleep+0xe0/0xe0 [ 1580.249587][T30429] ? __lock_acquire+0x7eb0/0x7eb0 [ 1580.254615][T30429] should_fail_ex+0x394/0x4c0 [ 1580.259291][T30429] should_failslab+0x9/0x20 [ 1580.263806][T30429] slab_pre_alloc_hook+0x59/0x300 [ 1580.268835][T30429] ? prepend_path+0x8a7/0x950 [ 1580.273531][T30429] ? tomoyo_encode+0x2ad/0x570 [ 1580.278302][T30429] ? tomoyo_encode+0x2ad/0x570 [ 1580.283049][T30429] __kmem_cache_alloc_node+0x53/0x250 [ 1580.288412][T30429] ? tomoyo_encode+0x2ad/0x570 [ 1580.293160][T30429] __kmalloc+0xa7/0x240 [ 1580.297309][T30429] tomoyo_encode+0x2ad/0x570 [ 1580.301910][T30429] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1580.307528][T30429] ? tomoyo_domain+0xd6/0x120 [ 1580.312192][T30429] tomoyo_mkdev_perm+0x234/0x580 [ 1580.317126][T30429] ? tomoyo_mkdev_perm+0x204/0x580 [ 1580.322224][T30429] ? tomoyo_path_perm+0x560/0x560 [ 1580.327251][T30429] ? _raw_spin_unlock+0x28/0x40 [ 1580.332090][T30429] ? __d_add+0x4e2/0x7e0 [ 1580.336318][T30429] ? d_set_d_op+0x25f/0x370 [ 1580.340803][T30429] ? hook_path_mknod+0x157/0x540 [ 1580.345722][T30429] ? simple_lookup+0xc5/0xf0 [ 1580.350304][T30429] tomoyo_path_mknod+0xfc/0x1a0 [ 1580.355138][T30429] ? hook_path_mkdir+0x20/0x20 [ 1580.359890][T30429] ? tomoyo_path_symlink+0xf0/0xf0 [ 1580.364986][T30429] ? kern_path_create+0x50/0x50 [ 1580.369826][T30429] security_path_mknod+0xf0/0x150 [ 1580.374841][T30429] do_mknodat+0x25a/0x500 [ 1580.379156][T30429] ? __check_object_size+0x4fc/0xa40 [ 1580.384432][T30429] ? do_o_path+0x200/0x200 [ 1580.388838][T30429] ? getname_flags+0x20a/0x500 [ 1580.393591][T30429] __x64_sys_mknodat+0xa9/0xc0 [ 1580.398342][T30429] do_syscall_64+0x55/0xb0 [ 1580.402742][T30429] ? clear_bhb_loop+0x40/0x90 [ 1580.407402][T30429] ? clear_bhb_loop+0x40/0x90 [ 1580.412063][T30429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1580.417964][T30429] RIP: 0033:0x7fda0519e559 [ 1580.422368][T30429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1580.441983][T30429] RSP: 002b:00007fda060e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 1580.450403][T30429] RAX: ffffffffffffffda RBX: 00007fda05425fa0 RCX: 00007fda0519e559 [ 1580.458359][T30429] RDX: 00000000000021c0 RSI: 0000200000000980 RDI: ffffffffffffff9c [ 1580.466339][T30429] RBP: 00007fda052358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1580.474301][T30429] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000000 [ 1580.482279][T30429] R13: 00007fda05426038 R14: 00007fda05425fa0 R15: 00007ffc6d462078 [ 1580.490271][T30429] [ 1580.520112][T30433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6057'. [ 1580.827837][T30446] loop5: detected capacity change from 0 to 256 [ 1581.272337][T30464] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 1581.383475][T30429] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1582.111764][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1582.128243][T30502] binder: 30501:30502 ioctl c0306201 200000000780 returned -14 [ 1582.388647][T30509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6081'. [ 1582.803478][T30482] loop5: detected capacity change from 0 to 32768 [ 1583.796369][T30564] capability: warning: `syz.1.6093' uses 32-bit capabilities (legacy support in use) [ 1583.806354][T30565] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6094'. [ 1583.906686][T30565] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6094'. [ 1583.938812][T30566] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6094'. [ 1584.276210][T30578] binder: BINDER_SET_CONTEXT_MGR already set [ 1584.310751][T30578] binder: 30576:30578 ioctl 4018620d 200000000580 returned -16 [ 1584.503994][T30584] binder: 30582:30584 ioctl c0306201 200000000780 returned -14 [ 1584.550322][T30584] binder: 30582:30584 ioctl c0306201 200000000880 returned -14 [ 1584.670639][T30590] loop1: detected capacity change from 0 to 256 [ 1585.912618][T30632] binder: 30631:30632 ioctl c0306201 200000000780 returned -14 [ 1585.989715][T30632] binder: 30631:30632 ioctl c0306201 200000000880 returned -14 [ 1586.015074][T30632] binder_alloc: 30631: binder_alloc_buf, no vma [ 1586.183085][T30645] loop7: detected capacity change from 0 to 512 [ 1586.284563][T30645] EXT4-fs: Ignoring removed oldalloc option [ 1586.353844][T30645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1586.394335][T30645] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1586.456067][T30645] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1586.685099][T27024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1586.862887][T30674] loop7: detected capacity change from 0 to 512 [ 1586.920316][T30674] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1586.972440][T30674] ext4 filesystem being mounted at /205/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1587.328638][T27024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1587.854271][T30699] overlayfs: statfs failed on './file0' [ 1589.471799][T30754] loop1: detected capacity change from 0 to 256 [ 1590.812168][T30789] binder: BINDER_SET_CONTEXT_MGR already set [ 1590.862082][T30789] binder: 30784:30789 ioctl 4018620d 2000000002c0 returned -16 [ 1591.020254][T30795] overlayfs: statfs failed on './file0' [ 1591.372171][T30810] binder: 30809:30810 ioctl c0306201 200000000780 returned -14 [ 1591.603785][T30810] binder: 30809:30810 ioctl c0306201 200000000880 returned -14 [ 1592.352294][T30840] overlayfs: statfs failed on './file0' [ 1592.460835][T30845] binder: BINDER_SET_CONTEXT_MGR already set [ 1592.509234][T30845] binder: 30844:30845 ioctl 4018620d 200000000580 returned -16 [ 1592.602807][T30854] binder: BINDER_SET_CONTEXT_MGR already set [ 1592.645461][T30854] binder: 30846:30854 ioctl 4018620d 2000000002c0 returned -16 [ 1594.366774][T30905] loop5: detected capacity change from 0 to 256 [ 1594.376122][T30907] binder: BINDER_SET_CONTEXT_MGR already set [ 1594.382139][T30907] binder: 30902:30907 ioctl 4018620d 200000000580 returned -16 [ 1595.000402][ T27] audit: type=1326 audit(1792188316.694:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30912 comm="syz.7.6196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e199e559 code=0x7ffc0000 [ 1595.342487][ T27] audit: type=1326 audit(1792188316.694:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30912 comm="syz.7.6196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc2e199e559 code=0x7ffc0000 [ 1595.662909][ T27] audit: type=1326 audit(1792188316.694:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30912 comm="syz.7.6196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e199e559 code=0x7ffc0000 [ 1595.743044][ T27] audit: type=1326 audit(1792188316.694:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30912 comm="syz.7.6196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2e195ed8e code=0x7ffc0000 [ 1595.977634][ T27] audit: type=1326 audit(1792188316.694:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30912 comm="syz.7.6196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc2e199f857 code=0x7ffc0000 [ 1596.130682][ T27] audit: type=1326 audit(1792188316.694:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30912 comm="syz.7.6196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2e199e559 code=0x7ffc0000 [ 1596.281555][ T27] audit: type=1326 audit(1792188316.694:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30912 comm="syz.7.6196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc2e199f857 code=0x7ffc0000 [ 1596.434632][ T27] audit: type=1326 audit(1792188316.694:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30912 comm="syz.7.6196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc2e195ed8e code=0x7ffc0000 [ 1596.580027][ T27] audit: type=1326 audit(1792188316.694:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30912 comm="syz.7.6196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e199e559 code=0x7ffc0000 [ 1596.788690][ T27] audit: type=1326 audit(1792188316.694:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30912 comm="syz.7.6196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2e195ed8e code=0x7ffc0000 [ 1597.043353][T30961] loop1: detected capacity change from 0 to 512 [ 1597.450578][T30961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1597.540242][T30961] ext4 filesystem being mounted at /209/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1598.155188][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1598.200778][T30982] FAULT_INJECTION: forcing a failure. [ 1598.200778][T30982] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.294972][T30982] CPU: 0 PID: 30982 Comm: syz.7.6214 Not tainted syzkaller #0 [ 1598.302469][T30982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1598.312516][T30982] Call Trace: [ 1598.315811][T30982] [ 1598.318732][T30982] dump_stack_lvl+0x18c/0x250 [ 1598.323403][T30982] ? show_regs_print_info+0x20/0x20 [ 1598.328590][T30982] ? load_image+0x420/0x420 [ 1598.333089][T30982] ? __lock_acquire+0x7eb0/0x7eb0 [ 1598.338127][T30982] should_fail_ex+0x394/0x4c0 [ 1598.342802][T30982] should_failslab+0x9/0x20 [ 1598.347320][T30982] slab_pre_alloc_hook+0x59/0x300 [ 1598.352335][T30982] kmem_cache_alloc+0x5a/0x2c0 [ 1598.357090][T30982] ? security_inode_alloc+0x34/0x110 [ 1598.362389][T30982] security_inode_alloc+0x34/0x110 [ 1598.367499][T30982] inode_init_always+0x914/0xc90 [ 1598.372433][T30982] new_inode_pseudo+0x95/0x1d0 [ 1598.377202][T30982] new_inode+0x22/0x1d0 [ 1598.381345][T30982] shmem_get_inode+0x34d/0xcd0 [ 1598.386104][T30982] shmem_mknod+0x5f/0x1c0 [ 1598.390438][T30982] vfs_create+0x1ef/0x360 [ 1598.394775][T30982] ovl_do_create+0x8d/0xd0 [ 1598.399187][T30982] ovl_create_real+0x175/0x3c0 [ 1598.403943][T30982] ovl_get_workdir+0x6e4/0x1770 [ 1598.408800][T30982] ? do_raw_spin_unlock+0x121/0x230 [ 1598.414012][T30982] ? ovl_get_upper+0x5c0/0x5c0 [ 1598.418765][T30982] ? ovl_inuse_trylock+0xbd/0xd0 [ 1598.423688][T30982] ? ovl_get_upper+0x3c3/0x5c0 [ 1598.428448][T30982] ? ovl_fill_super+0x2dd/0x1280 [ 1598.433373][T30982] ? rcu_is_watching+0x15/0xb0 [ 1598.438128][T30982] ? ovl_fill_super+0x2dd/0x1280 [ 1598.443069][T30982] ? __kmalloc+0xe5/0x240 [ 1598.447393][T30982] ovl_fill_super+0x77a/0x1280 [ 1598.452156][T30982] ? virtio_fs_zero_page_range+0x140/0x140 [ 1598.457952][T30982] get_tree_nodev+0xb5/0x140 [ 1598.462533][T30982] vfs_get_tree+0x8c/0x280 [ 1598.466940][T30982] do_new_mount+0x24a/0xa40 [ 1598.471458][T30982] __se_sys_mount+0x2e7/0x3d0 [ 1598.476131][T30982] ? __x64_sys_mount+0xc0/0xc0 [ 1598.480905][T30982] ? lockdep_hardirqs_on+0x98/0x150 [ 1598.486097][T30982] ? __x64_sys_mount+0x20/0xc0 [ 1598.490863][T30982] do_syscall_64+0x55/0xb0 [ 1598.495292][T30982] ? clear_bhb_loop+0x40/0x90 [ 1598.499959][T30982] ? clear_bhb_loop+0x40/0x90 [ 1598.504625][T30982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1598.510511][T30982] RIP: 0033:0x7fc2e199e559 [ 1598.514913][T30982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1598.534527][T30982] RSP: 002b:00007fc2e293d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1598.542945][T30982] RAX: ffffffffffffffda RBX: 00007fc2e1c25fa0 RCX: 00007fc2e199e559 [ 1598.550950][T30982] RDX: 00002000000007c0 RSI: 0000200000000780 RDI: 0000000000000000 [ 1598.558916][T30982] RBP: 00007fc2e1a358b0 R08: 0000200000000800 R09: 0000000000000000 [ 1598.566878][T30982] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 1598.574836][T30982] R13: 00007fc2e1c26038 R14: 00007fc2e1c25fa0 R15: 00007ffe161632e8 [ 1598.582809][T30982] [ 1598.955613][T30998] FAULT_INJECTION: forcing a failure. [ 1598.955613][T30998] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.986830][T30998] CPU: 0 PID: 30998 Comm: syz.1.6220 Not tainted syzkaller #0 [ 1598.994345][T30998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1599.004403][T30998] Call Trace: [ 1599.007680][T30998] [ 1599.010634][T30998] dump_stack_lvl+0x18c/0x250 [ 1599.015351][T30998] ? show_regs_print_info+0x20/0x20 [ 1599.020549][T30998] ? load_image+0x420/0x420 [ 1599.025071][T30998] ? __might_sleep+0xe0/0xe0 [ 1599.029655][T30998] ? __lock_acquire+0x7eb0/0x7eb0 [ 1599.034694][T30998] should_fail_ex+0x394/0x4c0 [ 1599.039367][T30998] should_failslab+0x9/0x20 [ 1599.043871][T30998] slab_pre_alloc_hook+0x59/0x300 [ 1599.048887][T30998] kmem_cache_alloc+0x5a/0x2c0 [ 1599.053659][T30998] ? security_inode_alloc+0x34/0x110 [ 1599.058937][T30998] security_inode_alloc+0x34/0x110 [ 1599.064143][T30998] inode_init_always+0x914/0xc90 [ 1599.069095][T30998] new_inode_pseudo+0x95/0x1d0 [ 1599.073867][T30998] __sock_create+0x12d/0x940 [ 1599.078447][T30998] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1599.084419][T30998] __sys_socket+0xd7/0x1b0 [ 1599.088824][T30998] __x64_sys_socket+0x7a/0x90 [ 1599.093492][T30998] do_syscall_64+0x55/0xb0 [ 1599.097896][T30998] ? clear_bhb_loop+0x40/0x90 [ 1599.102560][T30998] ? clear_bhb_loop+0x40/0x90 [ 1599.107236][T30998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1599.113132][T30998] RIP: 0033:0x7f15ecd9e559 [ 1599.117537][T30998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1599.137132][T30998] RSP: 002b:00007f15edd19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1599.145537][T30998] RAX: ffffffffffffffda RBX: 00007f15ed025fa0 RCX: 00007f15ecd9e559 [ 1599.153495][T30998] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1599.161472][T30998] RBP: 00007f15ece358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1599.169431][T30998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1599.177385][T30998] R13: 00007f15ed026038 R14: 00007f15ed025fa0 R15: 00007ffe2f395bd8 [ 1599.185355][T30998] [ 1599.445776][T31012] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6223'. [ 1599.884999][T30998] socket: no more sockets [ 1600.942631][T31047] loop7: detected capacity change from 0 to 256 [ 1600.957639][T31019] loop5: detected capacity change from 0 to 32768 [ 1601.398629][ T27] kauditd_printk_skb: 80 callbacks suppressed [ 1601.398641][ T27] audit: type=1800 audit(1792188323.104:267): pid=31049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6225" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 1601.677943][T31053] binder_alloc: 31051: pid 31051 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1601.987649][T31053] binder: 31051:31053 ioctl c0306201 0 returned -14 [ 1602.014128][T31059] FAULT_INJECTION: forcing a failure. [ 1602.014128][T31059] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.087382][T31059] CPU: 0 PID: 31059 Comm: syz.7.6237 Not tainted syzkaller #0 [ 1602.094869][T31059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1602.104925][T31059] Call Trace: [ 1602.108192][T31059] [ 1602.111113][T31059] dump_stack_lvl+0x18c/0x250 [ 1602.115779][T31059] ? show_regs_print_info+0x20/0x20 [ 1602.120990][T31059] ? load_image+0x420/0x420 [ 1602.125504][T31059] ? __might_sleep+0xe0/0xe0 [ 1602.130085][T31059] ? __lock_acquire+0x7eb0/0x7eb0 [ 1602.135100][T31059] should_fail_ex+0x394/0x4c0 [ 1602.139769][T31059] should_failslab+0x9/0x20 [ 1602.144264][T31059] slab_pre_alloc_hook+0x59/0x300 [ 1602.149297][T31059] kmem_cache_alloc+0x5a/0x2c0 [ 1602.154051][T31059] ? security_inode_alloc+0x34/0x110 [ 1602.159330][T31059] security_inode_alloc+0x34/0x110 [ 1602.164431][T31059] inode_init_always+0x914/0xc90 [ 1602.169377][T31059] new_inode_pseudo+0x95/0x1d0 [ 1602.174159][T31059] __sock_create+0x12d/0x940 [ 1602.178791][T31059] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1602.184781][T31059] __sys_socket+0xd7/0x1b0 [ 1602.189191][T31059] __x64_sys_socket+0x7a/0x90 [ 1602.193875][T31059] do_syscall_64+0x55/0xb0 [ 1602.198276][T31059] ? clear_bhb_loop+0x40/0x90 [ 1602.202936][T31059] ? clear_bhb_loop+0x40/0x90 [ 1602.207604][T31059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1602.213511][T31059] RIP: 0033:0x7fc2e199e559 [ 1602.217932][T31059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1602.238072][T31059] RSP: 002b:00007fc2e293d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1602.246478][T31059] RAX: ffffffffffffffda RBX: 00007fc2e1c25fa0 RCX: 00007fc2e199e559 [ 1602.254438][T31059] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1602.262399][T31059] RBP: 00007fc2e1a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1602.270361][T31059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1602.278319][T31059] R13: 00007fc2e1c26038 R14: 00007fc2e1c25fa0 R15: 00007ffe161632e8 [ 1602.286290][T31059] [ 1602.334024][T31061] binder: BINDER_SET_CONTEXT_MGR already set [ 1602.346422][T31061] binder: 31060:31061 ioctl 4018620d 200000000240 returned -16 [ 1602.707838][T31059] socket: no more sockets [ 1603.563221][T31099] loop7: detected capacity change from 0 to 512 [ 1603.688224][T31099] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1603.747213][T31099] ext4 filesystem being mounted at /237/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.914133][T27024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.093230][T31082] loop5: detected capacity change from 0 to 32768 [ 1604.147913][T31112] FAULT_INJECTION: forcing a failure. [ 1604.147913][T31112] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.171355][T31113] binder: 31111:31113 ioctl c0306201 200000000080 returned -14 [ 1604.357211][T31112] CPU: 0 PID: 31112 Comm: syz.0.6253 Not tainted syzkaller #0 [ 1604.364704][T31112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1604.374835][T31112] Call Trace: [ 1604.378110][T31112] [ 1604.381044][T31112] dump_stack_lvl+0x18c/0x250 [ 1604.385732][T31112] ? show_regs_print_info+0x20/0x20 [ 1604.390931][T31112] ? load_image+0x420/0x420 [ 1604.395424][T31112] ? __lock_acquire+0x7eb0/0x7eb0 [ 1604.400438][T31112] should_fail_ex+0x394/0x4c0 [ 1604.405106][T31112] should_failslab+0x9/0x20 [ 1604.409597][T31112] slab_pre_alloc_hook+0x59/0x300 [ 1604.414606][T31112] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1604.419705][T31112] ? sock_alloc_inode+0x28/0xc0 [ 1604.424544][T31112] sock_alloc_inode+0x28/0xc0 [ 1604.429214][T31112] ? sockfs_init_fs_context+0xb0/0xb0 [ 1604.434597][T31112] new_inode_pseudo+0x63/0x1d0 [ 1604.439351][T31112] __sock_create+0x12d/0x940 [ 1604.443928][T31112] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1604.449916][T31112] __sys_socket+0xd7/0x1b0 [ 1604.454325][T31112] __x64_sys_socket+0x7a/0x90 [ 1604.458993][T31112] do_syscall_64+0x55/0xb0 [ 1604.463397][T31112] ? clear_bhb_loop+0x40/0x90 [ 1604.468067][T31112] ? clear_bhb_loop+0x40/0x90 [ 1604.472733][T31112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1604.478630][T31112] RIP: 0033:0x7fda0519e559 [ 1604.483054][T31112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1604.502658][T31112] RSP: 002b:00007fda060e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1604.511068][T31112] RAX: ffffffffffffffda RBX: 00007fda05425fa0 RCX: 00007fda0519e559 [ 1604.519032][T31112] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1604.526989][T31112] RBP: 00007fda052358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1604.534964][T31112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1604.542942][T31112] R13: 00007fda05426038 R14: 00007fda05425fa0 R15: 00007ffc6d462078 [ 1604.550914][T31112] [ 1604.745035][T31113] binder: 31111:31113 ioctl c0306201 2000000003c0 returned -14 [ 1604.811334][ T27] audit: type=1800 audit(1792188326.444:268): pid=31116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6244" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 1604.996212][T31122] FAULT_INJECTION: forcing a failure. [ 1604.996212][T31122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1605.076642][T31122] CPU: 0 PID: 31122 Comm: syz.7.6255 Not tainted syzkaller #0 [ 1605.084157][T31122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1605.094209][T31122] Call Trace: [ 1605.097479][T31122] [ 1605.100426][T31122] dump_stack_lvl+0x18c/0x250 [ 1605.105102][T31122] ? show_regs_print_info+0x20/0x20 [ 1605.110290][T31122] ? load_image+0x420/0x420 [ 1605.114789][T31122] ? __might_fault+0xaa/0x120 [ 1605.119459][T31122] ? __lock_acquire+0x7eb0/0x7eb0 [ 1605.124471][T31122] ? __virt_addr_valid+0x10c/0x380 [ 1605.129583][T31122] should_fail_ex+0x394/0x4c0 [ 1605.134261][T31122] _copy_from_user+0x2f/0xe0 [ 1605.138877][T31122] video_usercopy+0x360/0x1360 [ 1605.143726][T31122] ? video_ioctl2+0x30/0x30 [ 1605.148223][T31122] ? v4l_printk_ioctl+0x160/0x160 [ 1605.153249][T31122] v4l2_ioctl+0x18a/0x1e0 [ 1605.157567][T31122] ? v4l2_poll+0x2b0/0x2b0 [ 1605.161974][T31122] __se_sys_ioctl+0xfd/0x170 [ 1605.166563][T31122] do_syscall_64+0x55/0xb0 [ 1605.170982][T31122] ? clear_bhb_loop+0x40/0x90 [ 1605.175655][T31122] ? clear_bhb_loop+0x40/0x90 [ 1605.180341][T31122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1605.186226][T31122] RIP: 0033:0x7fc2e199e559 [ 1605.190637][T31122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1605.210259][T31122] RSP: 002b:00007fc2e293d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1605.218689][T31122] RAX: ffffffffffffffda RBX: 00007fc2e1c25fa0 RCX: 00007fc2e199e559 [ 1605.226671][T31122] RDX: 00002000000003c0 RSI: 00000000c0d05604 RDI: 0000000000000006 [ 1605.234665][T31122] RBP: 00007fc2e1a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1605.242647][T31122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1605.250605][T31122] R13: 00007fc2e1c26038 R14: 00007fc2e1c25fa0 R15: 00007ffe161632e8 [ 1605.258575][T31122] [ 1605.839143][T31112] socket: no more sockets [ 1606.006505][T31144] Invalid ELF header magic: != ELF [ 1606.713844][T31164] binder: 31162:31164 ioctl c0306201 200000000080 returned -14 [ 1606.764839][T31164] binder: 31162:31164 ioctl c0306201 2000000003c0 returned -14 [ 1606.912421][T31172] FAULT_INJECTION: forcing a failure. [ 1606.912421][T31172] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.982953][T31172] CPU: 0 PID: 31172 Comm: syz.1.6271 Not tainted syzkaller #0 [ 1606.990452][T31172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1607.000498][T31172] Call Trace: [ 1607.003771][T31172] [ 1607.006693][T31172] dump_stack_lvl+0x18c/0x250 [ 1607.011366][T31172] ? show_regs_print_info+0x20/0x20 [ 1607.016581][T31172] ? load_image+0x420/0x420 [ 1607.021098][T31172] ? __lock_acquire+0x7eb0/0x7eb0 [ 1607.026142][T31172] should_fail_ex+0x394/0x4c0 [ 1607.030818][T31172] should_failslab+0x9/0x20 [ 1607.035318][T31172] slab_pre_alloc_hook+0x59/0x300 [ 1607.040350][T31172] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1607.045469][T31172] ? sock_alloc_inode+0x28/0xc0 [ 1607.050334][T31172] sock_alloc_inode+0x28/0xc0 [ 1607.055007][T31172] ? sockfs_init_fs_context+0xb0/0xb0 [ 1607.060384][T31172] new_inode_pseudo+0x63/0x1d0 [ 1607.065159][T31172] __sock_create+0x12d/0x940 [ 1607.069751][T31172] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1607.075729][T31172] __sys_socket+0xd7/0x1b0 [ 1607.080145][T31172] __x64_sys_socket+0x7a/0x90 [ 1607.084815][T31172] do_syscall_64+0x55/0xb0 [ 1607.089220][T31172] ? clear_bhb_loop+0x40/0x90 [ 1607.093918][T31172] ? clear_bhb_loop+0x40/0x90 [ 1607.098586][T31172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1607.104476][T31172] RIP: 0033:0x7f15ecd9e559 [ 1607.108896][T31172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1607.128492][T31172] RSP: 002b:00007f15edd19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1607.136893][T31172] RAX: ffffffffffffffda RBX: 00007f15ed025fa0 RCX: 00007f15ecd9e559 [ 1607.144854][T31172] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1607.152831][T31172] RBP: 00007f15ece358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1607.160791][T31172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1607.168754][T31172] R13: 00007f15ed026038 R14: 00007f15ed025fa0 R15: 00007ffe2f395bd8 [ 1607.176727][T31172] [ 1608.023669][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.033391][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.285623][T31172] socket: no more sockets [ 1608.940284][T31225] FAULT_INJECTION: forcing a failure. [ 1608.940284][T31225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1608.998909][T31225] CPU: 0 PID: 31225 Comm: syz.1.6286 Not tainted syzkaller #0 [ 1609.006409][T31225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1609.016456][T31225] Call Trace: [ 1609.019760][T31225] [ 1609.022702][T31225] dump_stack_lvl+0x18c/0x250 [ 1609.027390][T31225] ? show_regs_print_info+0x20/0x20 [ 1609.032587][T31225] ? load_image+0x420/0x420 [ 1609.037095][T31225] ? __might_fault+0xaa/0x120 [ 1609.041770][T31225] ? __lock_acquire+0x7eb0/0x7eb0 [ 1609.046788][T31225] should_fail_ex+0x394/0x4c0 [ 1609.051463][T31225] _copy_from_user+0x2f/0xe0 [ 1609.056041][T31225] copy_bpf_fprog_from_user+0x17a/0x2c0 [ 1609.061658][T31225] ? linkwatch_event+0x60/0x60 [ 1609.066435][T31225] sk_setsockopt+0x21e6/0x2b20 [ 1609.071192][T31225] ? sockopt_capable+0x60/0x60 [ 1609.075962][T31225] ? aa_sk_perm+0x83c/0x970 [ 1609.080456][T31225] ? __fget_files+0x28/0x460 [ 1609.085046][T31225] ? aa_af_perm+0x330/0x330 [ 1609.089566][T31225] ? __fget_files+0x28/0x460 [ 1609.094148][T31225] ? aa_sock_opt_perm+0x74/0x100 [ 1609.099074][T31225] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1609.104619][T31225] ? security_socket_setsockopt+0x7e/0xa0 [ 1609.110348][T31225] do_sock_setsockopt+0x11b/0x1a0 [ 1609.115389][T31225] __x64_sys_setsockopt+0x182/0x200 [ 1609.120588][T31225] do_syscall_64+0x55/0xb0 [ 1609.124989][T31225] ? clear_bhb_loop+0x40/0x90 [ 1609.129663][T31225] ? clear_bhb_loop+0x40/0x90 [ 1609.134328][T31225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1609.140228][T31225] RIP: 0033:0x7f15ecd9e559 [ 1609.144634][T31225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1609.164235][T31225] RSP: 002b:00007f15edd19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1609.172641][T31225] RAX: ffffffffffffffda RBX: 00007f15ed025fa0 RCX: 00007f15ecd9e559 [ 1609.180600][T31225] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 1609.188566][T31225] RBP: 00007f15ece358b0 R08: 0000000000000010 R09: 0000000000000000 [ 1609.196524][T31225] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 1609.204489][T31225] R13: 00007f15ed026038 R14: 00007f15ed025fa0 R15: 00007ffe2f395bd8 [ 1609.212461][T31225] [ 1609.495131][T31233] syzkaller1: entered promiscuous mode [ 1609.525473][T31233] syzkaller1: entered allmulticast mode [ 1610.101746][T31254] loop1: detected capacity change from 0 to 512 [ 1610.160320][T31254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1610.204699][T31254] ext4 filesystem being mounted at /226/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1610.289441][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1610.589450][T31272] binder: BINDER_SET_CONTEXT_MGR already set [ 1610.608409][T31272] binder: 31270:31272 ioctl 4018620d 200000000240 returned -16 [ 1610.851017][T31281] loop1: detected capacity change from 0 to 1024 [ 1610.873192][T31281] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (4096), stripe is disabled [ 1610.944994][T31281] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #3: block 1: comm syz.1.6297: lblock 1 mapped to illegal pblock 1 (length 1) [ 1610.989625][T31281] Quota error (device loop1): write_blk: dquota write failed [ 1611.010291][T31281] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1611.035603][T31281] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.6297: Failed to acquire dquot type 0 [ 1611.061890][T31281] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.6297: Freeing blocks not in datazone - block = 0, count = 4096 [ 1611.110876][T31281] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.6297: Invalid inode bitmap blk 0 in block_group 0 [ 1611.144913][T16291] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 1611.168110][T31281] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 1611.191861][T16291] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1611.209989][T31281] EXT4-fs (loop1): 1 orphan inode deleted [ 1611.227087][T16291] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:12: Failed to release dquot type 0 [ 1611.239054][T31281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1611.281015][T31281] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1611.310278][T31281] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (18333!=0) [ 1611.777680][T31218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1611.978026][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1612.194594][T31313] loop1: detected capacity change from 0 to 512 [ 1612.522845][T31313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1612.607757][T31313] ext4 filesystem being mounted at /232/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1612.660712][T31325] binder: BINDER_SET_CONTEXT_MGR already set [ 1612.693229][T31325] binder: 31323:31325 ioctl 4018620d 200000000240 returned -16 [ 1612.792804][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1613.651843][T31363] binder: 31361:31363 ioctl c0306201 200000000080 returned -14 [ 1613.676719][T31364] binder: BINDER_SET_CONTEXT_MGR already set [ 1613.698021][T31364] binder: 31362:31364 ioctl 4018620d 200000000240 returned -16 [ 1613.872505][T31373] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 1614.048458][T31386] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 1614.178419][T31390] FAULT_INJECTION: forcing a failure. [ 1614.178419][T31390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1614.229507][T31390] CPU: 0 PID: 31390 Comm: syz.7.6322 Not tainted syzkaller #0 [ 1614.237025][T31390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1614.247077][T31390] Call Trace: [ 1614.250367][T31390] [ 1614.253288][T31390] dump_stack_lvl+0x18c/0x250 [ 1614.257958][T31390] ? show_regs_print_info+0x20/0x20 [ 1614.263146][T31390] ? load_image+0x420/0x420 [ 1614.267656][T31390] ? __might_fault+0xaa/0x120 [ 1614.272323][T31390] ? __lock_acquire+0x7eb0/0x7eb0 [ 1614.277355][T31390] ? __virt_addr_valid+0x10c/0x380 [ 1614.282461][T31390] should_fail_ex+0x394/0x4c0 [ 1614.287136][T31390] _copy_to_user+0x2f/0xa0 [ 1614.291546][T31390] bpf_verifier_vlog+0x5ac/0x840 [ 1614.296489][T31390] btf_verifier_log+0x11e/0x1a0 [ 1614.301332][T31390] ? btf_parse_graph_root+0xb00/0xb00 [ 1614.306697][T31390] ? sort+0xaf/0xf0 [ 1614.310494][T31390] ? sort_r+0x1810/0x1810 [ 1614.314826][T31390] btf_parse_type_sec+0x91/0x1960 [ 1614.319857][T31390] ? btf_check_sec_info+0x350/0x350 [ 1614.325052][T31390] ? __virt_addr_valid+0x10c/0x380 [ 1614.330155][T31390] ? btf_verifier_log+0x1a0/0x1a0 [ 1614.335169][T31390] ? btf_parse_hdr+0x545/0x700 [ 1614.339923][T31390] ? btf_parse_str_sec+0x20d/0x2a0 [ 1614.345027][T31390] btf_new_fd+0x440/0x9e0 [ 1614.349352][T31390] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1614.354452][T31390] ? capable+0x88/0xe0 [ 1614.358512][T31390] __sys_bpf+0x670/0x890 [ 1614.362761][T31390] ? bpf_link_show_fdinfo+0x560/0x560 [ 1614.368131][T31390] ? lock_chain_count+0x20/0x20 [ 1614.372976][T31390] __x64_sys_bpf+0x7c/0x90 [ 1614.377380][T31390] do_syscall_64+0x55/0xb0 [ 1614.381782][T31390] ? clear_bhb_loop+0x40/0x90 [ 1614.386463][T31390] ? clear_bhb_loop+0x40/0x90 [ 1614.391157][T31390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1614.397061][T31390] RIP: 0033:0x7fc2e199e559 [ 1614.401486][T31390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1614.421087][T31390] RSP: 002b:00007fc2e293d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1614.429495][T31390] RAX: ffffffffffffffda RBX: 00007fc2e1c25fa0 RCX: 00007fc2e199e559 [ 1614.437475][T31390] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1614.445431][T31390] RBP: 00007fc2e1a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1614.453391][T31390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1614.461349][T31390] R13: 00007fc2e1c26038 R14: 00007fc2e1c25fa0 R15: 00007ffe161632e8 [ 1614.469319][T31390] [ 1614.490566][T31394] binder: BINDER_SET_CONTEXT_MGR already set [ 1614.502271][T31394] binder: 31393:31394 ioctl 4018620d 200000000580 returned -16 [ 1614.656125][T31403] binder: 31402:31403 ioctl c0306201 200000000080 returned -14 [ 1615.079405][T31422] binder: 31421:31422 ioctl c0306201 0 returned -14 [ 1616.173422][T31442] binder: 31441:31442 ioctl c0306201 200000000780 returned -14 [ 1616.223397][T31442] binder: 31441:31442 ioctl c0306201 200000000880 returned -14 [ 1616.556117][T31459] binder: 31455:31459 ioctl c0306201 0 returned -14 [ 1618.305823][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 1618.311986][T15788] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1618.499479][T31482] loop1: detected capacity change from 0 to 1024 [ 1618.519174][T31484] binder: 31483:31484 ioctl c0306201 200000000780 returned -14 [ 1618.550847][T31482] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1618.599330][T31484] binder: 31483:31484 ioctl c0306201 200000000880 returned -14 [ 1618.642884][T31482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1618.695661][T31492] binder: 31486:31492 unknown command 1074553619 [ 1618.751790][T31499] binder: 31486:31499 unknown command 1074291477 [ 1618.812608][T31492] binder: 31486:31492 ioctl c0306201 200000000100 returned -22 [ 1618.855669][T31499] binder: 31486:31499 ioctl c0306201 200000000280 returned -22 [ 1618.909611][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1619.433104][T31510] syzkaller0: entered promiscuous mode [ 1619.463897][T31510] syzkaller0: entered allmulticast mode [ 1620.749960][T31522] syzkaller0: entered promiscuous mode [ 1620.782300][T31522] syzkaller0: entered allmulticast mode [ 1620.984412][T31530] binder: 31529:31530 ioctl c0306201 200000000780 returned -14 [ 1621.017900][T31530] binder: 31529:31530 ioctl c0306201 200000000880 returned -14 [ 1621.214416][T31541] loop5: detected capacity change from 0 to 1024 [ 1621.277808][T31541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1621.359608][T31541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1621.596557][T25869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1621.690329][T31556] binder: BINDER_SET_CONTEXT_MGR already set [ 1621.758126][T31556] binder: 31554:31556 ioctl 4018620d 2000000002c0 returned -16 [ 1622.400787][T31544] loop1: detected capacity change from 0 to 32768 [ 1622.794711][ T27] audit: type=1800 audit(1792188344.494:269): pid=31569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6367" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 1623.055900][T31576] binder: 31575:31576 ioctl 4018620d 0 returned -22 [ 1623.198103][T31576] binder: 31575:31576 ioctl c0306201 200000000780 returned -14 [ 1623.270460][T31581] binder: 31575:31581 ioctl c0306201 200000000880 returned -14 [ 1623.363731][T15788] block nbd1: Receive control failed (result -32) [ 1623.373350][ T51] block nbd1: Receive control failed (result -32) [ 1624.089316][T31601] loop1: detected capacity change from 0 to 512 [ 1624.173954][T31601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1624.298605][T31601] ext4 filesystem being mounted at /252/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1624.585033][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1624.877109][T31628] binder: 31623:31628 ioctl 4018620d 0 returned -22 [ 1624.935640][T31628] binder: 31623:31628 ioctl c0306201 200000000780 returned -14 [ 1625.002602][T31630] binder: 31623:31630 ioctl c0306201 200000000880 returned -14 [ 1625.779403][T31654] loop5: detected capacity change from 0 to 512 [ 1625.848747][T31654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1626.025598][T31654] ext4 filesystem being mounted at /332/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1626.112861][T31659] loop1: detected capacity change from 0 to 4096 [ 1626.165754][T31659] EXT4-fs: Ignoring removed orlov option [ 1626.236662][T31659] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1626.268258][T25869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1626.308227][T31659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1626.331973][T31665] syzkaller0: entered promiscuous mode [ 1626.381167][T31665] syzkaller0: entered allmulticast mode [ 1626.582660][ T5767] IPVS: starting estimator thread 0... [ 1626.608482][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1626.685434][T31673] IPVS: using max 34 ests per chain, 81600 per kthread [ 1626.773251][T31677] binder: 31676:31677 ioctl c0306201 0 returned -14 [ 1626.957584][ T51] block nbd2: Receive control failed (result -32) [ 1626.964647][T15788] block nbd2: Receive control failed (result -32) [ 1627.342019][T31698] loop1: detected capacity change from 0 to 512 [ 1627.389291][T31698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1627.461863][T31698] ext4 filesystem being mounted at /260/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1627.654442][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1627.841287][T31711] loop7: detected capacity change from 0 to 1024 [ 1627.886912][T31709] loop5: detected capacity change from 0 to 4096 [ 1627.934827][T31709] EXT4-fs: Ignoring removed orlov option [ 1627.948390][T31711] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (4096), stripe is disabled [ 1628.031516][T31709] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1628.043703][T31711] EXT4-fs error (device loop7): ext4_map_blocks:720: inode #3: block 1: comm syz.7.6407: lblock 1 mapped to illegal pblock 1 (length 1) [ 1628.133261][T31709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1628.200924][T31711] Quota error (device loop7): write_blk: dquota write failed [ 1628.263794][T31711] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1628.341046][T31711] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.6407: Failed to acquire dquot type 0 [ 1628.407611][T25869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1628.430140][T31711] EXT4-fs error (device loop7): ext4_free_blocks:6694: comm syz.7.6407: Freeing blocks not in datazone - block = 0, count = 4096 [ 1628.544686][T31711] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.6407: Invalid inode bitmap blk 0 in block_group 0 [ 1628.559234][T16279] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 1628.617368][T31711] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 1628.649186][T16279] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1628.671228][T31711] EXT4-fs (loop7): 1 orphan inode deleted [ 1628.693127][T16279] EXT4-fs error (device loop7): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 0 [ 1628.721957][T31711] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1628.808420][T31711] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1628.828874][T31745] binder: 31744:31745 ioctl c0306201 0 returned -14 [ 1628.857616][T31746] EXT4-fs (loop7): ext4_remount: Checksum for group 0 failed (18333!=0) [ 1628.941710][T27024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1629.270269][T31757] syzkaller0: entered promiscuous mode [ 1629.304480][T31757] syzkaller0: entered allmulticast mode [ 1629.477716][T31764] loop7: detected capacity change from 0 to 512 [ 1629.982286][T31782] loop5: detected capacity change from 0 to 4096 [ 1630.060586][T31782] EXT4-fs: Ignoring removed orlov option [ 1630.100490][T31786] loop7: detected capacity change from 0 to 1024 [ 1630.149216][T31786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1630.162999][T31782] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1630.233685][T31782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1630.321129][T31786] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1630.474325][T25869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1630.633355][T31804] syzkaller0: entered promiscuous mode [ 1630.673341][T31804] syzkaller0: entered allmulticast mode [ 1631.013043][T27024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1631.044208][T31793] overlayfs: statfs failed on './file0' [ 1631.053290][T31811] binder: 31810:31811 ioctl c0306201 200000000080 returned -14 [ 1631.105765][T31811] binder: 31810:31811 ioctl c0306201 2000000003c0 returned -14 [ 1631.964409][T31839] Bluetooth: MGMT ver 1.22 [ 1632.144704][T31841] loop1: detected capacity change from 0 to 4096 [ 1632.223161][T31841] EXT4-fs: Ignoring removed orlov option [ 1632.286383][T31849] syzkaller0: entered promiscuous mode [ 1632.291877][T31849] syzkaller0: entered allmulticast mode [ 1632.337467][T31841] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1632.362663][T31848] syzkaller0: entered promiscuous mode [ 1632.390170][T31848] syzkaller0: entered allmulticast mode [ 1632.410111][T31841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1632.621780][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1632.772390][T31861] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1632.867131][T31863] binder: 31862:31863 ioctl c0306201 200000000080 returned -14 [ 1632.913958][T31863] binder: 31862:31863 ioctl c0306201 2000000003c0 returned -14 [ 1633.663960][T31895] syzkaller0: entered promiscuous mode [ 1633.708303][T31895] syzkaller0: entered allmulticast mode [ 1633.825254][T31898] loop7: detected capacity change from 0 to 1024 [ 1633.853442][T31898] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1633.947022][T31898] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1634.177882][T31911] binder: 31909:31911 ioctl c0306201 200000000080 returned -14 [ 1634.238174][T31911] binder: BINDER_SET_CONTEXT_MGR already set [ 1634.244207][T31911] binder: 31909:31911 ioctl 4018620d 200000000040 returned -16 [ 1634.326890][T31916] binder: 31909:31916 ioctl c0306201 2000000003c0 returned -14 [ 1634.749610][T27024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1635.576065][T31954] syzkaller0: entered promiscuous mode [ 1635.599358][T31954] syzkaller0: entered allmulticast mode [ 1635.928850][T31959] loop7: detected capacity change from 0 to 4096 [ 1635.979242][T31959] EXT4-fs: Ignoring removed orlov option [ 1636.057795][T31959] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1636.092669][T31964] binder: 31963:31964 ioctl c0306201 200000000080 returned -14 [ 1636.176319][T31959] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1636.226375][T31964] binder: BINDER_SET_CONTEXT_MGR already set [ 1636.232382][T31964] binder: 31963:31964 ioctl 4018620d 200000000040 returned -16 [ 1636.300781][T31968] binder: 31963:31968 ioctl c0306201 2000000003c0 returned -14 [ 1636.384243][T27024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1636.666616][T31980] binder: 31979:31980 ioctl c0306201 200000000080 returned -14 [ 1636.718397][T31980] binder: 31979:31980 ioctl c0306201 2000000003c0 returned -14 [ 1636.871463][T31989] syzkaller0: entered promiscuous mode [ 1637.037926][T31989] syzkaller0: entered allmulticast mode [ 1637.052012][T31993] binder: 31991:31993 ioctl c0306201 200000000880 returned -14 [ 1642.357162][T32037] binder: 32035:32037 ioctl c0306201 200000000080 returned -14 [ 1642.403517][T32037] binder: 32035:32037 ioctl c0306201 2000000003c0 returned -14 [ 1642.439469][T32038] syzkaller0: entered promiscuous mode [ 1642.445152][T32038] syzkaller0: entered allmulticast mode [ 1642.456017][T32041] binder: 32039:32041 unknown command 1074553619 [ 1642.485934][T32041] binder: 32039:32041 ioctl c0306201 200000000480 returned -22 [ 1644.776011][T32094] syzkaller0: entered promiscuous mode [ 1644.807564][T32094] syzkaller0: entered allmulticast mode [ 1645.870286][T32141] syzkaller0: entered promiscuous mode [ 1645.913429][T32141] syzkaller0: entered allmulticast mode [ 1646.698430][T32175] ip_tables: iptables: counters copy to user failed while replacing table [ 1649.625459][T32238] binder: BINDER_SET_CONTEXT_MGR already set [ 1649.631474][T32238] binder: 32237:32238 ioctl 4018620d 200000000800 returned -16 [ 1649.662388][T32236] loop7: detected capacity change from 0 to 4096 [ 1649.717414][T32236] EXT4-fs: Ignoring removed orlov option [ 1649.802533][T32236] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1649.873654][T32236] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1650.099469][T27024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1650.129343][T32258] binder: 32256:32258 ioctl c0306201 200000000080 returned -14 [ 1650.347659][T32266] loop7: detected capacity change from 0 to 256 [ 1650.645984][T32274] binder_alloc: 32272: binder_alloc_buf, no vma [ 1652.426107][T32329] loop5: detected capacity change from 0 to 4096 [ 1652.466517][T32329] EXT4-fs: Ignoring removed orlov option [ 1652.637284][T32329] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1652.703139][T32329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1652.897228][T32340] loop7: detected capacity change from 0 to 1024 [ 1652.920816][T25869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1652.945033][T32340] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (4096), stripe is disabled [ 1653.057043][T32340] EXT4-fs error (device loop7): ext4_map_blocks:720: inode #3: block 1: comm syz.7.6576: lblock 1 mapped to illegal pblock 1 (length 1) [ 1653.177539][T32340] Quota error (device loop7): write_blk: dquota write failed [ 1653.184970][T32340] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1653.298994][T32340] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.6576: Failed to acquire dquot type 0 [ 1653.362845][T32340] EXT4-fs error (device loop7): ext4_free_blocks:6694: comm syz.7.6576: Freeing blocks not in datazone - block = 0, count = 4096 [ 1653.447235][T32340] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.6576: Invalid inode bitmap blk 0 in block_group 0 [ 1653.486434][ T11] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1653.542788][T32340] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 1653.599359][T32340] EXT4-fs (loop7): 1 orphan inode deleted [ 1653.605677][ T11] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1653.626103][T32340] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1653.649443][ T11] EXT4-fs error (device loop7): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 0 [ 1653.737393][T32340] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 1653.778291][T32361] loop5: detected capacity change from 0 to 4096 [ 1653.834120][T32361] EXT4-fs: Ignoring removed orlov option [ 1653.882117][T32366] binder: 32363:32366 ioctl c0306201 200000000780 returned -14 [ 1653.929236][T32361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1653.943350][T27024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1653.978928][T32368] binder: 32363:32368 ioctl 4018620d 0 returned -22 [ 1654.011199][T32366] binder: 32363:32366 ioctl c0306201 200000000880 returned -14 [ 1654.209708][T25869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1654.869629][T32392] binder: 32390:32392 ioctl c0306201 200000000080 returned -14 [ 1654.883422][T32394] binder: 32393:32394 ioctl c0306201 200000000780 returned -14 [ 1654.908261][T32392] binder: 32390:32392 ioctl c0306201 2000000003c0 returned -14 [ 1654.941802][T32394] binder: 32393:32394 ioctl 4018620d 0 returned -22 [ 1654.994662][T32396] binder: 32393:32396 ioctl c0306201 200000000880 returned -14 [ 1655.510816][T32421] binder: BINDER_SET_CONTEXT_MGR already set [ 1655.544255][T32421] binder: 32420:32421 ioctl 4018620d 200000000800 returned -16 [ 1655.765928][T32431] binder: 32430:32431 ioctl c0306201 200000000080 returned -14 [ 1655.812968][T32431] binder: 32430:32431 ioctl c0306201 2000000003c0 returned -14 [ 1656.201932][T32446] loop7: detected capacity change from 0 to 2048 [ 1656.348256][T32446] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1656.450957][T32446] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1656.683504][T27024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1656.725802][T32467] binder: BINDER_SET_CONTEXT_MGR already set [ 1656.781408][T32467] binder: 32464:32467 ioctl 4018620d 200000000800 returned -16 [ 1656.934007][T32478] loop1: detected capacity change from 0 to 1024 [ 1657.017543][T32478] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (4096), stripe is disabled [ 1657.088202][T32478] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #3: block 1: comm syz.1.6615: lblock 1 mapped to illegal pblock 1 (length 1) [ 1657.152960][T32481] loop5: detected capacity change from 0 to 4096 [ 1657.169230][T32478] Quota error (device loop1): write_blk: dquota write failed [ 1657.191802][T32481] EXT4-fs: Ignoring removed orlov option [ 1657.213410][T32478] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1657.273450][T32481] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1657.281160][T32478] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.6615: Failed to acquire dquot type 0 [ 1657.327222][T32481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1657.359538][T32478] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.6615: Freeing blocks not in datazone - block = 0, count = 4096 [ 1657.421443][T32478] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.6615: Invalid inode bitmap blk 0 in block_group 0 [ 1657.447633][ T59] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 1657.518496][T32478] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 1657.547041][ T59] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1657.592748][T32478] EXT4-fs (loop1): 1 orphan inode deleted [ 1657.602850][ T59] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 0 [ 1657.632979][T32478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1657.660226][T32494] binder: 32493:32494 ioctl c0306201 200000000080 returned -14 [ 1657.679061][T25869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1657.696275][T32494] binder: 32493:32494 ioctl c0306201 2000000003c0 returned -14 [ 1657.716925][T32478] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1657.734181][T32494] binder_alloc: 32493: binder_alloc_buf, no vma [ 1657.892813][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1658.101729][T32510] loop1: detected capacity change from 0 to 128 [ 1658.174503][T32510] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1658.278753][T32510] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1658.311075][T32515] binder: BINDER_SET_CONTEXT_MGR already set [ 1658.341105][T32515] binder: 32514:32515 ioctl 4018620d 200000000800 returned -16 [ 1658.390918][T32513] loop7: detected capacity change from 0 to 4096 [ 1658.449990][T32513] EXT4-fs: Ignoring removed orlov option [ 1658.489972][T16281] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1658.568661][T32513] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1658.858884][T27024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1659.107183][T32536] loop1: detected capacity change from 0 to 1024 [ 1659.181546][T32536] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (4096), stripe is disabled [ 1659.211877][T32537] loop7: detected capacity change from 0 to 4096 [ 1659.279052][T32536] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #3: block 1: comm syz.1.6629: lblock 1 mapped to illegal pblock 1 (length 1) [ 1659.299813][T32537] EXT4-fs: Ignoring removed orlov option [ 1659.388229][T32536] Quota error (device loop1): write_blk: dquota write failed [ 1659.403565][T32537] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1659.445748][T32536] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1659.490818][T32537] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1659.538762][T32536] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.6629: Failed to acquire dquot type 0 [ 1659.628598][T32536] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.6629: Freeing blocks not in datazone - block = 0, count = 4096 [ 1659.742944][T32536] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.6629: Invalid inode bitmap blk 0 in block_group 0 [ 1659.757489][T16275] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 1659.846012][T16275] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1659.854681][T16275] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 0 [ 1659.867876][T32536] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 1659.911177][T32536] EXT4-fs (loop1): 1 orphan inode deleted [ 1659.936393][T32536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1659.970001][T27024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1659.993176][T32558] loop5: detected capacity change from 0 to 4096 [ 1660.073321][T32558] EXT4-fs: Ignoring removed orlov option [ 1660.134848][T32536] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1660.250276][T32558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1660.291322][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1660.493921][T25869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1663.219893][T32641] binder: 32640:32641 ioctl c0306201 200000000080 returned -14 [ 1663.375926][T32641] binder: 32640:32641 ioctl c0306201 2000000003c0 returned -14 [ 1663.963301][T32665] loop1: detected capacity change from 0 to 1024 [ 1663.982116][T32665] EXT4-fs: Ignoring removed mblk_io_submit option [ 1663.994129][T32667] binder: BINDER_SET_CONTEXT_MGR already set [ 1664.028740][T32667] binder: 32666:32667 ioctl 4018620d 200000000800 returned -16 [ 1664.121715][T32665] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1664.173085][T32665] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1664.213919][T32603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1664.223150][T32665] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.6668: Failed to acquire dquot type 0 [ 1664.285186][T32665] EXT4-fs (loop1): 1 truncate cleaned up [ 1664.310040][T32665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1664.444594][T32677] binder: 32676:32677 ioctl c0306201 200000000080 returned -14 [ 1664.482015][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1664.499157][T32677] binder: BINDER_SET_CONTEXT_MGR already set [ 1664.520472][T32677] binder: 32676:32677 ioctl 4018620d 200000000040 returned -16 [ 1664.577638][T32682] binder: 32676:32682 ioctl c0306201 2000000003c0 returned -14 [ 1665.003581][T32698] binder: BINDER_SET_CONTEXT_MGR already set [ 1665.033346][T32698] binder: 32697:32698 ioctl 4018620d 200000000800 returned -16 [ 1665.472836][T32718] binder: 32717:32718 ioctl c0306201 200000000080 returned -14 [ 1665.524226][T32718] binder: BINDER_SET_CONTEXT_MGR already set [ 1665.561030][T32718] binder: 32717:32718 ioctl 4018620d 200000000040 returned -16 [ 1665.599982][T32722] binder: 32717:32722 ioctl c0306201 2000000003c0 returned -14 [ 1667.122718][T32760] tmpfs: Bad value for 'mpol' [ 1667.453642][T32766] binder: 32765:32766 unknown command 1074553619 [ 1667.470318][T32766] binder: 32765:32766 ioctl c0306201 2000000004c0 returned -22 [ 1667.480886][T32766] binder: 32765:32766 unknown command 1074553619 [ 1667.490681][T32766] binder: 32765:32766 ioctl c0306201 200000000640 returned -22 [ 1668.081836][T32700] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1668.436419][ T315] loop5: detected capacity change from 0 to 8 [ 1669.132304][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 1669.319198][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.325794][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.614650][ T325] binder: 324:325 ioctl c0306201 200000000780 returned -14 [ 1669.665529][ T325] binder: 324:325 ioctl c0306201 200000000880 returned -14 [ 1669.701714][ T325] binder: 324:325 ioctl c0306201 0 returned -14 [ 1670.438384][ T350] binder: 347:350 ioctl c0306201 0 returned -14 [ 1670.458159][ T353] loop5: detected capacity change from 0 to 256 [ 1671.317506][ T350] binder: BINDER_SET_CONTEXT_MGR already set [ 1671.323539][ T350] binder: 347:350 ioctl 4018620d 200000000040 returned -16 [ 1671.393276][ T353] FAT-fs (loop5): Directory bread(block 64) failed [ 1671.435686][ T357] binder: 347:357 ioctl c0306201 2000000003c0 returned -14 [ 1671.451150][ T353] FAT-fs (loop5): Directory bread(block 65) failed [ 1671.496480][ T353] FAT-fs (loop5): Directory bread(block 66) failed [ 1671.554382][ T353] FAT-fs (loop5): Directory bread(block 67) failed [ 1671.606969][ T353] FAT-fs (loop5): Directory bread(block 68) failed [ 1671.613561][ T353] FAT-fs (loop5): Directory bread(block 69) failed [ 1671.687220][ T353] FAT-fs (loop5): Directory bread(block 70) failed [ 1671.724882][ T353] FAT-fs (loop5): Directory bread(block 71) failed [ 1671.768368][ T353] FAT-fs (loop5): Directory bread(block 72) failed [ 1671.774941][ T353] FAT-fs (loop5): Directory bread(block 73) failed [ 1673.285684][ T396] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6734'. [ 1673.314874][ T399] ip_tables: iptables: counters copy to user failed while replacing table [ 1673.540927][ T408] netlink: 192 bytes leftover after parsing attributes in process `syz.5.6738'. [ 1676.052530][ T483] loop1: detected capacity change from 0 to 1024 [ 1676.081836][ T483] EXT4-fs: Ignoring removed mblk_io_submit option [ 1676.166160][ T483] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1676.231927][ T483] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1676.288786][ T483] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.6761: Failed to acquire dquot type 0 [ 1676.385166][ T483] EXT4-fs (loop1): 1 truncate cleaned up [ 1676.409869][ T483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1676.450979][ T493] loop5: detected capacity change from 0 to 512 [ 1676.520461][ T493] EXT4-fs: inline encryption not supported [ 1676.688598][ T493] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1676.726096][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1676.787282][ T493] EXT4-fs error (device loop5): ext4_init_orphan_info:585: inode #15: comm syz.5.6763: iget: special inode unallocated [ 1676.882796][ T493] EXT4-fs (loop5): get orphan inode failed [ 1676.922695][ T493] EXT4-fs (loop5): mount failed [ 1677.621108][ T526] binder: BINDER_SET_CONTEXT_MGR already set [ 1677.650478][ T526] binder: 523:526 ioctl 4018620d 200000000040 returned -16 [ 1678.360179][ T548] loop1: detected capacity change from 0 to 512 [ 1679.276181][ T548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1679.463388][ T548] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1679.793109][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1680.043085][ T571] binder: 570:571 ioctl c0306201 200000000080 returned -14 [ 1680.090182][ T571] binder: 570:571 ioctl c0306201 2000000003c0 returned -14 [ 1683.096885][ T603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6795'. [ 1683.311928][ T604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6793'. [ 1683.363001][ T611] binder: 609:611 ioctl c0306201 200000000080 returned -14 [ 1683.420303][ T611] binder: 609:611 ioctl c0306201 2000000003c0 returned -14 [ 1683.600854][ T618] binder: BINDER_SET_CONTEXT_MGR already set [ 1683.631873][ T618] binder: 617:618 ioctl 4018620d 200000000040 returned -16 [ 1683.674329][ T626] binder: 622:626 ioctl c0306201 0 returned -14 [ 1683.919820][ T630] ip_tables: iptables: counters copy to user failed while replacing table [ 1687.777358][ T641] binder: BINDER_SET_CONTEXT_MGR already set [ 1687.783736][ T641] binder: 638:641 ioctl 4018620d 2000000002c0 returned -16 [ 1689.275658][ T655] binder: 653:655 ioctl c0306201 200000000080 returned -14 [ 1689.385212][ T656] binder: BINDER_SET_CONTEXT_MGR already set [ 1689.425014][ T656] binder: 654:656 ioctl 4018620d 200000000040 returned -16 [ 1689.434674][ T655] binder: 653:655 ioctl c0306201 2000000003c0 returned -14 [ 1689.486224][ T659] binder: BINDER_SET_CONTEXT_MGR already set [ 1689.537036][ T662] binder: 657:662 ioctl c0306201 0 returned -14 [ 1689.585836][ T659] binder: 657:659 ioctl 4018620d 200000000240 returned -16 [ 1689.797726][ T668] block nbd3: server does not support multiple connections per device. [ 1689.850655][ T668] block nbd3: shutting down sockets [ 1690.248746][ T688] binder: 686:688 ioctl c0306201 200000000080 returned -14 [ 1690.322288][ T688] binder: 686:688 ioctl c0306201 2000000003c0 returned -14 [ 1690.374231][ T693] binder: 692:693 ioctl c0306201 200000000080 returned -14 [ 1690.434907][ T693] binder: 692:693 ioctl c0306201 2000000003c0 returned -14 [ 1690.702252][ T700] binder: BINDER_SET_CONTEXT_MGR already set [ 1690.739196][ T700] binder: 699:700 ioctl 4018620d 200000000240 returned -16 [ 1690.781111][ T704] binder: 699:704 ioctl c0306201 0 returned -14 [ 1691.091288][ T711] loop1: detected capacity change from 0 to 1024 [ 1691.326256][ T711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1691.937290][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1691.972508][ T731] loop7: detected capacity change from 0 to 512 [ 1692.022985][ T731] EXT4-fs: Ignoring removed bh option [ 1692.094017][ T731] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1692.154343][ T731] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1692.295590][ T731] EXT4-fs warning (device loop7): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1692.399181][ T731] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 1692.448881][ T731] EXT4-fs error (device loop7): ext4_ext_check_inode:532: inode #13: comm syz.7.6828: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1692.554608][ T731] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.6828: couldn't read orphan inode 13 (err -117) [ 1692.643294][ T731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1693.548065][T27024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1694.639507][ T792] FAULT_INJECTION: forcing a failure. [ 1694.639507][ T792] name failslab, interval 1, probability 0, space 0, times 0 [ 1694.728212][ T792] CPU: 0 PID: 792 Comm: syz.1.6845 Not tainted syzkaller #0 [ 1694.735529][ T792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1694.745575][ T792] Call Trace: [ 1694.748843][ T792] [ 1694.751761][ T792] dump_stack_lvl+0x18c/0x250 [ 1694.756445][ T792] ? show_regs_print_info+0x20/0x20 [ 1694.761650][ T792] ? load_image+0x420/0x420 [ 1694.766157][ T792] ? __might_sleep+0xe0/0xe0 [ 1694.770762][ T792] ? __lock_acquire+0x7eb0/0x7eb0 [ 1694.775776][ T792] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 1694.782445][ T792] should_fail_ex+0x394/0x4c0 [ 1694.787122][ T792] should_failslab+0x9/0x20 [ 1694.791617][ T792] slab_pre_alloc_hook+0x59/0x300 [ 1694.796648][ T792] ? pcpu_alloc+0x11e7/0x1880 [ 1694.801340][ T792] ? percpu_ref_init+0xc3/0x340 [ 1694.806194][ T792] __kmem_cache_alloc_node+0x53/0x250 [ 1694.811560][ T792] ? percpu_ref_init+0xc3/0x340 [ 1694.816396][ T792] ? io_allocate_scq_urings+0x620/0x620 [ 1694.821935][ T792] kmalloc_trace+0x2a/0xe0 [ 1694.826374][ T792] percpu_ref_init+0xc3/0x340 [ 1694.831052][ T792] io_ring_ctx_alloc+0x205/0xc10 [ 1694.836004][ T792] io_uring_create+0x2df/0x1330 [ 1694.840848][ T792] ? __might_fault+0xc6/0x120 [ 1694.845531][ T792] ? __might_fault+0xaa/0x120 [ 1694.850197][ T792] __se_sys_io_uring_setup+0x29f/0x2b0 [ 1694.855642][ T792] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1694.861178][ T792] ? lockdep_hardirqs_on+0x98/0x150 [ 1694.866362][ T792] do_syscall_64+0x55/0xb0 [ 1694.870763][ T792] ? clear_bhb_loop+0x40/0x90 [ 1694.875425][ T792] ? clear_bhb_loop+0x40/0x90 [ 1694.880089][ T792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1694.885974][ T792] RIP: 0033:0x7f15ecd9e559 [ 1694.890374][ T792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1694.909973][ T792] RSP: 002b:00007f15edd18fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1694.918383][ T792] RAX: ffffffffffffffda RBX: 0000200000000440 RCX: 00007f15ecd9e559 [ 1694.926433][ T792] RDX: 0000200000000240 RSI: 0000200000000440 RDI: 000000000000001f [ 1694.934486][ T792] RBP: 00007f15ece358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1694.942550][ T792] R10: 0000200000000280 R11: 0000000000000206 R12: 0000200000000240 [ 1694.950529][ T792] R13: 0000200000000280 R14: 0000200000000400 R15: 00007ffe2f395bd8 [ 1694.958599][ T792] [ 1694.961687][ C0] vkms_vblank_simulate: vblank timer overrun [ 1694.992962][ T799] binder: 796:799 ioctl c0306201 200000000080 returned -14 [ 1695.002979][ T799] binder: 796:799 ioctl c0306201 2000000003c0 returned -14 [ 1695.531241][ T824] binder: 822:824 ioctl c0306201 200000000080 returned -14 [ 1695.567941][ T824] binder: 822:824 ioctl c0306201 2000000003c0 returned -14 [ 1696.230390][ T838] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6861'. [ 1696.534910][ T850] loop1: detected capacity change from 0 to 8 [ 1696.581828][ T850] Major/Minor mismatch, trying to mount newer 8192.0 filesystem [ 1696.629441][ T850] Please update your kernel [ 1696.707314][ T855] binder: 853:855 ioctl 4018620d 0 returned -22 [ 1696.719311][T15788] block nbd3: Receive control failed (result -32) [ 1696.765524][ T856] binder: 853:856 ioctl c0306201 200000000080 returned -14 [ 1696.875813][ T855] binder: 853:855 ioctl c0306201 2000000003c0 returned -14 [ 1697.022395][ T869] binder: 861:869 ioctl c0306201 0 returned -14 [ 1697.066588][T16275] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 1697.241882][ T877] binder: 876:877 ioctl c0306201 200000000080 returned -14 [ 1697.314278][ T877] binder: 876:877 ioctl c0306201 2000000003c0 returned -14 [ 1697.454027][ T884] binder: 882:884 ioctl c0306201 200000000080 returned -14 [ 1697.497933][ T884] binder: 882:884 ioctl c0306201 2000000003c0 returned -14 [ 1698.529128][ T908] binder: 907:908 ioctl 4018620d 0 returned -22 [ 1698.576651][ T908] binder: 907:908 ioctl c0306201 200000000080 returned -14 [ 1698.620694][ T908] binder: 907:908 ioctl c0306201 2000000003c0 returned -14 [ 1698.713653][ T919] loop5: detected capacity change from 0 to 512 [ 1698.820442][ T919] EXT4-fs: Ignoring removed bh option [ 1698.887477][ T919] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1698.946931][ T919] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1699.033764][ T919] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1699.121056][ T940] loop1: detected capacity change from 0 to 256 [ 1699.145543][ T919] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1699.166264][ T940] FAT-fs (loop1): Unrecognized mount option "utf 5!â8=0" or missing value [ 1699.201552][ T919] EXT4-fs error (device loop5): ext4_ext_check_inode:532: inode #13: comm syz.5.6884: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1699.266817][ T940] binder: 938:940 unknown command 1074291477 [ 1699.272998][ T940] binder: 938:940 ioctl c0306201 200000000280 returned -22 [ 1699.313653][ T946] binder: 945:946 ioctl c0306201 200000000080 returned -14 [ 1699.349004][ T919] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.6884: couldn't read orphan inode 13 (err -117) [ 1699.438994][ T919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1699.995464][ T940] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1700.015160][ T940] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1700.486301][ T940] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1700.521487][ T940] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1700.624701][T25869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1700.870878][ T972] binder: 971:972 ioctl 4018620d 0 returned -22 [ 1700.923973][ T972] binder: 971:972 ioctl c0306201 200000000080 returned -14 [ 1700.984065][ T978] binder: 971:978 ioctl c0306201 2000000003c0 returned -14 [ 1701.240905][ T989] binder: 986:989 ioctl c0306201 200000000080 returned -14 [ 1701.555798][T15788] Bluetooth: hci1: command 0x0c1a tx timeout [ 1701.965116][ T1028] binder: 1027:1028 ioctl c0306201 200000000ac0 returned -14 [ 1702.008990][ T1028] binder_alloc: 1027: pid 1027 spamming oneway? 1 buffers allocated for a total size of 6144 [ 1702.035920][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1702.046161][ T1032] binder: 1030:1032 ioctl c0306201 200000000080 returned -14 [ 1702.072727][ T1028] binder: 1027:1028 ioctl c0306201 200000000c80 returned -14 [ 1702.241807][ T1033] loop5: detected capacity change from 0 to 8192 [ 1702.307429][ T51] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1702.518224][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 1702.595602][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 1702.890850][ T1068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1703.261073][ T1075] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.6924'. [ 1703.324941][ T1079] binder: 1078:1079 ioctl c0306201 200000000080 returned -14 [ 1703.403598][ T1079] binder: 1078:1079 ioctl c0306201 2000000003c0 returned -14 [ 1703.455042][ T1081] loop1: detected capacity change from 0 to 1024 [ 1703.588084][ T647] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1703.873950][ T1094] loop7: detected capacity change from 0 to 128 [ 1703.967949][ T1094] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1704.056660][ T1094] ext4 filesystem being mounted at /413/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1704.202717][ T1094] syz.7.6931 (pid 1094) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1704.316023][ T1094] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 1704.379761][ T1111] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.6935'. [ 1704.492186][T27024] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1704.702976][ T1122] binder: 1120:1122 ioctl c0306201 200000000080 returned -14 [ 1704.749045][ T1122] binder: 1120:1122 ioctl c0306201 2000000003c0 returned -14 [ 1705.784589][ T1148] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.6946'. [ 1707.107823][ T1190] binder: 1189:1190 ioctl c0306201 200000000080 returned -14 [ 1707.364883][ T1190] binder: 1189:1190 ioctl c0306201 0 returned -14 [ 1707.454564][ T1198] binder_alloc: 1197: binder_alloc_buf, no vma [ 1707.698189][ T1207] input: syz0 as /devices/virtual/input/input29 [ 1708.202685][ T1223] binder: 1220:1223 ioctl c0306201 200000000ac0 returned -14 [ 1708.261437][ T1223] binder: 1220:1223 ioctl c0306201 200000000c80 returned -14 [ 1708.611183][ T1234] binder_alloc: 1233: binder_alloc_buf, no vma [ 1709.633734][ T1235] loop7: detected capacity change from 0 to 512 [ 1709.651176][ T1235] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1709.737062][ T1235] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1709.751500][ T1235] Quota error (device loop7): write_blk: dquota write failed [ 1709.759154][ T1235] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 1709.768347][ T1235] Quota error (device loop7): write_blk: dquota write failed [ 1709.776045][ T1235] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1709.785962][ T1235] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.6968: Failed to acquire dquot type 1 [ 1709.800995][ T1235] EXT4-fs (loop7): 1 truncate cleaned up [ 1709.807439][ T1235] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1710.152757][T27024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1710.759370][ T1259] input: syz0 as /devices/virtual/input/input30 [ 1711.348065][ T1284] binder_alloc: 1283: pid 1283 spamming oneway? 1 buffers allocated for a total size of 6144 [ 1711.402454][ T1284] binder: 1283:1284 ioctl c0306201 200000000c80 returned -14 [ 1712.169856][ T1305] input: syz0 as /devices/virtual/input/input31 [ 1712.742983][ T1323] syzkaller0: entered promiscuous mode [ 1712.770472][ T1323] syzkaller0: entered allmulticast mode [ 1712.912855][ T1330] loop5: detected capacity change from 0 to 128 [ 1712.951813][ T1330] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1713.051099][ T1330] ext4 filesystem being mounted at /471/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1713.208204][ T1341] loop1: detected capacity change from 0 to 128 [ 1713.366978][ T1344] binder: 1343:1344 ioctl c0306201 0 returned -14 [ 1713.395014][T25869] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1713.417853][ T1341] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1713.512385][ T1341] ext4 filesystem being mounted at /391/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1713.708049][T27298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1713.802512][ T1354] loop5: detected capacity change from 0 to 1024 [ 1714.002446][ T1354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1714.576688][T25869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1714.613205][ T1380] binder: 1377:1380 ioctl c0306201 0 returned -14 [ 1715.515000][ T1415] loop1: detected capacity change from 0 to 1024 [ 1715.619861][ T1415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1715.786182][ T1425] binder: 1422:1425 ioctl c0306201 0 returned -14 [ 1715.818785][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1716.813223][ T1463] syzkaller0: entered promiscuous mode [ 1716.843603][ T1463] syzkaller0: entered allmulticast mode [ 1717.620977][ T1497] loop1: detected capacity change from 0 to 128 [ 1717.716085][ T1497] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1718.101063][ T1497] ext4 filesystem being mounted at /404/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1718.260112][T27298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1719.031455][ T1539] loop5: detected capacity change from 0 to 128 [ 1719.130289][ T1539] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1719.207737][ T1539] ext4 filesystem being mounted at /490/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1719.659771][T25869] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1719.834300][T16291] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 1720.554168][ T1578] loop7: detected capacity change from 0 to 2048 [ 1720.788118][ T1577] binder: 1574:1577 ioctl c0306201 2000000003c0 returned -14 [ 1720.797944][ T1578] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1721.547611][T15788] Bluetooth: hci0: command 0x0c1a tx timeout [ 1721.560241][T27024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1722.187367][T16279] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 1722.211068][ T1610] loop5: detected capacity change from 0 to 128 [ 1722.268021][ T1610] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1722.340653][ T1610] ext4 filesystem being mounted at /495/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1722.613101][T25869] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1722.992568][ T1632] binder_alloc: 1630: binder_alloc_buf, no vma [ 1723.732623][ T1646] syzkaller0: entered promiscuous mode [ 1723.757065][ T1646] syzkaller0: entered allmulticast mode [ 1725.764291][ T1692] binder: 1691:1692 ioctl c0306201 0 returned -14 [ 1726.314581][ T1708] loop5: detected capacity change from 0 to 1024 [ 1726.438220][ T1708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1727.048449][T25869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1727.506294][ T1735] binder: 1733:1735 unknown command 1074553619 [ 1727.538719][ T1735] binder: 1733:1735 ioctl c0306201 200000000040 returned -22 [ 1727.582229][ T1740] binder: 1733:1740 unknown command 1074291477 [ 1727.614125][ T1740] binder: 1733:1740 ioctl c0306201 200000000640 returned -22 [ 1728.131983][ T1756] syzkaller0: entered promiscuous mode [ 1728.164310][ T1756] syzkaller0: entered allmulticast mode [ 1728.302557][ T1761] binder_alloc: 1760: binder_alloc_buf, no vma [ 1728.333453][ T1761] binder: 1760:1761 ioctl c0306201 200000000ac0 returned -14 [ 1728.376340][ T1767] binder_alloc: 1760: binder_alloc_buf, no vma [ 1728.382564][ T1767] binder: 1760:1767 ioctl c0306201 200000000c80 returned -14 [ 1729.657243][ T1800] syzkaller0: entered promiscuous mode [ 1729.685675][ T1800] syzkaller0: entered allmulticast mode [ 1729.816423][ T1805] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.7136'. [ 1730.637133][ T1832] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.7146'. [ 1730.674519][ T1834] binder: 1833:1834 ioctl c0306201 200000000080 returned -14 [ 1730.720883][ T1834] binder: 1833:1834 ioctl c0306201 2000000003c0 returned -14 [ 1730.760426][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.767059][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.773383][ T1824] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 1730.779783][ T1824] ucsi_ccg: probe of 0-0008 failed with error -110 [ 1730.786505][ T1824] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 1731.332255][ T1862] fuse: Bad value for 'fd' [ 1731.593028][ T1872] binder: 1870:1872 ioctl c0306201 200000000ac0 returned -14 [ 1731.635959][ T1872] binder: 1870:1872 ioctl c0306201 200000000c80 returned -14 [ 1731.703956][ T1877] syzkaller0: entered promiscuous mode [ 1731.731618][ T1877] syzkaller0: entered allmulticast mode [ 1732.067057][ T1890] loop1: detected capacity change from 0 to 128 [ 1732.181323][ T1890] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1732.281550][ T1890] ext4 filesystem being mounted at /430/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1732.503211][T27298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1736.087401][ T1920] syzkaller0: entered promiscuous mode [ 1736.092919][ T1920] syzkaller0: entered allmulticast mode [ 1736.121519][ T1924] fuse: Bad value for 'fd' [ 1737.422668][ T1930] loop1: detected capacity change from 0 to 1024 [ 1737.528693][ T1930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1737.777212][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1738.004076][ T1952] loop1: detected capacity change from 0 to 128 [ 1738.103182][ T1952] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1738.205027][ T1952] ext4 filesystem being mounted at /433/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1738.230295][ T27] audit: type=1800 audit(1792188459.904:270): pid=1954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7185" name="lun" dev="configfs" ino=95639 res=0 errno=0 [ 1738.392785][T27298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1738.947957][ T1971] syzkaller0: entered promiscuous mode [ 1738.971332][ T1971] syzkaller0: entered allmulticast mode [ 1739.363514][ T1984] loop5: detected capacity change from 0 to 1024 [ 1739.509382][ T1984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1739.742891][T25869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1739.935801][ T2000] binder: BINDER_SET_CONTEXT_MGR already set [ 1739.969601][ T2000] binder: 1999:2000 ioctl 4018620d 200000000a00 returned -16 [ 1740.065100][ T2002] loop5: detected capacity change from 0 to 2048 [ 1740.179334][ T2002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1740.274402][ T2002] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1740.753777][T25869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1741.210463][ T2035] binder: 2033:2035 ioctl c0306201 200000000080 returned -14 [ 1741.258404][ T2037] loop5: detected capacity change from 0 to 1024 [ 1741.265542][ T2035] binder: 2033:2035 ioctl c0306201 2000000003c0 returned -14 [ 1741.320746][ T2037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1741.523401][T25869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1741.820370][ T2052] binder: BINDER_SET_CONTEXT_MGR already set [ 1742.850000][ T2052] binder: 2050:2052 ioctl 4018620d 200000000240 returned -16 [ 1743.061481][ T2060] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 1743.197070][ T2070] binder: 2069:2070 ioctl c0306201 200000000080 returned -14 [ 1743.228442][ T2070] binder: 2069:2070 ioctl c0306201 2000000003c0 returned -14 [ 1744.115347][ C0] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 1744.557126][ T2021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1744.846675][ T2090] binder: 2086:2090 ioctl c0306201 0 returned -14 [ 1744.898536][ T2090] binder: BINDER_SET_CONTEXT_MGR already set [ 1744.904554][ T2090] binder: 2086:2090 ioctl 4018620d 200000000240 returned -16 [ 1744.915603][ T2094] binder: 2089:2094 ioctl 4018620d 0 returned -22 [ 1744.943072][ T2094] binder: 2089:2094 ioctl c0306201 200000000080 returned -14 [ 1745.000414][ T2097] binder: 2089:2097 ioctl c0306201 2000000003c0 returned -14 [ 1745.153003][ T2102] binder: 2101:2102 ioctl c0306201 200000000080 returned -14 [ 1745.215949][ T2102] binder: 2101:2102 ioctl c0306201 2000000003c0 returned -14 [ 1745.444537][ T2113] loop5: detected capacity change from 0 to 128 [ 1745.526136][ T2113] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1745.626945][ T2113] ext4 filesystem being mounted at /537/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1745.787559][ T2128] binder: 2127:2128 ioctl c0306201 200000000ac0 returned -14 [ 1745.836457][ T2131] binder: 2127:2131 ioctl c0306201 200000000c80 returned -14 [ 1745.856723][T25869] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1745.875961][ T2132] binder: 2130:2132 ioctl c0306201 0 returned -14 [ 1746.150170][ T2138] netlink: 'syz.7.7237': attribute type 11 has an invalid length. [ 1746.230191][ T2138] netlink: 448 bytes leftover after parsing attributes in process `syz.7.7237'. [ 1746.316151][ T27] audit: type=1800 audit(1792188468.004:271): pid=2148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7240" name="lun" dev="configfs" ino=96083 res=0 errno=0 [ 1746.370806][ T2149] loop1: detected capacity change from 0 to 128 [ 1746.385374][T15788] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1746.408798][ T2144] binder: 2137:2144 ioctl c0306201 200000000080 returned -14 [ 1746.466822][ T2149] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1746.524077][ T2149] ext4 filesystem being mounted at /443/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1746.846214][T27298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1747.613491][ T2172] binder: 2165:2172 ioctl c0306201 0 returned -14 [ 1748.476238][ T2188] FAULT_INJECTION: forcing a failure. [ 1748.476238][ T2188] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.518389][ T2188] CPU: 0 PID: 2188 Comm: syz.0.7253 Not tainted syzkaller #0 [ 1748.525796][ T2188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1748.535857][ T2188] Call Trace: [ 1748.539162][ T2188] [ 1748.542112][ T2188] dump_stack_lvl+0x18c/0x250 [ 1748.546802][ T2188] ? show_regs_print_info+0x20/0x20 [ 1748.551986][ T2188] ? load_image+0x420/0x420 [ 1748.556499][ T2188] ? __lock_acquire+0x7eb0/0x7eb0 [ 1748.561517][ T2188] ? __lock_acquire+0x7eb0/0x7eb0 [ 1748.566535][ T2188] should_fail_ex+0x394/0x4c0 [ 1748.571209][ T2188] should_failslab+0x9/0x20 [ 1748.575701][ T2188] slab_pre_alloc_hook+0x59/0x300 [ 1748.580712][ T2188] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1748.585814][ T2188] ? sock_alloc_inode+0x28/0xc0 [ 1748.590661][ T2188] sock_alloc_inode+0x28/0xc0 [ 1748.595325][ T2188] ? sockfs_init_fs_context+0xb0/0xb0 [ 1748.600685][ T2188] new_inode_pseudo+0x63/0x1d0 [ 1748.605453][ T2188] __sock_create+0x12d/0x940 [ 1748.610042][ T2188] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1748.616012][ T2188] __sys_socket+0xd7/0x1b0 [ 1748.620418][ T2188] __x64_sys_socket+0x7a/0x90 [ 1748.625085][ T2188] do_syscall_64+0x55/0xb0 [ 1748.629588][ T2188] ? clear_bhb_loop+0x40/0x90 [ 1748.634275][ T2188] ? clear_bhb_loop+0x40/0x90 [ 1748.638961][ T2188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1748.644855][ T2188] RIP: 0033:0x7fda0519e559 [ 1748.649264][ T2188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1748.668879][ T2188] RSP: 002b:00007fda060e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1748.677287][ T2188] RAX: ffffffffffffffda RBX: 00007fda05425fa0 RCX: 00007fda0519e559 [ 1748.685261][ T2188] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 1748.693232][ T2188] RBP: 00007fda052358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1748.701207][ T2188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1748.709202][ T2188] R13: 00007fda05426038 R14: 00007fda05425fa0 R15: 00007ffc6d462078 [ 1748.717192][ T2188] [ 1748.972339][ T2192] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 1749.034094][ T2194] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7255'. [ 1749.163567][ T2197] loop5: detected capacity change from 0 to 128 [ 1749.352321][ T2197] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1749.513112][ T2197] ext4 filesystem being mounted at /543/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1750.765814][ T2188] socket: no more sockets [ 1750.786332][T25869] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1750.827789][ T2217] FAULT_INJECTION: forcing a failure. [ 1750.827789][ T2217] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1750.959211][ T2217] CPU: 0 PID: 2217 Comm: syz.0.7253 Not tainted syzkaller #0 [ 1750.966661][ T2217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1750.976718][ T2217] Call Trace: [ 1750.980010][ T2217] [ 1750.982962][ T2217] dump_stack_lvl+0x18c/0x250 [ 1750.987636][ T2217] ? show_regs_print_info+0x20/0x20 [ 1750.992823][ T2217] ? load_image+0x420/0x420 [ 1750.997319][ T2217] ? __lock_acquire+0x7eb0/0x7eb0 [ 1751.002338][ T2217] should_fail_ex+0x394/0x4c0 [ 1751.007011][ T2217] prepare_alloc_pages+0x1e1/0x5b0 [ 1751.012121][ T2217] __alloc_pages+0x134/0x460 [ 1751.016740][ T2217] ? zone_statistics+0x170/0x170 [ 1751.021691][ T2217] ? alloc_pages+0x4e1/0x740 [ 1751.026284][ T2217] ? do_raw_spin_unlock+0x121/0x230 [ 1751.031582][ T2217] __get_free_pages+0xc/0x30 [ 1751.036176][ T2217] kasan_populate_vmalloc_pte+0x35/0x100 [ 1751.041821][ T2217] __apply_to_page_range+0x860/0xdd0 [ 1751.047102][ T2217] ? kasan_populate_vmalloc+0x70/0x70 [ 1751.052467][ T2217] ? apply_to_page_range+0x50/0x50 [ 1751.057588][ T2217] ? do_raw_spin_unlock+0x121/0x230 [ 1751.062876][ T2217] alloc_vmap_area+0x1d26/0x1e50 [ 1751.067847][ T2217] ? vm_map_ram+0xcf0/0xcf0 [ 1751.072362][ T2217] ? rcu_is_watching+0x15/0xb0 [ 1751.077126][ T2217] __get_vm_area_node+0x162/0x370 [ 1751.082147][ T2217] __vmalloc_node_range+0x36f/0x1320 [ 1751.087430][ T2217] ? reuseport_array_alloc+0x98/0x120 [ 1751.092794][ T2217] ? futex_wait_queue+0x27/0x1b0 [ 1751.097758][ T2217] ? futex_wait_queue+0x138/0x1b0 [ 1751.102770][ T2217] ? futex_wait+0x4a7/0x5c0 [ 1751.107264][ T2217] ? aa_get_newest_label+0xfd/0x5c0 [ 1751.112452][ T2217] ? end_current_label_crit_section+0x170/0x170 [ 1751.118712][ T2217] ? free_vm_area+0x50/0x50 [ 1751.123214][ T2217] ? apparmor_capable+0x137/0x1a0 [ 1751.128229][ T2217] bpf_map_area_alloc+0xf1/0x110 [ 1751.133177][ T2217] ? reuseport_array_alloc+0x98/0x120 [ 1751.138546][ T2217] reuseport_array_alloc+0x98/0x120 [ 1751.143741][ T2217] map_create+0x877/0x12f0 [ 1751.148150][ T2217] __sys_bpf+0x651/0x890 [ 1751.152383][ T2217] ? bpf_link_show_fdinfo+0x560/0x560 [ 1751.157767][ T2217] ? lock_chain_count+0x20/0x20 [ 1751.162623][ T2217] __x64_sys_bpf+0x7c/0x90 [ 1751.167029][ T2217] do_syscall_64+0x55/0xb0 [ 1751.171431][ T2217] ? clear_bhb_loop+0x40/0x90 [ 1751.176096][ T2217] ? clear_bhb_loop+0x40/0x90 [ 1751.180762][ T2217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1751.186652][ T2217] RIP: 0033:0x7fda0519e559 [ 1751.191060][ T2217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1751.210657][ T2217] RSP: 002b:00007fda060c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1751.219081][ T2217] RAX: ffffffffffffffda RBX: 00007fda05426090 RCX: 00007fda0519e559 [ 1751.227041][ T2217] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 0000000000000000 [ 1751.235000][ T2217] RBP: 00007fda052358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1751.242975][ T2217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1751.250949][ T2217] R13: 00007fda05426128 R14: 00007fda05426090 R15: 00007ffc6d462078 [ 1751.258919][ T2217] [ 1751.560442][ T27] audit: type=1800 audit(1792188473.094:272): pid=2229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7267" name="lun" dev="configfs" ino=96311 res=0 errno=0 [ 1751.871733][ T2237] binder: 2236:2237 ioctl c0306201 200000000ac0 returned -14 [ 1751.893633][ T2237] binder: 2236:2237 ioctl c0306201 200000000c80 returned -14 [ 1753.133221][ T2245] loop5: detected capacity change from 0 to 128 [ 1753.338263][ T2245] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1753.404478][ T2245] ext4 filesystem being mounted at /546/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1753.538755][T25869] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1755.229596][ T2285] netlink: 'syz.7.7285': attribute type 11 has an invalid length. [ 1755.269025][ T2285] netlink: 448 bytes leftover after parsing attributes in process `syz.7.7285'. [ 1755.385826][T15788] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1755.409358][ T27] audit: type=1800 audit(1792188477.114:273): pid=2292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7288" name="lun" dev="configfs" ino=96480 res=0 errno=0 [ 1755.528144][ T2297] loop5: detected capacity change from 0 to 128 [ 1755.609877][ T2297] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1755.691973][ T2297] ext4 filesystem being mounted at /549/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1755.864368][T25869] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1755.886758][ T2309] loop1: detected capacity change from 0 to 1024 [ 1755.984541][ T2309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1756.018605][ T2314] binder: BINDER_SET_CONTEXT_MGR already set [ 1756.076159][ T2314] binder: 2313:2314 ioctl 4018620d 200000004a80 returned -16 [ 1757.177056][ T2321] loop7: detected capacity change from 0 to 128 [ 1757.205184][T27298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1757.237239][ T2321] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1757.366204][ T2321] ext4 filesystem being mounted at /499/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1757.508386][ T27] audit: type=1800 audit(1792188479.214:274): pid=2333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7300" name="lun" dev="configfs" ino=96564 res=0 errno=0 [ 1757.613217][T27024] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1757.680551][ T2339] loop1: detected capacity change from 0 to 128 [ 1757.717485][ T2340] binder: 2337:2340 ioctl c0306201 2000000003c0 returned -14 [ 1757.761366][ T2342] loop5: detected capacity change from 0 to 256 [ 1757.808725][ T2339] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1757.926084][ T2339] ext4 filesystem being mounted at /462/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1758.137510][T27298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1758.162944][ T2353] loop7: detected capacity change from 0 to 1024 [ 1758.350361][ T2354] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 1758.462194][ T2353] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1758.643998][T27024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1758.853171][ T2366] loop7: detected capacity change from 0 to 128 [ 1758.882885][ T27] audit: type=1800 audit(1792188480.584:275): pid=2368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7313" name="lun" dev="configfs" ino=96656 res=0 errno=0 [ 1758.937102][ T2366] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1759.019980][ T2366] ext4 filesystem being mounted at /502/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1760.261393][T27024] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1760.502571][ T2392] 0x000000000000-0x000000010000 : "" [ 1760.528510][ T2395] loop7: detected capacity change from 0 to 128 [ 1760.628945][ T2392] ftl_cs: FTL header not found. [ 1760.657590][ T2395] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1760.770408][ T2395] ext4 filesystem being mounted at /503/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1760.999027][T27024] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1761.927208][ T2447] loop7: detected capacity change from 0 to 128 [ 1762.187065][ T2447] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1762.332450][ T2447] ext4 filesystem being mounted at /506/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1762.570177][T27024] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1762.851485][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1762.867491][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1762.877609][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1762.888073][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1762.895860][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1762.903141][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1763.051768][ T2475] rxe_eth0 speed is unknown, defaulting to 1000 [ 1763.127388][ T2491] binder: 2490:2491 ioctl c0306201 2000000003c0 returned -14 [ 1763.836620][ T2475] chnl_net:caif_netlink_parms(): no params data found [ 1763.874260][ T2512] netlink: 'syz.1.7344': attribute type 11 has an invalid length. [ 1763.907429][ T2512] netlink: 448 bytes leftover after parsing attributes in process `syz.1.7344'. [ 1763.972706][ T51] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1763.983338][ T2475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.003946][ T2475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.013947][ T2475] bridge_slave_0: entered allmulticast mode [ 1764.026228][ T2475] bridge_slave_0: entered promiscuous mode [ 1764.034061][ T2475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.045759][ T2475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.052995][ T2475] bridge_slave_1: entered allmulticast mode [ 1764.063708][ T2475] bridge_slave_1: entered promiscuous mode [ 1764.093838][ T2475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1764.110523][ T2475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1764.152274][ T2475] team0: Port device team_slave_0 added [ 1764.162163][ T2475] team0: Port device team_slave_1 added [ 1764.188820][ T2475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1764.197898][ T2475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1764.231349][ T2475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1764.245181][ T2475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1764.256806][ T2475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1764.288040][ T2475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1764.330821][ T2475] hsr_slave_0: entered promiscuous mode [ 1764.340868][ T2475] hsr_slave_1: entered promiscuous mode [ 1764.352638][ T2475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1764.362437][ T2475] Cannot create hsr debugfs directory [ 1764.640697][ T2523] loop1: detected capacity change from 0 to 256 [ 1764.996074][ T51] Bluetooth: hci3: command tx timeout [ 1765.567283][ T2465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1765.609924][ T2475] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1765.671974][ T2475] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1765.684927][ T2528] binder: 2527:2528 ioctl c0306201 2000000003c0 returned -14 [ 1765.745563][ T2475] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1766.084333][ T2475] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1766.112116][ T2536] loop5: detected capacity change from 0 to 2048 [ 1766.290496][ T2536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1766.371828][ T2536] ext4 filesystem being mounted at /564/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1766.434740][ T2475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1766.490290][ T2553] loop7: detected capacity change from 0 to 256 [ 1766.524047][ T2475] 8021q: adding VLAN 0 to HW filter on device team0 [ 1766.576506][T25869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1766.636249][T16291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.643403][T16291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1766.654884][ T2557] loop1: detected capacity change from 0 to 256 [ 1766.762829][T16291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.770052][T16291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1767.075818][ T51] Bluetooth: hci3: command tx timeout [ 1767.143521][ T2475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1767.297996][ T2475] veth0_vlan: entered promiscuous mode [ 1767.361729][ T2475] veth1_vlan: entered promiscuous mode [ 1767.490444][ T2586] loop7: detected capacity change from 0 to 128 [ 1767.561921][ T2586] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1767.634160][ T2475] veth0_macvtap: entered promiscuous mode [ 1767.666594][ T2586] ext4 filesystem being mounted at /511/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1767.689476][ T2475] veth1_macvtap: entered promiscuous mode [ 1767.773433][ T2475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1767.813785][ T2475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1767.838697][ T2475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1767.869862][ T2475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1767.898618][ T2475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1767.907860][T27024] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1767.959634][ T2475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1768.002713][ T2475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.034376][ T2475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1768.064254][ T2475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.092267][ T2475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1768.133408][ T2475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.159695][ T2475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.182458][ T2475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.207596][ T2475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.156487][ T51] Bluetooth: hci3: command tx timeout [ 1769.983126][ T2570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1770.140081][T16281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1770.216218][T16281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1770.251720][ T2609] loop1: detected capacity change from 0 to 256 [ 1770.321749][T16281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1770.384892][T16281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.129837][ T27] audit: type=1326 audit(1792188492.834:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2638 comm="syz.7.7372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2e199e559 code=0x0 [ 1771.239260][T15788] Bluetooth: hci3: command tx timeout [ 1771.286267][ T2648] block nbd7: Device being setup by another task [ 1771.638812][ T2660] binder: BINDER_SET_CONTEXT_MGR already set [ 1771.673311][ T2660] binder: 2659:2660 ioctl 4018620d 200000000a00 returned -16 [ 1772.858565][ T51] block nbd7: Receive control failed (result -32) [ 1772.871091][ T2642] block nbd7: shutting down sockets [ 1773.193598][ T2673] syzkaller0: entered promiscuous mode [ 1773.231699][ T2673] syzkaller0: entered allmulticast mode [ 1773.259238][ T2685] loop5: detected capacity change from 0 to 256 [ 1773.739324][ T2704] binder: 2703:2704 ioctl c0306201 0 returned -14 [ 1773.774751][ T2704] binder: 2703:2704 ioctl c0306201 200000000ac0 returned -14 [ 1773.790612][ T2704] binder: 2703:2704 ioctl c0306201 200000000c80 returned -14 [ 1774.293668][ T2720] ioremap: invalid physical address 8000000000000000 [ 1774.343825][ T2720] ------------[ cut here ]------------ [ 1774.349873][ T2720] WARNING: CPU: 0 PID: 2720 at arch/x86/mm/ioremap.c:206 __ioremap_caller+0x4fb/0x620 [ 1774.360110][ T2720] Modules linked in: [ 1774.364426][ T2720] CPU: 0 PID: 2720 Comm: syz.5.7389 Not tainted syzkaller #0 [ 1774.371933][ T2720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1774.382086][ T2720] RIP: 0010:__ioremap_caller+0x4fb/0x620 [ 1774.387791][ T2720] Code: 85 02 01 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f6 d5 4a 00 48 8b 74 24 60 48 c7 c7 c0 77 c8 8a e8 b5 c8 4a 09 <0f> 0b eb 8e 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 e6 48 8b 7c [ 1774.407590][ T2720] RSP: 0018:ffffc900032a78e0 EFLAGS: 00010246 [ 1774.413695][ T2720] RAX: 0000000000000032 RBX: 1ffff92000654f00 RCX: 222d212431967a00 [ 1774.421832][ T2720] RDX: ffffc9000c909000 RSI: 000000000000730a RDI: 000000000000730b [ 1774.429902][ T2720] RBP: ffffc900032a79f0 R08: ffffc900032a75e7 R09: 1ffff92000654ebc [ 1774.438262][ T2720] R10: dffffc0000000000 R11: fffff52000654ebd R12: 0000000000020000 [ 1774.446358][ T2720] R13: 000000000000002e R14: 8000000000000fff R15: dffffc0000000000 [ 1774.454330][ T2720] FS: 00007f8a2ddce6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1774.463365][ T2720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1774.470412][ T2720] CR2: 00007f2fa6cf1a90 CR3: 00000000620a9000 CR4: 00000000003506f0 [ 1774.478654][ T2720] Call Trace: [ 1774.481956][ T2720] [ 1774.484889][ T2720] ? register_device+0x129/0x570 [ 1774.489950][ T2720] ? ioremap+0x30/0x30 [ 1774.494035][ T2720] register_device+0x129/0x570 [ 1774.498879][ T2720] phram_setup+0x3fa/0x600 [ 1774.503327][ T2720] ? phram_param_call+0x70/0x70 [ 1774.508252][ T2720] ? trace_contention_end+0x39/0xe0 [ 1774.513457][ T2720] ? param_attr_store+0xcf/0x300 [ 1774.518470][ T2720] ? mutex_lock_nested+0x20/0x20 [ 1774.523410][ T2720] ? __virt_addr_valid+0x10c/0x380 [ 1774.528565][ T2720] ? kernfs_fop_write_iter+0x1dc/0x520 [ 1774.534023][ T2720] ? read_lock_is_recursive+0x20/0x20 [ 1774.539622][ T2720] param_attr_store+0x20e/0x300 [ 1774.544474][ T2720] ? param_attr_show+0x170/0x170 [ 1774.549636][ T2720] ? sysfs_kf_read+0x360/0x360 [ 1774.554420][ T2720] module_attr_store+0x5f/0x80 [ 1774.559424][ T2720] kernfs_fop_write_iter+0x3a4/0x520 [ 1774.564716][ T2720] vfs_write+0x474/0x9a0 [ 1774.569294][ T2720] ? file_end_write+0x250/0x250 [ 1774.574190][ T2720] ? __fget_files+0x3fc/0x460 [ 1774.578982][ T2720] ? __fdget_pos+0x2a3/0x330 [ 1774.583574][ T2720] ? ksys_write+0x74/0x260 [ 1774.588060][ T2720] ksys_write+0x151/0x260 [ 1774.592395][ T2720] ? __ia32_sys_read+0x90/0x90 [ 1774.597243][ T2720] ? lockdep_hardirqs_on+0x98/0x150 [ 1774.602450][ T2720] do_syscall_64+0x55/0xb0 [ 1774.606953][ T2720] ? clear_bhb_loop+0x40/0x90 [ 1774.611653][ T2720] ? clear_bhb_loop+0x40/0x90 [ 1774.616384][ T2720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1774.622312][ T2720] RIP: 0033:0x7f8a2cf9e559 [ 1774.626796][ T2720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1774.646731][ T2720] RSP: 002b:00007f8a2ddce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1774.655153][ T2720] RAX: ffffffffffffffda RBX: 00007f8a2d225fa0 RCX: 00007f8a2cf9e559 [ 1774.663196][ T2720] RDX: 000000000000001c RSI: 00002000000006c0 RDI: 0000000000000003 [ 1774.671465][ T2720] RBP: 00007f8a2d0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1774.679663][ T2720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1774.687876][ T2720] R13: 00007f8a2d226038 R14: 00007f8a2d225fa0 R15: 00007ffd235d31b8 [ 1774.695908][ T2720] [ 1774.698938][ T2720] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1774.706205][ T2720] CPU: 0 PID: 2720 Comm: syz.5.7389 Not tainted syzkaller #0 [ 1774.713564][ T2720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1774.723612][ T2720] Call Trace: [ 1774.726880][ T2720] [ 1774.729802][ T2720] dump_stack_lvl+0x18c/0x250 [ 1774.734474][ T2720] ? show_regs_print_info+0x20/0x20 [ 1774.739662][ T2720] ? load_image+0x420/0x420 [ 1774.744166][ T2720] panic+0x2ca/0x720 [ 1774.748057][ T2720] ? bpf_jit_dump+0xd0/0xd0 [ 1774.752560][ T2720] __warn+0x2e0/0x470 [ 1774.756532][ T2720] ? __ioremap_caller+0x4fb/0x620 [ 1774.761548][ T2720] ? __ioremap_caller+0x4fb/0x620 [ 1774.766559][ T2720] report_bug+0x2be/0x4f0 [ 1774.770946][ T2720] ? __ioremap_caller+0x4fb/0x620 [ 1774.775959][ T2720] ? __ioremap_caller+0x4fb/0x620 [ 1774.780974][ T2720] ? __ioremap_caller+0x4fd/0x620 [ 1774.786024][ T2720] handle_bug+0xcf/0x120 [ 1774.790259][ T2720] exc_invalid_op+0x1a/0x50 [ 1774.794750][ T2720] asm_exc_invalid_op+0x1a/0x20 [ 1774.799588][ T2720] RIP: 0010:__ioremap_caller+0x4fb/0x620 [ 1774.805216][ T2720] Code: 85 02 01 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f6 d5 4a 00 48 8b 74 24 60 48 c7 c7 c0 77 c8 8a e8 b5 c8 4a 09 <0f> 0b eb 8e 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 e6 48 8b 7c [ 1774.824837][ T2720] RSP: 0018:ffffc900032a78e0 EFLAGS: 00010246 [ 1774.830896][ T2720] RAX: 0000000000000032 RBX: 1ffff92000654f00 RCX: 222d212431967a00 [ 1774.838946][ T2720] RDX: ffffc9000c909000 RSI: 000000000000730a RDI: 000000000000730b [ 1774.846935][ T2720] RBP: ffffc900032a79f0 R08: ffffc900032a75e7 R09: 1ffff92000654ebc [ 1774.854899][ T2720] R10: dffffc0000000000 R11: fffff52000654ebd R12: 0000000000020000 [ 1774.862862][ T2720] R13: 000000000000002e R14: 8000000000000fff R15: dffffc0000000000 [ 1774.870840][ T2720] ? register_device+0x129/0x570 [ 1774.875773][ T2720] ? ioremap+0x30/0x30 [ 1774.879842][ T2720] register_device+0x129/0x570 [ 1774.884601][ T2720] phram_setup+0x3fa/0x600 [ 1774.889007][ T2720] ? phram_param_call+0x70/0x70 [ 1774.893845][ T2720] ? trace_contention_end+0x39/0xe0 [ 1774.899042][ T2720] ? param_attr_store+0xcf/0x300 [ 1774.903992][ T2720] ? mutex_lock_nested+0x20/0x20 [ 1774.908922][ T2720] ? __virt_addr_valid+0x10c/0x380 [ 1774.914024][ T2720] ? kernfs_fop_write_iter+0x1dc/0x520 [ 1774.919474][ T2720] ? read_lock_is_recursive+0x20/0x20 [ 1774.924846][ T2720] param_attr_store+0x20e/0x300 [ 1774.929688][ T2720] ? param_attr_show+0x170/0x170 [ 1774.934705][ T2720] ? sysfs_kf_read+0x360/0x360 [ 1774.939478][ T2720] module_attr_store+0x5f/0x80 [ 1774.944241][ T2720] kernfs_fop_write_iter+0x3a4/0x520 [ 1774.949542][ T2720] vfs_write+0x474/0x9a0 [ 1774.953804][ T2720] ? file_end_write+0x250/0x250 [ 1774.958663][ T2720] ? __fget_files+0x3fc/0x460 [ 1774.963371][ T2720] ? __fdget_pos+0x2a3/0x330 [ 1774.967970][ T2720] ? ksys_write+0x74/0x260 [ 1774.972383][ T2720] ksys_write+0x151/0x260 [ 1774.976708][ T2720] ? __ia32_sys_read+0x90/0x90 [ 1774.981468][ T2720] ? lockdep_hardirqs_on+0x98/0x150 [ 1774.986679][ T2720] do_syscall_64+0x55/0xb0 [ 1774.991086][ T2720] ? clear_bhb_loop+0x40/0x90 [ 1774.995751][ T2720] ? clear_bhb_loop+0x40/0x90 [ 1775.000438][ T2720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1775.006352][ T2720] RIP: 0033:0x7f8a2cf9e559 [ 1775.010771][ T2720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.030373][ T2720] RSP: 002b:00007f8a2ddce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1775.038784][ T2720] RAX: ffffffffffffffda RBX: 00007f8a2d225fa0 RCX: 00007f8a2cf9e559 [ 1775.046745][ T2720] RDX: 000000000000001c RSI: 00002000000006c0 RDI: 0000000000000003 [ 1775.054727][ T2720] RBP: 00007f8a2d0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1775.062688][ T2720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1775.070650][ T2720] R13: 00007f8a2d226038 R14: 00007f8a2d225fa0 R15: 00007ffd235d31b8 [ 1775.078623][ T2720] [ 1775.081697][ T2720] Kernel Offset: disabled [ 1775.086143][ T2720] Rebooting in 86400 seconds..