last executing test programs: 20m14.315733612s ago: executing program 1 (id=2): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0xa}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3123, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffff9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x1, 0x2000000000, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x4, 0xffffffffffffffff, 0x2, 0x0, 0x80000000000, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x3, 0x1, 0x42, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r6}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv6_delroute={0x38, 0x19, 0x1, 0x1, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_GATEWAY={0x14, 0x5, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) 20m13.241153389s ago: executing program 1 (id=9): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)={0x20, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x20}}, 0x2004c000) mmap(&(0x7f00008d5000/0x400000)=nil, 0x400000, 0xc, 0x100010, 0xffffffffffffffff, 0xa2ce000) fcntl$lock(0xffffffffffffffff, 0x40f, &(0x7f0000000000)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x2000004) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000001100)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000002c0)={0x0, 0x0}, 0x10) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) 20m12.39883805s ago: executing program 1 (id=11): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6(0x10, 0x2, 0x2001) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b334c959b669a240d9b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x7c4}}, 0x1006) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) 19m56.569157979s ago: executing program 32 (id=11): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6(0x10, 0x2, 0x2001) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) 19m35.143137718s ago: executing program 33 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001"], 0x1f0}}, 0x0) 19m10.724554363s ago: executing program 34 (id=140): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), &(0x7f00000004c0)={0x0, 0xfb, 0x1015, 0x0, 0x56, "1200964a52a4ff9a0000000000000400", "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"}, 0x1015, 0x1) syz_clone3(&(0x7f0000000440)={0x100002000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "cfde6a", 0x1}}}, 0xd) landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) 16m32.281329923s ago: executing program 35 (id=642): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x1014c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 16m30.556637597s ago: executing program 36 (id=648): r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file2\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000400)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 16m19.185578651s ago: executing program 37 (id=677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x0) setns(0xc9, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback, 0x54}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) 16m9.774409736s ago: executing program 5 (id=700): socket$inet6(0xa, 0x6, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x40011) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r3, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x0, 0x2, 0x4}, {0x44, 0x1, 0x9, 0x808016}, {0x4, 0x9, 0x7, 0x5}, {0x6, 0x9, 0xd, 0x5}]}) 16m8.488484548s ago: executing program 5 (id=702): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103602, 0x49) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6c7e, 0xd20, 0x1000000000000000, 0x4}) 16m8.160863196s ago: executing program 5 (id=704): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 16m7.890992223s ago: executing program 5 (id=705): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000002b00)={[{@fat=@showexec}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x48a}}, {@utf8no}, {@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_winnt}, {@fat=@sys_immutable}, {@fat=@umask={'umask', 0x3d, 0x1}}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$eJzs3MFr024YwPFn7bZ2HVt7GD/4CeKDXvQStvoXFNlALChzFfUgZC7V0tiUpFYq4nbz6t8xPHpSUP+BXbx5Fy9DELzsIEbWJlvXRVenM936/cDIu/fJk7zhTcaTwN7Nm88fVMueUTYbkkirJETWZEskt90KjATbRLs9Lt3W5MLk1w+nr9+6faVQLM4vqi4Uli7mVXX6zJtHT16cfdeYvPFy+nVKNnJ3Nr/kP278t/H/5vel8OiOiKnLjtMwl21LVype1VC9ZlumZ2ml5lluQ011w3jZdur1lpq1lalM3bU8T81aS6tWSxuONtyWmvfMSk0Nw9CpjAyb5G9nlNYXF83CkQwGcZiI6nTdgpmMDJbW/8WgAADAYImr/r9f8bTiac3Zru9/Uf8npDt+QP0vMtT1/2HVfx6KrCdxvGzX/5ng+d2L+h8AAAAAAAAAAAAAAAAAAAAAgONgy/ezvu9nw234kxKRtIiEv8c9ThwN5n+4df3jXlrEftYsNUudbSdeKEtFbLFkdkzkW/t+CHTaC5eL87PalpO39mqQv9osJSUV5ody0flznXztzl+VMcl0nz8vWZmJzs9H5DdL43L+nJ8KzmyJIVl5f1ccsWWlfV/v5j+dU710tdiTP9HeDwAAAACAk8DQHfve39txQ8NlQ3rinc7d7wOSPeD7QM/79aicGo3vugEAAAAAGCbeuFRN27Zcr/X4pDfCxWz/ygFF4r6cdL87j4pI0PNqUOain0ZCRHpDY/t6ohvJP5vlzyJ7n4uZ2Kf70A0/uXOvfnrYeQL6SY/zrxIAAACAoxAW/SNxDwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCHW7ypi4f6HWYSs63TJeK4SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAw/AgAA//9crBNs") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 16m7.547479842s ago: executing program 5 (id=706): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="880000001000010429"], 0x88}, 0x1, 0x0, 0x0, 0x90}, 0x2000000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480), 0x0, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989"], 0x1000f) 16m5.64341304s ago: executing program 5 (id=711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 16m5.109587043s ago: executing program 38 (id=711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 15m45.056919754s ago: executing program 1 (id=712): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000002b00)={[{@fat=@showexec}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x48a}}, {@utf8no}, {@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_winnt}, {@fat=@sys_immutable}, {@fat=@umask={'umask', 0x3d, 0x1}}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 15m44.879182839s ago: executing program 1 (id=764): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) 15m41.972077632s ago: executing program 1 (id=774): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@nodiscard}, {@usrquota}]}, 0xfe, 0x55d, &(0x7f00000003c0)="$eJzs3U1vVFUfAPD/nba8leehJErUhWnCQgwypa0vmLjApVEiie5x0l4a0ilDOlNCK4mwkI0bQ0yMkcT4Ady7JO6Nn4JESYghjS7cjLnTOzC081LKQEfm90sunHPPHc49997/4Zw5M5kAhtZk9kch4uWI+DqJONRSNhp54eTGcev3r85lWxL1+id/JpHk+5rHJ/nf43nmpYj45cuI44Wt9VZX1xZL5XK6nOenakuXpqqraycuLJUW0oX04szs7Km3ZmfefeftrS/eu7O2vn727+8+vv3Bqa+Orn/7093DN5M4HQfzstZ2PIFrrZnJmMyvyVic3nTgdB8qGyTJbp8AOzKSx/lYZH3AoRjJox54/n0REXVgSCXiH4ZUcxzQnNt3nQfXn79Z3r33NyZAW9ufbLw3Evsac6MD68kjM6PsSkz0of6sjp//uHUz26J/70MA9HTtekScHB19pP/7f7T0fzt3chvHbK5D/wfPzu1s/PPG3jbjn8KD8U+0Gf+Mt4ndnegd/4W7faimo2z8917b8e+DRauJkTz3v8aYbyw5f6GcZn1b1k0ei7G9Wb7bes6p9Tv1TmWt479sy+pvjgXz87g7umm9a75UKz1Jm1vdux7xSo/xb9Lm/mfX4+w26ziS3nq1U1nv9j9d9R8jXmt7/x/OdZLu65NTjedhqvlUbPXXjSO/dap/t9uf3f8D3ds/kbSu11Yfv44f9v2TdiqbTPJF08d8/vcknzbSe/J9V0q12vJ0xJ7ko637Zx6+tplvHp+1/9jR9vHf7fnfHxGfbbP9N359seOhg3D/5x/r/ndI1JOORXc+/Pz7TvVvr/97s5E6lu/ZTv/X5UwfSTzJtQMAAAAAAIBBU4iIg5EUig/ShUKxuPH5jhfiQKFcqdaOn6+sXJyPxndlJ2Ks0FzpHm/5PMR0/nnYZn5mU342Ig5HxDcj+xv54lylPL/bjQcAAAAAAAAAAAAAAAAAAIABMd7h+/+Z30d2++yAp85PfsPw6hn//filJ2Ag+f8fhpf4h+El/mF4iX8YXuIfhpf4h+El/mF4iX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq7NnzmRbff3+1bksP395dWWxcvnEfFpdLC6tzBXnKsuXiguVykI5Lc5Vlnr9e+VK5dL0TKxcmaqlSW2qurp2bqmycrF27sJSaSE9l449k1YBAAAAAAAAAAAAAAAAAADAf0t1dW2xVC6nyxISO0qMDsZpSPQ5sds9EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA89G8AAAD//5EGNss=") unlinkat(0xffffffffffffff9c, 0x0, 0x200) 15m40.941066318s ago: executing program 39 (id=774): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@nodiscard}, {@usrquota}]}, 0xfe, 0x55d, &(0x7f00000003c0)="$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") unlinkat(0xffffffffffffff9c, 0x0, 0x200) 14m17.217089532s ago: executing program 0 (id=1010): syz_clone(0x3004000, &(0x7f0000000080)="1b85a38d3ade2cd4a10f9a9375bd9783f11db65660e556785b8bf0a09b68d7f63d72a047b8da1d4895964f4ce2e764eff1cf61b318ee8ce516e5bfbc598ff027d953441285210b9c77b107987947ae85d8acbc1c01b8bbbadaadb6b2215c77c350", 0x61, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x75b, &(0x7f00000017c0)="$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") ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0}) 14m15.042161156s ago: executing program 0 (id=1022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000001c0)={0x2, 0x1, 0x100, "3a8e0300d614000001000100000040004000000000000016c713b41e2a3600", 0x4745504a}) 14m11.584089252s ago: executing program 0 (id=1028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 14m9.130989294s ago: executing program 0 (id=1037): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 14m8.49774704s ago: executing program 0 (id=1040): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x110a, 0xfffff7f7fffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1040}], 0x0, 0x0, 0x0}) 14m7.195051762s ago: executing program 0 (id=1042): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84be000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_ublk_setup_io_uring(0x56ce, &(0x7f0000000000)={0x0, 0x12bf, 0x8, 0x3, 0x138}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000380)) r5 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UBLK_U_CMD_GET_PARAMS(0xffffffffffffffff, 0x80207509, &(0x7f00000007c0)={0x0, 0xffff, 0x70, &(0x7f0000000740)={0x70}}) syz_io_uring_submit$UBLK(r4, r5, 0x0, &(0x7f0000000840)=@ublk_ctrl_cmd_sqes={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x49f, 0x0, 0x0, '\x00', @start_dev_cmd={r6, 0xffff, 0x0, 0x0, r1}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r10, &(0x7f0000002600)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1) 13m51.647199201s ago: executing program 40 (id=1042): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84be000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_ublk_setup_io_uring(0x56ce, &(0x7f0000000000)={0x0, 0x12bf, 0x8, 0x3, 0x138}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000380)) r5 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UBLK_U_CMD_GET_PARAMS(0xffffffffffffffff, 0x80207509, &(0x7f00000007c0)={0x0, 0xffff, 0x70, &(0x7f0000000740)={0x70}}) syz_io_uring_submit$UBLK(r4, r5, 0x0, &(0x7f0000000840)=@ublk_ctrl_cmd_sqes={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x49f, 0x0, 0x0, '\x00', @start_dev_cmd={r6, 0xffff, 0x0, 0x0, r1}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r10, &(0x7f0000002600)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1) 13m45.31144752s ago: executing program 9 (id=1089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xdfffffffd927fc35) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@nodots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@dots}, {@nodots}, {@fat=@dos1xfloppy}, {@fat=@discard}, {@dots}, {@dots}, {@nodots}, {@fat=@usefree}, {@fat=@quiet}, {@dots}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@fat=@nocase}, {@fat=@time_offset={'time_offset', 0x3d, 0xf6}}, {@dots}]}, 0x1, 0x224, &(0x7f0000000840)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="490000007d0100000042007e0d0500000080020000000300000000000002000000000300000000800000ffffff7f0000000006006d73646f730002002b210600555c292f262901007b"], 0x49) ftruncate(0xffffffffffffffff, 0x2000009) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@oldalloc}, {@errors_remount}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) gettid() 13m40.423463272s ago: executing program 9 (id=1097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x80c4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 13m38.49158828s ago: executing program 9 (id=1098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 13m34.632149317s ago: executing program 9 (id=1104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xdfffffffd927fc35) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@nodots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@dots}, {@nodots}, {@fat=@dos1xfloppy}, {@fat=@discard}, {@dots}, {@dots}, {@nodots}, {@fat=@usefree}, {@fat=@quiet}, {@dots}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@fat=@nocase}, {@fat=@time_offset={'time_offset', 0x3d, 0xf6}}, {@dots}]}, 0x1, 0x224, &(0x7f0000000840)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="490000007d0100000042007e0d0500000080020000000300000000000002000000000300000000800000ffffff7f0000000006006d73646f730002002b210600555c292f262901007b"], 0x49) ftruncate(0xffffffffffffffff, 0x2000009) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@oldalloc}, {@errors_remount}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) gettid() 13m31.655532052s ago: executing program 9 (id=1107): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000340)={[{@uni_xlate}, {@shortname_win95}, {@utf8no}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@uni_xlateno}, {@shortname_winnt}, {@numtail}, {@fat=@dos1xfloppy}, {@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}]}, 0x83, 0x2ae, &(0x7f0000001980)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 13m29.955426934s ago: executing program 9 (id=1109): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000001c0)={0x6, &(0x7f00000003c0)=[{0x21, '\x00', @st={0x4, [{0x1, @uvalue=0x10000}, {0x2, @svalue=0x7}, {0x0, @uvalue=0x4}, {0x3, @svalue=0x2}]}, 0x1ff}, {0x3d, '\x00', @st={0x4, [{0x0, @uvalue=0x5}, {0x2, @uvalue=0x1}, {0x3, @uvalue=0x1}, {0x1, @svalue=0x800}]}, 0x7}, {0xd, '\x00', @st={0x4, [{0x1, @uvalue=0x1ff}, {0x3, @uvalue=0x3}, {0x3, @svalue=0xe4}, {0x2, @svalue=0x700000}]}, 0x3}, {0x3b, '\x00', @buffer={"09bb39512551c9b22d1d23f517eed6171353cb396517291ee6b8c4e7cb8e3b6f", 0x20}, 0x7}, {0x1f, '\x00', @st={0x4, [{0x7, @uvalue=0x6}, {0x1, @uvalue=0x2}, {0x3, @uvalue=0x7758cd1a}, {0x1, @uvalue=0x100000001}]}, 0x2}, {0x26, '\x00', @st={0x4, [{0x1, @svalue}, {0x3, @svalue=0x6}, {0x1, @uvalue=0xffffffffffffffff}, {0x0, @svalue=0x1}]}, 0x6}]}) 13m14.53207913s ago: executing program 41 (id=1109): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000001c0)={0x6, &(0x7f00000003c0)=[{0x21, '\x00', @st={0x4, [{0x1, @uvalue=0x10000}, {0x2, @svalue=0x7}, {0x0, @uvalue=0x4}, {0x3, @svalue=0x2}]}, 0x1ff}, {0x3d, '\x00', @st={0x4, [{0x0, @uvalue=0x5}, {0x2, @uvalue=0x1}, {0x3, @uvalue=0x1}, {0x1, @svalue=0x800}]}, 0x7}, {0xd, '\x00', @st={0x4, [{0x1, @uvalue=0x1ff}, {0x3, @uvalue=0x3}, {0x3, @svalue=0xe4}, {0x2, @svalue=0x700000}]}, 0x3}, {0x3b, '\x00', @buffer={"09bb39512551c9b22d1d23f517eed6171353cb396517291ee6b8c4e7cb8e3b6f", 0x20}, 0x7}, {0x1f, '\x00', @st={0x4, [{0x7, @uvalue=0x6}, {0x1, @uvalue=0x2}, {0x3, @uvalue=0x7758cd1a}, {0x1, @uvalue=0x100000001}]}, 0x2}, {0x26, '\x00', @st={0x4, [{0x1, @svalue}, {0x3, @svalue=0x6}, {0x1, @uvalue=0xffffffffffffffff}, {0x0, @svalue=0x1}]}, 0x6}]}) 12m35.672784902s ago: executing program 7 (id=1150): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d00010029bd70000000000007000000", @ANYRES32, @ANYBLOB="080012000a0002"], 0x28}}, 0x10) 12m34.347360305s ago: executing program 7 (id=1152): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 12m33.575048814s ago: executing program 7 (id=1154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xdfffffffd927fc35) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="490000007d0100000042007e0d0500000080020000000300000000000002000000000300000000800000ffffff7f0000000006006d73646f730002002b210600555c292f262901007b"], 0x49) ftruncate(0xffffffffffffffff, 0x2000009) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@oldalloc}, {@errors_remount}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) gettid() 12m32.103650381s ago: executing program 7 (id=1155): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) 12m31.285056682s ago: executing program 7 (id=1156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000480)=0x7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) 12m28.712327206s ago: executing program 7 (id=1158): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d00010029bd70000000000007000000", @ANYRES32, @ANYBLOB="080012000a0002"], 0x28}}, 0x10) 12m13.515733766s ago: executing program 42 (id=1158): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d00010029bd70000000000007000000", @ANYRES32, @ANYBLOB="080012000a0002"], 0x28}}, 0x10) 11m22.96869192s ago: executing program 8 (id=1184): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)={[{@discard}, {@dioread_lock}, {@test_dummy_encryption}]}, 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 11m21.158041136s ago: executing program 8 (id=1185): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 11m17.693635423s ago: executing program 8 (id=1186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xdfffffffd927fc35) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="490000007d0100000042007e0d0500000080020000000300000000000002000000000300000000800000ffffff7f0000000006006d73646f730002002b210600555c292f262901007b"], 0x49) ftruncate(0xffffffffffffffff, 0x2000009) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@oldalloc}, {@errors_remount}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) gettid() 11m14.719529457s ago: executing program 8 (id=1187): getpid() syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x400, &(0x7f0000000a00)={[{@uni_xlate}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_win95}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@uni_xlate}, {@fat=@discard}, {@shortname_mixed}, {@shortname_lower}]}, 0x1, 0x21a, &(0x7f0000000180)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 11m13.686361643s ago: executing program 8 (id=1188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 11m10.396788855s ago: executing program 8 (id=1189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xc0, 0x39, {0xffffffffffffffff}, {0xee01}, 0x1, 0x2}) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) recvmmsg(r7, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f00000004c0)=""/210, 0xd2}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x4}, 0x44}], 0x1, 0x20, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38) 10m53.478800958s ago: executing program 43 (id=1189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xc0, 0x39, {0xffffffffffffffff}, {0xee01}, 0x1, 0x2}) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) recvmmsg(r7, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f00000004c0)=""/210, 0xd2}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x4}, 0x44}], 0x1, 0x20, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38) 12.161253261s ago: executing program 3 (id=3108): r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="020030397f00000100"/128, 0x80) close(r0) 11.519543958s ago: executing program 3 (id=3110): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000002200)={0x0, 0x0, 0x0}, 0x0) 10.357286087s ago: executing program 3 (id=3111): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="530000000700004600f53113"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 10.24902056s ago: executing program 6 (id=3113): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x4000000000080002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x1, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 10.057763795s ago: executing program 3 (id=3115): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x35, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r2, 0x0, 0x0}, 0x20) 9.86519587s ago: executing program 3 (id=3116): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x42000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0xa4}}, 0x0) 9.692436704s ago: executing program 6 (id=3118): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000a00)={[{@i_version}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x5, 0x4c0, &(0x7f0000000bc0)="$eJzs3c1rHOcZAPBndy1ZktX6o6XYLtQGF9wPrNUHxVLbS09tD4ZSQy8tuKq0Vl2ttEK7ci3hg9zefMghJCQQcsg9f0Eu8SkmEHJO7iGH4JA4CiSBwIaZ3ZVXHysvibwbNL8fjHZm3tU877vL8zLzzsxOAJl1MfmTixiNiHcj4mRjcecbLjZeth7fnUumXNTr1z/Jpe9Llltvbf3fiYjYjIihiPjrHyP+ldsbt7q+sThbLpdWm8vF2tJKsbq+ceXW0uxCaaG0PDF9dWZmenxqcubQ2nr/uf/cv/bGnwdf/+L/jx4+/9abSbVGm2Xt7ThMjaYPxOm2dcci4vfPIlgfFJrtGe53RfhWku/vRxFxKc3/k1FIv00gC+r1ev3r+vFOxZt14MjKp/vAufxYRDTm8/mxscY+/I9jJF+uVGu/vllZW55v7CufioH8zVvl0njzWOFUDOSS5Yl0/sny5K7lqYh0H/iFwnC6PDZXKc/3tqsDdjnRzP/hZv5/XmjkP5AR+x/ydzwoAI4QQ36QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5Bd8h8y6S/XriVTvXX/+/zt9bXFyu0r86Xq4tjS2tzYXGV1ZWyhUllI79lZetr2ypXKysRvYu1OsVaq1orV9Y0bS5W15dqN9L7+G6WBnrQK6MbpCw/ez0XE5m+H0ykx2CyTq3C01eu5eNo9wqO9uRUZ6LFCvzsgoG8M/UF2OcYH9vmJ3h2GOhWsHH5dgN7I97sCQN9cPuf8H2SV8X/ILuP/kF328QHj/5A9xv8hu0Y7PP/rB23P7hqPiB9GxHuFgeOtZ30BR0H+o1xEPtn/v3zy56O7SwdzX6anCAYj4r+vXH/pzmyttjqRrP90e33t5eb6yX7UH+hWK09beQwAZNfW47tzramXcT/+Q+MihL3xjzXHJofSc5QjW7kd1yrkDunahc17EXF2v/i55vPOG2c+RrYKe+Kfab7mGptI63ssfW56b+Kfa4v/s7b457/zpwLZ8CDpf8bb82+zmX/5NKdjO/929j+jh3TtROf+L7/d/xU69H8XDthu+/ncf7/6vw87xr8XcX7f+K14Q+m2dsdP6na5uybmHv3jbz/pVFh/rbGd/eK3t6VYW1opVtc3rqS/I7dQWp6YvjozMz0+NTlTTMeoi62R6r1+d/adhwe1f+RJ/OGI6Kr9ybpfdtf++Oqnb//94gHxf3Fp/+//zAHxk4r+qsv4n01+8M9OZUn8+Q6ff/6A+Mm6qS7jV1/8k2eJA8D3SHV9Y3G2XC6tmjFjxsz2TL97JuBZe5L0/a4JAAAAAAAAAAAA0K1eXE7c7zYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwF3wQAAP//qDLSmA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x14b182, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r4 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x268cc, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000200), 0x4) r8 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r9, 0x0, 0x9, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101a, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x40, 0x7e9, 0x1401, 0x9aa5, "cb630dab3a0338057401a19241951ead1f50be109c34b204d11ab8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r9, r10], 0x2}) 8.156854253s ago: executing program 2 (id=3121): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x100000000009, 0x80000) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10\x7fust\xe3\x00\x02sgrVdn:Dd', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "a53f5d0434deca9d0418026c1f265e3df3ced185b5cd8ab88f35d292428abfb13f16b96ea93fd0551e1d4f7b"}, 0x37) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7040000000080b8785d960001810600000000000000000000000000000000000000000000000c00", "2809e8dbe101000000224ad54afac11d875397bdb7819e02177d3d458dd4992861ac00000000ae00ffff00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x0, 0x10000000]}}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f00000000c0)=[{0xa, '\x00', @buffer={"8348883a39c09225399678207147af12dc401acf382c14448a2006902c480f4e", 0x20}, 0x7}, {0x1f, '\x00', @buffer={"b8773a045d6b2a46ebee87f70000000000f3ff00", 0x20}, 0x6}, {0x12, '\x00', @buffer={"ae2ea93f39e9d72df9e1079b5b913355f933502c0a9975e73566b90754fc08ec", 0x20}, 0x6}, {0x1e, '\x00', @data=0x400, 0x8}]}) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) r5 = gettid() r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x0, 0x2, 0xe}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000040)=0x2dff) 6.531506924s ago: executing program 2 (id=3125): r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) 6.276638461s ago: executing program 2 (id=3127): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x4000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x200040a0) 6.054392716s ago: executing program 2 (id=3129): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={0x0, 0x28}}, 0x0) 4.502980955s ago: executing program 4 (id=3130): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x290, 0x168, 0x10, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x1, 0xb6, 0x0, 0x20}, 0x6000000, 0x228, 0x290, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xffffff00, 0xffffffff, 0xffffffff], @ipv4=@multicast1, [0xffffffff, 0xffff00, 0xffffff00], 0x4d2, 0x0, 0x1, 0x1, 0x0, 0x5}, {@ipv6=@loopback, [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@local, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 0x4d6, 0x3507, 0x29, 0x1, 0x4, 0x16}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1}, [0xff000000, 0x0, 0xffffffff, 0xffffffff], 0x4d5, 0x3507, 0x0, 0x0, 0x4, 0x4}, {@ipv4=@multicast1, [0xffffffff, 0x0, 0xff, 0xff], @ipv6=@loopback, [0xff000000, 0x0, 0xff000000, 0xffffffff], 0x4d5, 0x3502, 0x21, 0x1, 0x11, 0x14}], 0x1, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 4.32731188s ago: executing program 2 (id=3131): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) setresuid(0xee00, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000680)={0x200000000005, 0x8000000000200003}, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xa) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x13) 3.410664153s ago: executing program 4 (id=3132): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xb}}}, 0x24}}, 0x24040004) 3.121187071s ago: executing program 4 (id=3133): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf803, 0x5, 0x0, 0x1}, 0x14) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fadvise64(0xffffffffffffffff, 0x88, 0x0, 0x3) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x5d) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x15) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_emit_ethernet(0x3e, 0x0, 0x0) syz_open_dev$loop(0x0, 0x7, 0x10c062) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x7f000001}}, 0x1c) 2.443581438s ago: executing program 6 (id=3134): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='256', 0x3) 2.077073927s ago: executing program 4 (id=3135): r0 = openat$vimc2(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0x9, {0x1, 0x1, 0x10001, 0xe72d}}) 1.895413731s ago: executing program 4 (id=3136): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x4000000000080002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x1, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 1.811440053s ago: executing program 6 (id=3137): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x4000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x200040a0) 1.811078483s ago: executing program 3 (id=3138): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xdc}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56}}]}}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x1}}, {0x4}}]}]}, 0x5c}}, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f00000017c0)="$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") r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x80000, 0x8) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000140)='syz1\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000001100)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804, &(0x7f0000002100)={[{@iocharset={'iocharset', 0x3d, 'cp874'}}, {@rodir}, {@utf8}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@uni_xlateno}, {@rodir}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@shortname_lower}]}, 0x1, 0x281, &(0x7f0000000440)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, 0x0, 0x0) open_tree(r5, &(0x7f0000000280)='./file0\x00', 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) 1.654561348s ago: executing program 2 (id=3139): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={0x0, 0x28}}, 0x0) 1.646869088s ago: executing program 6 (id=3140): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xaf9ba000) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$peekuser(0x3, r1, 0x1) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r6, 0x9) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r7, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r5, &(0x7f0000000b40)=[{&(0x7f0000000cc0)=""/154, 0x9a}, {0x0}], 0x2) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) close(0x3) 1.593384989s ago: executing program 4 (id=3141): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x80000, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) mq_notify(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x19, 0x4, @tid=r0}) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) 0s ago: executing program 6 (id=3142): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000a00)={[{@i_version}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x5, 0x4c0, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x14b182, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r4 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x268cc, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000200), 0x4) r8 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r9, 0x0, 0x9, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101a, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x40, 0x7e9, 0x1401, 0x9aa5, "cb630dab3a0338057401a19241951ead1f50be109c34b204d11ab8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r9, r10], 0x2}) kernel console output (not intermixed with test programs): is strongly recommended to keep mac addresses unique to avoid problems! [ 831.758832][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.785517][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.818383][T11521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.896536][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.941797][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.977425][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.021626][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.053104][T11521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.134288][T11521] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.171980][T11521] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.180783][T11521] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.227237][T11521] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.393189][T10208] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 832.465600][T10208] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 832.489064][T10208] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 832.498181][T10208] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 832.509799][T10208] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 832.522054][T10208] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 832.888264][T11528] veth0_vlan: entered promiscuous mode [ 833.026196][ T3413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.076395][ T3413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.087456][T11528] veth1_vlan: entered promiscuous mode [ 833.277887][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.326161][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.371033][T11528] veth0_macvtap: entered promiscuous mode [ 833.497856][T11528] veth1_macvtap: entered promiscuous mode [ 833.757423][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.842348][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.912497][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.126917][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.137360][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.167140][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.194951][T11528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.321670][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.484550][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.633241][T10208] Bluetooth: hci0: command tx timeout [ 834.707828][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.925115][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.972337][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.026100][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.088071][T11528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.138575][T11817] chnl_net:caif_netlink_parms(): no params data found [ 835.269288][T11528] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.312713][T11528] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.358885][T11528] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.382670][T11528] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.406350][T11851] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 835.590324][T11848] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 835.612345][T11848] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 835.814857][ T3491] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.362360][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.385747][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.415101][T11817] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.431817][T11817] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.439141][T11817] bridge_slave_0: entered allmulticast mode [ 836.452887][T11817] bridge_slave_0: entered promiscuous mode [ 836.520289][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.520392][T11817] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.555338][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.570632][T11817] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.596562][T11873] loop2: detected capacity change from 0 to 512 [ 836.597782][T11817] bridge_slave_1: entered allmulticast mode [ 836.610267][T11817] bridge_slave_1: entered promiscuous mode [ 836.633411][T11873] EXT4-fs (loop2): orphan cleanup on readonly fs [ 836.639796][T11873] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 836.656958][T11873] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 836.713216][T10208] Bluetooth: hci0: command tx timeout [ 836.759749][T11873] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1198: attempt to clear invalid blocks 2 len 1 [ 836.799577][ T3491] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.829373][T11873] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1198: invalid indirect mapped block 1819239214 (level 0) [ 836.904964][T11873] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1198: invalid indirect mapped block 1819239214 (level 1) [ 836.911476][T11817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.978034][T11873] EXT4-fs (loop2): 1 truncate cleaned up [ 836.985658][T11873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 837.094392][ T3491] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.133722][T11817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.127429][T11521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.463432][ T3491] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.791794][T10208] Bluetooth: hci0: command tx timeout [ 838.798762][T11817] team0: Port device team_slave_0 added [ 838.969048][T11817] team0: Port device team_slave_1 added [ 839.177494][T11817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.218174][T11817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.342001][T11817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.390138][T11817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.411300][T11817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.437256][ C0] vkms_vblank_simulate: vblank timer overrun [ 839.469591][T11817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.572587][T11933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1205'. [ 839.943790][T11943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1206'. [ 840.725757][T11817] hsr_slave_0: entered promiscuous mode [ 840.815105][T11817] hsr_slave_1: entered promiscuous mode [ 840.875444][T10208] Bluetooth: hci0: command tx timeout [ 842.478711][T11976] netlink: 'syz.3.1215': attribute type 29 has an invalid length. [ 842.527154][T11976] netlink: 'syz.3.1215': attribute type 29 has an invalid length. [ 842.536681][T11979] netlink: 'syz.3.1215': attribute type 29 has an invalid length. [ 843.530019][T11817] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 843.585434][T11817] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 843.763800][T11817] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 843.789573][T11998] loop2: detected capacity change from 0 to 512 [ 843.822419][T11817] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 843.840442][T11998] EXT4-fs: Ignoring removed i_version option [ 843.884233][T11998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.116970][T11998] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 845.424562][T11521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.557296][T12012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1222'. [ 845.659028][ T3491] hsr_slave_0: left promiscuous mode [ 845.684257][ T3491] hsr_slave_1: left promiscuous mode [ 845.707757][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.728297][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.748013][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.769552][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.917372][ T3491] bridge_slave_1: left allmulticast mode [ 845.946616][ T3491] bridge_slave_1: left promiscuous mode [ 845.981781][ T3491] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.006107][ T3491] bridge_slave_0: left allmulticast mode [ 846.022250][ T3491] bridge_slave_0: left promiscuous mode [ 846.028826][ T3491] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.649160][ T3491] veth1_macvtap: left promiscuous mode [ 846.671615][ T3491] veth0_macvtap: left promiscuous mode [ 846.711884][ T3491] veth1_vlan: left promiscuous mode [ 846.760757][ T3491] veth0_vlan: left promiscuous mode [ 848.637851][ T3491] team0 (unregistering): Port device team_slave_1 removed [ 848.708332][ T3491] team0 (unregistering): Port device team_slave_0 removed [ 848.751011][ T3491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.800319][ T3491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.194740][ T3491] bond0 (unregistering): Released all slaves [ 850.201103][T12079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1238'. [ 850.377311][T11817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.856841][T11817] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.120063][ T3413] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.127297][ T3413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.245758][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.252953][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.416658][T11817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 851.500715][T11817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 852.631212][T12121] syzkaller0: entered promiscuous mode [ 852.671814][T12121] syzkaller0: entered allmulticast mode [ 852.892399][T12133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1250'. [ 852.904872][T11817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.976091][T12172] syzkaller0: entered promiscuous mode [ 854.981820][T12172] syzkaller0: entered allmulticast mode [ 855.346357][T11817] veth0_vlan: entered promiscuous mode [ 855.359059][T11817] veth1_vlan: entered promiscuous mode [ 855.453994][T11817] veth0_macvtap: entered promiscuous mode [ 855.495357][T11817] veth1_macvtap: entered promiscuous mode [ 855.566335][T11817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.603273][T11817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.631611][T11817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.661977][T11817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.681316][T11817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.699496][T11817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.716525][T11817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.741253][T12191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1262'. [ 855.829038][T11817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.868858][T11817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.895780][T11817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.948813][T11817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.959510][T11817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.970011][T11817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.981293][T11817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.004542][T11817] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.166417][T11817] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.295717][T11817] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.460842][T11817] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.940685][ T3428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.997344][ T3428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.340054][ T3428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.488181][ T3428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.420041][T12223] syzkaller0: entered promiscuous mode [ 858.530856][T12223] syzkaller0: entered allmulticast mode [ 859.275719][T12234] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1268'. [ 859.742292][T12236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1271'. [ 861.232407][T12254] syzkaller0: entered promiscuous mode [ 861.310119][T12260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1278'. [ 861.321756][T12254] syzkaller0: entered allmulticast mode [ 862.275663][T12271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1282'. [ 862.954163][T12285] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1281'. [ 863.050209][T12275] syzkaller0: entered promiscuous mode [ 863.063855][T12275] syzkaller0: entered allmulticast mode [ 864.183744][T12300] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1287'. [ 865.868309][T12331] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1294'. [ 867.683070][T12355] loop4: detected capacity change from 0 to 512 [ 867.747588][T12355] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1301: inode has both inline data and extents flags [ 868.209821][T12355] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1301: couldn't read orphan inode 15 (err -117) [ 868.508185][T12355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 868.797578][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1304'. [ 868.813540][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.009733][T12378] loop4: detected capacity change from 0 to 512 [ 869.037178][T12378] EXT4-fs: Ignoring removed i_version option [ 869.109966][T12378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.147488][T12381] syzkaller0: entered promiscuous mode [ 869.149595][T12378] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 869.170712][T12381] syzkaller0: entered allmulticast mode [ 870.053850][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.162236][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.168582][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.740688][T12432] syzkaller0: entered promiscuous mode [ 871.746357][T12432] syzkaller0: entered allmulticast mode [ 873.449124][T12453] loop2: detected capacity change from 0 to 512 [ 873.458088][T12453] EXT4-fs: Ignoring removed i_version option [ 873.523912][T12453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 873.571714][T12453] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 873.703642][T12463] loop4: detected capacity change from 0 to 512 [ 873.962076][T12463] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1327: inode has both inline data and extents flags [ 874.237248][T12463] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1327: couldn't read orphan inode 15 (err -117) [ 874.345267][T12463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 874.590832][T11521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.756193][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.581419][T12489] binder: BINDER_SET_CONTEXT_MGR already set [ 875.621620][T12489] binder: 12487:12489 ioctl 4018620d 200000000040 returned -16 [ 876.005083][T12503] loop4: detected capacity change from 0 to 512 [ 876.027172][T12503] EXT4-fs: Ignoring removed i_version option [ 876.076966][T12503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 876.116056][T12503] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 877.338661][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.489227][T12560] loop2: detected capacity change from 0 to 512 [ 879.570517][T12560] EXT4-fs: Ignoring removed i_version option [ 879.670299][T12560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 879.711808][T12560] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 880.252027][T11521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.303695][T12576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1357'. [ 882.696953][T12613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1366'. [ 882.893853][T12617] loop4: detected capacity change from 0 to 512 [ 882.948090][T12617] EXT4-fs: Ignoring removed i_version option [ 883.089801][T12617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.147421][T12622] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1368'. [ 883.185700][T12617] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 884.410075][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.892965][T12639] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1370'. [ 885.858175][T12659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1377'. [ 885.868426][T12660] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1378'. [ 888.025060][T12699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1389'. [ 891.286811][ T3520] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.420453][ T3520] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.584986][ T3520] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.587929][T12773] loop4: detected capacity change from 0 to 512 [ 892.616146][ T3520] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.707918][T12773] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1408: inode has both inline data and extents flags [ 892.745608][T12773] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1408: couldn't read orphan inode 15 (err -117) [ 892.840626][T12773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 893.542110][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.896877][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 893.907371][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 893.916537][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 893.936323][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 893.947313][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 893.955790][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 894.171429][T12806] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1414'. [ 894.326509][T12809] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1416'. [ 894.371704][T12809] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1416'. [ 894.393951][T12806] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1414'. [ 894.409498][T12807] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1414'. [ 894.425144][T12810] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1414'. [ 894.979244][T12824] loop4: detected capacity change from 0 to 512 [ 895.188148][T12824] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1419: inode has both inline data and extents flags [ 895.605961][T12824] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1419: couldn't read orphan inode 15 (err -117) [ 896.017539][T10208] Bluetooth: hci1: command tx timeout [ 896.039685][T12824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.329864][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.412674][T12792] chnl_net:caif_netlink_parms(): no params data found [ 896.451081][T12847] loop4: detected capacity change from 0 to 512 [ 896.483196][T12847] EXT4-fs (loop4): orphan cleanup on readonly fs [ 896.508195][T12847] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 896.531837][T12847] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 896.551434][T12847] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1422: attempt to clear invalid blocks 2 len 1 [ 896.565856][T12847] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1422: invalid indirect mapped block 1819239214 (level 0) [ 896.595297][T12847] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1422: invalid indirect mapped block 1819239214 (level 1) [ 896.615878][T12847] EXT4-fs (loop4): 1 truncate cleaned up [ 896.625009][T12847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 897.545168][T12792] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.572423][T12792] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.610161][T12792] bridge_slave_0: entered allmulticast mode [ 897.640565][T12792] bridge_slave_0: entered promiscuous mode [ 897.763959][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.899749][T12873] loop4: detected capacity change from 0 to 512 [ 897.950161][T12873] EXT4-fs: Ignoring removed i_version option [ 898.003210][T12792] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.010383][T12792] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.031781][T12792] bridge_slave_1: entered allmulticast mode [ 898.039019][T12792] bridge_slave_1: entered promiscuous mode [ 898.071972][T10208] Bluetooth: hci1: command tx timeout [ 898.111784][T12873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.183826][T12873] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 898.211712][ T3520] hsr_slave_0: left promiscuous mode [ 898.516891][ T3520] hsr_slave_1: left promiscuous mode [ 899.009915][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.017523][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.021670][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.054952][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.081609][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.196185][ T3520] bridge_slave_1: left allmulticast mode [ 899.220387][ T3520] bridge_slave_1: left promiscuous mode [ 899.254519][ T3520] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.278103][ T3520] bridge_slave_0: left allmulticast mode [ 899.283933][ T3520] bridge_slave_0: left promiscuous mode [ 899.289835][ T3520] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.325376][ T3520] veth1_macvtap: left promiscuous mode [ 899.331028][ T3520] veth0_macvtap: left promiscuous mode [ 899.342204][ T3520] veth1_vlan: left promiscuous mode [ 899.347639][ T3520] veth0_vlan: left promiscuous mode [ 900.152920][T10208] Bluetooth: hci1: command tx timeout [ 901.897401][T12944] loop6: detected capacity change from 0 to 512 [ 901.931937][T12944] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.1440: inode has both inline data and extents flags [ 901.940229][ T3520] team0 (unregistering): Port device team_slave_1 removed [ 901.950140][T12944] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.1440: couldn't read orphan inode 15 (err -117) [ 901.966957][T12944] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 902.081249][ T3520] team0 (unregistering): Port device team_slave_0 removed [ 902.109380][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.203668][ T3520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.232718][ T5783] Bluetooth: hci1: command tx timeout [ 902.444902][ T3520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.785092][ T3520] bond0 (unregistering): Released all slaves [ 902.895008][T12953] netlink: 'syz.6.1443': attribute type 10 has an invalid length. [ 902.906431][T12953] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1443'. [ 902.919082][T12953] bond0: entered promiscuous mode [ 902.925142][T12953] bond_slave_0: entered promiscuous mode [ 902.930979][T12953] bond_slave_1: entered promiscuous mode [ 902.940130][T12953] bridge0: port 3(bond0) entered blocking state [ 902.948237][T12953] bridge0: port 3(bond0) entered disabled state [ 902.957695][T12953] bond0: entered allmulticast mode [ 902.963674][T12953] bond_slave_0: entered allmulticast mode [ 902.969439][T12953] bond_slave_1: entered allmulticast mode [ 902.997422][T12953] bridge0: port 3(bond0) entered blocking state [ 903.003778][T12953] bridge0: port 3(bond0) entered forwarding state [ 903.023385][T12792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.033407][T10208] Bluetooth: hci3: command 0x0406 tx timeout [ 903.035674][T12792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.143290][T12792] team0: Port device team_slave_0 added [ 903.158544][T12792] team0: Port device team_slave_1 added [ 903.331829][T12792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.357619][T12792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.383570][ C0] vkms_vblank_simulate: vblank timer overrun [ 903.462758][T12792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.527684][T12792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.551604][T12792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.643208][T12792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.961144][T12792] hsr_slave_0: entered promiscuous mode [ 904.750039][T12792] hsr_slave_1: entered promiscuous mode [ 904.781710][T12792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 904.800423][T12792] Cannot create hsr debugfs directory [ 904.946570][T13004] (null): rxe_set_mtu: Set mtu to 4096 [ 904.989285][T13004] lo speed is unknown, defaulting to 1000 [ 905.067956][T13004] lo speed is unknown, defaulting to 1000 [ 905.090463][T13004] lo speed is unknown, defaulting to 1000 [ 905.345238][T13015] netlink: 'syz.4.1457': attribute type 29 has an invalid length. [ 905.357750][T13015] netlink: 'syz.4.1457': attribute type 29 has an invalid length. [ 905.413240][T13015] netlink: 'syz.4.1457': attribute type 29 has an invalid length. [ 905.431399][T13015] netlink: 'syz.4.1457': attribute type 29 has an invalid length. [ 905.759208][T12792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 905.929134][T12792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 905.967770][T13004] infiniband syz2: set active [ 905.992706][T13004] infiniband syz2: added lo [ 906.007632][ T5861] lo speed is unknown, defaulting to 1000 [ 906.028013][T12792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 906.046787][T13004] syz2: rxe_create_cq: returned err = -12 [ 906.123397][T12792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 906.132004][T13004] infiniband syz2: Couldn't create ib_mad CQ [ 906.138319][T13004] infiniband syz2: Couldn't open port 1 [ 906.239790][T12792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.340602][T12792] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.355135][T13004] RDS/IB: syz2: added [ 906.359975][T13004] smc: adding ib device syz2 with port count 1 [ 906.374218][T13004] smc: ib device syz2 port 1 has pnetid [ 906.394022][ T5861] lo speed is unknown, defaulting to 1000 [ 906.402327][T13004] lo speed is unknown, defaulting to 1000 [ 906.423824][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.431023][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.519941][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.527178][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.004317][T13004] lo speed is unknown, defaulting to 1000 [ 907.176675][T12792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.374459][T12792] veth0_vlan: entered promiscuous mode [ 907.419222][T12792] veth1_vlan: entered promiscuous mode [ 907.503205][T12792] veth0_macvtap: entered promiscuous mode [ 907.519764][T13004] lo speed is unknown, defaulting to 1000 [ 907.529831][T12792] veth1_macvtap: entered promiscuous mode [ 907.535840][T13068] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1467'. [ 907.571699][T13068] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1467'. [ 907.583686][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.611694][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.631736][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.651921][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.672931][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.691871][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.713122][T12792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.720962][T13068] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1467'. [ 907.732340][T13070] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1467'. [ 907.769698][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.791968][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.805461][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.822133][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.832609][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.936374][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.994370][T12792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.019287][T13004] lo speed is unknown, defaulting to 1000 [ 908.025461][T12792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.044114][T12792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.069394][T12792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.101564][T12792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.727605][T13089] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1471'. [ 908.796009][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.863871][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.059838][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.154853][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.984930][T13112] loop6: detected capacity change from 0 to 512 [ 910.009902][T13112] EXT4-fs: Ignoring removed i_version option [ 910.100448][T13112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.137157][T13112] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 911.105914][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.215573][T13151] netlink: 'syz.2.1484': attribute type 15 has an invalid length. [ 913.256104][T13151] netlink: 'syz.2.1484': attribute type 7 has an invalid length. [ 913.286684][T13151] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1484'. [ 913.305356][T13153] netlink: 'syz.3.1485': attribute type 10 has an invalid length. [ 913.365242][T13153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.393866][T13153] team0: Port device bond0 added [ 913.595496][T13163] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1488'. [ 918.879091][T13289] loop4: detected capacity change from 0 to 512 [ 918.907007][T13289] EXT4-fs: Ignoring removed i_version option [ 919.112038][T13289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 919.289502][T13289] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 919.894776][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.576402][T13309] loop4: detected capacity change from 0 to 512 [ 920.741965][T13309] EXT4-fs (loop4): orphan cleanup on readonly fs [ 920.759720][T13309] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 920.829255][T13309] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 920.923227][T13309] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1506: attempt to clear invalid blocks 2 len 1 [ 921.001339][T13309] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1506: invalid indirect mapped block 1819239214 (level 0) [ 921.040468][T13309] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1506: invalid indirect mapped block 1819239214 (level 1) [ 921.057096][T13309] EXT4-fs (loop4): 1 truncate cleaned up [ 921.065840][T13309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 922.353975][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.965940][T13330] syzkaller0: entered promiscuous mode [ 922.995697][T13330] syzkaller0: entered allmulticast mode [ 924.077304][T13363] loop2: detected capacity change from 0 to 512 [ 924.088681][T13363] EXT4-fs: Ignoring removed i_version option [ 924.181395][T13363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 924.195277][T13363] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.507698][T13372] loop4: detected capacity change from 0 to 1024 [ 924.577970][T13372] EXT4-fs: Ignoring removed oldalloc option [ 924.645917][T13372] EXT4-fs: Ignoring removed bh option [ 924.717766][T13372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 924.857248][T13372] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 925.016402][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.961118][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 928.692025][T13406] netlink: 'syz.3.1522': attribute type 17 has an invalid length. [ 928.735992][T13406] infiniband syz2: set active [ 928.765749][T13406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 928.808565][T11639] lo speed is unknown, defaulting to 1000 [ 929.138856][T13415] loop4: detected capacity change from 0 to 512 [ 929.237818][T13415] EXT4-fs: Ignoring removed i_version option [ 929.509459][T13415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.011799][T13415] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 930.622423][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.912234][T13449] loop2: detected capacity change from 0 to 1024 [ 930.977605][T13449] EXT4-fs: Ignoring removed oldalloc option [ 930.996388][T13449] EXT4-fs: Ignoring removed bh option [ 931.041063][T13449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 931.085726][T13449] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 931.597771][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.604301][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.794817][T13516] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1538'. [ 934.152597][T13427] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 934.194778][T13427] EXT4-fs (loop2): Remounting filesystem read-only [ 936.149576][T13593] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1560'. [ 936.202526][T13593] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1560'. [ 936.254583][T13597] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1560'. [ 936.449439][T13602] (null): rxe_set_mtu: Set mtu to 1024 [ 936.459626][T13602] batadv0 speed is unknown, defaulting to 1000 [ 936.479176][T13602] batadv0 speed is unknown, defaulting to 1000 [ 936.622635][T13602] batadv0 speed is unknown, defaulting to 1000 [ 936.721133][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 937.328065][T13622] loop2: detected capacity change from 0 to 512 [ 937.366823][T13602] infiniband syz0: set active [ 937.371769][T11402] batadv0 speed is unknown, defaulting to 1000 [ 937.430411][T13622] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1565: inode has both inline data and extents flags [ 937.433402][T13602] infiniband syz0: added batadv0 [ 937.633384][T13622] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1565: couldn't read orphan inode 15 (err -117) [ 937.672513][T13602] syz0: rxe_create_cq: returned err = -12 [ 937.678415][T13602] infiniband syz0: Couldn't create ib_mad CQ [ 937.689737][T13602] infiniband syz0: Couldn't open port 1 [ 937.722462][T13622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 937.742408][T13602] RDS/IB: syz0: added [ 937.761203][T13602] smc: adding ib device syz0 with port count 1 [ 937.795269][T13602] smc: ib device syz0 port 1 has pnetid [ 937.801312][T11344] batadv0 speed is unknown, defaulting to 1000 [ 937.842988][T13602] batadv0 speed is unknown, defaulting to 1000 [ 938.003062][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.130483][T13649] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1570'. [ 938.140311][T13649] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1570'. [ 938.152354][T13649] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1570'. [ 938.258952][T13602] batadv0 speed is unknown, defaulting to 1000 [ 938.729737][T13658] loop2: detected capacity change from 0 to 1024 [ 938.779047][T13658] EXT4-fs: Ignoring removed oldalloc option [ 938.801652][T10208] Bluetooth: hci5: command 0x0406 tx timeout [ 938.823129][T13658] EXT4-fs: Ignoring removed bh option [ 938.923929][T13658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 939.031712][T13658] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 939.051209][T13602] batadv0 speed is unknown, defaulting to 1000 [ 939.769906][T13602] batadv0 speed is unknown, defaulting to 1000 [ 939.923077][T13679] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1580'. [ 940.366242][T13687] loop4: detected capacity change from 0 to 512 [ 940.388300][T13687] EXT4-fs: Ignoring removed i_version option [ 940.497851][T13687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 940.543221][T13687] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 941.308771][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.841590][T13663] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 941.932179][T13663] EXT4-fs (loop2): Remounting filesystem read-only [ 943.197724][T13761] loop6: detected capacity change from 0 to 512 [ 943.236561][T13761] EXT4-fs: Ignoring removed i_version option [ 943.305764][T13761] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 943.377053][T13761] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 944.140515][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.712189][T13792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1597'. [ 945.209176][T13802] loop6: detected capacity change from 0 to 512 [ 945.224729][T13802] EXT4-fs: Ignoring removed i_version option [ 945.317149][T13802] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 945.371714][T13802] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 945.609293][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 946.134718][T13819] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1604'. [ 946.270646][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.314545][T13818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1602'. [ 947.462925][T13843] binder: BINDER_SET_CONTEXT_MGR already set [ 947.482036][T13843] binder: 13841:13843 ioctl 4018620d 200000000040 returned -16 [ 947.724742][T13850] loop6: detected capacity change from 0 to 512 [ 947.803883][T13850] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.1610: inode has both inline data and extents flags [ 947.890701][T13850] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.1610: couldn't read orphan inode 15 (err -117) [ 947.958433][T13850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 948.211444][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.435279][T13868] nbd: must specify an index to disconnect [ 949.095351][T13890] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1618'. [ 954.983537][T14010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1647'. [ 956.848042][T14049] netlink: 'syz.2.1659': attribute type 2 has an invalid length. [ 956.866738][T14049] netlink: 'syz.2.1659': attribute type 8 has an invalid length. [ 956.889527][T14049] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1659'. [ 958.038447][T14075] (null): rxe_set_mtu: Set mtu to 1024 [ 958.264286][T14082] 9pnet_fd: Insufficient options for proto=fd [ 958.488980][T14075] infiniband syz1: set active [ 958.500197][T14075] infiniband syz1: added veth0_macvtap [ 958.700961][T14075] RDS/IB: syz1: added [ 958.734175][T14075] smc: adding ib device syz1 with port count 1 [ 958.758417][T14075] smc: ib device syz1 port 1 has pnetid [ 959.036683][T14102] syzkaller0: entered promiscuous mode [ 959.046159][T14102] syzkaller0: entered allmulticast mode [ 960.656607][T14136] 9pnet_fd: Insufficient options for proto=fd [ 960.879234][T14141] loop6: detected capacity change from 0 to 512 [ 960.916905][T14141] EXT4-fs: Ignoring removed i_version option [ 961.029579][T14146] loop2: detected capacity change from 0 to 512 [ 961.063474][T14141] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 961.080700][T14146] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1682: inode has both inline data and extents flags [ 961.159971][T14141] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 961.188451][T14146] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1682: couldn't read orphan inode 15 (err -117) [ 961.252176][T14146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 961.427320][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.604704][T14165] fuse: Bad value for 'fd' [ 961.765596][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.236789][T14184] 9pnet_fd: Insufficient options for proto=fd [ 963.370637][T14216] 9pnet_fd: Insufficient options for proto=fd [ 964.422282][T14248] syzkaller0: entered promiscuous mode [ 964.448823][T14248] syzkaller0: entered allmulticast mode [ 965.885567][T14282] loop2: detected capacity change from 0 to 4096 [ 965.922267][T14282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 966.077456][T14282] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 966.646299][T14322] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1729'. [ 966.749871][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.883562][T14327] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1731'. [ 967.667685][T14354] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1740'. [ 968.409782][T14379] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1747'. [ 968.692214][T14389] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1750'. [ 969.576023][T14411] syzkaller0: entered promiscuous mode [ 969.611577][T14411] syzkaller0: entered allmulticast mode [ 969.800221][T14421] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1761'. [ 970.083162][T14432] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1763'. [ 970.274692][T14435] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1766'. [ 970.311875][T14435] unsupported nla_type 255 [ 971.003335][T14453] syzkaller0: entered promiscuous mode [ 971.070604][T14453] syzkaller0: entered allmulticast mode [ 971.148092][T14460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1767'. [ 971.580848][T14464] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1774'. [ 971.845451][T14469] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1775'. [ 972.145459][T14478] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1778'. [ 972.180028][T14478] netlink: 6116 bytes leftover after parsing attributes in process `syz.3.1778'. [ 972.225968][T14478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 972.302984][T14485] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1781'. [ 972.920788][T14505] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1788'. [ 973.534072][T14518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1792'. [ 975.950107][T14580] loop2: detected capacity change from 0 to 4096 [ 976.001139][T14580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 976.157398][T14567] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 976.993723][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.106774][T14632] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1811'. [ 979.024315][T14663] netlink: 'syz.4.1820': attribute type 10 has an invalid length. [ 979.320490][T14670] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1822'. [ 979.431160][T14672] loop4: detected capacity change from 0 to 512 [ 979.447846][T14672] EXT4-fs (loop4): orphan cleanup on readonly fs [ 979.454927][T14672] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 979.463367][T14672] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 979.478720][T14672] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1823: attempt to clear invalid blocks 2 len 1 [ 979.493101][T14672] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1823: invalid indirect mapped block 1819239214 (level 0) [ 979.507825][T14672] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1823: invalid indirect mapped block 1819239214 (level 1) [ 979.527160][T14672] EXT4-fs (loop4): 1 truncate cleaned up [ 979.534142][T14672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 980.285146][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.476017][T14704] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1832'. [ 980.533539][T14705] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1831'. [ 981.156839][T14728] loop2: detected capacity change from 0 to 512 [ 981.228534][T14728] EXT4-fs (loop2): orphan cleanup on readonly fs [ 981.260111][T14728] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 981.269288][T14728] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 981.285579][T14728] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1840: attempt to clear invalid blocks 2 len 1 [ 981.308792][T14728] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1840: invalid indirect mapped block 1819239214 (level 0) [ 981.340016][T14728] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1840: invalid indirect mapped block 1819239214 (level 1) [ 981.475956][T14728] EXT4-fs (loop2): 1 truncate cleaned up [ 981.502751][T14728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 981.552190][T14740] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1844'. [ 982.016419][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.720972][T14772] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1854'. [ 983.666455][T14803] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1864'. [ 987.343525][T14879] loop2: detected capacity change from 0 to 512 [ 987.394164][T14879] EXT4-fs: Ignoring removed i_version option [ 987.634181][T14879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.731930][T14879] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 989.692110][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.118336][T14932] loop4: detected capacity change from 0 to 4096 [ 990.189093][T14932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 990.303824][T14932] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 990.514132][T14952] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1892'. [ 990.988258][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.339930][T14973] loop4: detected capacity change from 0 to 512 [ 991.362731][T14973] EXT4-fs: Ignoring removed i_version option [ 991.400893][T14973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.449315][T14973] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 992.012182][T14987] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1901'. [ 992.411750][T14998] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1898'. [ 993.023284][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.112277][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.118623][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.924884][T15037] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1911'. [ 996.197748][T15075] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1921'. [ 998.623585][T15143] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1930'. [ 1000.523042][T15191] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1941'. [ 1001.089175][T15205] syzkaller0: entered promiscuous mode [ 1001.131068][T15205] syzkaller0: entered allmulticast mode [ 1003.100057][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1960'. [ 1003.138979][T15265] loop4: detected capacity change from 0 to 512 [ 1003.170113][T15265] EXT4-fs: Ignoring removed i_version option [ 1003.267702][T15265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.335571][T15265] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1004.088151][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.299497][T15307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1974'. [ 1004.703969][T15323] loop6: detected capacity change from 0 to 512 [ 1004.724737][T15323] EXT4-fs: Ignoring removed i_version option [ 1004.802023][T15323] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.057515][T15323] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.640719][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.774688][T15348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1988'. [ 1006.096977][T15361] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1991'. [ 1006.122458][T15361] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1991'. [ 1006.179089][T15365] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1991'. [ 1006.206600][T15361] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1991'. [ 1007.578517][T15407] loop2: detected capacity change from 0 to 512 [ 1007.602053][T15407] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2005: inode has both inline data and extents flags [ 1007.641259][T15407] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2005: couldn't read orphan inode 15 (err -117) [ 1007.777753][T15407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1007.992120][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.857962][T15430] loop4: detected capacity change from 0 to 512 [ 1008.870278][T15430] EXT4-fs: Ignoring removed i_version option [ 1008.935178][T15430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1008.980062][T15430] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1010.036932][T15446] fuse: Unknown parameter 'group_i00000000000000000000' [ 1010.170848][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.374251][T15451] loop6: detected capacity change from 0 to 512 [ 1010.449053][T15451] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.2015: inode has both inline data and extents flags [ 1010.495498][T15451] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2015: couldn't read orphan inode 15 (err -117) [ 1010.585232][T15451] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1010.779274][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.189472][T15479] loop6: detected capacity change from 0 to 512 [ 1011.233967][T15479] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1011.240358][T15479] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 1011.406866][T15479] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1011.461649][T15479] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.2017: attempt to clear invalid blocks 2 len 1 [ 1011.495844][T15479] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2017: invalid indirect mapped block 1819239214 (level 0) [ 1011.588867][T15479] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2017: invalid indirect mapped block 1819239214 (level 1) [ 1011.713491][T15479] EXT4-fs (loop6): 1 truncate cleaned up [ 1011.778246][T15479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1011.985727][T15488] loop2: detected capacity change from 0 to 4096 [ 1012.034963][T15488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1012.246556][T15488] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1012.356397][T15504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2022'. [ 1012.407172][T15504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2022'. [ 1012.429543][T15507] fuse: Unknown parameter 'group_i00000000000000000000' [ 1012.455912][T15508] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2022'. [ 1012.494968][T15504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2022'. [ 1012.726414][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.890822][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.904398][T15554] fuse: Unknown parameter 'group_id00000000000000000000' [ 1014.032260][T15556] netlink: 'syz.6.2033': attribute type 29 has an invalid length. [ 1014.040454][T15556] netlink: 'syz.6.2033': attribute type 29 has an invalid length. [ 1014.097642][T15557] netlink: 'syz.6.2033': attribute type 29 has an invalid length. [ 1014.205640][T15556] netlink: 'syz.6.2033': attribute type 29 has an invalid length. [ 1014.550596][T15569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2036'. [ 1015.187748][T15591] fuse: Unknown parameter 'group_id00000000000000000000' [ 1016.347918][T15623] netlink: 'syz.4.2048': attribute type 39 has an invalid length. [ 1016.600323][T15631] netlink: 'syz.3.2051': attribute type 20 has an invalid length. [ 1016.619710][T15631] IPv6: NLM_F_CREATE should be specified when creating new route [ 1020.254181][T15697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2064'. [ 1020.787354][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 1022.371116][T15748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2075'. [ 1023.434669][T15758] loop6: detected capacity change from 0 to 512 [ 1023.448714][T15758] EXT4-fs: Ignoring removed i_version option [ 1023.586937][T15758] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.679492][T15766] loop4: detected capacity change from 0 to 512 [ 1023.689874][T15758] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1023.730562][T15766] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1023.737253][T15766] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1023.753780][T15766] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1023.770058][T15766] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.2080: attempt to clear invalid blocks 2 len 1 [ 1023.791002][T15766] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2080: invalid indirect mapped block 1819239214 (level 0) [ 1023.831629][T15766] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2080: invalid indirect mapped block 1819239214 (level 1) [ 1023.939497][T15766] EXT4-fs (loop4): 1 truncate cleaned up [ 1023.949329][T15766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1024.976595][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.914971][T15813] tipc: Enabling of bearer rejected, failed to enable media [ 1025.950121][T15813] syzkaller0: entered promiscuous mode [ 1025.967169][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.991674][T15813] syzkaller0: entered allmulticast mode [ 1026.212229][T15820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2087'. [ 1027.498701][T15837] loop4: detected capacity change from 0 to 512 [ 1027.530503][T15837] EXT4-fs: Ignoring removed i_version option [ 1027.720925][T15837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1027.798976][T15837] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1028.777402][T15872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2100'. [ 1029.878030][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.160738][T15930] loop6: detected capacity change from 0 to 512 [ 1031.226989][T15930] EXT4-fs: Ignoring removed i_version option [ 1031.345980][T15930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.463454][T15930] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1032.350284][T15959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2118'. [ 1032.384115][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.177593][T16002] loop4: detected capacity change from 0 to 512 [ 1034.202791][T16002] EXT4-fs: Ignoring removed i_version option [ 1034.335066][T16002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1034.411814][T16013] syzkaller0: entered promiscuous mode [ 1034.417444][T16013] syzkaller0: entered allmulticast mode [ 1034.439024][T16002] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1035.348152][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.977359][T16044] tmpfs: Unknown parameter 'quo' [ 1036.882362][T16051] syzkaller0: entered promiscuous mode [ 1036.906826][T16051] syzkaller0: entered allmulticast mode [ 1037.464803][T16061] loop6: detected capacity change from 0 to 512 [ 1037.506893][T16061] EXT4-fs: Ignoring removed i_version option [ 1037.655489][T16061] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1037.671798][T16061] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.507032][T16080] loop4: detected capacity change from 0 to 512 [ 1038.559622][T16080] EXT4-fs: Ignoring removed i_version option [ 1038.628897][T16080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.688580][T16080] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.760026][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.760314][T16107] syzkaller0: entered promiscuous mode [ 1039.781553][T16107] syzkaller0: entered allmulticast mode [ 1039.945559][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.967709][T16220] loop2: detected capacity change from 0 to 512 [ 1045.007389][T16220] EXT4-fs: Ignoring removed i_version option [ 1045.040610][ T5835] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 1045.063140][ T5835] lpc_ich 0000:00:00.0: No MFD cells added [ 1045.081067][ T5835] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 1045.085828][T16220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1045.088442][ T5835] lpc_ich 0000:00:01.0: No MFD cells added [ 1045.123420][ T5835] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 1045.134212][ T5835] lpc_ich 0000:00:05.0: No MFD cells added [ 1045.142077][T16220] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.503759][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.147489][T16269] jffs2: notice: (16269) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1047.849429][T16285] loop2: detected capacity change from 0 to 512 [ 1047.905739][T16285] EXT4-fs: Ignoring removed i_version option [ 1047.996776][T16285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.060087][T16285] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1048.776946][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.806466][T16318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2203'. [ 1051.704907][T16341] loop6: detected capacity change from 0 to 512 [ 1051.755753][T16341] EXT4-fs: Ignoring removed i_version option [ 1051.956624][T16341] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.998920][T16341] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1052.956486][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.515842][T16371] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1053.525518][T16371] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1053.534732][T16371] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1053.543887][T16371] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1053.605598][T16371] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.614782][T16371] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.624023][T16371] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.633267][T16371] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.479798][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.486615][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.804144][T16391] loop4: detected capacity change from 0 to 512 [ 1054.808558][T16392] loop2: detected capacity change from 0 to 512 [ 1054.811398][T16391] EXT4-fs: Ignoring removed i_version option [ 1054.840215][T16392] EXT4-fs: Ignoring removed i_version option [ 1055.023732][T16392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.077332][T16392] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1055.112535][T16391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.158023][T16391] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1055.918279][T16406] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2221'. [ 1056.442850][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.810228][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.406198][T16501] loop2: detected capacity change from 0 to 512 [ 1062.432691][T16501] EXT4-fs: Ignoring removed i_version option [ 1062.859991][T16501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1063.196074][T16501] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1065.328187][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.851812][T16582] loop2: detected capacity change from 0 to 132 [ 1071.471163][T16657] loop2: detected capacity change from 0 to 128 [ 1071.534992][ T27] audit: type=1800 audit(1785937872.721:19): pid=16657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2275" name="bus" dev="loop2" ino=1048772 res=0 errno=0 [ 1071.645439][ T27] audit: type=1804 audit(1785937872.741:20): pid=16657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2275" name="/newroot/205/file1/bus" dev="loop2" ino=1048772 res=1 errno=0 [ 1071.703776][ T27] audit: type=1804 audit(1785937872.741:21): pid=16657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2275" name="/newroot/205/file1/bus" dev="loop2" ino=1048772 res=1 errno=0 [ 1071.887517][T16657] syz.2.2275: attempt to access beyond end of device [ 1071.887517][T16657] loop2: rw=2049, sector=225, nr_sectors = 136 limit=128 [ 1072.093902][ T1137] kworker/u4:6: attempt to access beyond end of device [ 1072.093902][ T1137] loop2: rw=1, sector=361, nr_sectors = 680 limit=128 [ 1072.389769][T16680] loop2: detected capacity change from 0 to 512 [ 1072.415511][T16680] EXT4-fs: Ignoring removed i_version option [ 1072.488120][T16680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1072.531333][T16680] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.316365][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.832675][T16746] loop2: detected capacity change from 0 to 512 [ 1075.849650][T16744] loop6: detected capacity change from 0 to 512 [ 1075.866933][T16744] EXT4-fs: Ignoring removed i_version option [ 1075.873717][T16746] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1075.890026][T16746] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1075.921772][T16746] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1075.943011][T16746] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.2293: attempt to clear invalid blocks 2 len 1 [ 1075.964060][T16746] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2293: invalid indirect mapped block 1819239214 (level 0) [ 1076.002028][T16746] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2293: invalid indirect mapped block 1819239214 (level 1) [ 1076.019523][T16744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1076.078242][T16744] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1076.106874][T16746] EXT4-fs (loop2): 1 truncate cleaned up [ 1076.126039][T16746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1077.166850][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.278691][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2297'. [ 1077.293102][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.413265][T16766] vlan2: entered promiscuous mode [ 1077.418394][T16766] macvlan0: entered promiscuous mode [ 1082.607467][T16866] loop2: detected capacity change from 0 to 512 [ 1082.625081][T16866] EXT4-fs: Ignoring removed i_version option [ 1082.705884][T16866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1082.761859][T16866] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1084.064524][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.612407][T16929] loop4: detected capacity change from 0 to 512 [ 1085.619640][T16929] EXT4-fs: Ignoring removed i_version option [ 1085.699921][T16929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1085.748948][T16929] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1086.630766][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.709320][T16950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2338'. [ 1087.188654][T16921] loop6: detected capacity change from 0 to 32768 [ 1087.366683][T16921] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1087.395259][T16975] tipc: Started in network mode [ 1087.400268][T16975] tipc: Node identity f692cea354ff, cluster identity 4711 [ 1087.407860][T16975] tipc: Enabled bearer , priority 0 [ 1087.420769][T16975] tipc: Resetting bearer [ 1087.479022][T16974] tipc: Disabling bearer [ 1087.613129][T16921] XFS (loop6): Ending clean mount [ 1087.719631][T11817] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1090.363427][T17035] fuse: Unknown parameter '0x0000000000000005' [ 1091.983163][T17061] 9pnet_fd: Insufficient options for proto=fd [ 1092.963942][T17082] fuse: Unknown parameter '0x0000000000000005' [ 1093.297168][T17092] loop6: detected capacity change from 0 to 512 [ 1093.318145][T17092] EXT4-fs: Ignoring removed i_version option [ 1093.365234][T17092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1093.546187][T17092] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1095.141292][T17132] fuse: Unknown parameter '0x0000000000000005' [ 1096.803229][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.189118][T17175] tipc: Started in network mode [ 1097.217730][T17175] tipc: Node identity ae263e93fbd9, cluster identity 4711 [ 1097.248689][T17175] tipc: Enabled bearer , priority 0 [ 1097.304757][T17177] syzkaller0: entered promiscuous mode [ 1097.328333][T17177] syzkaller0: entered allmulticast mode [ 1097.388666][T17175] tipc: Resetting bearer [ 1097.437177][T17171] tipc: Resetting bearer [ 1098.048154][T17186] loop2: detected capacity change from 0 to 512 [ 1098.073669][T17171] tipc: Disabling bearer [ 1098.089349][T17186] EXT4-fs: Ignoring removed i_version option [ 1098.255322][T17186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1098.302598][T17186] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1099.117545][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1099.463363][T17216] loop6: detected capacity change from 0 to 512 [ 1099.470581][T17216] EXT4-fs: Ignoring removed i_version option [ 1099.685766][T17216] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1099.708247][T17225] Bluetooth: ISO socket layer initialized [ 1099.951004][T17216] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1101.160688][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.620079][T17261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2420'. [ 1101.680234][T17261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2420'. [ 1101.791249][T17261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2420'. [ 1103.094531][T17285] loop4: detected capacity change from 0 to 512 [ 1103.120289][T17285] EXT4-fs: Ignoring removed i_version option [ 1103.281127][T17285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1103.350976][T17285] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1103.531920][T17300] vim2m vim2m.0: Removing vim2m [ 1103.862804][T17302] vim2m vim2m.0: Device registered as /dev/video3 [ 1104.234002][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.063096][T17314] loop2: detected capacity change from 0 to 65536 [ 1106.124369][T17359] tipc: Enabled bearer , priority 0 [ 1106.132880][T17359] syzkaller0: entered promiscuous mode [ 1106.138413][T17359] syzkaller0: entered allmulticast mode [ 1106.147133][T17357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2445'. [ 1106.159136][T17359] tipc: Resetting bearer [ 1106.179216][T17354] tipc: Resetting bearer [ 1106.181987][T17314] XFS (loop2): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 1106.256331][T17368] fuse: Unknown parameter 'fd0x0000000000000005' [ 1106.266588][T17354] tipc: Disabling bearer [ 1106.359788][T17314] XFS (loop2): Ending clean mount [ 1106.706207][T12792] XFS (loop2): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 1106.878109][T17389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2454'. [ 1107.272895][T17400] fuse: Unknown parameter 'fd0x0000000000000005' [ 1108.064028][T17406] tipc: Started in network mode [ 1108.068954][T17406] tipc: Node identity b6763da7bf49, cluster identity 4711 [ 1108.168745][T17406] tipc: Enabled bearer , priority 0 [ 1108.288009][T17404] tipc: Disabling bearer [ 1108.649728][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2465'. [ 1108.828194][T17433] loop4: detected capacity change from 0 to 512 [ 1108.922080][T17433] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1108.941547][T17433] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1108.994303][T17440] loop6: detected capacity change from 0 to 512 [ 1109.018496][T17433] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1109.045151][T17440] EXT4-fs: Ignoring removed i_version option [ 1109.111978][T17433] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.2467: attempt to clear invalid blocks 2 len 1 [ 1109.157798][T17433] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2467: invalid indirect mapped block 1819239214 (level 0) [ 1109.172619][T17433] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2467: invalid indirect mapped block 1819239214 (level 1) [ 1109.183086][T17440] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1109.923383][T17440] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1110.240691][T17433] EXT4-fs (loop4): 1 truncate cleaned up [ 1110.493546][T17433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1110.861238][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.447155][T17468] tipc: Started in network mode [ 1111.484163][T17468] tipc: Node identity b6ed76c49ac, cluster identity 4711 [ 1111.491395][T17468] tipc: Enabled bearer , priority 0 [ 1111.544232][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.629469][T17468] tipc: Resetting bearer [ 1111.771848][T17475] syzkaller0: entered promiscuous mode [ 1111.787644][T17475] syzkaller0: entered allmulticast mode [ 1111.840309][T17467] tipc: Resetting bearer [ 1111.887369][T17467] tipc: Disabling bearer [ 1113.779295][T17523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2488'. [ 1114.842055][T17560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2499'. [ 1115.923093][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2509'. [ 1115.942910][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.950670][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.634693][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2521'. [ 1118.802649][T17673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'. [ 1119.729192][T17709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2548'. [ 1121.625312][T17739] tipc: Enabled bearer , priority 0 [ 1121.649281][T17739] syzkaller0: entered promiscuous mode [ 1121.659768][T17739] syzkaller0: entered allmulticast mode [ 1121.717562][T17739] tipc: Resetting bearer [ 1121.953486][T17737] tipc: Resetting bearer [ 1122.374817][T17747] 9pnet_fd: Insufficient options for proto=fd [ 1122.447374][T17737] tipc: Disabling bearer [ 1122.497250][T17749] loop2: detected capacity change from 0 to 512 [ 1122.519063][T17749] EXT4-fs: Ignoring removed i_version option [ 1122.633010][T17749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1122.691175][T17749] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1122.743174][T17755] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1122.957076][T17751] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1123.919581][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.216715][T17804] tipc: Enabled bearer , priority 0 [ 1124.226999][T17804] syzkaller0: entered promiscuous mode [ 1124.233126][T17804] syzkaller0: entered allmulticast mode [ 1124.258982][T17804] tipc: Resetting bearer [ 1124.513055][T17802] tipc: Resetting bearer [ 1125.071141][T17802] tipc: Disabling bearer [ 1125.327623][T17825] loop2: detected capacity change from 0 to 512 [ 1125.366114][T17825] EXT4-fs: Ignoring removed i_version option [ 1125.416904][T17825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1125.467845][T17825] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1126.641194][T17856] tipc: Enabled bearer , priority 0 [ 1126.681205][T17856] syzkaller0: entered promiscuous mode [ 1126.707998][T17856] syzkaller0: entered allmulticast mode [ 1126.735399][T17856] tipc: Resetting bearer [ 1126.752920][T17855] tipc: Resetting bearer [ 1126.776085][T17855] tipc: Disabling bearer [ 1128.686236][T17867] loop4: detected capacity change from 0 to 1024 [ 1128.698168][T17867] EXT4-fs: Ignoring removed oldalloc option [ 1128.704473][T17867] EXT4-fs: Ignoring removed bh option [ 1128.956780][T17867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1128.969395][T17867] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1129.644778][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1129.884925][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.086387][T17890] loop2: detected capacity change from 0 to 512 [ 1130.115316][T17890] EXT4-fs: Ignoring removed i_version option [ 1130.185123][T17890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1130.213437][T17890] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1131.158197][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.242669][T17911] loop4: detected capacity change from 0 to 4096 [ 1131.295379][T17911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1133.611909][T17929] loop2: detected capacity change from 0 to 1024 [ 1133.622886][T17929] EXT4-fs: Ignoring removed oldalloc option [ 1133.629037][T17929] EXT4-fs: Ignoring removed bh option [ 1133.916263][T17929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1133.928867][T17929] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1134.259559][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.461961][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1134.800670][T17945] loop4: detected capacity change from 0 to 512 [ 1134.832389][T17945] EXT4-fs: Ignoring removed i_version option [ 1135.067423][T17945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1135.111626][T17945] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1137.588455][T17961] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2611'. [ 1137.598491][T17961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2611'. [ 1138.576634][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.662478][T17970] loop6: detected capacity change from 0 to 4096 [ 1138.729758][T17970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1139.473158][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.081967][T18035] loop2: detected capacity change from 0 to 512 [ 1142.145488][T18035] EXT4-fs: Ignoring removed i_version option [ 1142.297852][T18035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1142.338403][T18035] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1143.991458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1147.325129][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.202443][T18130] loop6: detected capacity change from 0 to 512 [ 1150.247623][T18130] EXT4-fs: Ignoring removed i_version option [ 1150.321212][T18130] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1150.395704][T18137] loop4: detected capacity change from 0 to 512 [ 1150.407850][T18130] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1150.441778][T18137] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1150.497242][T18137] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1150.568648][T18137] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1150.707792][T18137] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.2649: attempt to clear invalid blocks 2 len 1 [ 1150.775844][T18137] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2649: invalid indirect mapped block 1819239214 (level 0) [ 1150.783589][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.823476][T18137] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2649: invalid indirect mapped block 1819239214 (level 1) [ 1150.883164][T18137] EXT4-fs (loop4): 1 truncate cleaned up [ 1150.942713][T18137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1152.713075][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.671312][T18176] loop4: detected capacity change from 0 to 512 [ 1153.693505][T18176] EXT4-fs: Ignoring removed i_version option [ 1153.815778][T18176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1153.893791][T18176] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1154.339214][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.531055][T18227] loop4: detected capacity change from 0 to 512 [ 1156.549981][T18227] EXT4-fs: Ignoring removed i_version option [ 1156.716574][T18227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1156.812574][T18227] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1157.255400][T18246] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2674'. [ 1157.297930][T18247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2674'. [ 1157.952823][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.898401][T18288] loop2: detected capacity change from 0 to 512 [ 1160.189158][T18288] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2688: inode has both inline data and extents flags [ 1160.232237][T18288] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2688: couldn't read orphan inode 15 (err -117) [ 1160.266594][T18288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1160.730603][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.476153][T18313] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input20 [ 1163.200310][T18335] loop2: detected capacity change from 0 to 512 [ 1163.331673][T18335] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2699: inode has both inline data and extents flags [ 1163.371178][T18335] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2699: couldn't read orphan inode 15 (err -117) [ 1163.393482][T18335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1163.641258][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.180198][T18426] loop6: detected capacity change from 0 to 512 [ 1167.265673][T18426] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.2724: inode has both inline data and extents flags [ 1167.324248][T18426] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2724: couldn't read orphan inode 15 (err -117) [ 1167.379423][T18426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1167.653094][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.419389][T18453] loop6: detected capacity change from 0 to 4096 [ 1168.475310][T18453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1168.665080][T18453] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1168.802178][T18466] tipc: Enabled bearer , priority 0 [ 1169.038886][T18466] syzkaller0: entered promiscuous mode [ 1169.076557][T18466] syzkaller0: entered allmulticast mode [ 1169.376166][T18466] tipc: Resetting bearer [ 1169.765157][T18464] tipc: Resetting bearer [ 1169.829959][T18478] loop2: detected capacity change from 0 to 512 [ 1170.089339][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.097666][T18478] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2738: inode has both inline data and extents flags [ 1170.141683][T18478] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2738: couldn't read orphan inode 15 (err -117) [ 1170.173235][T18478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1170.215029][T18464] tipc: Disabling bearer [ 1170.300360][T17759] tipc: Node number set to 741177028 [ 1170.366602][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.290112][ T27] audit: type=1800 audit(1785938485.593:22): pid=18519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2750" name="attr_allow_any_host" dev="configfs" ino=49777 res=0 errno=0 [ 1172.342107][T18516] loop2: detected capacity change from 0 to 1024 [ 1172.390314][ T27] audit: type=1800 audit(1785938485.603:23): pid=18519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2750" name="device_path" dev="configfs" ino=49780 res=0 errno=0 [ 1172.477533][ T27] audit: type=1800 audit(1785938485.603:24): pid=18519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2750" name="enable" dev="configfs" ino=49781 res=0 errno=0 [ 1172.801953][T18531] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2754'. [ 1172.913844][T18532] 9pnet_virtio: no channels available for device syz [ 1173.097630][ T27] audit: type=1800 audit(1785938486.413:25): pid=18532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2749" name="file0" dev="loop2" ino=18 res=0 errno=0 [ 1174.298086][T18567] loop2: detected capacity change from 0 to 512 [ 1174.329471][T18567] EXT4-fs: Ignoring removed i_version option [ 1174.477356][T18567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1175.120573][T18567] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1175.801162][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.992699][T18590] jffs2: notice: (18590) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1176.833410][T18615] overlayfs: missing 'lowerdir' [ 1177.157418][T18619] loop4: detected capacity change from 0 to 512 [ 1177.182956][T18619] EXT4-fs: Ignoring removed i_version option [ 1177.359456][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.368869][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.388839][T18619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1177.423163][T18619] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1178.440627][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.360586][T18723] loop2: detected capacity change from 0 to 4096 [ 1187.733755][T18763] jffs2: notice: (18763) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1188.342441][T18774] loop4: detected capacity change from 0 to 512 [ 1188.360408][T18774] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1188.367206][T18774] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1188.660253][T18774] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1189.742532][T18774] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.2813: attempt to clear invalid blocks 2 len 1 [ 1189.811761][T18774] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2813: invalid indirect mapped block 1819239214 (level 0) [ 1189.872973][T18774] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2813: invalid indirect mapped block 1819239214 (level 1) [ 1189.940383][T18774] EXT4-fs (loop4): 1 truncate cleaned up [ 1189.955527][T18774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1191.604190][T18793] loop6: detected capacity change from 0 to 4096 [ 1191.655916][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.706134][T18793] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1191.858067][T18793] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1192.487949][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.969179][T18845] loop4: detected capacity change from 0 to 512 [ 1194.035761][T18845] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1194.048478][T18845] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1194.057672][T18845] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1194.075453][T18845] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.2832: attempt to clear invalid blocks 2 len 1 [ 1194.089911][T18845] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2832: invalid indirect mapped block 1819239214 (level 0) [ 1194.104896][T18845] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2832: invalid indirect mapped block 1819239214 (level 1) [ 1194.119893][T18845] EXT4-fs (loop4): 1 truncate cleaned up [ 1196.635340][T18845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1197.414861][ T27] audit: type=1800 audit(1785939278.935:26): pid=18871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2838" name="attr_allow_any_host" dev="configfs" ino=50632 res=0 errno=0 [ 1197.502082][ T27] audit: type=1800 audit(1785939278.935:27): pid=18871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2838" name="enable" dev="configfs" ino=50633 res=0 errno=0 [ 1202.674228][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.860245][T18934] overlayfs: missing 'lowerdir' [ 1204.086175][T18936] random: crng reseeded on system resumption [ 1204.773027][T18939] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1205.432173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 1208.590834][T18953] block device autoloading is deprecated and will be removed. [ 1208.670575][T18953] syz.2.2855: attempt to access beyond end of device [ 1208.670575][T18953] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1208.835815][T18953] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 1208.863373][T18953] device-mapper: ioctl: error adding target to table [ 1209.495989][T18976] overlayfs: missing 'workdir' [ 1210.194090][T18977] loop2: detected capacity change from 0 to 1024 [ 1210.206045][T18977] EXT4-fs: Ignoring removed oldalloc option [ 1210.212280][T18977] EXT4-fs: Ignoring removed bh option [ 1210.564041][T18977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1210.576869][T18977] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1211.938127][T18986] misc userio: The device must be registered before sending interrupts [ 1212.017373][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1212.065650][T18986] misc userio: The device must be registered before sending interrupts [ 1212.107010][T18986] misc userio: Invalid payload size [ 1212.113858][T18986] misc userio: Invalid payload size [ 1212.119571][T18986] misc userio: The device must be registered before sending interrupts [ 1212.135609][T18986] misc userio: The device must be registered before sending interrupts [ 1212.148271][T18986] misc userio: Invalid payload size [ 1212.153977][T18986] misc userio: The device must be registered before sending interrupts [ 1213.115584][T19021] overlayfs: missing 'workdir' [ 1213.953366][T19028] loop4: detected capacity change from 0 to 512 [ 1213.982737][T19028] EXT4-fs: Ignoring removed i_version option [ 1214.119884][T19028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1214.137467][T19028] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1215.001981][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.051627][T19040] misc userio: The device must be registered before sending interrupts [ 1215.266526][T19019] loop2: detected capacity change from 0 to 32768 [ 1215.318349][T19043] i2c i2c-0: new_device: Instantiated device isp1301 at 0x2c [ 1215.333737][T19019] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.2871 (19019) [ 1215.512271][T19019] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1215.747005][T19019] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1215.911711][T19019] BTRFS info (device loop2): using free space tree [ 1216.198968][T19019] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1216.410819][T19019] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1216.420492][T19019] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1216.430516][T19019] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1216.440862][T19019] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1216.450508][T19019] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1216.461554][T19019] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1216.470979][T19019] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1216.481307][T19019] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1216.493421][T19019] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1216.503472][T19019] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1216.514216][T19019] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1216.525766][T19019] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1216.919588][T19019] BTRFS error (device loop2): open_ctree failed: -12 [ 1216.935339][T11818] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by udevd (11818) [ 1217.110603][T19088] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1217.535209][T19093] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2883'. [ 1218.286453][T19100] misc userio: The device must be registered before sending interrupts [ 1221.024857][T19144] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2894'. [ 1221.746355][T19152] misc userio: The device must be registered before sending interrupts [ 1224.813123][T19164] loop2: detected capacity change from 0 to 32768 [ 1225.099330][T19164] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1225.162741][T19164] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1225.206326][T19164] BTRFS info (device loop2): using free space tree [ 1225.228996][T19207] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2905'. [ 1225.615803][T19164] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1226.415275][T19164] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1226.425999][T19164] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1226.453861][T19164] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1226.662320][T19164] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1226.742078][T19222] misc userio: The device must be registered before sending interrupts [ 1226.967827][T19164] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1227.018859][T19164] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1227.067258][T19222] misc userio: The device must be registered before sending interrupts [ 1227.067693][T19222] misc userio: Invalid payload size [ 1227.067772][T19222] misc userio: Invalid payload size [ 1227.067846][T19222] misc userio: The device must be registered before sending interrupts [ 1227.067914][T19222] misc userio: The device must be registered before sending interrupts [ 1227.067987][T19222] misc userio: Invalid payload size [ 1227.073064][T19164] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1227.073761][T19164] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1227.092539][T19164] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1227.093171][T19164] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1227.108043][T19164] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1227.136030][T19164] BTRFS error (device loop2): open_ctree failed: -12 [ 1227.257714][T11992] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by udevd (11992) [ 1227.611860][ T9095] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1227.817453][ T9095] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1227.838550][ T9095] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1227.870105][ T9095] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1227.881642][ T9095] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.901443][ T9095] usb 7-1: Product: syz [ 1227.914703][ T9095] usb 7-1: Manufacturer: syz [ 1227.919348][ T9095] usb 7-1: SerialNumber: syz [ 1228.312468][ T9095] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1228.545253][T19264] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2916'. [ 1228.777197][ T9095] usb 7-1: USB disconnect, device number 2 [ 1229.286184][ T9095] usblp0: removed [ 1229.332559][T19273] misc userio: The device must be registered before sending interrupts [ 1229.359418][T19273] misc userio: The device must be registered before sending interrupts [ 1229.477728][T19276] misc userio: Invalid payload size [ 1229.609049][T19273] misc userio: Invalid payload size [ 1229.709247][T19276] misc userio: The device must be registered before sending interrupts [ 1229.878138][T19273] misc userio: The device must be registered before sending interrupts [ 1231.529643][T19301] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2927'. [ 1232.469454][T19316] misc userio: The device must be registered before sending interrupts [ 1232.472059][T19315] loop4: detected capacity change from 0 to 512 [ 1232.497953][T19315] EXT4-fs: Ignoring removed i_version option [ 1232.521433][T19316] misc userio: The device must be registered before sending interrupts [ 1232.530280][T19316] misc userio: Invalid payload size [ 1232.564338][T19316] misc userio: Invalid payload size [ 1232.610880][T19315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1232.623828][T19316] misc userio: The device must be registered before sending interrupts [ 1232.665283][T19315] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1232.669132][T19316] misc userio: The device must be registered before sending interrupts [ 1233.653843][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1233.941191][T19343] loop6: detected capacity change from 0 to 512 [ 1233.979960][T19343] EXT4-fs: Ignoring removed i_version option [ 1234.050533][T19343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1234.166049][T19343] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1235.195234][T19368] misc userio: The device must be registered before sending interrupts [ 1235.204012][T19368] misc userio: The device must be registered before sending interrupts [ 1235.213310][T19368] misc userio: Invalid payload size [ 1235.236127][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.247199][T19368] misc userio: Invalid payload size [ 1235.261118][T19368] misc userio: The device must be registered before sending interrupts [ 1235.301710][T19368] misc userio: The device must be registered before sending interrupts [ 1235.518208][T19380] loop6: detected capacity change from 0 to 512 [ 1235.550774][T19380] EXT4-fs: Ignoring removed i_version option [ 1235.618401][T19380] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1235.698360][T19380] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1236.819331][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.116834][T19414] loop6: detected capacity change from 0 to 512 [ 1237.129430][T19414] EXT4-fs: Ignoring removed i_version option [ 1237.610997][T19414] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1237.717689][T19414] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1237.829386][T19422] misc userio: The device must be registered before sending interrupts [ 1237.848474][T19422] misc userio: The device must be registered before sending interrupts [ 1237.875880][T19422] misc userio: Invalid payload size [ 1237.891782][T19422] misc userio: Invalid payload size [ 1237.921779][T19422] misc userio: The device must be registered before sending interrupts [ 1237.986629][T19425] misc userio: Invalid payload size [ 1238.690685][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1238.810751][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.818544][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.956488][T10208] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1240.969268][T10208] Bluetooth: hci5: Injecting HCI hardware error event [ 1240.978778][T10208] Bluetooth: hci5: hardware error 0x00 [ 1241.035182][T19472] misc userio: The device must be registered before sending interrupts [ 1241.049425][T19472] misc userio: The device must be registered before sending interrupts [ 1241.058355][T19472] misc userio: Invalid payload size [ 1241.079709][T19472] misc userio: Invalid payload size [ 1241.085916][T19472] misc userio: The device must be registered before sending interrupts [ 1241.099782][T19472] misc userio: Invalid payload size [ 1241.136013][T19462] binfmt_misc: register: failed to install interpreter file ./file2 [ 1241.311445][T19476] 9pnet: p9_errstr2errno: server reported unknown error [ 1243.100090][T10208] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1244.983852][T19523] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1244.992931][T19523] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1246.015366][T19528] loop6: detected capacity change from 0 to 4096 [ 1246.182132][ T5759] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1246.252758][T19528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1246.511927][ T5759] usb 3-1: Using ep0 maxpacket: 8 [ 1246.686431][ T5759] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1246.732795][ T5759] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1246.785817][ T5759] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1246.842017][T19528] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1246.870731][ T5759] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1246.927149][ T5759] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1246.986437][ T5759] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1247.046075][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.508334][ T5759] usb 3-1: usb_control_msg returned -32 [ 1247.938508][ T5759] usbtmc 3-1:16.0: can't read capabilities [ 1248.021568][ T5759] usb 3-1: USB disconnect, device number 2 [ 1248.203092][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.273448][T19593] NILFS (nullb0): couldn't find nilfs on the device [ 1254.246319][T19625] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1254.255145][T19625] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1256.615742][T19641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3002'. [ 1257.497584][T19643] 9pnet: p9_errstr2errno: server reported unknown error õ1 [ 1259.001922][T19671] loop4: detected capacity change from 0 to 512 [ 1259.194776][T19671] EXT4-fs: Ignoring removed i_version option [ 1259.712927][T19671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1259.848176][T19671] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1261.025059][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.795133][T19729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3020'. [ 1264.684252][T19739] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1265.026169][T19743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'. [ 1265.046577][T19743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'. [ 1267.006072][T19761] trusted_key: encrypted_key: key user:syz not found [ 1267.098184][T19772] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3032'. [ 1267.287558][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3033'. [ 1267.679957][T19777] loop4: detected capacity change from 0 to 512 [ 1267.697955][T19770] netlink: 'syz.6.3033': attribute type 10 has an invalid length. [ 1267.881758][T19770] syz_tun: entered promiscuous mode [ 1267.888503][T19777] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1267.917762][T19777] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1268.028250][T19777] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1268.054888][T19777] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.3034: attempt to clear invalid blocks 2 len 1 [ 1268.069864][T19770] syz_tun: entered allmulticast mode [ 1268.088800][T19770] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1268.119523][T13215] bond0: (slave bond_slave_0): interface is now down [ 1268.128295][T13215] bond0: (slave bond_slave_1): interface is now down [ 1268.135657][T13215] bond0: (slave syz_tun): interface is now down [ 1268.162979][T13213] bond0: (slave bond_slave_0): interface is now down [ 1268.170857][T19770] Bluetooth: MGMT ver 1.22 [ 1268.179028][T19777] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3034: invalid indirect mapped block 1819239214 (level 0) [ 1268.195062][T13213] bond0: (slave bond_slave_1): interface is now down [ 1268.217394][T19777] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3034: invalid indirect mapped block 1819239214 (level 1) [ 1268.236809][T13213] bond0: (slave syz_tun): interface is now down [ 1268.239889][T19777] EXT4-fs (loop4): 1 truncate cleaned up [ 1268.256970][T19777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1268.290785][T13213] bond0: now running without any active interface! [ 1268.388552][ T11] bridge0: port 3(bond0) entered disabled state [ 1268.779283][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1269.276826][T19802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3040'. [ 1270.536024][T19815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3043'. [ 1272.789061][T19842] syzkaller0: entered promiscuous mode [ 1272.823903][T19842] syzkaller0: entered allmulticast mode [ 1272.839432][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.863496][T19842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.066482][T19851] loop2: detected capacity change from 0 to 512 [ 1273.082462][T19851] EXT4-fs: Ignoring removed i_version option [ 1273.385383][T19851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1273.412672][T19851] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1274.385975][T12792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.881582][T14031] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1276.127396][T14031] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1276.185766][T14031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.385560][T14031] usb 4-1: config 0 descriptor?? [ 1276.642959][T19909] loop6: detected capacity change from 0 to 512 [ 1276.644213][T14031] cp210x 4-1:0.0: cp210x converter detected [ 1276.687162][T19909] EXT4-fs: Ignoring removed i_version option [ 1276.766549][T19909] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1276.791172][T19909] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1277.151147][T14031] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1277.163149][T14031] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1277.170801][T14031] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1277.703064][T14031] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1277.792136][T14031] usb 4-1: USB disconnect, device number 2 [ 1277.873186][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1277.898931][T14031] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1277.942428][T19924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3068'. [ 1277.943695][T14031] cp210x 4-1:0.0: device disconnected [ 1277.975093][T19924] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3068'. [ 1278.865088][T19938] misc userio: The device must be registered before sending interrupts [ 1278.901594][T19938] misc userio: Invalid payload size [ 1278.907390][T19938] misc userio: Invalid payload size [ 1278.913379][T19938] misc userio: The device must be registered before sending interrupts [ 1278.922916][T19938] misc userio: Invalid payload size [ 1279.672123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1281.577543][T19968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3080'. [ 1281.626968][T19968] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3080'. [ 1285.271165][T20022] binder: 20010:20022 ioctl c0306201 0 returned -14 [ 1286.643803][T20050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3094'. [ 1286.657888][T20050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3094'. [ 1290.277843][T20057] pim6reg: entered allmulticast mode [ 1292.105806][T20118] trusted_key: encrypted_key: insufficient parameters specified [ 1292.359382][T20124] lo speed is unknown, defaulting to 1000 [ 1292.455122][T20127] loop4: detected capacity change from 0 to 512 [ 1292.495996][T20127] EXT4-fs: Ignoring removed i_version option [ 1292.569570][T20127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1292.703731][T20127] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1293.010149][T20139] loop6: detected capacity change from 0 to 512 [ 1293.398262][T20139] EXT4-fs: Ignoring removed i_version option [ 1293.687056][T20139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1293.717891][T11528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1293.861655][T20139] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1294.085063][T20124] batadv0 speed is unknown, defaulting to 1000 [ 1295.643597][T20207] trusted_key: encrypted_key: insufficient parameters specified [ 1297.998060][T20243] No such timeout policy "syz1" [ 1299.406767][T20257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.417206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.432393][T20257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.441032][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.453876][T20257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.463802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.476933][T20257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.487014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.803375][T11817] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.853746][T20252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.863074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.242360][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.248711][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.898184][T20288] binder: 20275:20288 ioctl c0306201 0 returned -14 [ 1302.112890][T20291] ================================================================== [ 1302.112907][T20291] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1bac/0x25d0 [ 1302.113020][T20291] Write of size 4 at addr ffffc90003d09fc0 by task syz.4.3141/20291 [ 1302.113038][T20291] [ 1302.113044][T20291] CPU: 1 PID: 20291 Comm: syz.4.3141 Not tainted syzkaller #0 [ 1302.113063][T20291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1302.113075][T20291] Call Trace: [ 1302.113083][T20291] [ 1302.113091][T20291] dump_stack_lvl+0x18c/0x250 [ 1302.113154][T20291] ? sys_imageblit+0x1bac/0x25d0 [ 1302.113182][T20291] ? show_regs_print_info+0x20/0x20 [ 1302.113202][T20291] ? load_image+0x420/0x420 [ 1302.113247][T20291] print_report+0xa8/0x210 [ 1302.113265][T20291] ? sys_imageblit+0x1bac/0x25d0 [ 1302.113290][T20291] kasan_report+0x117/0x150 [ 1302.113335][T20291] ? sys_imageblit+0x1bac/0x25d0 [ 1302.113364][T20291] sys_imageblit+0x1bac/0x25d0 [ 1302.113397][T20291] ? sys_copyarea+0x2530/0x2530 [ 1302.113428][T20291] ? __sanitizer_cov_trace_pc+0x49/0x60 [ 1302.113474][T20291] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 1302.113512][T20291] cw_putcs+0x15f3/0x18a0 [ 1302.113552][T20291] ? cw_clear+0x250/0x250 [ 1302.113578][T20291] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 1302.113601][T20291] ? fb_get_color_depth+0x162/0x280 [ 1302.113623][T20291] fbcon_putcs+0x35c/0x520 [ 1302.113647][T20291] ? cw_clear+0x250/0x250 [ 1302.113671][T20291] do_update_region+0x4e9/0x640 [ 1302.113697][T20291] ? __asan_memcpy+0x40/0x70 [ 1302.113725][T20291] ? hide_cursor+0x320/0x320 [ 1302.113750][T20291] redraw_screen+0xa30/0x1000 [ 1302.113770][T20291] ? _raw_spin_unlock+0x40/0x40 [ 1302.113878][T20291] ? clear_buffer_attributes+0x320/0x320 [ 1302.113902][T20291] ? tty_do_resize+0xe1/0x120 [ 1302.113925][T20291] vc_do_resize+0x1256/0x17f0 [ 1302.113958][T20291] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1302.113984][T20291] ? vc_resize+0x50/0x50 [ 1302.114010][T20291] vt_resizex+0x3f0/0x5a0 [ 1302.114037][T20291] ? vt_disallocate+0x90/0x90 [ 1302.114061][T20291] ? security_capable+0x89/0xb0 [ 1302.114104][T20291] vt_ioctl+0x1254/0x1f00 [ 1302.114130][T20291] ? __vt_event_wait+0x260/0x260 [ 1302.114159][T20291] ? __fget_files+0x28/0x460 [ 1302.114190][T20291] ? tty_jobctrl_ioctl+0x378/0xba0 [ 1302.114212][T20291] tty_ioctl+0x91e/0xdc0 [ 1302.114233][T20291] ? tty_get_icount+0xb0/0xb0 [ 1302.114254][T20291] __se_sys_ioctl+0xfd/0x170 [ 1302.114278][T20291] do_syscall_64+0x55/0xb0 [ 1302.114297][T20291] ? clear_bhb_loop+0x40/0x90 [ 1302.114379][T20291] ? clear_bhb_loop+0x40/0x90 [ 1302.114400][T20291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1302.114421][T20291] RIP: 0033:0x7f224c59e019 [ 1302.114438][T20291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1302.114455][T20291] RSP: 002b:00007f224d3d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1302.114476][T20291] RAX: ffffffffffffffda RBX: 00007f224c826270 RCX: 00007f224c59e019 [ 1302.114490][T20291] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 0000000000000006 [ 1302.114503][T20291] RBP: 00007f224c63500c R08: 0000000000000000 R09: 0000000000000000 [ 1302.114514][T20291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1302.114526][T20291] R13: 00007f224c826308 R14: 00007f224c826270 R15: 00007ffc931eecd8 [ 1302.114548][T20291] [ 1302.114555][T20291] [ 1302.114559][T20291] The buggy address belongs to a vmalloc virtual mapping [ 1302.114573][T20291] Memory state around the buggy address: [ 1302.114583][T20291] ffffc90003d09e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1302.114595][T20291] ffffc90003d09f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1302.114606][T20291] >ffffc90003d09f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1302.114615][T20291] ^ [ 1302.114626][T20291] ffffc90003d0a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1302.114638][T20291] ffffc90003d0a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1302.114647][T20291] ================================================================== [ 1302.114688][T20291] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1302.114697][T20291] CPU: 1 PID: 20291 Comm: syz.4.3141 Not tainted syzkaller #0 [ 1302.114715][T20291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1302.114725][T20291] Call Trace: [ 1302.114731][T20291] [ 1302.114737][T20291] dump_stack_lvl+0x18c/0x250 [ 1302.114760][T20291] ? show_regs_print_info+0x20/0x20 [ 1302.114779][T20291] ? load_image+0x420/0x420 [ 1302.114816][T20291] panic+0x2ca/0x720 [ 1302.114843][T20291] ? bpf_jit_dump+0xd0/0xd0 [ 1302.114867][T20291] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1302.114894][T20291] ? _raw_spin_unlock+0x40/0x40 [ 1302.114918][T20291] ? print_memory_metadata+0x314/0x400 [ 1302.114938][T20291] ? sys_imageblit+0x1bac/0x25d0 [ 1302.114963][T20291] check_panic_on_warn+0x84/0xa0 [ 1302.115002][T20291] ? sys_imageblit+0x1bac/0x25d0 [ 1302.115027][T20291] end_report+0x6f/0x130 [ 1302.115049][T20291] kasan_report+0x128/0x150 [ 1302.115071][T20291] ? sys_imageblit+0x1bac/0x25d0 [ 1302.115101][T20291] sys_imageblit+0x1bac/0x25d0 [ 1302.115133][T20291] ? sys_copyarea+0x2530/0x2530 [ 1302.115161][T20291] ? __sanitizer_cov_trace_pc+0x49/0x60 [ 1302.115186][T20291] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 1302.115210][T20291] cw_putcs+0x15f3/0x18a0 [ 1302.115249][T20291] ? cw_clear+0x250/0x250 [ 1302.115275][T20291] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 1302.115297][T20291] ? fb_get_color_depth+0x162/0x280 [ 1302.115318][T20291] fbcon_putcs+0x35c/0x520 [ 1302.115341][T20291] ? cw_clear+0x250/0x250 [ 1302.115365][T20291] do_update_region+0x4e9/0x640 [ 1302.115385][T20291] ? __asan_memcpy+0x40/0x70 [ 1302.115413][T20291] ? hide_cursor+0x320/0x320 [ 1302.115436][T20291] redraw_screen+0xa30/0x1000 [ 1302.115455][T20291] ? _raw_spin_unlock+0x40/0x40 [ 1302.115483][T20291] ? clear_buffer_attributes+0x320/0x320 [ 1302.115505][T20291] ? tty_do_resize+0xe1/0x120 [ 1302.115527][T20291] vc_do_resize+0x1256/0x17f0 [ 1302.115558][T20291] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1302.115588][T20291] ? vc_resize+0x50/0x50 [ 1302.115614][T20291] vt_resizex+0x3f0/0x5a0 [ 1302.115640][T20291] ? vt_disallocate+0x90/0x90 [ 1302.115665][T20291] ? security_capable+0x89/0xb0 [ 1302.115688][T20291] vt_ioctl+0x1254/0x1f00 [ 1302.115714][T20291] ? __vt_event_wait+0x260/0x260 [ 1302.115742][T20291] ? __fget_files+0x28/0x460 [ 1302.115768][T20291] ? tty_jobctrl_ioctl+0x378/0xba0 [ 1302.115790][T20291] tty_ioctl+0x91e/0xdc0 [ 1302.115817][T20291] ? tty_get_icount+0xb0/0xb0 [ 1302.115838][T20291] __se_sys_ioctl+0xfd/0x170 [ 1302.115862][T20291] do_syscall_64+0x55/0xb0 [ 1302.115880][T20291] ? clear_bhb_loop+0x40/0x90 [ 1302.115901][T20291] ? clear_bhb_loop+0x40/0x90 [ 1302.115920][T20291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1302.115939][T20291] RIP: 0033:0x7f224c59e019 [ 1302.115953][T20291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1302.115968][T20291] RSP: 002b:00007f224d3d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1302.115987][T20291] RAX: ffffffffffffffda RBX: 00007f224c826270 RCX: 00007f224c59e019 [ 1302.116001][T20291] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 0000000000000006 [ 1302.116012][T20291] RBP: 00007f224c63500c R08: 0000000000000000 R09: 0000000000000000 [ 1302.116024][T20291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1302.116035][T20291] R13: 00007f224c826308 R14: 00007f224c826270 R15: 00007ffc931eecd8 [ 1302.116055][T20291] [ 1302.116179][T20291] Kernel Offset: disabled