last executing test programs: 2m53.669489801s ago: executing program 0 (id=5904): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$unix(r0, 0x0, 0x0, 0x4008890) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x10, &(0x7f0000000180)={0x0, 0xe}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 2m47.615629674s ago: executing program 0 (id=5926): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) listen(r1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(r1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x8, 0x700, 0x8001, 0x5, {{0x32, 0x4, 0x0, 0x3a, 0xc8, 0x64, 0x0, 0x3, 0x2, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x44, 0x75, 0x1, 0x7, [{@empty, 0xe}, {@broadcast, 0x5b}, {@private=0xa010101, 0x5}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xfffffffe}, {@multicast1, 0xa00}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @end, @rr={0x7, 0x13, 0xe4, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}, @generic={0x86, 0x3, 'v'}, @timestamp_addr={0x44, 0x3c, 0x8b, 0x1, 0xc, [{@multicast2, 0x1}, {@multicast1, 0x4}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x3}, {@broadcast, 0x5}, {@broadcast, 0x149fea77}]}, @ssrr={0x89, 0x17, 0x5b, [@private=0xa010102, @multicast1, @remote, @multicast2, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x5, 0x4, 0x9, 0x59, 0x1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x6, 0xbc, &(0x7f0000000480)=""/188, 0x41000, 0x46, '\x00', r4, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xb, 0xdd, 0x9}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[r2, r0, r2, r2, r2, r2, r2], 0x0, 0x10, 0x48}, 0x94) ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x800000, 0x0, 0xffffffff}, 0x20, 0x0, 0x7, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x0, {0x200}}}}]}, 0x78}}, 0x4080) 2m45.862469597s ago: executing program 0 (id=5931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r1, 0x6, 0x22, 0x0, &(0x7f0000000140)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) 2m44.775465685s ago: executing program 0 (id=5935): io_setup(0x3ff, 0x0) syz_mount_image$udf(&(0x7f0000001000), &(0x7f0000001040)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="005190ee291f6d8f56a3f13e29ffde000026a8e453b68805b475693f96aa95cbd8c2c8c252ea5f5e06f2fc70d1665986feca7b04ec15a173cc7cd79f293406ec4c3f4be0afca2575b5ed1c3d9f713b9a076ce935a0f5663e5cb782e12c749d577411973289113755e22980bedacddb7881170909b6bf00cc920616988e3d63ab848d"], 0x1, 0xffb, &(0x7f00000010c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200080c0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) finit_module(r0, &(0x7f0000000100)='\\${\x00', 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x2}, 0x6) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ppoll(0x0, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f00000004c0)={[0x7]}, 0x8) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@userptr={0x7fff, 0x9, 0x4, 0x10, 0x0, {0x0, 0x2710}, {0x2, 0x2, 0xe, 0x40, 0x7, 0x0, "afef9415"}, 0x4, 0x2, {&(0x7f00000000c0)}, 0x5}) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) 2m43.020255398s ago: executing program 0 (id=5938): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 2m41.88339249s ago: executing program 0 (id=5942): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0xfffffffd, {{0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}}}, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) r1 = gettid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) dup(0xffffffffffffffff) sync() r3 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETGROUP(r6, 0x400454ce, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 2m35.075614895s ago: executing program 3 (id=5957): io_setup(0x3ff, 0x0) syz_mount_image$udf(&(0x7f0000001000), &(0x7f0000001040)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="005190ee291f6d8f56a3f13e29ffde000026a8e453b68805b475693f96aa95cbd8c2c8c252ea5f5e06f2fc70d1665986feca7b04ec15a173cc7cd79f293406ec4c3f4be0afca2575b5ed1c3d9f713b9a076ce935a0f5663e5cb782e12c749d577411973289113755e22980bedacddb7881170909b6bf00cc920616988e3d63ab848d"], 0x1, 0xffb, &(0x7f00000010c0)="$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") r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200080c0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000100)='\\${\x00', 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x2}, 0x6) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ppoll(0x0, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f00000004c0)={[0x7]}, 0x8) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@userptr={0x7fff, 0x9, 0x4, 0x10, 0x0, {0x0, 0x2710}, {0x2, 0x2, 0xe, 0x40, 0x7, 0x0, "afef9415"}, 0x4, 0x2, {&(0x7f00000000c0)}, 0x5}) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) 2m33.723897505s ago: executing program 3 (id=5962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) listen(0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x100404c, &(0x7f00000001c0)=ANY=[], 0x3, 0x1cc, &(0x7f0000000580)="$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") 2m32.5532023s ago: executing program 3 (id=5964): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000040)='./file1/file3\x00', 0x180) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file3\x00', 0x0) 2m30.46525318s ago: executing program 3 (id=5967): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000) 2m29.335899742s ago: executing program 3 (id=5971): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, 0x0, 0xa400, 0x0) r1 = syz_io_uring_setup(0x10d1, &(0x7f0000000480)={0x0, 0x4a44, 0x0, 0x800, 0x34f}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) 2m27.647365569s ago: executing program 3 (id=5975): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000040)='./file1/file3\x00', 0x180) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file3\x00', 0x0) 2m26.746908113s ago: executing program 32 (id=5975): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000040)='./file1/file3\x00', 0x180) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file3\x00', 0x0) 2m25.585433248s ago: executing program 33 (id=5942): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0xfffffffd, {{0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}}}, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) r1 = gettid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) dup(0xffffffffffffffff) sync() r3 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETGROUP(r6, 0x400454ce, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 1m4.018346488s ago: executing program 1 (id=6204): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) listen(0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x100404c, &(0x7f00000001c0)=ANY=[], 0x3, 0x1cc, &(0x7f0000000580)="$eJzslb/r00AYxp+7pCkVhK+rCAoWrINpkqoIIvidOrgI/sJFDDYt1dRKmqEtCHV08m/wTxB3cXB1EwQnLQgujoLbyV2u5kjsD6RFiu9nuD557+F47037FARB/LfMv/z4/PT512McmNVQRzUrf/pm5R5u+JNX1xon3rf9N/feXf74uv2heN4pAEKYFfZTKIpO+7d6e2gh1brorOvPm+Coo6b0LXCc1fU7YHC1vg+O21pHYLir9cNMM2CGofS7brcfR+6DYdyRwpOLL5dALq1il9+fMXSM/pixP5pMH4VxHCVl4SzfWi5wUN4qTq7U3yHHFUDoVybM97WYjafml+GDw9e6BYYbWl9CVc+Gl+5/3M7vb212/7Vijo3NFfnVW+V58fdtrBM2QoadnLypECwZsS0MfM/EUbOCWSaqyD18H6dRWSRUItd/38+uRJ4f4iXDGSM/bSM/mungydXRZHquPwh7US96HASti955z7sQNLt2HHlNldAr8q+m8umIcX5liddhDsZhmib+OEwXvyf5HKhq8KfEdVT+cTROZ89M10zUUQdM/vWhYelngiAIgiAIgiAIgiAIgiCIrXMSDGI9wXXl/hUAAP//kGVqsw==") 1m1.226573005s ago: executing program 1 (id=6209): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x8, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1/file3\x00', 0x180) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file3\x00', 0x0) 57.895067057s ago: executing program 1 (id=6212): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) listen(r1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(r1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', 0x0}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x5, 0x4, 0x9, 0x59, 0x1}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x6, 0xbc, &(0x7f0000000480)=""/188, 0x41000, 0x46, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xb, 0xdd, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[r2, r0, r2, r2, r2, r2, r2], 0x0, 0x10, 0x48}, 0x94) ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x800000, 0x0, 0xffffffff}, 0x20, 0x0, 0x7, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x0, {0x200}}}}]}, 0x78}}, 0x4080) 55.007486421s ago: executing program 1 (id=6214): write$cgroup_int(0xffffffffffffffff, &(0x7f0000001280)=0x200006, 0x12) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xf7}, 0x8) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000ac0)={0x0, "12f7f538cc9ad9f769d66b3d1dd9cd911e9a080bd3ae2ae3ea00"}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000040)={0x200000000000000, 0x0, 0x9, 0x0, 0x16}) 53.952543737s ago: executing program 1 (id=6218): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a00110001", 0x13) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={r6, 0x4, 0x0, 0x80000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r5, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 51.728681198s ago: executing program 1 (id=6224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) 35.189765325s ago: executing program 34 (id=6224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) 12.762872861s ago: executing program 6 (id=6321): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a00110001", 0x13) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r5, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 11.125814914s ago: executing program 6 (id=6327): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) 10.263083094s ago: executing program 6 (id=6328): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0xb, 0x5, {0x5, 0xc, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) 7.652458827s ago: executing program 2 (id=6335): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a00110001", 0x13) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r5, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 7.48854104s ago: executing program 4 (id=6337): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40000000, 0x0, 0x0, 0x5, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xd) 6.383742831s ago: executing program 2 (id=6338): io_setup(0x3ff, 0x0) syz_mount_image$udf(&(0x7f0000001000), &(0x7f0000001040)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="005190ee291f6d8f56a3f13e29ffde000026a8e453b68805b475693f96aa95cbd8c2c8c252ea5f5e06f2fc70d1665986feca7b04ec15a173cc7cd79f293406ec4c3f4be0afca2575b5ed1c3d9f713b9a076ce935a0f5663e5cb782e12c749d577411973289113755e22980bedacddb7881170909b6bf00cc920616988e3d63ab848d"], 0x1, 0xffb, &(0x7f00000010c0)="$eJzs3U1sHOd5B/DnHS5FUg7qtR0rTpUW67SpZcVxKUqKWcsopIglEFSwCVPMoUANr8SVsjBFLkiqkYN+qD3kkF7oS4v01AJJE+REoEAPQQ++FbkUPOTUk9PYhoHCxR4stEUBsZjdd8WlJJuCKX5I/v0A8T+cfd7ZmRWe3dnFvpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+8QdnRo+lvd4LAGA3vTz96uiY138A+Ew57/0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABbS1HETyLFazfa6fXO713D55rzV6/NTEzefdhI6owc6NSX/4aPjR0/cfLrL4z38pPH329fjFemz5+pnV240lpsLC01Zmsz882LC7ONe97Cdsff7mjnAahdeePq7KVLS7Wx549vuvla9f2hRw5VT40ffnaiVzszMTk53VdTGfzU936HdP82xUPkQBTxv5Hih8UHqR4RRWy/F7Z47thpI1Ep+69zEDMTk50DmWvW55fLG6d6jVCJqPYNOt3rkV3oxW05HXG9/H8qd/hoeXjTrfpi/cJcozZVX1xuLjcX5qdSd2/L46lFEeMpohUR7aG93nn2m8Eo4peR4sMftNOFiBjo9cFXX55+dXRs6w1UdmEnP+Zuq4MRa8UD0LOwTw1FEa9FisdWR+Ni7qtO27wb8UyZz0VcLfPtFCtlvhSRyieIIxE3vJ7AA60SRfx1pPjoVDvN9nq/c1557lu1b85fWuir7Z1XPvDvD3aTcxP2seEoot4542+nT/9hFwAAAAAAAAAAAACwO4p4K1I8/YsjqRX9c0qb85dr5+sX5rrfCu5997+WR62vr69XUzdHc07lbOVcybmacy1nO2e1yONzTuVs5VzJuZpzLWc7Z3Ugj885lbOVcyXnas61nO2c1Uoen3MqZyvnSs7VnGs523s05xEAAAAAAAAAAAAAAAAAAICH10gU8beR4sf/9Sed60pH57r0j54aP/Ubn+u/ZvxTW2ynrH0+In5W3Ns1eQ/ka41PpamUih04MGBLw1HEn+Xr//3lXu8MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwLxRRxAuR4js/b6dIEXE64vXo5jtDe713AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAvRhORdyIFH/zh8Od39eKiD+KiJvrN9cj/mf95vr9ttdHDAAAAAAAAAAAAAAAAAAAAPtQKuJfI8WPD7dTNSKuVd8feuRQ9dT44WcnBmIgUlnSX//K9PkztbMLV1qLjaWlxmxtZr55cWG2ca93N3yuOX/12szE5I4czJZGdnj/R4bPLrTeXGxe/vbyXW8/OHzmwtLyYv3i3W+OkahE1PrXHO3s8MzEZGen55r1+c7QqXSvewwAAAAAAAAAAAAAAAAAAMCDYDAV8XeR4q3xn9yad17pzvmv3F77o5ciirw8keef35qG3vm7Ab/W+bsB3eVHT42/+Jtf7l++65T1o50J9bWZicnJ6b7VlcE7S4fz/Y5u75CBrOz/1yPFGz+tpafzus39P3Cr9kd/utHv12/f0Mf0/Hb7/7G+deV9plTEk5Hi8L88FU939vNg3PE3M3LdX0WKb9z8Uq6LA2Xdl/Ptj3d+Dl9qzjVGy9p/jhSPNjbXfiXXPrFRe+yeH1h4AJT9/0+R4tXvrd7qjdz/uQM3ura//389Pzv0zgd2qv8f71tXzff7W/fn0OEzb+nN775Rn5trLFqwYMHCrYW9fmYCdlp5/v9vkeL65L/fer+bz/8/1/1t4/3/f//5xvn/i7dvaIfO/5/oW/difjcyWIkYXr7SGjwUMbz05ne/1rxSv9y43Jg/OX7i5PjvnXhhfPBA7739xtK2Hyp46JT9/4+R4uz3fxq/k9dtfv9/98//Dt6+oR3q/8/3rTu46f3Ktg8dPvPK/l+LFH9Rfzueyes+6fO/3ud9R/KHcCO9G3eo/5/sW1fLP470rTsyEOFDeQAAAAAAAAAAPqtSKuK383za0S3m034lUnzv95/LdelQWXc6317t/Bx+eWH+a2fm5hYu1pfrF+YatelW/WKjHPtspPjPD7+Uxxad+bW9+cbdOb4bc3GfjBRvHe/Vdufi9r6b+PmN2mNl7c8ixYmTm2t732N6cqN2rKz9v0jx/drdaw9t1B4va38VKVZu1nq1B8vasVz7hY3a5y8uzM3uwH8LAOyowVTER5HiH56opN7r2718//+OF70d+v7vF/rWze7SfOVtP6gAAAAAAAAAAAAAAAAAsE2DqYg/jhRnj/39rbn8m+f/9a4Dvnn+3+2udeb5VTvX//+45U8z/696fw4TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCimK+N1I8dqNdnpnqPy9a/hcc/7qtZmJybsPG0mdkQOd+vLf8LGx4ydOfv2F8V5+8vj77YvxyvT5M7WzC1dai42lpcZsbWa+eXFhtnHPW9ju+Nsd7TwAtStvXJ29dGmpNvb88U03X6u+P/TIoeqp8cPPTvRqZyYmJ6f7aiqDn/re75Du36Z4iByIIq5Hih8WH6RfDkUUsf1e2OK5Y6eNRKXsv85BzExMdg5krlmfXy5vnOo1QiWi2jfodK9HdqEXt+V0xPWIKModPloe3nSrvli/MNeoTdUXl5vLzYX5qdTd2/J4alHEeIpoRUR7aK93nv1mMIr4dqT48Aft9B9DEQO9Pvjqy9Ovjo5tvYHKLuzkx9xtdTBirXgAehb2qaEo4r1I8djqaPxqqNtXnbZ5N+KZMp+LuFrm2ylWynwpIpVPEEcibng9gQdaJYp4PFJ8dKqd3h3Kvd85rzz3rdo35y8t9NX2zisf+PcHu8m5CfvYcBTxQeeMv53e83oOAAAAAAAAAAAAAPtcEU9Fiqd/cSR15ofemlPanL9cO1+/MNf9Wn/vu/+1PGp9fX29mro5mnMqZyvnSs7VnGs52zmrRR6fcypnK+dKztWcaznbOasDeXzOqZytnCs5V3Ou5WznrFby+JxTOVs5V3Ku5lzL2d6jOY8AAAAAAAAAAAAAAAAAADz8iijipUjxnZ+30/pQ9/qyr0c333E9IHio/X8AAAD//7rgW9Y=") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200080c0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) finit_module(r0, &(0x7f0000000100)='\\${\x00', 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x2}, 0x6) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ppoll(0x0, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f00000004c0)={[0x7]}, 0x8) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@userptr={0x7fff, 0x9, 0x4, 0x10, 0x0, {0x0, 0x2710}, {0x2, 0x2, 0xe, 0x40, 0x7, 0x0, "afef9415"}, 0x4, 0x2, {&(0x7f00000000c0)}, 0x5}) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) 6.168288338s ago: executing program 6 (id=6340): socket(0x1, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1fffffffffffff83, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db6fa7a9b857b72abaca100af1ba23d699b89e890c10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b95060000009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079227e98cc07c09c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b878b9267aa0b28d69a74ffdea613e892f0f9ff94e690b6ad68e4cb6dd65fd7bf3124702c6b1c2aea53ee0cb83ff1807459c7cba77cedca0bff6d8370c33e2bd9cebd29c152ff9dc8c2772fe552fecfcd1778b0838100000031d521207e5223d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c138779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9495635a9fca19d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31444c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x935}, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(0x0) pipe2$9p(0x0, 0x80000) r5 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000884000/0x1000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000300)=""/251) readahead(r0, 0x1de, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0xaf) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000004a00011900000000000000000a"], 0x1c}}, 0x0) 6.167215188s ago: executing program 4 (id=6341): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000200)={[{@map_normal}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@overriderock}, {@unhide}, {@map_off}, {}, {@block={'block', 0x3d, 0x400}}, {@showassoc}, {@unhide}, {@check_relaxed}]}, 0xfe, 0xa00, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0xa) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0x8004552d, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000080)=0x4, 0x4) userfaultfd(0x1) socket(0x21, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000dc0), 0x2000) 4.944155117s ago: executing program 6 (id=6343): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000540)=""/119}, 0x20) unshare(0x20040600) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, 0x0, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xb0) write$FUSE_GETXATTR(r4, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) 4.753039334s ago: executing program 2 (id=6344): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@sr0, 0x0, 0x0) 4.626630553s ago: executing program 4 (id=6345): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 4.514342743s ago: executing program 2 (id=6346): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a00110001", 0x13) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={r6, 0x4, 0x0, 0x80000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) accept(r5, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 3.998215605s ago: executing program 4 (id=6347): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) sendto$inet6(r6, &(0x7f0000000380), 0x0, 0xcd4e8ec47367e7d3, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, 0x1c) symlink(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) 3.286176712s ago: executing program 5 (id=6349): socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 2.073475321s ago: executing program 6 (id=6350): openat(0xffffffffffffff9c, 0x0, 0x246742, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xf7}, 0x8) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000ac0)={0x0, "12f7f538cc9ad9f769d66b3d1dd9cd911e9a080bd3ae2ae3ea00"}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000040)={0x200000000000000, 0x0, 0x9, 0x0, 0x16}) 1.971932859s ago: executing program 5 (id=6351): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426269422e70740455409baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000f00)="68a55df1c6bed91373cc79fcf0ea4c17187a680c0c711ae1d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1", 0x31}], 0x5}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="1f193ccd5e71244bc55dbcdc29e1a25fb59915f7f84fb5105984bc94ac926679df8c", 0x22}, {&(0x7f0000001100)="b35ba3572fcda875bc97e8", 0xb}, {0x0}, {&(0x7f0000001180)="93", 0x1}, {&(0x7f00000011c0)="3dff21fdbef2b0b843e0740163754db27084ece48f14e2ccb75ed71caecb8d01a49808a0a2269f17dc98a78e584f6cc71495faa98957034a6e6f6e9ea743d838d77a3f108a034c89", 0x48}, {&(0x7f0000001240)="b17b27be17bcb19544700a33471f8c21345d9ed983455906bb74ac68c911b5f14c7d60075f017c69c25768", 0x2b}, {&(0x7f0000001280)="45871f6c7aa143cfbb579d430702b24380586237795f6665c24e267fb8c62c14f85be705fbab74d85c8d479162b42724e414f24b9602b0c068930b8f0431f77f7ed4bb04c4bd7edbacb55c07e24b2b7ffbc83bb39385066e27b3b6727c8861edea62c5532877c2bc886e9f673bc9ef731ee32104bc102a8fda64676a9edf0e47f36cd6a35fd53b13b1f365ade8150f7e35c258b0253d8c4dcbc8", 0x9a}], 0x7}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc1917d9339f4084892894143b343fddd9303f0429a7ae5d89e2d238c7a6d95b89164290c367be830f56c6b95c492363a9b522", 0x35}], 0x1}}], 0x5, 0x0) 1.971512549s ago: executing program 2 (id=6352): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) unshare(0x6a040000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020600000000000000000000000500000000000000001b7f5b920d6a47d20c0000000900020200000000000000001100030068f733e31f58cbb8d061726b0000001000000000009c71bc311c55db5f8acdfedecfc288afdfa91d947df74d903dae6220d1c488b71d7e998e1d46a1f72eb7157126495e9dce8940e2ef7f7bceb6e93ebcc742c10971228d6d"], 0x58}}, 0x0) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 1.931958632s ago: executing program 4 (id=6353): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000200)={[{@map_normal}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@overriderock}, {@unhide}, {@map_off}, {}, {@block={'block', 0x3d, 0x400}}, {@showassoc}, {@unhide}, {@check_relaxed}]}, 0xfe, 0xa00, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0xa) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0x8004552d, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000080)=0x4, 0x4) userfaultfd(0x1) socket(0x21, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000dc0), 0x2000) 1.71717785s ago: executing program 5 (id=6354): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@sr0, 0x0, 0x0) 1.626764728s ago: executing program 5 (id=6355): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 1.257012038s ago: executing program 5 (id=6356): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r1 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, 0x0, 0x0, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @thr={&(0x7f0000000300)="d1665b456df3b0bf5d7435370dff9e40c0497ab4f120ca852e89a508deed5fad98c963583ceb47ac8b107ca626b6bdd49acc80f4113b727a96dbf7ca5c5578cf822a116fe581e21598afddecf7b595483fdd82f0ada4fb682b3ad139d8161e79aca62e35deebd004cf02a6f30f7c941d74004fcbe1dc5c45cb26", &(0x7f0000000080)="3ef3ef060d0358504d"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) r4 = openat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x21) flock(r4, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 383.300189ms ago: executing program 4 (id=6357): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001080)='cdg\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {0x0}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad", 0x59}], 0x4, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000010c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0143f77474668566bce917af3d89c8e", 0x3e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c00178004000100040003"], 0x138}}, 0x0) accept4(r3, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd7000fcdbdf250f00000020000180080003000700000014000200697036677265300000000000000000002400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1400018008000300020000000800030001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x44}, 0x0) shutdown(r0, 0x1) 66.203065ms ago: executing program 5 (id=6358): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000540)=""/119}, 0x20) unshare(0x20040600) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, 0x0, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xb0) write$FUSE_GETXATTR(r4, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) 0s ago: executing program 2 (id=6359): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000080000000600000001000000", @ANYRES32, @ANYBLOB='\x00\x00!'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) kernel console output (not intermixed with test programs): or, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 743.323177][ T55] Buffer I/O error on dev nbd10, logical block 0, async page read [ 743.331159][ T55] Buffer I/O error on dev nbd10, logical block 1, async page read [ 743.344785][ T55] Buffer I/O error on dev nbd10, logical block 2, async page read [ 743.353292][ T55] Buffer I/O error on dev nbd10, logical block 3, async page read [ 743.362161][ T55] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 743.371715][ T55] Buffer I/O error on dev nbd10, logical block 0, async page read [ 743.379768][ T55] Buffer I/O error on dev nbd10, logical block 1, async page read [ 743.388392][ T55] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 743.398496][ T55] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 743.408585][ T55] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 743.418547][ T55] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 743.442147][ T55] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 743.451713][T18621] ldm_validate_partition_table(): Disk read failed. [ 743.460563][T18621] Dev nbd10: unable to read RDB block 0 [ 743.468519][T18621] nbd10: unable to read partition table [ 743.480091][T18621] ldm_validate_partition_table(): Disk read failed. [ 743.489979][T18621] Dev nbd10: unable to read RDB block 0 [ 743.498344][T18621] nbd10: unable to read partition table [ 743.971675][T21879] loop0: detected capacity change from 0 to 128 [ 743.986727][T21879] EXT4-fs (loop0): Test dummy encryption mode enabled [ 744.005694][T21879] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 744.042788][T21879] ext4 filesystem being mounted at /265/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 744.477197][T21891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5621'. [ 744.522427][T21891] binder: 21888:21891 ioctl 4018620d 0 returned -22 [ 744.532744][T21891] binder: 21888:21891 ioctl c0306201 0 returned -14 [ 745.650505][T21895] loop3: detected capacity change from 0 to 4096 [ 745.702369][T21895] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 745.744859][T21895] UDF-fs: Scanning with blocksize 512 failed [ 745.759025][T21895] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 745.868659][T21899] overlayfs: failed to resolve './file1': -2 [ 746.174302][ T27] audit: type=1800 audit(1756501101.870:167): pid=21895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5623" name="bus" dev="loop3" ino=1347 res=0 errno=0 [ 748.191349][T18144] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 752.060257][T21934] loop0: detected capacity change from 0 to 32768 [ 752.087702][T21934] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.5633 (21934) [ 752.188901][T21934] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 752.226432][T21934] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 752.240041][T21934] BTRFS info (device loop0): using free space tree [ 752.336465][T21934] BTRFS info (device loop0): enabling ssd optimizations [ 752.360524][T21934] BTRFS info (device loop0): auto enabling async discard [ 752.550157][ T1081] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 752.602415][T18144] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 753.156694][T21978] loop1: detected capacity change from 0 to 128 [ 753.186129][T21978] EXT4-fs (loop1): Test dummy encryption mode enabled [ 753.280480][T21978] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 753.726280][T21978] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 754.362649][T21985] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.507357][T21985] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.659188][T21985] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.750759][T21985] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.013828][T21985] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.175657][T21985] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.334191][T21985] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.461836][T21985] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.349907][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.677526][T15381] libceph: connect (1)[c::]:6789 error -101 [ 756.707415][T15381] libceph: mon0 (1)[c::]:6789 connect error [ 756.793302][T22003] ceph: No mds server is up or the cluster is laggy [ 757.138454][T18653] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 757.840001][T22023] pim6reg: entered allmulticast mode [ 757.936405][T22023] pim6reg: left allmulticast mode [ 759.030751][T22030] tipc: Started in network mode [ 759.040396][T22030] tipc: Node identity 86def566e837, cluster identity 4711 [ 759.049749][T22030] tipc: Enabled bearer , priority 0 [ 759.068383][T22037] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.099407][T22030] syzkaller0: entered promiscuous mode [ 759.105206][T22030] syzkaller0: entered allmulticast mode [ 759.135051][T22037] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.212947][T22030] tipc: Resetting bearer [ 759.228916][T22037] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.236749][T22029] tipc: Resetting bearer [ 759.272426][T22029] tipc: Disabling bearer [ 759.287673][T22037] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.547404][T22037] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.604366][T22037] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.667561][T22037] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.716603][T22037] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.023747][T22083] loop1: detected capacity change from 0 to 512 [ 764.096550][T22083] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2817: inode #11: comm syz.1.5669: corrupted xattr block 95: invalid header [ 764.120779][T22087] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.178808][T22083] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 764.239353][T22083] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.5669: bg 0: block 7: invalid block bitmap [ 764.275139][T22087] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.303378][T22083] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 764.328418][T22083] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2983: inode #11: comm syz.1.5669: corrupted xattr block 95: invalid header [ 764.381723][T22083] EXT4-fs warning (device loop1): ext4_evict_inode:272: xattr delete (err -117) [ 764.411651][T22083] EXT4-fs (loop1): 1 orphan inode deleted [ 764.430598][T22083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 764.453508][T22087] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.555825][T22087] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.979098][T22083] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 765.193422][T18653] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.379918][T22104] loop3: detected capacity change from 0 to 1764 [ 765.552859][T22109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5673'. [ 765.626102][T22109] loop1: detected capacity change from 0 to 1024 [ 765.636561][T22109] EXT4-fs: Ignoring removed orlov option [ 767.421647][T22109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.582687][ T27] audit: type=1800 audit(1756501121.890:168): pid=22106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5673" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 767.809355][T18653] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.833016][T22087] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.903214][T22087] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.047108][T22087] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.096949][T22087] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.294733][T22125] loop0: detected capacity change from 0 to 16 [ 768.318143][T22125] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 768.743906][T22133] tipc: Enabled bearer , priority 0 [ 768.785416][T22133] syzkaller0: entered promiscuous mode [ 768.832328][T22133] syzkaller0: entered allmulticast mode [ 768.936464][T22133] tipc: Resetting bearer [ 769.001148][T22132] tipc: Resetting bearer [ 769.068505][T22132] tipc: Disabling bearer [ 769.188862][T22141] loop0: detected capacity change from 0 to 512 [ 769.325514][T22141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.382632][T22141] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 770.502572][T22155] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.522255][T18144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.713618][T22155] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.794414][T22161] loop1: detected capacity change from 0 to 4096 [ 770.828894][T22155] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.846220][T22161] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 770.865055][T22161] UDF-fs: Scanning with blocksize 512 failed [ 772.364110][T22161] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 772.464106][ T27] audit: type=1800 audit(1756501126.474:169): pid=22161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5692" name="bus" dev="loop1" ino=1347 res=0 errno=0 [ 772.496635][T22155] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.089153][T22186] tipc: Enabled bearer , priority 0 [ 774.108214][T22186] syzkaller0: entered promiscuous mode [ 774.113876][T22186] syzkaller0: entered allmulticast mode [ 774.138443][T22186] tipc: Resetting bearer [ 774.153213][T22185] tipc: Resetting bearer [ 774.187775][T22185] tipc: Disabling bearer [ 774.776770][T22194] loop3: detected capacity change from 0 to 512 [ 774.873095][T22194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 774.917621][T22194] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 775.053488][T22194] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 775.077300][T22194] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 775.089598][T22194] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.5702: Failed to acquire dquot type 0 [ 775.296413][T20296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 776.632184][T22218] tipc: Enabled bearer , priority 0 [ 776.651115][T22218] syzkaller0: entered promiscuous mode [ 776.656665][T22218] syzkaller0: entered allmulticast mode [ 776.696264][T22218] tipc: Resetting bearer [ 776.727878][T22217] tipc: Resetting bearer [ 776.759669][T22217] tipc: Disabling bearer [ 776.816908][T22220] loop0: detected capacity change from 0 to 4096 [ 776.849466][T22220] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 776.868354][T22220] UDF-fs: Scanning with blocksize 512 failed [ 776.914701][T22220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 777.011591][ T27] audit: type=1800 audit(1756501130.712:170): pid=22220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5709" name="bus" dev="loop0" ino=1347 res=0 errno=0 [ 777.126351][T22155] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.186525][T22155] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.231260][T22155] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.287805][T22155] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.467909][T22242] loop1: detected capacity change from 0 to 4096 [ 778.581318][T22242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.688782][T22242] EXT4-fs error (device loop1): ext4_empty_dir:3154: inode #12: block 80: comm syz.1.5716: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 778.743970][T22242] EXT4-fs (loop1): Remounting filesystem read-only [ 778.778415][T22242] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.5716: directory missing '..' [ 778.993692][T18653] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.247820][T22248] loop1: detected capacity change from 0 to 512 [ 779.282794][T22244] loop3: detected capacity change from 0 to 32768 [ 779.325169][T22244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.5717 (22244) [ 779.369564][T22244] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 779.388981][T22244] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 779.397717][T22244] BTRFS info (device loop3): force clearing of disk cache [ 779.411105][T22248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.496837][T22244] BTRFS info (device loop3): turning on sync discard [ 779.504552][T22244] BTRFS info (device loop3): enabling auto defrag [ 779.537432][T22248] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 779.555756][T22244] BTRFS info (device loop3): max_inline at 0 [ 779.579844][T22244] BTRFS info (device loop3): enabling disk space caching [ 779.590318][T22244] BTRFS info (device loop3): disk space caching is enabled [ 779.906471][T22244] BTRFS info (device loop3): enabling ssd optimizations [ 780.037497][T22244] BTRFS info (device loop3): rebuilding free space tree [ 780.153140][T22276] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.215998][T22244] BTRFS info (device loop3): disabling free space tree [ 780.248076][T22244] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 780.293816][T22244] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 780.354634][T22276] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.506834][T18653] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.623205][T22276] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.783626][T22276] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.800689][ T12] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 781.298607][T20296] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 782.347428][T22299] loop0: detected capacity change from 0 to 32768 [ 782.388438][T22299] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.5727 (22299) [ 782.414796][T22306] loop1: detected capacity change from 0 to 128 [ 782.430086][T22299] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 782.478813][T22306] EXT4-fs (loop1): Test dummy encryption mode enabled [ 782.495302][T22299] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 782.520039][T22299] BTRFS info (device loop0): using free space tree [ 782.596266][T22306] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 782.640199][T22306] ext4 filesystem being mounted at /242/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 782.837075][T22299] BTRFS info (device loop0): enabling ssd optimizations [ 782.866718][T22299] BTRFS info (device loop0): auto enabling async discard [ 783.226884][T18144] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 784.020971][T18653] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 784.457542][T22276] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.559886][T22276] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.598476][T22276] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.630218][T22276] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.808210][T22342] loop1: detected capacity change from 0 to 128 [ 787.875561][T22371] loop2: detected capacity change from 0 to 4096 [ 787.916203][T22371] EXT4-fs (loop2): Test dummy encryption mode enabled [ 787.972444][T22371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.111355][T22364] loop3: detected capacity change from 0 to 40427 [ 788.127445][T22371] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 788.157165][T22364] F2FS-fs (loop3): invalid crc value [ 788.209202][T22364] F2FS-fs (loop3): Found nat_bits in checkpoint [ 788.286049][T19272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.486154][T22364] F2FS-fs (loop3): Start checkpoint disabled! [ 788.498462][T22377] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.542215][T22364] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 788.646631][T22377] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.829284][T22377] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.834172][T22364] syz.3.5739: attempt to access beyond end of device [ 788.834172][T22364] loop3: rw=2049, sector=53248, nr_sectors = 1928 limit=40427 [ 788.936326][T22377] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.976562][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 788.998304][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.005259][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.032532][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.059134][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.087667][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.111948][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.133336][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.150492][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.167188][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.184492][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.209981][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.235662][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.258572][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.284235][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.309904][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.332507][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.371830][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.382313][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.414404][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.421387][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.455267][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.468067][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.475292][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.494020][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.510629][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.519164][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.527460][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.535492][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.542708][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.550090][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.557759][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.565242][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.572471][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.580659][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.588805][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.599450][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.611500][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.626090][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.633520][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.641071][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.648346][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.655628][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.662732][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.671439][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.680570][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.694519][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.711035][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.725062][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.732492][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.742115][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.754372][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.761949][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.769437][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.777040][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.785124][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.792402][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.799809][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.807447][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.815041][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.822306][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.829575][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.836992][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.844672][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.851918][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.859102][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.867745][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.875291][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.882452][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.890298][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.897406][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.904574][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.911580][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.918650][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.925573][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.932617][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.939819][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.946921][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.954326][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.962995][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.970920][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 789.990789][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.006634][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.017808][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.030223][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.044530][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.057148][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.065720][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.079244][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.086722][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.094304][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.103220][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.110604][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.117682][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.124897][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.132064][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.139061][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.146311][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.156067][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.163917][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.171347][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.178478][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.185817][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.192881][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.199971][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.219837][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.227206][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.234305][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.294949][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.340935][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.408797][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.481783][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.550962][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.620320][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.687244][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.758455][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.806026][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.823976][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.849082][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.884129][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.929339][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.949067][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.971230][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.986650][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 790.993958][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.001488][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.008944][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.016007][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.023537][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.030968][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.038191][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.045776][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.053255][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.060691][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.069254][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.080756][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.088129][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.095553][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.100060][T22396] loop0: detected capacity change from 0 to 256 [ 791.102710][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.115908][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.122819][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.131595][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.167398][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.174794][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.182241][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.189600][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.196614][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.203834][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.211767][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.220470][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.228844][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.238009][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.255459][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.263148][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.272253][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.281051][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.288514][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.296103][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.303373][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.311274][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.318336][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.325457][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.332547][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.392884][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.417995][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.441258][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.450999][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.458789][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.466192][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.473290][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.481959][T22398] loop0: detected capacity change from 0 to 1024 [ 791.483055][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.500965][T22398] EXT4-fs: Ignoring removed mblk_io_submit option [ 791.512478][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.520330][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.527626][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.537388][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.545782][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.546788][T22398] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 791.552966][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.553028][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.553057][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.553085][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.553113][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.553150][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.663764][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.683848][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.695479][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.705680][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.719925][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.729965][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.749340][T22398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.768425][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.776120][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.807835][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.842139][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.898830][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.947672][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 791.987392][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.017303][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.038949][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.071508][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.084882][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.107983][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.115183][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.123405][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.131090][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.138243][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.145671][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.152907][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.159866][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.167068][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.177196][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.202776][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.212404][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.225484][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.233255][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.244463][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.252204][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.262266][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.271242][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.278283][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.285691][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.292889][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.301226][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.310267][ T27] audit: type=1326 audit(1756501145.025:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.1.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af4d8ebe9 code=0x7ffc0000 [ 792.336058][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.343281][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.352851][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.360616][ T27] audit: type=1326 audit(1756501145.025:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.1.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af4d8ebe9 code=0x7ffc0000 [ 792.386017][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.392981][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.417349][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.424694][ T27] audit: type=1326 audit(1756501145.119:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.1.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3af4d2ade9 code=0x7ffc0000 [ 792.447373][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.455559][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.466533][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.474146][ T27] audit: type=1326 audit(1756501145.119:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.1.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af4d8ebe9 code=0x7ffc0000 [ 792.503495][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.510711][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.518060][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.525074][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.531980][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.546140][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.563082][ T27] audit: type=1326 audit(1756501145.119:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.1.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af4d8ebe9 code=0x7ffc0000 [ 792.563098][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.563126][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.597143][T18144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.619012][ T27] audit: type=1326 audit(1756501145.119:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.1.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af4d8ebe9 code=0x7ffc0000 [ 792.642005][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.649286][ T27] audit: type=1326 audit(1756501145.119:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.1.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af4d8ebe9 code=0x7ffc0000 [ 792.672492][ T27] audit: type=1326 audit(1756501145.119:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.1.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3af4d2ade9 code=0x7ffc0000 [ 792.696158][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.703158][T22364] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 792.725653][T22364] syz.3.5739: attempt to access beyond end of device [ 792.725653][T22364] loop3: rw=0, sector=55168, nr_sectors = 8 limit=40427 [ 792.755959][ T27] audit: type=1326 audit(1756501145.119:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.1.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3af4d2ade9 code=0x7ffc0000 [ 792.824608][ T27] audit: type=1326 audit(1756501145.119:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.1.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af4d8ebe9 code=0x7ffc0000 [ 792.983421][T22409] loop0: detected capacity change from 0 to 4096 [ 793.032269][T22409] EXT4-fs (loop0): Test dummy encryption mode enabled [ 793.082724][T22409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.131719][T22409] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 793.264982][T18144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.280546][T22377] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.349077][T22377] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.411639][T22377] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.452535][T22377] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.042229][T22425] loop3: detected capacity change from 0 to 16 [ 794.367427][T22425] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 794.849564][T22432] loop1: detected capacity change from 0 to 512 [ 794.930573][T22432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.972714][T22432] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 795.055791][T22441] tipc: Enabled bearer , priority 0 [ 795.079892][T22441] syzkaller0: entered promiscuous mode [ 795.111771][T22441] syzkaller0: entered allmulticast mode [ 795.205775][T18621] udevd[18621]: incorrect jbd checksum on /dev/loop1 [ 795.213473][T22441] tipc: Resetting bearer [ 795.238481][T22439] tipc: Resetting bearer [ 795.273756][T22432] EXT4-fs error (device loop1): ext4_dx_csum_verify:502: inode #2: comm syz.1.5758: dir seems corrupt? Run e2fsck -D. [ 795.313720][T22439] tipc: Disabling bearer [ 795.324303][T22432] EXT4-fs (loop1): Remounting filesystem read-only [ 795.435490][T18653] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.453978][T22445] loop0: detected capacity change from 0 to 4096 [ 795.496020][T22445] EXT4-fs (loop0): Test dummy encryption mode enabled [ 795.627334][T22445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.723583][T22445] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 795.733421][T22449] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.898442][T18144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.918281][T22449] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.123280][T22449] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.338472][T22449] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.216074][T22449] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.372469][T22449] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.457410][T22449] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.522241][T22449] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.230428][T22480] veth0: entered promiscuous mode [ 798.316164][T22480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5769'. [ 799.123331][T22489] loop0: detected capacity change from 0 to 4096 [ 799.135503][T22489] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 799.153707][T22489] UDF-fs: Scanning with blocksize 512 failed [ 799.190460][T22489] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 799.230708][T22491] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.246309][ T27] kauditd_printk_skb: 55 callbacks suppressed [ 799.246325][ T27] audit: type=1800 audit(1756501151.527:236): pid=22489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5774" name="bus" dev="loop0" ino=1347 res=0 errno=0 [ 799.630286][T22491] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.844108][T22491] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.970343][T22491] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.371030][T22491] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.388195][T22491] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.416223][T22491] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.675180][T22491] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.584499][T22513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5779'. [ 801.669071][T22513] loop2: detected capacity change from 0 to 1024 [ 801.679773][T22513] EXT4-fs: Ignoring removed orlov option [ 801.909348][T22513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.949461][T22513] binder: 22510:22513 ioctl 4018620d 0 returned -22 [ 801.988455][ T27] audit: type=1800 audit(1756501154.053:237): pid=22513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5779" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 802.608984][T19272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.812841][T22524] loop0: detected capacity change from 0 to 4096 [ 802.830274][T22524] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 802.838072][T22524] UDF-fs: Scanning with blocksize 512 failed [ 803.558307][T22524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 803.772856][ T27] audit: type=1800 audit(1756501155.756:238): pid=22524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5785" name="bus" dev="loop0" ino=1347 res=0 errno=0 [ 804.781784][T22545] loop2: detected capacity change from 0 to 128 [ 804.790886][T22545] EXT4-fs (loop2): Test dummy encryption mode enabled [ 804.824051][T22545] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 804.894337][T22545] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 805.999625][T22554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5791'. [ 806.064438][T19272] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 806.096629][T22554] loop3: detected capacity change from 0 to 1024 [ 806.106873][T22554] EXT4-fs: Ignoring removed orlov option [ 806.291556][T22554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.332268][ T27] audit: type=1800 audit(1756501158.150:239): pid=22554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5791" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 806.358100][T22554] binder: 22552:22554 ioctl 4018620d 0 returned -22 [ 806.902548][T20296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.076331][T22563] loop3: detected capacity change from 0 to 256 [ 807.433000][T22567] loop3: detected capacity change from 0 to 4096 [ 807.456521][T22567] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 807.488707][T22567] UDF-fs: Scanning with blocksize 512 failed [ 807.517909][T22567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 807.558796][ T27] audit: type=1800 audit(1756501159.301:240): pid=22567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5796" name="bus" dev="loop3" ino=1347 res=0 errno=0 [ 807.820072][T22577] tipc: Enabled bearer , priority 0 [ 807.857802][T22576] nbd: must specify a size in bytes for the device [ 807.863175][T22577] syzkaller0: entered promiscuous mode [ 807.955732][T22577] syzkaller0: entered allmulticast mode [ 808.181281][T22581] tipc: Resetting bearer [ 808.247169][T22573] tipc: Resetting bearer [ 808.945604][T22590] loop2: detected capacity change from 0 to 16 [ 808.966272][T22590] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 808.998443][T22573] tipc: Disabling bearer [ 809.009427][ T5785] tipc: Node number set to 747204217 [ 809.420552][T22597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5804'. [ 809.517794][T22597] loop0: detected capacity change from 0 to 1024 [ 809.528136][T22597] EXT4-fs: Ignoring removed orlov option [ 809.944378][T22597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.982974][T22597] binder: 22593:22597 ioctl 4018620d 0 returned -22 [ 810.053306][ T27] audit: type=1800 audit(1756501161.556:241): pid=22597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5804" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 810.566466][T18144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.925985][T22612] block nbd11: server does not support multiple connections per device. [ 810.959553][T22612] block nbd11: shutting down sockets [ 812.487150][T22626] tipc: Started in network mode [ 812.508024][T22626] tipc: Node identity f6b255e4a837, cluster identity 4711 [ 812.534502][T22626] tipc: Enabled bearer , priority 0 [ 812.567420][T22628] syzkaller0: entered promiscuous mode [ 812.599730][T22628] syzkaller0: entered allmulticast mode [ 812.639685][T22626] tipc: Resetting bearer [ 812.676952][T22624] tipc: Resetting bearer [ 812.762877][T22624] tipc: Disabling bearer [ 812.960555][T22635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5818'. [ 813.057562][T22635] loop2: detected capacity change from 0 to 1024 [ 813.068382][T22635] EXT4-fs: Ignoring removed orlov option [ 813.423310][T22635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.462842][ T27] audit: type=1800 audit(1756501164.821:242): pid=22635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5818" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 813.491116][T22635] binder: 22633:22635 ioctl 4018620d 0 returned -22 [ 813.860852][T19272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.252628][T22632] loop3: detected capacity change from 0 to 32768 [ 814.268421][T22632] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.5817 (22632) [ 814.288749][T22645] block nbd11: server does not support multiple connections per device. [ 814.297637][T22645] block nbd11: shutting down sockets [ 814.369568][T22632] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 814.384640][T22632] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 814.404220][T22632] BTRFS info (device loop3): using free space tree [ 814.505224][T22632] BTRFS info (device loop3): enabling ssd optimizations [ 814.528633][T22632] BTRFS info (device loop3): auto enabling async discard [ 814.808771][T20296] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 815.969332][T22676] tipc: Enabled bearer , priority 0 [ 816.041816][T22676] syzkaller0: entered promiscuous mode [ 816.116911][T22680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5828'. [ 816.174122][T22676] syzkaller0: entered allmulticast mode [ 816.208127][T22680] loop0: detected capacity change from 0 to 1024 [ 816.218270][T22680] EXT4-fs: Ignoring removed orlov option [ 819.687635][T22690] tipc: Resetting bearer [ 819.696721][T22680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 819.730053][ T27] audit: type=1800 audit(1756501170.686:243): pid=22680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5828" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 819.755476][T22680] binder: 22678:22680 ioctl 4018620d 0 returned -22 [ 819.942191][T18621] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (18621) [ 820.073495][T22690] tipc: Resetting bearer [ 820.193096][T22690] tipc: Disabling bearer [ 820.230491][T18144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.317736][T22697] block nbd11: server does not support multiple connections per device. [ 820.326487][T22697] block nbd11: shutting down sockets [ 821.120865][T22703] loop2: detected capacity change from 0 to 32768 [ 821.136651][T22703] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 821.274208][T21239] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 822.040557][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 822.528088][T22724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5839'. [ 822.763090][T22724] loop3: detected capacity change from 0 to 1024 [ 822.773367][T22724] EXT4-fs: Ignoring removed orlov option [ 822.799737][T22726] tipc: Enabled bearer , priority 0 [ 822.915333][T22728] syzkaller0: entered promiscuous mode [ 823.011163][T22728] syzkaller0: entered allmulticast mode [ 823.072608][T22724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.190887][ T27] audit: type=1800 audit(1756501173.839:244): pid=22724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5839" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 823.369288][T22725] tipc: Resetting bearer [ 823.403235][T22735] nbd: must specify at least one socket [ 823.512603][T20296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.589697][T22725] tipc: Disabling bearer [ 824.117337][T22743] loop3: detected capacity change from 0 to 32768 [ 824.140560][T22743] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 824.152011][T22743] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 824.161634][T22743] BTRFS info (device loop3): using free space tree [ 824.222365][T22743] BTRFS info (device loop3): enabling ssd optimizations [ 824.230112][T22743] BTRFS info (device loop3): auto enabling async discard [ 824.308181][T20296] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 826.948311][T22788] nbd: must specify at least one socket [ 827.241849][T22793] loop1: detected capacity change from 0 to 4096 [ 827.262577][T22797] tipc: Enabled bearer , priority 0 [ 827.289330][T22797] syzkaller0: entered promiscuous mode [ 827.295211][T22797] syzkaller0: entered allmulticast mode [ 827.387286][T22797] tipc: Resetting bearer [ 827.426987][T22794] tipc: Resetting bearer [ 827.544346][T22794] tipc: Disabling bearer [ 828.594828][T22814] nbd: must specify at least one socket [ 829.443909][T22827] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 829.732148][T22830] loop1: detected capacity change from 0 to 128 [ 830.783336][T22840] loop3: detected capacity change from 0 to 1764 [ 831.891198][T22844] nbd11: detected capacity change from 0 to 127 [ 831.902160][T18655] block nbd11: Receive control failed (result -104) [ 832.547331][T22855] loop3: detected capacity change from 0 to 512 [ 832.681041][T22855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 832.742338][T22855] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 832.892702][T22855] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 832.933949][T22855] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 833.063326][T22855] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.5875: Failed to acquire dquot type 0 [ 833.177698][T20296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 833.891147][T22867] tipc: Enabled bearer , priority 0 [ 833.953396][T22867] syzkaller0: entered promiscuous mode [ 833.959600][T22867] syzkaller0: entered allmulticast mode [ 834.011154][T22867] tipc: Resetting bearer [ 834.040961][T22863] tipc: Resetting bearer [ 834.080787][T22863] tipc: Disabling bearer [ 834.346008][T22886] nbd12: detected capacity change from 0 to 127 [ 834.355863][T18655] block nbd12: Receive control failed (result -104) [ 834.566264][T18655] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 834.574792][T18655] Bluetooth: hci2: unexpected event for opcode 0x203e [ 836.672883][T22910] nbd13: detected capacity change from 0 to 127 [ 836.709119][T15651] block nbd13: Send control failed (result -32) [ 836.714478][T18655] block nbd13: Receive control failed (result -32) [ 836.715908][T15651] block nbd13: Request send failed, requeueing [ 836.735906][T15520] block nbd13: Dead connection, failed to find a fallback [ 836.743059][T15520] block nbd13: shutting down sockets [ 836.748659][T15520] blk_print_req_error: 92 callbacks suppressed [ 836.748667][T15520] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 836.764187][T15520] buffer_io_error: 138 callbacks suppressed [ 836.764196][T15520] Buffer I/O error on dev nbd13, logical block 0, async page read [ 836.777932][T15520] Buffer I/O error on dev nbd13, logical block 1, async page read [ 836.785919][T15520] Buffer I/O error on dev nbd13, logical block 2, async page read [ 836.793870][T15520] Buffer I/O error on dev nbd13, logical block 3, async page read [ 836.802324][T15651] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 836.812189][T15651] Buffer I/O error on dev nbd13, logical block 0, async page read [ 836.819999][T15651] Buffer I/O error on dev nbd13, logical block 1, async page read [ 836.827868][T15651] Buffer I/O error on dev nbd13, logical block 2, async page read [ 836.835783][T15651] Buffer I/O error on dev nbd13, logical block 3, async page read [ 836.844015][T15651] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 836.853433][T15651] Buffer I/O error on dev nbd13, logical block 0, async page read [ 836.861241][T15651] Buffer I/O error on dev nbd13, logical block 1, async page read [ 836.869268][T15651] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 836.878676][T15651] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 836.888117][T15651] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 836.897603][T15651] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 836.907274][T15651] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 836.916408][T21239] ldm_validate_partition_table(): Disk read failed. [ 836.923310][T15651] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 836.932714][T15651] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 836.942588][T21239] Dev nbd13: unable to read RDB block 0 [ 836.951443][T21239] nbd13: unable to read partition table [ 836.968478][T21239] ldm_validate_partition_table(): Disk read failed. [ 836.977462][T21239] Dev nbd13: unable to read RDB block 0 [ 836.987250][T21239] nbd13: unable to read partition table [ 837.026524][T21239] ldm_validate_partition_table(): Disk read failed. [ 837.036732][T21239] Dev nbd13: unable to read RDB block 0 [ 837.047151][T21239] nbd13: unable to read partition table [ 837.092037][T21239] ldm_validate_partition_table(): Disk read failed. [ 837.110487][T21239] Dev nbd13: unable to read RDB block 0 [ 837.135733][T21239] nbd13: unable to read partition table [ 837.163273][ T27] audit: type=1326 audit(1756501186.992:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22913 comm="syz.0.5895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804458ebe9 code=0x7ffc0000 [ 837.185697][T22915] tipc: Enabled bearer , priority 0 [ 837.193301][T22915] syzkaller0: entered promiscuous mode [ 837.195087][ T27] audit: type=1326 audit(1756501186.992:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22913 comm="syz.0.5895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804458ebe9 code=0x7ffc0000 [ 837.218937][T22915] syzkaller0: entered allmulticast mode [ 837.222173][ T27] audit: type=1326 audit(1756501187.002:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22913 comm="syz.0.5895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f804458ebe9 code=0x7ffc0000 [ 837.249777][ T27] audit: type=1326 audit(1756501187.002:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22913 comm="syz.0.5895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804458ebe9 code=0x7ffc0000 [ 837.350691][T22915] tipc: Resetting bearer [ 837.409440][T22914] tipc: Resetting bearer [ 837.527339][T22914] tipc: Disabling bearer [ 837.694264][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 837.704787][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 837.999847][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 838.006161][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 839.075463][T22928] ceph: No mds server is up or the cluster is laggy [ 839.106017][T18655] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 839.117602][T18655] Bluetooth: hci2: Injecting HCI hardware error event [ 839.127330][T18655] Bluetooth: hci2: hardware error 0x00 [ 839.496844][ T5846] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 839.613152][T22957] tipc: Enabled bearer , priority 0 [ 839.620636][T22957] syzkaller0: entered promiscuous mode [ 839.626283][T22957] syzkaller0: entered allmulticast mode [ 839.646865][T22957] tipc: Resetting bearer [ 839.655109][T22956] tipc: Resetting bearer [ 839.697076][T22956] tipc: Disabling bearer [ 839.718854][ T5846] usb 1-1: Using ep0 maxpacket: 8 [ 839.726473][ T5846] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 839.749405][ T5846] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 839.775649][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.788941][ T5846] usb 1-1: Product: syz [ 839.795163][ T5846] usb 1-1: Manufacturer: syz [ 839.800525][ T5846] usb 1-1: SerialNumber: syz [ 839.820506][ T5846] usb 1-1: config 0 descriptor?? [ 839.834860][ T5846] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 840.495505][ T5785] libceph: connect (1)[c::]:6789 error -101 [ 841.189620][ T5785] libceph: mon0 (1)[c::]:6789 connect error [ 841.314735][T22967] ceph: No mds server is up or the cluster is laggy [ 841.432783][T18655] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 841.783090][T22984] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5917'. [ 841.817823][T22984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5917'. [ 841.917052][T22986] loop3: detected capacity change from 0 to 128 [ 842.447089][T22991] tipc: Enabled bearer , priority 0 [ 842.461982][T22991] syzkaller0: entered promiscuous mode [ 842.474244][T22991] syzkaller0: entered allmulticast mode [ 842.496955][T22991] tipc: Resetting bearer [ 842.527717][T22990] tipc: Resetting bearer [ 842.606384][T22990] tipc: Disabling bearer [ 844.257305][ T5846] gspca_zc3xx: reg_r err -71 [ 844.268984][ T5846] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 844.278532][ T5846] usb 1-1: USB disconnect, device number 4 [ 845.296928][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 845.303495][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 845.345138][T23011] loop1: detected capacity change from 0 to 16 [ 845.354108][T23011] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 845.408860][T21239] blk_print_req_error: 232 callbacks suppressed [ 845.408875][T21239] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 845.455097][T23017] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 845.589070][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 845.595510][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 845.993916][T23006] ceph: No mds server is up or the cluster is laggy [ 846.307095][T23020] loop2: detected capacity change from 0 to 1024 [ 846.317843][T23020] EXT4-fs: Ignoring removed orlov option [ 846.391317][T23020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 846.442588][T23020] binder: 23018:23020 ioctl 4018620d 0 returned -22 [ 846.466104][ T27] audit: type=1800 audit(1756501195.674:249): pid=23020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5928" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 847.907291][T19272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.446852][ T7932] libceph: connect (1)[c::]:6789 error -101 [ 848.453262][ T7932] libceph: mon0 (1)[c::]:6789 connect error [ 848.975267][ T7932] libceph: connect (1)[c::]:6789 error -101 [ 848.981382][ T7932] libceph: mon0 (1)[c::]:6789 connect error [ 849.689259][T23043] ceph: No mds server is up or the cluster is laggy [ 849.747370][T23049] loop1: detected capacity change from 0 to 512 [ 849.772767][T23049] EXT4-fs: Ignoring removed nobh option [ 849.898142][T23049] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.5937: corrupted inode contents [ 849.926167][T23049] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #3: comm syz.1.5937: mark_inode_dirty error [ 849.950075][T23057] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 849.954954][T23049] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.5937: corrupted inode contents [ 849.976216][T23049] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.5937: mark_inode_dirty error [ 849.995174][T23049] Quota error (device loop1): write_blk: dquota write failed [ 850.003532][T23049] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 850.015754][T23049] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.5937: Failed to acquire dquot type 0 [ 850.036158][T23060] loop3: detected capacity change from 0 to 128 [ 850.063883][T23060] EXT4-fs (loop3): Test dummy encryption mode enabled [ 850.070014][T23049] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.5937: corrupted inode contents [ 850.092857][T23060] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 850.101195][T23049] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #16: comm syz.1.5937: mark_inode_dirty error [ 850.106347][T23060] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 850.128283][T23049] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.5937: corrupted inode contents [ 850.150314][T23049] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.5937: mark_inode_dirty error [ 850.165704][T23049] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.5937: corrupted inode contents [ 850.208475][T23049] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 850.232118][T23049] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.5937: corrupted inode contents [ 850.267183][T23049] EXT4-fs error (device loop1): ext4_truncate:4288: inode #16: comm syz.1.5937: mark_inode_dirty error [ 850.290517][T23049] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 850.317433][T23049] EXT4-fs (loop1): 1 truncate cleaned up [ 850.343775][T23049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.364023][T23049] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 850.892349][T18653] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.147519][T20296] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 852.141995][T23083] loop3: detected capacity change from 0 to 4096 [ 852.160429][T23083] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 852.175814][T23083] UDF-fs: Scanning with blocksize 512 failed [ 852.189532][T23083] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 853.985652][T23095] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 855.018209][T23100] loop2: detected capacity change from 0 to 128 [ 855.068045][T23100] EXT4-fs (loop2): Test dummy encryption mode enabled [ 855.091576][T23100] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 855.151216][T23100] ext4 filesystem being mounted at /259/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 856.899914][T19272] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 857.811499][T23120] loop3: detected capacity change from 0 to 4096 [ 857.877118][T23120] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 857.911956][T23120] UDF-fs: Scanning with blocksize 512 failed [ 858.070291][T23120] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 859.126281][T23137] overlayfs: failed to resolve './file1': -2 [ 859.510289][T23142] loop3: detected capacity change from 0 to 16 [ 859.531664][T23142] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 860.345119][T23146] loop3: detected capacity change from 0 to 128 [ 860.360351][T23146] EXT4-fs (loop3): Test dummy encryption mode enabled [ 860.422840][T23146] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 860.900164][T23146] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 862.325499][T20296] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 862.498748][T23165] loop3: detected capacity change from 0 to 512 [ 862.519909][T23165] EXT4-fs: Ignoring removed nobh option [ 862.597485][T23165] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.5967: corrupted inode contents [ 862.638159][T23165] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #3: comm syz.3.5967: mark_inode_dirty error [ 862.711105][T23165] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.5967: corrupted inode contents [ 862.749125][T23165] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.5967: mark_inode_dirty error [ 862.769082][T23165] Quota error (device loop3): write_blk: dquota write failed [ 862.782108][T23165] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 862.796493][T23165] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.5967: Failed to acquire dquot type 0 [ 862.812801][T23165] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.5967: corrupted inode contents [ 862.834757][T23165] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #16: comm syz.3.5967: mark_inode_dirty error [ 862.846734][T23165] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.5967: corrupted inode contents [ 862.865684][T23165] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.5967: mark_inode_dirty error [ 862.878570][T23165] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.5967: corrupted inode contents [ 862.899306][T23165] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 862.907999][T22943] Bluetooth: hci0: command 0x0406 tx timeout [ 862.921013][T23165] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.5967: corrupted inode contents [ 862.935084][T23165] EXT4-fs error (device loop3): ext4_truncate:4288: inode #16: comm syz.3.5967: mark_inode_dirty error [ 862.964352][T23165] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 862.989849][T23165] EXT4-fs (loop3): 1 truncate cleaned up [ 863.022965][T23165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.064187][T23165] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 863.276470][T23165] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 863.287832][T23165] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 863.305278][T23165] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.5967: Failed to acquire dquot type 1 [ 864.432430][ T55] block nbd11: Possible stuck request ffff8880222b0000: control (read@0,1024B). Runtime 30 seconds [ 864.443680][ T55] block nbd11: Possible stuck request ffff8880222b0200: control (read@1024,1024B). Runtime 30 seconds [ 864.472699][ T55] block nbd11: Possible stuck request ffff8880222b0400: control (read@2048,1024B). Runtime 30 seconds [ 864.483881][ T55] block nbd11: Possible stuck request ffff8880222b0600: control (read@3072,1024B). Runtime 30 seconds [ 864.975287][T20296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.996989][ T48] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.032730][T23190] overlayfs: failed to resolve './file1': -2 [ 865.485549][ T48] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.768496][ T48] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.944369][ T48] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.517482][ T55] block nbd12: Possible stuck request ffff888022320000: control (read@0,1024B). Runtime 30 seconds [ 866.528731][ T55] block nbd12: Possible stuck request ffff888022320200: control (read@1024,1024B). Runtime 30 seconds [ 866.539977][ T55] block nbd12: Possible stuck request ffff888022320400: control (read@2048,1024B). Runtime 30 seconds [ 866.551275][ T55] block nbd12: Possible stuck request ffff888022320600: control (read@3072,1024B). Runtime 30 seconds [ 866.584859][ T48] tipc: Left network mode [ 866.789983][T18655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 866.803263][T18655] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 866.816558][T18655] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 866.825474][T18655] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 866.850147][T18655] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 866.859168][T18655] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 867.412609][T23208] loop1: detected capacity change from 0 to 128 [ 867.455605][T23208] EXT4-fs (loop1): Test dummy encryption mode enabled [ 867.491400][T23208] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 867.605341][T23208] ext4 filesystem being mounted at /304/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 868.141969][T22943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 868.158074][T22943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 868.166446][T22943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 868.203831][T22943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 868.214582][T22943] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 868.225703][T22943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 868.969660][T18653] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 869.049547][T22943] Bluetooth: hci0: command tx timeout [ 869.165496][T23200] chnl_net:caif_netlink_parms(): no params data found [ 869.412119][ T54] libceph: connect (1)[c::]:6789 error -101 [ 869.422042][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 869.711370][T15381] libceph: connect (1)[c::]:6789 error -101 [ 869.717671][T15381] libceph: mon0 (1)[c::]:6789 connect error [ 869.730840][T23200] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.756533][T23200] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.779419][T23200] bridge_slave_0: entered allmulticast mode [ 869.791891][T23200] bridge_slave_0: entered promiscuous mode [ 869.800567][T23220] chnl_net:caif_netlink_parms(): no params data found [ 869.837634][T23200] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.865966][T23200] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.876695][T23200] bridge_slave_1: entered allmulticast mode [ 869.884798][T23200] bridge_slave_1: entered promiscuous mode [ 869.902664][ T48] hsr_slave_0: left promiscuous mode [ 870.023438][ T48] hsr_slave_1: left promiscuous mode [ 870.029535][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 870.037841][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.046213][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 870.053696][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.062781][ T48] bridge_slave_1: left allmulticast mode [ 870.068843][ T48] bridge_slave_1: left promiscuous mode [ 870.075060][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.090955][ T48] bridge_slave_0: left allmulticast mode [ 870.097142][ T48] bridge_slave_0: left promiscuous mode [ 870.103065][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.119617][T23239] ceph: No mds server is up or the cluster is laggy [ 870.198916][T23258] overlayfs: failed to resolve './file1': -2 [ 870.312452][ T48] veth1_macvtap: left promiscuous mode [ 870.359822][ T48] veth0_macvtap: left promiscuous mode [ 870.394262][ T48] veth1_vlan: left promiscuous mode [ 870.412076][ T48] veth0_vlan: left promiscuous mode [ 870.417685][T22943] Bluetooth: hci4: command tx timeout [ 871.283321][T22943] Bluetooth: hci0: command tx timeout [ 871.502721][T23273] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5987'. [ 871.855241][T23279] loop2: detected capacity change from 0 to 128 [ 871.884524][T23279] EXT4-fs (loop2): Test dummy encryption mode enabled [ 871.913246][T23279] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 871.935459][T23279] ext4 filesystem being mounted at /271/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 872.092440][ T48] team0 (unregistering): Port device team_slave_1 removed [ 872.194836][ T48] team0 (unregistering): Port device team_slave_0 removed [ 872.324852][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 872.519726][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 872.641219][T22943] Bluetooth: hci4: command tx timeout [ 872.886029][T19272] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 874.101855][T22943] Bluetooth: hci0: command tx timeout [ 874.483031][ T48] bond0 (unregistering): Released all slaves [ 874.611797][T23273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5987'. [ 874.713933][T23200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.791527][T23200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.864667][T22943] Bluetooth: hci4: command tx timeout [ 874.980770][T23220] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.035461][T23220] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.068357][T23220] bridge_slave_0: entered allmulticast mode [ 875.090098][T23220] bridge_slave_0: entered promiscuous mode [ 875.149702][T23200] team0: Port device team_slave_0 added [ 875.171509][T23220] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.195717][T23220] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.209958][T23220] bridge_slave_1: entered allmulticast mode [ 875.247054][T23220] bridge_slave_1: entered promiscuous mode [ 875.344478][T23200] team0: Port device team_slave_1 added [ 875.391274][T23220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.470783][T15381] libceph: connect (1)[c::]:6789 error -101 [ 875.484484][T15381] libceph: mon0 (1)[c::]:6789 connect error [ 875.525409][T23220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.575073][T23200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.590359][T23200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.624313][T23200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.718504][T23220] team0: Port device team_slave_0 added [ 875.738638][T23200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.758073][T23200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.786696][ T54] libceph: connect (1)[c::]:6789 error -101 [ 875.791163][T23200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.801126][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 875.836442][T23220] team0: Port device team_slave_1 added [ 875.966128][T23220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.973157][T23220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.999395][T23220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.025779][T23220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.033046][T23220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.059957][T23220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.092982][T23200] hsr_slave_0: entered promiscuous mode [ 876.099441][T23200] hsr_slave_1: entered promiscuous mode [ 876.106207][T23200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 876.113966][T23200] Cannot create hsr debugfs directory [ 876.152461][T23220] hsr_slave_0: entered promiscuous mode [ 876.159472][T23220] hsr_slave_1: entered promiscuous mode [ 876.165743][T23220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 876.173966][T23220] Cannot create hsr debugfs directory [ 876.281792][T23309] ceph: No mds server is up or the cluster is laggy [ 876.320602][T22943] Bluetooth: hci0: command tx timeout [ 876.607204][T22943] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 876.615600][T22943] Bluetooth: hci1: unexpected event for opcode 0x203e [ 876.748746][T23200] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 876.809467][T23200] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 876.916948][T23200] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 877.076158][T23200] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 877.088485][T22943] Bluetooth: hci4: command tx timeout [ 877.660227][T23220] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 877.681485][T23220] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 877.711729][T23220] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 877.764131][T23220] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 877.844480][T23351] tipc: Enabled bearer , priority 0 [ 877.907494][T23200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.919512][T23351] tipc: Resetting bearer [ 877.995558][T23350] tipc: Disabling bearer [ 878.054389][T23200] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.095657][T19925] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.102874][T19925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.130552][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.137765][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.760990][ T54] libceph: connect (1)[c::]:6789 error -101 [ 878.811583][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 878.849971][T23220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.866666][T15381] libceph: connect (1)[c::]:6789 error -101 [ 878.884325][T15381] libceph: mon0 (1)[c::]:6789 connect error [ 878.946049][T23220] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.987030][T19925] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.994415][T19925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.051438][T19925] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.058693][T19925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.068181][T23364] ceph: No mds server is up or the cluster is laggy [ 879.402203][T23380] loop1: detected capacity change from 0 to 1764 [ 880.277012][T23200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.352130][T23390] loop1: detected capacity change from 0 to 2048 [ 880.575329][T23390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 880.632881][T23220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.658657][T23390] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 880.911128][T18653] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.938080][T22943] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 880.949845][T22943] Bluetooth: hci1: Injecting HCI hardware error event [ 880.960254][T18655] Bluetooth: hci1: hardware error 0x00 [ 881.218155][T23416] loop1: detected capacity change from 0 to 128 [ 881.297426][T23416] EXT4-fs (loop1): Test dummy encryption mode enabled [ 881.393215][T23416] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 881.438968][T23416] ext4 filesystem being mounted at /317/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 881.487567][T23200] veth0_vlan: entered promiscuous mode [ 881.544834][T23200] veth1_vlan: entered promiscuous mode [ 881.742283][T23200] veth0_macvtap: entered promiscuous mode [ 881.753881][T23200] veth1_macvtap: entered promiscuous mode [ 881.763571][T23220] veth0_vlan: entered promiscuous mode [ 881.810942][T23220] veth1_vlan: entered promiscuous mode [ 882.180847][T23200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.202398][T23200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.216389][T23200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.238371][T23200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.257366][T23200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.271698][T23200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.290200][T23200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 882.381212][T23200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 882.419748][T23200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.441745][T23200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 882.487890][T23200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.505548][T23200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 882.523830][T23200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.548526][T18653] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 882.565160][T23200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 882.617578][T23200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.632704][T23200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.651974][T23200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.703947][T23200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.736965][T23220] veth0_macvtap: entered promiscuous mode [ 882.904210][T23220] veth1_macvtap: entered promiscuous mode [ 882.996121][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.029711][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.082636][T23220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.106791][T23220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.120967][T23220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.160518][T18655] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 883.168637][T23220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.184252][T23220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.197771][T23220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.208217][T23220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.219784][T23220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.247916][T23220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.264302][T23449] loop2: detected capacity change from 0 to 1764 [ 883.315814][T23220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.348092][T23220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.515794][T23220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.571070][T23220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.632081][T23220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.712927][T23220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.799740][T23220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.891269][T23220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.007201][T23220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.106346][ T2917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.145978][ T2917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.163292][T23220] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.205604][T23220] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.244543][T23220] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.254503][T23220] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.420182][ T4874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.446369][ T4874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.564008][ T2917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.593984][ T2917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.087686][T23486] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6014'. [ 886.169605][T23486] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6014'. [ 886.378232][T23496] loop4: detected capacity change from 0 to 512 [ 886.671339][T23502] loop2: detected capacity change from 0 to 1764 [ 887.799169][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 887.916129][T23515] loop1: detected capacity change from 0 to 128 [ 887.970053][T23515] EXT4-fs (loop1): Test dummy encryption mode enabled [ 888.677934][T23515] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 888.737076][T23515] ext4 filesystem being mounted at /322/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 889.520820][T23540] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6028'. [ 889.583543][T23540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6028'. [ 892.343014][T23564] loop4: detected capacity change from 0 to 1764 [ 893.558380][T18653] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 894.100951][T23593] loop1: detected capacity change from 0 to 1024 [ 894.417567][ T5158] udevd[5158]: worker [21239] terminated by signal 33 (Unknown signal 33) [ 894.465863][ T5158] udevd[5158]: worker [21239] failed while handling '/devices/virtual/block/loop1' [ 896.476338][T23615] loop4: detected capacity change from 0 to 128 [ 896.494247][T23614] loop2: detected capacity change from 0 to 1764 [ 896.510139][T23615] EXT4-fs (loop4): Test dummy encryption mode enabled [ 896.586013][ T55] block nbd11: Possible stuck request ffff8880222b0000: control (read@0,1024B). Runtime 60 seconds [ 896.601204][ T55] block nbd11: Possible stuck request ffff8880222b0200: control (read@1024,1024B). Runtime 60 seconds [ 896.612936][ T55] block nbd11: Possible stuck request ffff8880222b0400: control (read@2048,1024B). Runtime 60 seconds [ 896.624017][ T55] block nbd11: Possible stuck request ffff8880222b0600: control (read@3072,1024B). Runtime 60 seconds [ 896.702173][T23615] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 896.860530][T23615] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 898.779013][ T55] block nbd12: Possible stuck request ffff888022320000: control (read@0,1024B). Runtime 60 seconds [ 898.790220][ T55] block nbd12: Possible stuck request ffff888022320200: control (read@1024,1024B). Runtime 60 seconds [ 898.801480][ T55] block nbd12: Possible stuck request ffff888022320400: control (read@2048,1024B). Runtime 60 seconds [ 898.813012][ T55] block nbd12: Possible stuck request ffff888022320600: control (read@3072,1024B). Runtime 60 seconds [ 899.749370][ T7930] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 900.091577][ T7930] usb 3-1: Using ep0 maxpacket: 32 [ 900.163950][ T7930] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 900.316554][ T7930] usb 3-1: config 0 has no interface number 0 [ 900.322732][ T7930] usb 3-1: config 0 interface 12 has no altsetting 0 [ 900.364725][ T7930] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 900.394858][ T7930] usb 3-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 900.441064][ T7930] usb 3-1: Product: syz [ 900.469972][ T7930] usb 3-1: Manufacturer: syz [ 900.474646][ T7930] usb 3-1: SerialNumber: syz [ 900.506025][ T7930] usb 3-1: config 0 descriptor?? [ 900.577438][T23200] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 902.768678][ T7930] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 902.776715][ T7930] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 902.784280][ T7930] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 902.816597][ T7930] f81534: probe of 3-1:0.12 failed with error -71 [ 903.137095][ T7930] usb 3-1: USB disconnect, device number 5 [ 903.453106][T23697] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6065'. [ 903.473659][T23697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6065'. [ 906.563587][T23758] loop4: detected capacity change from 0 to 16 [ 906.568907][T23759] loop2: detected capacity change from 0 to 128 [ 906.590442][T23758] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 909.639934][T23793] loop1: detected capacity change from 0 to 1764 [ 912.685004][T23813] loop4: detected capacity change from 0 to 32768 [ 912.899880][T23821] 9pnet_virtio: no channels available for device syz [ 913.001921][T23813] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 913.464041][ T27] audit: type=1800 audit(1756501258.372:250): pid=23813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6101" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 913.952550][T23834] loop5: detected capacity change from 0 to 1764 [ 914.698294][T23200] ocfs2: Unmounting device (7,4) on (node local) [ 915.906214][T23850] syz.4.6109[23850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 915.906360][T23850] syz.4.6109[23850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 917.090550][T23864] loop5: detected capacity change from 0 to 128 [ 917.154082][T23864] EXT4-fs (loop5): Test dummy encryption mode enabled [ 917.219928][T23864] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 917.221603][T23868] loop4: detected capacity change from 0 to 1024 [ 917.282100][T23864] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 917.322968][T23868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 917.340403][T23875] loop1: detected capacity change from 0 to 1764 [ 917.451029][ T27] audit: type=1800 audit(1756501262.096:251): pid=23868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6117" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 917.546139][ T27] audit: type=1804 audit(1756501262.189:252): pid=23878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6117" name="/newroot/24/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 917.616913][T23868] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4031: comm syz.4.6117: Allocating blocks 385-513 which overlap fs metadata [ 917.632732][T23880] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6119'. [ 917.641844][T23880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6119'. [ 917.834858][T23868] EXT4-fs (loop4): pa ffff88805d439828: logic 16, phys. 129, len 24 [ 917.843829][T23868] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 918.393017][T23220] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 918.681773][T23200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.332233][T23899] tipc: Started in network mode [ 919.364188][T23899] tipc: Node identity 4a11dbb57ef1, cluster identity 4711 [ 919.407022][T23899] tipc: Enabled bearer , priority 0 [ 919.520807][T23899] tipc: Resetting bearer [ 919.700946][T23898] tipc: Disabling bearer [ 920.401446][T23905] loop2: detected capacity change from 0 to 40427 [ 920.413550][T23905] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 920.424959][T23905] F2FS-fs (loop2): invalid crc value [ 920.460829][T23905] F2FS-fs (loop2): Found nat_bits in checkpoint [ 920.525391][T23905] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 920.537530][T23914] loop5: detected capacity change from 0 to 1764 [ 920.824494][T23918] loop1: detected capacity change from 0 to 128 [ 920.854214][T23918] EXT4-fs (loop1): Test dummy encryption mode enabled [ 920.984608][T23918] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 921.576682][T23918] ext4 filesystem being mounted at /354/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 922.831296][T18653] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 922.958544][T23933] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6131'. [ 923.096407][T23933] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6131'. [ 923.559663][T23941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6132'. [ 924.840536][T23947] loop5: detected capacity change from 0 to 128 [ 925.257691][T23955] Bluetooth: MGMT ver 1.22 [ 925.876470][T23958] geneve2: entered promiscuous mode [ 925.915562][ T11] kworker/u4:0: attempt to access beyond end of device [ 925.915562][ T11] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 925.926501][T23961] binder: 23960:23961 ioctl c0306201 200000000080 returned -14 [ 927.537690][T23977] loop2: detected capacity change from 0 to 128 [ 928.793238][ T55] block nbd11: Possible stuck request ffff8880222b0000: control (read@0,1024B). Runtime 90 seconds [ 928.804170][ T55] block nbd11: Possible stuck request ffff8880222b0200: control (read@1024,1024B). Runtime 90 seconds [ 928.815414][ T55] block nbd11: Possible stuck request ffff8880222b0400: control (read@2048,1024B). Runtime 90 seconds [ 928.875981][ T55] block nbd11: Possible stuck request ffff8880222b0600: control (read@3072,1024B). Runtime 90 seconds [ 929.136705][T23990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6145'. [ 929.287859][T23993] loop5: detected capacity change from 0 to 1764 [ 931.485664][ T55] block nbd12: Possible stuck request ffff888022320000: control (read@0,1024B). Runtime 90 seconds [ 931.496514][ T55] block nbd12: Possible stuck request ffff888022320200: control (read@1024,1024B). Runtime 90 seconds [ 931.507633][ T55] block nbd12: Possible stuck request ffff888022320400: control (read@2048,1024B). Runtime 90 seconds [ 931.518693][ T55] block nbd12: Possible stuck request ffff888022320600: control (read@3072,1024B). Runtime 90 seconds [ 934.740741][T24028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6157'. [ 937.109888][T24043] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6161'. [ 937.154925][T24043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6161'. [ 937.999614][ T23] libceph: connect (1)[c::]:6789 error -101 [ 938.006532][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 938.260444][T24050] ceph: No mds server is up or the cluster is laggy [ 938.284404][ T23] libceph: connect (1)[c::]:6789 error -101 [ 938.290628][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 941.895699][T24098] loop4: detected capacity change from 0 to 1764 [ 942.886027][T24110] loop1: detected capacity change from 0 to 1024 [ 942.954348][T24110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 943.067810][T24110] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.6183: Allocating blocks 385-513 which overlap fs metadata [ 943.249119][T24110] EXT4-fs (loop1): pa ffff88805d4399f8: logic 16, phys. 129, len 24 [ 943.257558][T24110] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 943.288001][T24122] loop4: detected capacity change from 0 to 64 [ 944.194805][T18653] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.563860][T24146] loop1: detected capacity change from 0 to 1764 [ 946.723212][T24163] loop4: detected capacity change from 0 to 128 [ 947.584855][T24163] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 947.600534][T24163] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 947.707369][T24169] syzkaller0: entered promiscuous mode [ 947.744113][T24169] syzkaller0: entered allmulticast mode [ 947.950186][T23200] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 949.883134][T24191] loop5: detected capacity change from 0 to 1764 [ 950.091249][T24194] loop1: detected capacity change from 0 to 16 [ 950.194850][T24194] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 951.612982][T24200] loop1: detected capacity change from 0 to 128 [ 951.650262][T24200] EXT4-fs (loop1): Test dummy encryption mode enabled [ 951.707610][T24200] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 951.751659][T24200] ext4 filesystem being mounted at /378/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 954.658388][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 954.685813][T24205] loop5: detected capacity change from 0 to 128 [ 954.913516][T18653] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 958.742619][T24223] loop2: detected capacity change from 0 to 1764 [ 958.813485][T24225] loop5: detected capacity change from 0 to 128 [ 959.211548][T24231] loop5: detected capacity change from 0 to 128 [ 959.283669][T24234] loop4: detected capacity change from 0 to 512 [ 959.300556][T24231] EXT4-fs (loop5): Test dummy encryption mode enabled [ 959.348402][T24234] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 959.362219][T24231] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 959.449457][T24231] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 959.527355][T24234] EXT4-fs (loop4): 1 truncate cleaned up [ 959.593948][T24234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 960.405540][T24244] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6221'. [ 960.518515][T24245] loop2: detected capacity change from 0 to 1024 [ 960.531851][T24245] EXT4-fs: Ignoring removed orlov option [ 960.733884][T23220] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 960.887043][T24245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 960.903127][T21802] block nbd11: Possible stuck request ffff8880222b0000: control (read@0,1024B). Runtime 120 seconds [ 960.920584][T21802] block nbd11: Possible stuck request ffff8880222b0200: control (read@1024,1024B). Runtime 120 seconds [ 960.940244][T24244] binder: 24240:24244 ioctl 4018620d 0 returned -22 [ 960.977771][T21802] block nbd11: Possible stuck request ffff8880222b0400: control (read@2048,1024B). Runtime 120 seconds [ 961.034232][T21802] block nbd11: Possible stuck request ffff8880222b0600: control (read@3072,1024B). Runtime 120 seconds [ 961.168336][T23200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.251483][T19272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.481831][T24249] syzkaller0: entered promiscuous mode [ 961.487392][T24249] syzkaller0: entered allmulticast mode [ 961.831927][T24251] loop5: detected capacity change from 0 to 40427 [ 961.856137][T24251] F2FS-fs (loop5): invalid crc value [ 961.863556][T24259] loop4: detected capacity change from 0 to 2048 [ 961.882712][T24251] F2FS-fs (loop5): Found nat_bits in checkpoint [ 961.912050][T24259] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 961.938057][T24251] F2FS-fs (loop5): Start checkpoint disabled! [ 961.967682][T24251] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 965.550519][ T27] audit: type=1800 audit(1756501307.103:253): pid=24267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6222" name="bus" dev="loop5" ino=14 res=0 errno=0 [ 965.732045][T24267] syz.5.6222: attempt to access beyond end of device [ 965.732045][T24267] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 965.768011][T24267] syz.5.6222: attempt to access beyond end of device [ 965.768011][T24267] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 965.785125][T24267] syz.5.6222: attempt to access beyond end of device [ 965.785125][T24267] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 965.801031][T24267] syz.5.6222: attempt to access beyond end of device [ 965.801031][T24267] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 965.817155][T24267] syz.5.6222: attempt to access beyond end of device [ 965.817155][T24267] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 966.097827][ T5158] udevd[5158]: worker [18621] /devices/virtual/block/nbd12 is taking a long time [ 967.065478][ T5158] udevd[5158]: worker [19851] /devices/virtual/block/nbd11 is taking a long time [ 967.197652][T21802] block nbd12: Possible stuck request ffff888022320000: control (read@0,1024B). Runtime 120 seconds [ 967.210132][T21802] block nbd12: Possible stuck request ffff888022320200: control (read@1024,1024B). Runtime 120 seconds [ 967.224735][T21802] block nbd12: Possible stuck request ffff888022320400: control (read@2048,1024B). Runtime 120 seconds [ 967.237046][T21802] block nbd12: Possible stuck request ffff888022320600: control (read@3072,1024B). Runtime 120 seconds [ 967.428602][T24273] loop4: detected capacity change from 0 to 128 [ 968.420117][ T4874] kworker/u4:9: attempt to access beyond end of device [ 968.420117][ T4874] loop5: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 968.457548][T24277] overlayfs: failed to resolve './file1': -2 [ 968.467881][ T4874] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 968.524409][ T4874] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 969.212494][T24289] loop5: detected capacity change from 0 to 128 [ 969.239514][T24289] EXT4-fs (loop5): Test dummy encryption mode enabled [ 969.321720][T24289] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 969.358428][T24289] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 970.388300][T23220] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 970.691223][T24309] overlayfs: failed to resolve './file1': -2 [ 970.923237][T24318] loop5: detected capacity change from 0 to 128 [ 973.342141][T24334] overlayfs: failed to resolve './file0': -2 [ 975.232311][T24344] loop5: detected capacity change from 0 to 256 [ 975.394139][T24344] FAT-fs (loop5): count of clusters too big (66845694) [ 975.401292][T24344] FAT-fs (loop5): Can't find a valid FAT filesystem [ 975.644050][T23647] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 978.250462][T22943] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 978.318180][T24365] overlayfs: failed to resolve './file0': -2 [ 978.688900][T22943] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 978.703203][T22943] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 978.721170][T22943] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 978.925525][T22943] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 978.933034][T22943] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 980.365213][T24248] syz_tun (unregistering): left promiscuous mode [ 980.478953][T24392] overlayfs: failed to resolve './file0': -2 [ 981.180658][T22943] Bluetooth: hci5: command tx timeout [ 981.314309][T24363] chnl_net:caif_netlink_parms(): no params data found [ 981.665661][T24408] overlayfs: failed to resolve './file0': -2 [ 981.739182][T24363] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.756285][T24363] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.855989][T24363] bridge_slave_0: entered allmulticast mode [ 981.868749][T24363] bridge_slave_0: entered promiscuous mode [ 981.893320][T24363] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.911237][T24363] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.951363][T24413] loop4: detected capacity change from 0 to 512 [ 981.954616][T24363] bridge_slave_1: entered allmulticast mode [ 981.991273][T24363] bridge_slave_1: entered promiscuous mode [ 982.073328][T24413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.086611][T24413] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 982.137159][T23200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.168518][T24363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.196653][T24363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 982.320420][T24363] team0: Port device team_slave_0 added [ 982.344294][T24363] team0: Port device team_slave_1 added [ 982.410432][T24363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.475264][T24420] overlayfs: failed to resolve './file0': -2 [ 982.506226][T24363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.538042][T24363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.804427][T24363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.909973][T24363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.310435][T24363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.382837][T22943] Bluetooth: hci5: command tx timeout [ 983.707597][T24363] hsr_slave_0: entered promiscuous mode [ 983.782281][T24363] hsr_slave_1: entered promiscuous mode [ 983.825238][T24363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 983.855410][T24363] Cannot create hsr debugfs directory [ 983.949809][T24438] loop5: detected capacity change from 0 to 128 [ 984.915833][T19717] kworker/u4:6: attempt to access beyond end of device [ 984.915833][T19717] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 985.165539][T24454] loop5: detected capacity change from 0 to 512 [ 985.360122][T24459] overlayfs: failed to clone upperpath [ 985.397919][T24454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.426240][T24464] overlayfs: failed to clone upperpath [ 985.479361][T24454] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 985.515740][T24363] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 985.606750][T22943] Bluetooth: hci5: command tx timeout [ 985.805569][T24363] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 985.817743][T23220] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.992917][T24471] overlayfs: failed to resolve './file1': -2 [ 986.374652][T24363] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 986.513388][T24363] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 986.980978][T24363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.008431][T24363] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.069250][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.076544][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.150505][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.157892][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.865632][T22943] Bluetooth: hci5: command tx timeout [ 988.445700][T24363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.574032][T24523] loop4: detected capacity change from 0 to 1764 [ 988.659290][T24531] loop5: detected capacity change from 0 to 512 [ 988.792508][T24531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.842185][T24531] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 989.121513][T23220] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.658708][T24545] overlayfs: failed to resolve './file1': -2 [ 990.423446][T24363] veth0_vlan: entered promiscuous mode [ 990.616841][T24363] veth1_vlan: entered promiscuous mode [ 990.694688][T24363] veth0_macvtap: entered promiscuous mode [ 990.732568][T24363] veth1_macvtap: entered promiscuous mode [ 990.850737][T24363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.869297][T24363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.881474][T24363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.895446][T24363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.905863][T24363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.919404][T24363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.930288][T24363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.940864][T24363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.957978][T24363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.966841][T24553] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3484950563 (55759209008 ns) > initial count (50642361344 ns). Using initial count to start timer. [ 990.968834][T24363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.017681][T24363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.056565][T24363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.067622][T24363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.079555][T24363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.090486][T24363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.100698][T24363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.112737][T24363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.122936][T24363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.133480][T24363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.144372][T24363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.156088][T24363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.170435][T24363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.188966][T24363] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.197894][T24363] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.208024][T24363] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.216784][T24363] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.504709][T19925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.615906][T19925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.974164][T24562] 9pnet_fd: Insufficient options for proto=fd [ 992.764520][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.871899][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.890671][T24572] loop4: detected capacity change from 0 to 512 [ 992.938068][T24570] loop5: detected capacity change from 0 to 4096 [ 993.018220][T24570] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 993.026839][T24570] UDF-fs: Scanning with blocksize 512 failed [ 993.045984][T21802] block nbd11: Possible stuck request ffff8880222b0000: control (read@0,1024B). Runtime 150 seconds [ 993.057842][T21802] block nbd11: Possible stuck request ffff8880222b0200: control (read@1024,1024B). Runtime 150 seconds [ 993.112701][T21802] block nbd11: Possible stuck request ffff8880222b0400: control (read@2048,1024B). Runtime 150 seconds [ 993.126900][T24572] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.6302: invalid indirect mapped block 10 (level 1) [ 993.142409][T21802] block nbd11: Possible stuck request ffff8880222b0600: control (read@3072,1024B). Runtime 150 seconds [ 993.181437][T24570] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 993.304108][ T27] audit: type=1800 audit(1756501333.064:254): pid=24570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6304" name="bus" dev="loop5" ino=1347 res=0 errno=0 [ 993.394718][T24572] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.6302: invalid indirect mapped block 8 (level 1) [ 993.483707][T24581] loop6: detected capacity change from 0 to 128 [ 994.311774][T24572] EXT4-fs (loop4): 1 truncate cleaned up [ 994.327198][T24572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 994.631081][T23200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.525000][T24596] 9pnet_fd: Insufficient options for proto=fd [ 996.278054][T24601] loop4: detected capacity change from 0 to 40427 [ 996.290872][T24601] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 996.298660][T24601] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 996.309607][T24601] F2FS-fs (loop4): invalid crc value [ 996.359592][T24601] F2FS-fs (loop4): Found nat_bits in checkpoint [ 996.465359][T24601] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 996.472788][T24601] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 999.910194][T24609] Bluetooth: hci4: command 0x0406 tx timeout [ 999.916340][T24609] Bluetooth: hci0: command 0x0406 tx timeout [ 1000.028894][T21802] block nbd12: Possible stuck request ffff888022320000: control (read@0,1024B). Runtime 150 seconds [ 1000.040015][T21802] block nbd12: Possible stuck request ffff888022320200: control (read@1024,1024B). Runtime 150 seconds [ 1000.051151][T21802] block nbd12: Possible stuck request ffff888022320400: control (read@2048,1024B). Runtime 150 seconds [ 1000.062403][T21802] block nbd12: Possible stuck request ffff888022320600: control (read@3072,1024B). Runtime 150 seconds [ 1000.635930][T24641] 9pnet_fd: Insufficient options for proto=fd [ 1001.388549][T24638] loop4: detected capacity change from 0 to 4096 [ 1001.429810][T24638] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1001.444023][T24638] UDF-fs: Scanning with blocksize 512 failed [ 1001.491618][T24638] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1001.534030][ T27] audit: type=1800 audit(1756501340.772:255): pid=24638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6317" name="bus" dev="loop4" ino=1347 res=0 errno=0 [ 1002.081663][T24661] loop5: detected capacity change from 0 to 256 [ 1002.437019][T24661] FAT-fs (loop5): count of clusters too big (66845694) [ 1002.438804][T24662] autofs4:pid:24662:autofs_fill_super: called with bogus options [ 1002.444392][T24661] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1002.879932][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1003.157668][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 1003.425045][ T23] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1003.502485][ T23] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1003.755352][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.766561][ T23] usb 7-1: config 0 descriptor?? [ 1004.957296][ T23] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1005.229856][ T23] usb 7-1: USB disconnect, device number 2 [ 1006.807812][T24706] loop4: detected capacity change from 0 to 1764 [ 1006.970731][ T23] Process accounting resumed [ 1007.795927][T18655] Bluetooth: hci5: command tx timeout [ 1009.517782][T24729] loop4: detected capacity change from 0 to 128 [ 1010.871724][ T12] kworker/u4:1: attempt to access beyond end of device [ 1010.871724][ T12] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1011.152907][T24745] loop4: detected capacity change from 0 to 1764 [ 1012.845182][T24767] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6357'. [ 1012.890565][ T29] INFO: task syz.0.5942:23070 blocked for more than 143 seconds. [ 1012.914282][ T29] Not tainted syzkaller #0 [ 1012.942721][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1013.071436][ T29] task:syz.0.5942 state:D stack:26448 pid:23070 ppid:18144 flags:0x00004004 [ 1013.197891][ T29] Call Trace: [ 1013.262632][ T29] [ 1013.305059][ T29] __schedule+0x14d2/0x44d0 [ 1013.366498][ T29] ? asan.module_dtor+0x20/0x20 [ 1013.449643][ T29] ? __mutex_lock+0x6b2/0xcc0 [ 1013.532597][ T29] ? __mutex_trylock_common+0x84/0x250 [ 1013.621765][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1013.731270][ T29] schedule+0xbd/0x170 [ 1013.784053][ T29] schedule_preempt_disabled+0x13/0x20 [ 1013.856918][ T29] __mutex_lock+0x6b7/0xcc0 [ 1013.911194][ T29] ? __mutex_lock+0x4e8/0xcc0 [ 1013.964088][ T29] ? sync_bdevs+0x1af/0x330 [ 1014.035164][ T29] ? mutex_lock_nested+0x20/0x20 [ 1014.060555][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 1014.065947][ T29] sync_bdevs+0x1af/0x330 [ 1014.070454][ T29] ksys_sync+0xba/0x150 [ 1014.074805][ T29] ? sync_filesystem+0x220/0x220 [ 1014.079799][ T29] ? syscall_enter_from_user_mode+0x25/0x80 [ 1014.086009][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1014.091268][ T29] __ia32_sys_sync+0xe/0x20 [ 1014.101751][ T29] do_syscall_64+0x55/0xb0 [ 1014.112544][ T29] ? clear_bhb_loop+0x40/0x90 [ 1014.123395][ T29] ? clear_bhb_loop+0x40/0x90 [ 1014.134186][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.144986][ T29] RIP: 0033:0x7f804458ebe9 [ 1014.155790][ T29] RSP: 002b:00007f80453dd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1014.231347][ T29] RAX: ffffffffffffffda RBX: 00007f80447b6090 RCX: 00007f804458ebe9 [ 1014.253436][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1014.261480][ T29] RBP: 00007f80447b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.279101][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.295703][ T29] R13: 00007f80447b6128 R14: 00007f80447b6090 R15: 00007ffd7e7190b8 [ 1014.303786][ T29] [ 1014.317082][ T29] [ 1014.317082][ T29] Showing all locks held in the system: [ 1014.324849][ T29] 1 lock held by pool_workqueue_/3: [ 1014.333197][T24767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6357'. [ 1014.338549][ T29] 2 locks held by kworker/u4:1/12: [ 1014.348214][ T29] 1 lock held by khungtaskd/29: [ 1014.362094][ T29] #0: ffffffff8cd2fbe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1014.372206][ T29] 4 locks held by kworker/u4:5/1081: [ 1014.377533][ T29] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1014.388582][ T29] #1: ffffc9000478fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1014.413300][ T29] #2: ffffffff8dfaf510 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 1014.422811][ T29] #3: ffffffff8cd35a80 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x580 [ 1014.452779][ T29] 2 locks held by getty/5547: [ 1014.461012][ T29] #0: ffff888030a5a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1014.488075][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 1014.498301][ T29] 1 lock held by udevd/18621: [ 1014.514156][ T29] #0: ffff8880222174c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1014.527967][ T29] 1 lock held by udevd/19851: [ 1014.532753][ T29] #0: ffff8880222124c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1014.550501][ T29] 1 lock held by syz.0.5942/23070: [ 1014.555884][ T29] #0: ffff8880222174c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1af/0x330 [ 1014.566370][ T29] 1 lock held by syz.6.6350/24737: [ 1014.571551][ T29] [ 1014.573955][ T29] ============================================= [ 1014.573955][ T29] [ 1014.582403][ T29] NMI backtrace for cpu 0 [ 1014.586767][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1014.593997][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1014.604083][ T29] Call Trace: [ 1014.607390][ T29] [ 1014.610350][ T29] dump_stack_lvl+0x16c/0x230 [ 1014.615074][ T29] ? preempt_count_add+0x91/0x1a0 [ 1014.620094][ T29] ? show_regs_print_info+0x20/0x20 [ 1014.625282][ T29] ? load_image+0x3b0/0x3b0 [ 1014.629772][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 1014.634695][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1014.640844][ T29] ? _printk+0xd0/0x110 [ 1014.645013][ T29] ? load_image+0x3b0/0x3b0 [ 1014.649523][ T29] ? load_image+0x3b0/0x3b0 [ 1014.654036][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1014.660127][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1014.666128][ T29] watchdog+0xf41/0xf80 [ 1014.670392][ T29] ? watchdog+0x1e1/0xf80 [ 1014.674737][ T29] kthread+0x2fa/0x390 [ 1014.678815][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1014.683847][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1014.688442][ T29] ret_from_fork+0x48/0x80 [ 1014.692983][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1014.697591][ T29] ret_from_fork_asm+0x11/0x20 [ 1014.702380][ T29] [ 1014.706525][ T29] Sending NMI from CPU 0 to CPUs 1: [ 1014.711940][ C1] NMI backtrace for cpu 1 [ 1014.711952][ C1] CPU: 1 PID: 2917 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1014.711968][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1014.711977][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1014.712002][ C1] RIP: 0010:kasan_check_range+0x18/0x290 [ 1014.712023][ C1] Code: ff c3 0f 0b b8 ea ff ff ff c3 cc cc cc cc cc cc cc cc 66 0f 1f 00 b0 01 48 85 f6 0f 84 b8 01 00 00 55 41 57 41 56 41 55 41 54 <53> 4c 8d 04 37 49 39 f8 0f 82 5a 02 00 00 49 89 f9 49 c1 e9 2f 41 [ 1014.712036][ C1] RSP: 0018:ffffc9000be07370 EFLAGS: 00000002 [ 1014.712049][ C1] RAX: 0000000000000001 RBX: 0000000000000003 RCX: ffffffff81670edc [ 1014.712059][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90da5500 [ 1014.712068][ C1] RBP: ffffc9000be075e8 R08: dffffc0000000000 R09: 1ffffffff21b4aa0 [ 1014.712079][ C1] R10: dffffc0000000000 R11: fffffbfff21b4aa1 R12: 0000000000000000 [ 1014.712089][ C1] R13: ffff88802b542978 R14: 0000000000000008 R15: ffff88802b542978 [ 1014.712100][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1014.712113][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1014.712124][ C1] CR2: 00007f0893384198 CR3: 000000000cb30000 CR4: 00000000003506e0 [ 1014.712141][ C1] Call Trace: [ 1014.712147][ C1] [ 1014.712154][ C1] __lock_acquire+0x94c/0x7c80 [ 1014.712179][ C1] ? mark_lock+0x94/0x320 [ 1014.712195][ C1] ? verify_lock_unused+0x140/0x140 [ 1014.712210][ C1] ? verify_lock_unused+0x140/0x140 [ 1014.712224][ C1] ? mark_lock+0x94/0x320 [ 1014.712240][ C1] ? __lock_acquire+0x1334/0x7c80 [ 1014.712256][ C1] ? mark_lock+0x94/0x320 [ 1014.712272][ C1] ? __lock_acquire+0x1334/0x7c80 [ 1014.712289][ C1] lock_acquire+0x197/0x410 [ 1014.712304][ C1] ? __pte_offset_map_lock+0x107/0x1e0 [ 1014.712326][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1014.712342][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1014.712360][ C1] ? rcu_is_watching+0x15/0xb0 [ 1014.712380][ C1] _raw_spin_lock+0x2e/0x40 [ 1014.712401][ C1] ? __pte_offset_map_lock+0x107/0x1e0 [ 1014.712414][ C1] __pte_offset_map_lock+0x107/0x1e0 [ 1014.712429][ C1] ? kmem_cache_alloc_node+0x6d/0x330 [ 1014.712450][ C1] __text_poke+0x29b/0xb20 [ 1014.712464][ C1] ? text_poke_sync+0x30/0x30 [ 1014.712482][ C1] ? __text_poke+0xb20/0xb20 [ 1014.712506][ C1] ? text_poke+0xc0/0xc0 [ 1014.712520][ C1] ? __mutex_trylock_common+0x153/0x250 [ 1014.712542][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1014.712568][ C1] text_poke_bp_batch+0x4e4/0x930 [ 1014.712585][ C1] ? kmem_cache_alloc_node+0x6d/0x330 [ 1014.712604][ C1] ? text_poke_loc_init+0x820/0x820 [ 1014.712619][ C1] ? text_poke_queue+0x140/0x190 [ 1014.712635][ C1] ? arch_jump_label_transform_queue+0x93/0x100 [ 1014.712659][ C1] text_poke_finish+0x30/0x50 [ 1014.712674][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1014.712694][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 1014.712712][ C1] ? process_scheduled_works+0x957/0x15b0 [ 1014.712730][ C1] static_key_disable+0x1a/0x20 [ 1014.712746][ C1] toggle_allocation_gate+0x1b0/0x250 [ 1014.712766][ C1] ? show_object+0x70/0x70 [ 1014.712784][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1014.712803][ C1] ? process_scheduled_works+0x957/0x15b0 [ 1014.712819][ C1] ? process_scheduled_works+0x957/0x15b0 [ 1014.712836][ C1] process_scheduled_works+0xa45/0x15b0 [ 1014.712862][ C1] ? assign_work+0x400/0x400 [ 1014.712881][ C1] ? assign_work+0x39e/0x400 [ 1014.712898][ C1] worker_thread+0xa55/0xfc0 [ 1014.712925][ C1] kthread+0x2fa/0x390 [ 1014.712937][ C1] ? pr_cont_work+0x560/0x560 [ 1014.712953][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1014.712967][ C1] ret_from_fork+0x48/0x80 [ 1014.712983][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1014.712996][ C1] ret_from_fork_asm+0x11/0x20 [ 1014.713020][ C1] [ 1014.723548][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1014.723563][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1014.723582][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1014.723592][ T29] Call Trace: [ 1014.723599][ T29] [ 1014.723607][ T29] dump_stack_lvl+0x16c/0x230 [ 1014.723637][ T29] ? show_regs_print_info+0x20/0x20 [ 1014.723656][ T29] ? load_image+0x3b0/0x3b0 [ 1014.723684][ T29] panic+0x2c0/0x710 [ 1014.723706][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1014.723730][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1014.723753][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1014.723776][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1014.723803][ T29] watchdog+0xf80/0xf80 [ 1014.723826][ T29] ? watchdog+0x1e1/0xf80 [ 1014.723852][ T29] kthread+0x2fa/0x390 [ 1014.723867][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1014.723887][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1014.723903][ T29] ret_from_fork+0x48/0x80 [ 1014.723921][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1014.723937][ T29] ret_from_fork_asm+0x11/0x20 [ 1014.723970][ T29] [ 1014.725471][ T29] Kernel Offset: disabled [ 1015.199689][ T29] Rebooting in 86400 seconds..