last executing test programs: 1m54.014382159s ago: executing program 1 (id=2248): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x800400, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_read_part_table(0x105a, &(0x7f0000000000)="$eJzszzFqAkEABdC/y5LJpskdUqRKnZvsCbyIepKtvdOCJ7C2kRFmBcFeRHiv+Hxm/hQTXuovfVIyJvlM6ndy2ZS6+/l62B1bdveDuvbffVJb+2g5JP2QdNvb7FxP/1N7V5eSZB7nst4sKZkOT/8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyBawAAAP//dRoRCA==") pwritev2(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x4, 0x3e0c, 0xe) 1m52.782374184s ago: executing program 1 (id=2251): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYRESOCT=r0, @ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) gettid() timer_create(0x0, 0x0, 0x0) pipe2(&(0x7f0000001440), 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, 0x0, &(0x7f00000003c0)=0x5c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x2b8, 0x0, 0x19, 0x0, 0x140, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x2}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1]}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, 0x3}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) r8 = getgid() syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="646973636172642c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030352c76696d655f6f66667365743d46b83030303030303c3030303030303030392c6769643dcc1fed6343b20b92c05c3c11969f74229b80a30a55ab57fc3505ee808c86223b1e68862161511761607fe8b45849edb270aabeb37a4b8b045d3ae8ddd41ac317ad505923baabd1bc9ebf61f235cb7fd663d7cbaf834f6266fc0bedfb3a6fd05cfe73a273dba97933a564f18edd2f7a629071f9edb805fbaa22cfce1b35bb8e402522df3c627fe0c181d7c8148e6f3bd85d473786a03d8363aa0a3f12015e99b57938d0288f7a0c000000000000008f5b5ed2f9fba4ef57de1c019d3b22faba7df8e7b116c53aaa0a4f8a633f1401268bbb216dfebbec003815d8", @ANYRESHEX=r8, @ANYBLOB=',dmask=00000000000000000040002,namecase=1,umask=00000000000000000000007,iocharset=default,keep_last_dots,sys_tz,\x00'], 0x5, 0x1548, &(0x7f0000001900)="$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") getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001280)={{{@in=@private, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0x0) 1m49.528754367s ago: executing program 1 (id=2254): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x701, 0x10000, 0x0, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x44844}, 0x0) 1m47.905202469s ago: executing program 1 (id=2260): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x800400, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_read_part_table(0x105a, &(0x7f0000000000)="$eJzszzFqAkEABdC/y5LJpskdUqRKnZvsCbyIepKtvdOCJ7C2kRFmBcFeRHiv+Hxm/hQTXuovfVIyJvlM6ndy2ZS6+/l62B1bdveDuvbffVJb+2g5JP2QdNvb7FxP/1N7V5eSZB7nst4sKZkOT/8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyBawAAAP//dRoRCA==") pwritev2(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)}], 0x1, 0x4, 0x3e0c, 0xe) 1m45.2783135s ago: executing program 1 (id=2264): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x701, 0x10000, 0x0, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x44844}, 0x0) 1m43.671598542s ago: executing program 1 (id=2268): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") 1m26.731933533s ago: executing program 32 (id=2268): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") 50.113169919s ago: executing program 3 (id=2343): socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000005c0)={0x0, 0xfffffffc, 0x3, 0xc, 0x1fc, &(0x7f00000009c0)="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"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 44.116899157s ago: executing program 3 (id=2351): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x1, 0xb, 0xd6}, 0x3a, [0x8003, 0x5, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x804, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0x4, 0x3, 0x10008, 0x4874, 0x80000001, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x400a, 0x4, 0x0, 0x5, 0x4, 0x461c3738, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x6, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xf, 0x2bf, 0x0, 0x8000009, 0xfffffff8, 0x3, 0x0, 0x800, 0x5, 0x2f, 0xc, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x7c3b, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x0, 0x2, 0xb, 0x4, 0x2, 0x8, 0x9, 0xb, 0x2, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0x3, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x10, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x2, 0x0, 0x1, 0x7, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x0, 0x6, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0xffffffff, 0x7, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x8000005, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0x80b, 0x5, 0x7, 0xed2, 0x8, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0xe13, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x19, 0x2, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0xfffffffb, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x3, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x25b4, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) unshare(0x22020600) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6b) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x2}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x4000840}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 43.101705716s ago: executing program 2 (id=2352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) syz_io_uring_setup(0x75a5, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 40.726665673s ago: executing program 2 (id=2353): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x1, 0xb, 0xd6}, 0x3a, [0x8003, 0x5, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x804, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0x4, 0x3, 0x10008, 0x4874, 0x80000001, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x400a, 0x4, 0x0, 0x5, 0x4, 0x461c3738, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x6, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xf, 0x2bf, 0x0, 0x8000009, 0xfffffff8, 0x3, 0x0, 0x800, 0x5, 0x2f, 0xc, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x7c3b, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x0, 0x2, 0xb, 0x4, 0x2, 0x8, 0x9, 0xb, 0x2, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0x3, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x10, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x2, 0x0, 0x1, 0x7, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x0, 0x6, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0xffffffff, 0x7, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x8000005, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0x80b, 0x5, 0x7, 0xed2, 0x8, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0xe13, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x19, 0x2, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0xfffffffb, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x3, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x25b4, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) unshare(0x22020600) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) listen(r4, 0x0) socket$tipc(0x1e, 0x5, 0x0) 40.174376924s ago: executing program 3 (id=2354): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xd79, &(0x7f0000000a40)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @random="78a4e8c9ab61", @void, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "b3814a", 0xd43, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, {[@hopopts={0x6, 0x12, '\x00', [@generic={0x3, 0x8f, "254cc02e9e4bb336cc3e7fd53024fb89ef444bc19b6c1c6c85c6bfaadbc701392cbf1014093ff54458a5fad7d21204b0e0b116d12048fa503f983f5863a881fe3cc5e7c022fc0b214a2c4a663e97705169c1f814b1cd2cb57f9de77aaad1a2024f6882a4d037b60dd84312abfa0ab0f7f69e6dd6525b74c15275fa6275571886f7901ad565cdd15ddd7a1474fc51b7"}]}, @hopopts={0x1d, 0x160, '\x00', [@generic={0xff, 0x54, "17f434ff513ff10476f22a7f963aedb570cb40ccd9169531f2e4aad0a5f9961e1409f34e3309b8352ff8ba7b20daca0f57998ebd50aea966c30a4ec92f896dc2dd98575044ac40e87d1e25911f2911b59dc7ec76"}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x7, 0xaa5, "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"}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x7a, 0x1, [0x6], "290269ba181aaa2a17da14d4b08acf49d6ce5cc2a9cd6d089dfb454cbfae84296d88e6949e90f89ec7b99484873fa9825f3af11809f28c97a99fc5cf56cfc032056c6e90cadb84651bd2250247ecd7e86db693a5b66e3bca2341e1c0c883c25a513cc4a37b0a750a1da2f3c976e1ce85386ea737e89b04e8bfad"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x3, 0x9, 0x400], "7c14b6f479161e3b4f3c30c95934cfac0c2b248460c3ae5e606e8af26eec56418c54fff033cce0319224586f15244b59c44eafd8c9a3fdb9b06c8dc300592087633d3e3e411c18eafa"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9, 0x6], "945e3671c9197f181fae1f8d22"}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x2, 0x2, 0x0, 0x2, 0x7, 0x7}, 0x1, {0x20e}}}, {0x8, 0x22eb, 0x0, {{0xa, 0x2, 0x3, 0x3, 0x1, 0x1, 0x3, 0x9}, 0x2, {0x800, 0x8, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x3, "30adc7201b86e97393f55e06f4e8bfe764eb644232848baa9e71601398a09eb3a029091701b06c79a36e68f52617fc9ec2786e806d9272445cd5a868bc0f8ac4c0d484d76119216daa055bcb264b9e7c8c4fa5ea37c566ab30faaafc3a86164abae778e8ec1a50a30db17e78b22f908864c7b9d68cef2f6096dc13"}}}}}}}, 0x0) 37.726067952s ago: executing program 2 (id=2356): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@delalloc}, {@nombcache}, {@barrier}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x8}}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xeab2, 0x0) ioctl(r0, 0x10001, &(0x7f0000000280)="6046595fe0495a64694709e1ccca2471b7b356aaf58931f03c75712ac09a1ab9a8f2ae4d2449c07623c0db0f0ff46fe7236d70312b83225b8b57bd3ca239976ee143ace7a8e6fa4bab3571ce56778de9d45453e26cbf5251eab31fe5c3a8e01b869df209098e843f5d70fcb7a3e3c2cd67ca664d270d51e5efdb09b18880bb8681445234f01f95cfc581c069d496c8e8cc5444f7d2ea") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)) setpriority(0x2, 0x0, 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r6, 0x8, 0x4000, 0x4000) 36.29805171s ago: executing program 3 (id=2358): socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 33.830541958s ago: executing program 2 (id=2359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 33.792927658s ago: executing program 3 (id=2361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) syz_io_uring_setup(0x75a5, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 31.1688177s ago: executing program 2 (id=2363): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x1, 0xb, 0xd6}, 0x3a, [0x8003, 0x5, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x804, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0x4, 0x3, 0x10008, 0x4874, 0x80000001, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x400a, 0x4, 0x0, 0x5, 0x4, 0x461c3738, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x6, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xf, 0x2bf, 0x0, 0x8000009, 0xfffffff8, 0x3, 0x0, 0x800, 0x5, 0x2f, 0xc, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x7c3b, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x0, 0x2, 0xb, 0x4, 0x2, 0x8, 0x9, 0xb, 0x2, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0x3, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x10, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x2, 0x0, 0x1, 0x7, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x0, 0x6, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0xffffffff, 0x7, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x8000005, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0x80b, 0x5, 0x7, 0xed2, 0x8, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0xe13, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x19, 0x2, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0xfffffffb, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x3, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x25b4, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) unshare(0x22020600) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6b) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x2}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x4000840}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 27.958068333s ago: executing program 2 (id=2366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, 0x0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400), 0x45, 0x7bf, &(0x7f0000000e00)="$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") openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000000000)="c8b52a", 0x3) 24.03530646s ago: executing program 3 (id=2371): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40040d8}, 0x810) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) 16.797316551s ago: executing program 0 (id=2377): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40040d8}, 0x810) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88dcf146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 14.139162383s ago: executing program 0 (id=2378): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x1, 0xb, 0xd6}, 0x3a, [0x8003, 0x5, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x804, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0x4, 0x3, 0x10008, 0x4874, 0x80000001, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x400a, 0x4, 0x0, 0x5, 0x4, 0x461c3738, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x6, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xf, 0x2bf, 0x0, 0x8000009, 0xfffffff8, 0x3, 0x0, 0x800, 0x5, 0x2f, 0xc, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x7c3b, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x0, 0x2, 0xb, 0x4, 0x2, 0x8, 0x9, 0xb, 0x2, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0x3, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x10, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x2, 0x0, 0x1, 0x7, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x0, 0x6, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0xffffffff, 0x7, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x8000005, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0x80b, 0x5, 0x7, 0xed2, 0x8, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0xe13, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x19, 0x2, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0xfffffffb, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x3, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x25b4, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) unshare(0x22020600) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x2}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x4000840}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 11.170061161s ago: executing program 0 (id=2380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 11.048954984s ago: executing program 33 (id=2366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, 0x0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400), 0x45, 0x7bf, &(0x7f0000000e00)="$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") openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000000000)="c8b52a", 0x3) 11.004360094s ago: executing program 4 (id=2382): syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)={0x2, 0x0, [{0x2, 0x7f, &(0x7f00000001c0)=""/127}, {0x11000, 0x89, &(0x7f0000000580)=""/137}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 9.860222547s ago: executing program 0 (id=2383): socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000005c0)={0x0, 0xfffffffc, 0x3, 0xc, 0x1fc, &(0x7f00000009c0)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 8.393198356s ago: executing program 0 (id=2384): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) readv(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x701, 0x10000, 0x0, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x44844}, 0x0) 7.753237928s ago: executing program 4 (id=2385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') syz_mount_image$fuse(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x40000, &(0x7f0000001940)=ANY=[@ANYBLOB="5517262cc490a4db23c0a7a9ad6b19e84eb01928cffc72e4ccf84e02006f1b748c2af06af795dd6f0e2d3681ed238bf7b405379684aa8ec9937f68148aa2ad5228cee944ab7e70f06525ca0e69f2ceb0b41a11c38289912c92f4773810009a74bfb52c55dbd5ea7d2d6e891b9b7aec0d2c2f7cbc0a0af2d9cb4bd042bb2cc7db5a4ca74442c063992e872bbbf95352ccee2e6eaac08f60deca8f96263f630d93a756f2cf6c1421425d", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000201010400000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x60) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="240003"], 0x10e0}}, 0x0) sendmsg$xdp(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, 0x1, r7, 0x12}, 0x10, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x24008084}, 0x20044080) recvmsg(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=""/4096, 0x1000}, 0x20) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x20008040) 6.082318981s ago: executing program 4 (id=2386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') syz_mount_image$fuse(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x40000, &(0x7f0000001940)=ANY=[@ANYBLOB="5517262cc490a4db23c0a7a9ad6b19e84eb01928cffc72e4ccf84e02006f1b748c2af06af795dd6f0e2d3681ed238bf7b405379684aa8ec9937f68148aa2ad5228cee944ab7e70f06525ca0e69f2ceb0b41a11c38289912c92f4773810009a74bfb52c55dbd5ea7d2d6e891b9b7aec0d2c2f7cbc0a0af2d9cb4bd042bb2cc7db5a4ca74442c063992e872bbbf95352ccee2e6eaac08f60deca8f96263f630d93a756f2cf6c1421425d", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="240003"], 0x10e0}}, 0x0) sendmsg$xdp(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, 0x1, r7, 0x12}, 0x10, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x24008084}, 0x20044080) recvmsg(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=""/4096, 0x1000}, 0x20) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x20008040) 4.453381343s ago: executing program 4 (id=2387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, 0x0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400), 0x45, 0x7bf, &(0x7f0000000e00)="$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") openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000000000)="c8b52a", 0x3) 4.256147626s ago: executing program 0 (id=2388): syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)={0x2, 0x0, [{0x2, 0x7f, &(0x7f00000001c0)=""/127}, {0x11000, 0x89, &(0x7f0000000580)=""/137}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 1.727273596s ago: executing program 4 (id=2389): socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000005c0)={0x0, 0xfffffffc, 0x3, 0xc, 0x1fc, &(0x7f00000009c0)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 0s ago: executing program 4 (id=2390): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x1, 0xb, 0xd6}, 0x3a, [0x8003, 0x5, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x804, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0x4, 0x3, 0x10008, 0x4874, 0x80000001, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x400a, 0x4, 0x0, 0x5, 0x4, 0x461c3738, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x6, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xf, 0x2bf, 0x0, 0x8000009, 0xfffffff8, 0x3, 0x0, 0x800, 0x5, 0x2f, 0xc, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x7c3b, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x0, 0x2, 0xb, 0x4, 0x2, 0x8, 0x9, 0xb, 0x2, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0x3, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x10, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x2, 0x0, 0x1, 0x7, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x0, 0x6, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0xffffffff, 0x7, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x8000005, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0x80b, 0x5, 0x7, 0xed2, 0x8, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0xe13, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x19, 0x2, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0xfffffffb, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x3, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x25b4, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) unshare(0x22020600) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6b) listen(r4, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x2}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x4000840}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) kernel console output (not intermixed with test programs): 858003][T12712] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 405.920285][T12729] loop1: detected capacity change from 0 to 32768 [ 405.934906][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.961698][T12743] tipc: Resetting bearer [ 406.041350][T12742] tipc: Resetting bearer [ 406.058584][T12729] read_mapping_page failed! [ 406.072882][T12729] ERROR: (device loop1): txCommit: [ 406.072882][T12729] [ 406.099985][ T27] audit: type=1800 audit(1759673078.057:38): pid=12712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1915" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 406.175714][T12742] tipc: Disabling bearer [ 406.185993][T12746] loop0: detected capacity change from 0 to 2048 [ 406.216722][T12746] EXT4-fs: Ignoring removed bh option [ 406.312354][T12746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.484960][T12751] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1926'. [ 406.578955][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.594766][T12712] overlay: ./file1 is not a directory [ 406.787550][T12753] tipc: Enabled bearer , priority 0 [ 406.810237][T12753] syzkaller0: entered promiscuous mode [ 406.812453][T12755] loop0: detected capacity change from 0 to 64 [ 406.815840][T12753] syzkaller0: entered allmulticast mode [ 406.937955][T12753] tipc: Resetting bearer [ 406.982376][T12752] tipc: Resetting bearer [ 407.071692][T12752] tipc: Disabling bearer [ 407.292118][T12763] loop1: detected capacity change from 0 to 2048 [ 407.335276][T12763] EXT4-fs: Ignoring removed bh option [ 407.346685][T12766] loop0: detected capacity change from 0 to 512 [ 407.374596][T12766] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 407.413506][T12766] EXT4-fs (loop0): invalid journal inode [ 407.438026][T12766] EXT4-fs (loop0): can't get journal size [ 407.449800][T12763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.472840][T12766] EXT4-fs (loop0): 1 truncate cleaned up [ 407.529073][T12766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.631280][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1930'. [ 407.648051][ T27] audit: type=1800 audit(1759673079.607:39): pid=12766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1933" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 407.695811][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.712463][T12772] macvtap13: entered promiscuous mode [ 407.715615][ T27] audit: type=1800 audit(1759673079.637:40): pid=12766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1933" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 407.732645][T12772] bond0: entered promiscuous mode [ 407.764746][T12772] macvtap13: entered allmulticast mode [ 407.770540][T12772] bond0: entered allmulticast mode [ 407.791405][T12772] 8021q: adding VLAN 0 to HW filter on device macvtap13 [ 407.820731][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1930'. [ 407.865242][T12773] bond0: left allmulticast mode [ 407.870212][T12773] bond0: left promiscuous mode [ 407.957940][T12775] tipc: Enabled bearer , priority 0 [ 407.981443][T12775] syzkaller0: entered promiscuous mode [ 408.050873][T12775] syzkaller0: entered allmulticast mode [ 408.132125][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.141482][T12779] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1936'. [ 408.175797][T12775] tipc: Resetting bearer [ 408.230881][T12767] loop3: detected capacity change from 0 to 32768 [ 408.246203][T12774] tipc: Resetting bearer [ 408.256840][T12767] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1934 (12767) [ 408.335214][T12767] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 408.360882][T12774] tipc: Disabling bearer [ 408.377943][T12767] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 408.385726][T12782] loop0: detected capacity change from 0 to 2048 [ 408.390137][T12767] BTRFS info (device loop3): using free space tree [ 408.424760][T12782] EXT4-fs: Ignoring removed bh option [ 408.440607][T12782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.574584][T12767] BTRFS info (device loop3): enabling ssd optimizations [ 408.581887][T12767] BTRFS info (device loop3): auto enabling async discard [ 408.582446][T12804] loop1: detected capacity change from 0 to 64 [ 408.657927][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.945029][ T5795] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 409.231266][T12811] tipc: Enabled bearer , priority 0 [ 409.275755][T12814] syzkaller0: entered promiscuous mode [ 409.294507][T12814] syzkaller0: entered allmulticast mode [ 409.322045][T12787] loop2: detected capacity change from 0 to 32768 [ 409.349706][T12787] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1938 (12787) [ 409.410671][T12787] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 409.451164][T12787] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 409.451708][T12814] tipc: Resetting bearer [ 409.490514][T12787] BTRFS info (device loop2): using free space tree [ 409.556525][T12810] tipc: Resetting bearer [ 409.619566][T12810] tipc: Disabling bearer [ 409.677884][T12787] BTRFS info (device loop2): enabling ssd optimizations [ 409.704659][T12787] BTRFS info (device loop2): auto enabling async discard [ 409.905141][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1945'. [ 409.957025][T12832] macvtap22: entered promiscuous mode [ 409.974043][T12832] bond0: entered promiscuous mode [ 409.990455][T12832] macvtap22: entered allmulticast mode [ 410.003739][T12832] bond0: entered allmulticast mode [ 410.017415][T12832] 8021q: adding VLAN 0 to HW filter on device macvtap22 [ 410.044027][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1945'. [ 410.059604][ T5797] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 410.072706][T12835] bond0: left allmulticast mode [ 410.078799][T12835] bond0: left promiscuous mode [ 410.219025][T12813] loop3: detected capacity change from 0 to 40427 [ 410.245774][T12813] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x7ffff [ 410.274020][T12813] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 410.303399][T12813] F2FS-fs (loop3): Image doesn't support compression [ 410.375670][T12813] F2FS-fs (loop3): invalid crc value [ 410.386074][T12813] F2FS-fs (loop3): Found nat_bits in checkpoint [ 410.427436][T12837] tipc: Enabled bearer , priority 0 [ 410.471195][T12837] syzkaller0: entered promiscuous mode [ 410.481249][T12837] syzkaller0: entered allmulticast mode [ 410.553953][T12813] F2FS-fs (loop3): Start checkpoint disabled! [ 410.592593][T12837] tipc: Resetting bearer [ 410.598646][T12813] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 410.640513][T12842] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1946'. [ 410.694696][T12836] tipc: Resetting bearer [ 410.835479][T12836] tipc: Disabling bearer [ 410.920509][T12834] loop0: detected capacity change from 0 to 32768 [ 410.965571][T12834] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 411.048375][ T1129] kworker/u4:6: attempt to access beyond end of device [ 411.048375][ T1129] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 411.096945][ T1129] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 411.124643][ T1129] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 411.138602][ T5792] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 411.261182][T12846] tipc: Enabled bearer , priority 0 [ 411.299620][T12846] syzkaller0: entered promiscuous mode [ 411.331568][T12846] syzkaller0: entered allmulticast mode [ 411.388560][T12846] tipc: Resetting bearer [ 411.456952][T12845] tipc: Resetting bearer [ 411.555643][T12845] tipc: Disabling bearer [ 411.596672][T12852] tipc: Enabled bearer , priority 0 [ 411.624948][T12852] syzkaller0: entered promiscuous mode [ 411.630511][T12852] syzkaller0: entered allmulticast mode [ 411.758954][T12852] tipc: Resetting bearer [ 411.795742][T12851] tipc: Resetting bearer [ 411.813495][T12857] loop3: detected capacity change from 0 to 64 [ 411.864238][T12851] tipc: Disabling bearer [ 411.975032][T12844] loop2: detected capacity change from 0 to 40427 [ 412.007831][T12844] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 412.028669][T12844] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 412.118257][T12844] F2FS-fs (loop2): invalid crc value [ 412.170928][T12844] F2FS-fs (loop2): Found nat_bits in checkpoint [ 412.248063][T12866] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1956'. [ 412.342704][T12844] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 412.364817][T12844] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 412.460536][T12871] loop0: detected capacity change from 0 to 512 [ 412.491037][T12871] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 412.532119][T12871] EXT4-fs (loop0): invalid journal inode [ 412.560890][ T27] audit: type=1800 audit(1759673084.517:41): pid=12844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1948" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 412.569002][T12871] EXT4-fs (loop0): can't get journal size [ 412.643739][T12871] EXT4-fs (loop0): 1 truncate cleaned up [ 412.651219][T12871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.710198][ T27] audit: type=1800 audit(1759673084.667:42): pid=12871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1958" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 413.016815][T12868] loop1: detected capacity change from 0 to 32768 [ 413.040021][T12844] overlay: ./file1 is not a directory [ 413.042977][T12868] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 413.295498][ T5967] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 413.307360][T12865] loop3: detected capacity change from 0 to 32768 [ 413.324749][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.336508][T12865] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1955 (12865) [ 413.430583][T12865] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 413.449342][T12865] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 413.501880][T12865] BTRFS info (device loop3): using free space tree [ 413.689018][T12865] BTRFS info (device loop3): enabling ssd optimizations [ 413.716686][T12865] BTRFS info (device loop3): auto enabling async discard [ 413.881499][T12900] loop1: detected capacity change from 0 to 64 [ 413.990749][T12902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1964'. [ 414.058015][T12902] macvtap16: entered promiscuous mode [ 414.088203][ T5795] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 414.099464][T12902] bond0: entered promiscuous mode [ 414.109818][T12902] macvtap16: entered allmulticast mode [ 414.125009][T12902] bond0: entered allmulticast mode [ 414.145348][T12902] 8021q: adding VLAN 0 to HW filter on device macvtap16 [ 414.168579][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1964'. [ 414.242578][T12903] bond0: left allmulticast mode [ 414.275690][T12903] bond0: left promiscuous mode [ 414.291566][T12905] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1966'. [ 414.483816][T12907] tipc: Enabled bearer , priority 0 [ 414.525890][T12907] syzkaller0: entered promiscuous mode [ 414.531472][T12907] syzkaller0: entered allmulticast mode [ 414.675305][T12914] tipc: Resetting bearer [ 414.725507][T12906] tipc: Resetting bearer [ 414.819339][T12906] tipc: Disabling bearer [ 415.071719][T12916] loop3: detected capacity change from 0 to 512 [ 415.109050][T12916] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 415.136329][T12916] EXT4-fs (loop3): invalid journal inode [ 415.152502][T12916] EXT4-fs (loop3): can't get journal size [ 415.169116][T12916] EXT4-fs (loop3): 1 truncate cleaned up [ 415.177964][T12916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.198257][ T27] audit: type=1800 audit(1759673087.157:43): pid=12916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1969" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 415.434028][T12913] loop1: detected capacity change from 0 to 32768 [ 415.464689][T12913] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 415.493606][T12913] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 415.522015][T12913] BTRFS info (device loop1): force clearing of disk cache [ 415.542107][T12913] BTRFS info (device loop1): force zlib compression, level 3 [ 415.561367][T12913] BTRFS info (device loop1): enabling disk space caching [ 415.599627][T12913] BTRFS info (device loop1): max_inline at 0 [ 415.630065][T12913] BTRFS info (device loop1): enabling auto defrag [ 415.649647][T12913] BTRFS info (device loop1): disk space caching is enabled [ 415.664333][T12909] loop0: detected capacity change from 0 to 32768 [ 415.735861][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.784726][T12909] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 415.867485][T12913] BTRFS info (device loop1): enabling ssd optimizations [ 415.905417][T12913] BTRFS info (device loop1): auto enabling async discard [ 415.943306][T12909] XFS (loop0): Ending clean mount [ 415.959239][T12913] BTRFS info (device loop1): rebuilding free space tree [ 416.002502][T12909] XFS (loop0): Quotacheck needed: Please wait. [ 416.022575][T12947] loop3: detected capacity change from 0 to 2048 [ 416.050960][T12911] loop2: detected capacity change from 0 to 40427 [ 416.073003][T12947] EXT4-fs: Ignoring removed bh option [ 416.082894][T12913] BTRFS info (device loop1): disabling free space tree [ 416.106544][T12913] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 416.116614][T12913] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 416.131513][T12911] F2FS-fs (loop2): build fault injection attr: rate: 684, type: 0x7ffff [ 416.157658][T12911] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 416.164491][T12909] XFS (loop0): Quotacheck: Done. [ 416.171689][T12911] F2FS-fs (loop2): Image doesn't support compression [ 416.193498][T12947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.235538][T12911] F2FS-fs (loop2): invalid crc value [ 416.246495][ T27] audit: type=1800 audit(1759673088.187:44): pid=12909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1967" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 416.299295][T12911] F2FS-fs (loop2): Found nat_bits in checkpoint [ 416.430261][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.451592][ T5790] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 416.500195][T12911] F2FS-fs (loop2): Start checkpoint disabled! [ 416.541315][T12911] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 416.838027][T12954] tipc: Enabled bearer , priority 0 [ 416.870690][T12954] syzkaller0: entered promiscuous mode [ 416.871361][ T5794] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 416.887835][T12954] syzkaller0: entered allmulticast mode [ 416.965158][T12954] tipc: Resetting bearer [ 416.999282][T12953] tipc: Resetting bearer [ 417.096020][T12953] tipc: Disabling bearer [ 417.133739][T12958] loop0: detected capacity change from 0 to 2048 [ 417.160291][T12958] EXT4-fs: Ignoring removed bh option [ 417.201614][ T1129] kworker/u4:6: attempt to access beyond end of device [ 417.201614][ T1129] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 417.265551][ T1129] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 417.289990][ T1129] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 417.313499][T12958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.665054][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1976'. [ 417.677154][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.744903][T12967] macvtap23: entered promiscuous mode [ 417.767634][T12967] bond0: entered promiscuous mode [ 417.788851][T12967] macvtap23: entered allmulticast mode [ 417.824660][T12967] bond0: entered allmulticast mode [ 417.842717][T12967] 8021q: adding VLAN 0 to HW filter on device macvtap23 [ 417.864463][T12968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1976'. [ 417.931860][T12968] bond0: left allmulticast mode [ 417.961200][T12968] bond0: left promiscuous mode [ 418.021934][T12971] tipc: Enabled bearer , priority 0 [ 418.046651][T12971] syzkaller0: entered promiscuous mode [ 418.052202][T12971] syzkaller0: entered allmulticast mode [ 418.158998][T12974] loop1: detected capacity change from 0 to 512 [ 418.176112][T12971] tipc: Resetting bearer [ 418.193831][T12974] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 418.205428][T12969] tipc: Resetting bearer [ 418.253406][T12974] EXT4-fs (loop1): invalid journal inode [ 418.278267][T12974] EXT4-fs (loop1): can't get journal size [ 418.289056][T12969] tipc: Disabling bearer [ 418.305110][T12974] EXT4-fs (loop1): 1 truncate cleaned up [ 418.316122][T12974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.375449][ T27] audit: type=1800 audit(1759673090.337:45): pid=12974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1978" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 418.386646][T12965] loop3: detected capacity change from 0 to 32768 [ 418.520559][T12965] read_mapping_page failed! [ 418.540032][T12965] ERROR: (device loop3): txCommit: [ 418.540032][T12965] [ 418.893588][T12972] loop2: detected capacity change from 0 to 32768 [ 418.914182][T12972] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 418.987009][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.194586][ T5792] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 419.793252][T12982] loop0: detected capacity change from 0 to 32768 [ 419.824862][T12982] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1980 (12982) [ 419.866785][T12982] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 419.890396][T12982] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 419.924702][T12982] BTRFS info (device loop0): using free space tree [ 420.054551][T12982] BTRFS info (device loop0): enabling ssd optimizations [ 420.061824][T12982] BTRFS info (device loop0): auto enabling async discard [ 420.180610][T12988] loop2: detected capacity change from 0 to 32768 [ 420.194908][T12984] loop3: detected capacity change from 0 to 40427 [ 420.222950][T12984] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 420.248650][T12987] loop1: detected capacity change from 0 to 32768 [ 420.264684][T12984] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 420.314095][T12987] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 420.323015][T12988] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 420.345261][T12984] F2FS-fs (loop3): invalid crc value [ 420.350959][T12987] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 420.399157][T12984] F2FS-fs (loop3): Found nat_bits in checkpoint [ 420.500772][T12988] XFS (loop2): Ending clean mount [ 420.522373][T12988] XFS (loop2): Quotacheck needed: Please wait. [ 420.611864][T12984] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 420.640860][T12984] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 420.659029][T12987] XFS (loop1): Ending clean mount [ 420.670617][T12988] XFS (loop2): Quotacheck: Done. [ 420.701798][T12987] XFS (loop1): Quotacheck needed: Please wait. [ 420.761068][ T27] audit: type=1800 audit(1759673092.697:46): pid=12988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1984" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 420.940105][T12987] XFS (loop1): Quotacheck: Done. [ 420.968579][ T5797] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 421.022975][ T27] audit: type=1800 audit(1759673092.977:47): pid=12984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1982" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 421.266382][ T5790] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 421.353824][ T5794] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 421.452941][T13031] loop2: detected capacity change from 0 to 64 [ 421.583837][T12984] overlay: ./file1 is not a directory [ 421.740792][T13033] tipc: Enabled bearer , priority 0 [ 421.758791][T13033] syzkaller0: entered promiscuous mode [ 421.782303][T13033] syzkaller0: entered allmulticast mode [ 421.815321][T13033] tipc: Resetting bearer [ 421.870820][T13032] tipc: Resetting bearer [ 422.022410][T13032] tipc: Disabling bearer [ 422.198502][T13037] loop1: detected capacity change from 0 to 2048 [ 422.235545][T13037] EXT4-fs: Ignoring removed bh option [ 422.311049][T13037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.350115][T13042] tipc: Enabled bearer , priority 0 [ 422.370348][T13042] syzkaller0: entered promiscuous mode [ 422.376118][T13042] syzkaller0: entered allmulticast mode [ 422.492624][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.539447][T13040] tipc: Resetting bearer [ 422.726385][T13040] tipc: Disabling bearer [ 422.752286][T13035] loop2: detected capacity change from 0 to 32768 [ 422.770492][T13035] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1996 (13035) [ 422.820087][T13035] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 422.840847][T13035] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 422.874567][T13035] BTRFS info (device loop2): force clearing of disk cache [ 422.881824][T13035] BTRFS info (device loop2): force zlib compression, level 3 [ 422.914860][T13035] BTRFS info (device loop2): enabling disk space caching [ 422.922047][T13035] BTRFS info (device loop2): max_inline at 0 [ 422.957842][T13035] BTRFS info (device loop2): enabling auto defrag [ 422.993685][T13035] BTRFS info (device loop2): disk space caching is enabled [ 423.085377][T13051] loop1: detected capacity change from 0 to 512 [ 423.097654][T13057] loop0: detected capacity change from 0 to 2048 [ 423.105623][T13057] EXT4-fs: Ignoring removed bh option [ 423.114440][T13051] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 423.135257][T13057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.187987][T13051] EXT4-fs (loop1): invalid journal inode [ 423.193809][T13051] EXT4-fs (loop1): can't get journal size [ 423.233107][T13035] BTRFS info (device loop2): enabling ssd optimizations [ 423.281597][T13051] EXT4-fs (loop1): 1 truncate cleaned up [ 423.287399][T13035] BTRFS info (device loop2): auto enabling async discard [ 423.295967][T13035] BTRFS info (device loop2): rebuilding free space tree [ 423.296388][T13051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.354506][ T27] audit: type=1800 audit(1759673095.277:48): pid=13051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1992" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 423.469492][T13035] BTRFS info (device loop2): disabling free space tree [ 423.497575][T13035] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 423.526770][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.535779][T13035] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 423.688104][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.142950][T13054] loop3: detected capacity change from 0 to 40427 [ 424.166503][T13054] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 424.184815][T13054] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 424.220624][T13054] F2FS-fs (loop3): invalid crc value [ 424.237882][T13054] F2FS-fs (loop3): Found nat_bits in checkpoint [ 424.302335][ T5797] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 424.362624][T13054] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 424.371409][T13054] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 424.638924][ T27] audit: type=1800 audit(1759673096.587:49): pid=13054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1988" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 425.189662][T13054] overlay: ./file1 is not a directory [ 425.203615][T13076] loop1: detected capacity change from 0 to 32768 [ 425.281670][T13076] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 425.354481][T13083] loop0: detected capacity change from 0 to 32768 [ 425.384689][T13076] XFS (loop1): Ending clean mount [ 425.436716][T13076] XFS (loop1): Quotacheck needed: Please wait. [ 425.563199][T13076] XFS (loop1): Quotacheck: Done. [ 425.695094][ T27] audit: type=1800 audit(1759673097.657:50): pid=13076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1994" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 425.818265][ T5794] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 425.870629][T13086] loop2: detected capacity change from 0 to 32768 [ 425.942200][T13086] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 426.177511][T13086] XFS (loop2): Ending clean mount [ 426.234924][T13086] XFS (loop2): Quotacheck needed: Please wait. [ 426.329501][T13086] XFS (loop2): Quotacheck: Done. [ 426.425835][T13106] tipc: Enabled bearer , priority 0 [ 426.433686][T13106] syzkaller0: entered promiscuous mode [ 426.472604][ T27] audit: type=1800 audit(1759673098.427:51): pid=13086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1995" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 426.495643][T13106] syzkaller0: entered allmulticast mode [ 426.513604][T13105] tipc: Resetting bearer [ 426.602029][ T5797] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 426.615335][T13105] tipc: Disabling bearer [ 427.098432][T13113] Cannot find add_set index 0 as target [ 427.850976][T13117] loop3: detected capacity change from 0 to 2048 [ 427.865715][T13117] EXT4-fs: Ignoring removed bh option [ 427.957021][T13117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.974086][T13104] loop1: detected capacity change from 0 to 32768 [ 428.080693][T13104] read_mapping_page failed! [ 428.092511][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.143599][T13104] ERROR: (device loop1): txCommit: [ 428.143599][T13104] [ 428.514230][T13127] loop1: detected capacity change from 0 to 1024 [ 428.525668][T13127] EXT4-fs: Ignoring removed nobh option [ 428.558449][T13127] EXT4-fs: Ignoring removed bh option [ 428.578201][T13127] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 428.606716][T13127] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 428.630695][T13130] tipc: Enabled bearer , priority 0 [ 428.668121][T13130] syzkaller0: entered promiscuous mode [ 428.685623][T13130] syzkaller0: entered allmulticast mode [ 428.734209][T13119] loop0: detected capacity change from 0 to 32768 [ 428.750346][T13127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.762805][T13119] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2005 (13119) [ 428.795915][T13128] tipc: Resetting bearer [ 428.836524][T13128] tipc: Disabling bearer [ 428.904565][T13119] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 428.948742][T13119] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 428.990062][T13119] BTRFS info (device loop0): force clearing of disk cache [ 429.031841][T13119] BTRFS info (device loop0): force zlib compression, level 3 [ 429.131564][T13119] BTRFS info (device loop0): enabling disk space caching [ 429.169101][T13119] BTRFS info (device loop0): max_inline at 0 [ 429.490453][T13136] lo speed is unknown, defaulting to 1000 [ 429.637353][T13137] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.2006: Allocating blocks 385-513 which overlap fs metadata [ 430.382415][T13119] BTRFS info (device loop0): enabling auto defrag [ 430.403286][T13119] BTRFS info (device loop0): disk space caching is enabled [ 431.058578][T13119] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 431.068683][T13119] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 431.125432][T13119] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 431.175344][T13119] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 431.214893][T13119] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 431.268934][T13119] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 431.335511][T13119] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 431.409238][T13119] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 431.467229][T13119] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 432.183395][T13150] loop2: detected capacity change from 0 to 32768 [ 432.518174][T13119] BTRFS error (device loop0): open_ctree failed: -12 [ 432.522218][ T5792] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (5792) [ 432.566842][T13150] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 432.605300][T13150] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 432.633098][T13158] tipc: Enabled bearer , priority 0 [ 432.639967][T13150] BTRFS info (device loop2): force clearing of disk cache [ 432.658720][T13158] syzkaller0: entered promiscuous mode [ 432.664262][T13158] syzkaller0: entered allmulticast mode [ 432.670555][T13150] BTRFS info (device loop2): force zlib compression, level 3 [ 432.694708][T13150] BTRFS info (device loop2): enabling disk space caching [ 432.704579][T13150] BTRFS info (device loop2): max_inline at 0 [ 432.721905][T13150] BTRFS info (device loop2): enabling auto defrag [ 432.740287][T13150] BTRFS info (device loop2): disk space caching is enabled [ 432.778803][T13157] tipc: Resetting bearer [ 432.866468][T13157] tipc: Disabling bearer [ 433.027302][T13150] BTRFS info (device loop2): enabling ssd optimizations [ 433.039124][T13150] BTRFS info (device loop2): auto enabling async discard [ 433.050838][T13150] BTRFS info (device loop2): rebuilding free space tree [ 433.107719][T13150] BTRFS info (device loop2): disabling free space tree [ 433.155869][T13150] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 433.186206][T13150] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 433.512060][T13186] loop3: detected capacity change from 0 to 2048 [ 433.540662][T13186] EXT4-fs: Ignoring removed bh option [ 433.571196][T13136] EXT4-fs (loop1): pa ffff88807977a0e8: logic 16, phys. 129, len 24 [ 433.579864][T13136] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 433.730282][T13186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.788636][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.967509][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.068234][ T5797] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 434.393441][T13182] loop0: detected capacity change from 0 to 40427 [ 434.420656][T13182] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 434.444340][T13182] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 434.495543][T13182] F2FS-fs (loop0): invalid crc value [ 434.496025][T13197] loop3: detected capacity change from 0 to 128 [ 434.544892][T13182] F2FS-fs (loop0): Found nat_bits in checkpoint [ 434.624036][T13197] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 434.677163][T13197] hpfs: filesystem error: improperly stopped [ 434.711000][T13197] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 434.733273][T13182] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 434.761024][T13182] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 434.763277][T13197] hpfs: You really don't want any checks? You are crazy... [ 434.796171][T13203] tipc: Enabled bearer , priority 0 [ 434.804189][T13203] syzkaller0: entered promiscuous mode [ 434.810248][T13203] syzkaller0: entered allmulticast mode [ 434.851706][T13197] hpfs: hpfs_map_sector(): read error [ 434.867991][T13197] hpfs: code page support is disabled [ 434.890791][T13201] tipc: Resetting bearer [ 434.905352][T13197] hpfs: hpfs_map_4sectors(): unaligned read [ 434.911763][T13197] hpfs: hpfs_map_4sectors(): unaligned read [ 434.929071][T13197] hpfs: filesystem error: unable to find root dir [ 435.001249][T13201] tipc: Disabling bearer [ 435.072427][ T27] audit: type=1800 audit(1759673107.027:52): pid=13182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2012" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 435.103776][T13197] hpfs: hpfs_map_4sectors(): unaligned read [ 435.134154][T13197] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 435.425100][T13197] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 435.447782][T13182] overlay: ./file1 is not a directory [ 435.480120][T13193] loop1: detected capacity change from 0 to 40427 [ 435.557430][T13193] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 435.570192][T13193] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 435.613167][T13193] F2FS-fs (loop1): invalid crc value [ 435.772584][T13211] Cannot find add_set index 0 as target [ 435.969411][T13193] F2FS-fs (loop1): Found nat_bits in checkpoint [ 436.736562][T13193] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 436.743682][T13193] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 437.996509][T13221] loop3: detected capacity change from 0 to 2048 [ 438.033995][T13221] EXT4-fs: Ignoring removed bh option [ 438.135865][T13221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.458659][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.502688][T13229] tipc: Enabled bearer , priority 0 [ 438.545174][T13229] syzkaller0: entered promiscuous mode [ 438.550720][T13229] syzkaller0: entered allmulticast mode [ 438.594383][ C0] sched: RT throttling activated [ 438.627075][T13228] tipc: Resetting bearer [ 438.786509][T13228] tipc: Disabling bearer [ 439.636683][T13243] loop2: detected capacity change from 0 to 128 [ 439.681577][T13243] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 439.792865][T13243] hpfs: filesystem error: improperly stopped [ 439.862558][T13243] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 439.916466][T13243] hpfs: You really don't want any checks? You are crazy... [ 439.968017][T13243] hpfs: hpfs_map_sector(): read error [ 440.031592][T13243] hpfs: code page support is disabled [ 440.062928][T13243] hpfs: hpfs_map_4sectors(): unaligned read [ 440.091821][T13243] hpfs: hpfs_map_4sectors(): unaligned read [ 440.114110][T13243] hpfs: filesystem error: unable to find root dir [ 440.254858][T13243] hpfs: hpfs_map_4sectors(): unaligned read [ 440.291295][T13243] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 440.445153][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.451668][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.580809][T13243] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 440.951615][T13239] loop3: detected capacity change from 0 to 32768 [ 441.000419][T13239] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2028 (13239) [ 441.488988][T13247] loop2: detected capacity change from 0 to 32768 [ 441.602588][T13239] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 441.608661][ T5967] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (5967) [ 441.623952][T13239] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 441.624233][T13247] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.2030 (13247) [ 441.714582][T13239] BTRFS info (device loop3): using free space tree [ 441.978897][T13239] BTRFS info (device loop3): enabling ssd optimizations [ 442.026827][T13239] BTRFS info (device loop3): auto enabling async discard [ 442.639755][ T5795] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 442.943694][ T5792] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (5792) [ 443.100706][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2033'. [ 443.241666][T13275] loop1: detected capacity change from 0 to 2048 [ 443.249566][T13275] EXT4-fs: Ignoring removed bh option [ 443.249903][T13273] dummy0: entered promiscuous mode [ 443.295748][T13273] macvtap10: entered promiscuous mode [ 443.316451][T13273] macvtap10: entered allmulticast mode [ 443.335208][T13273] dummy0: entered allmulticast mode [ 443.357451][T13275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.467194][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.491827][T13279] tipc: Enabled bearer , priority 0 [ 443.501801][T13279] syzkaller0: entered promiscuous mode [ 443.527665][T13279] syzkaller0: entered allmulticast mode [ 443.657316][T13278] tipc: Resetting bearer [ 443.857737][T13278] tipc: Disabling bearer [ 443.896751][T13290] loop1: detected capacity change from 0 to 2048 [ 443.932782][T13290] EXT4-fs: Ignoring removed bh option [ 444.000380][T13290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.198266][T13289] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 444.318765][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.325793][T13288] loop0: detected capacity change from 0 to 32768 [ 444.349428][T13288] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 444.386520][T13288] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 444.407224][T13288] BTRFS info (device loop0): force clearing of disk cache [ 444.431744][T13288] BTRFS info (device loop0): force zlib compression, level 3 [ 444.458914][T13288] BTRFS info (device loop0): enabling disk space caching [ 444.493358][T13288] BTRFS info (device loop0): max_inline at 0 [ 444.514776][T13288] BTRFS info (device loop0): enabling auto defrag [ 444.521541][T13288] BTRFS info (device loop0): disk space caching is enabled [ 444.747820][T13288] BTRFS info (device loop0): enabling ssd optimizations [ 444.769989][T13288] BTRFS info (device loop0): auto enabling async discard [ 444.823861][T13288] BTRFS info (device loop0): rebuilding free space tree [ 444.896890][T13288] BTRFS info (device loop0): disabling free space tree [ 444.903919][T13288] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 444.964636][T13288] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 445.086131][T13302] loop1: detected capacity change from 0 to 32768 [ 445.115000][T13302] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.2042 (13302) [ 445.271470][ T5792] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (5792) [ 445.570364][T13327] loop1: detected capacity change from 0 to 2048 [ 445.595632][ T5790] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 445.598133][T13327] EXT4-fs: Ignoring removed bh option [ 445.650515][T13327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.788593][T13300] loop2: detected capacity change from 0 to 40427 [ 445.866769][T13300] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 445.885249][T13300] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 445.959488][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.996126][T13300] F2FS-fs (loop2): invalid crc value [ 446.041257][T13300] F2FS-fs (loop2): Found nat_bits in checkpoint [ 446.260008][T13300] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 446.283996][T13300] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 446.336213][T13325] loop3: detected capacity change from 0 to 32768 [ 446.529766][T13325] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 446.809260][T13325] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 447.668730][ T27] audit: type=1800 audit(1759673119.617:53): pid=13300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2041" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 447.725971][T13325] XFS (loop3): Ending clean mount [ 447.813898][T13325] XFS (loop3): Quotacheck needed: Please wait. [ 448.022485][T13325] XFS (loop3): Quotacheck: Done. [ 448.208907][T13351] tipc: Enabled bearer , priority 0 [ 448.231172][T13351] syzkaller0: entered promiscuous mode [ 448.247360][T13351] syzkaller0: entered allmulticast mode [ 448.444220][T13350] tipc: Resetting bearer [ 448.486653][ T5795] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 448.642961][T13350] tipc: Disabling bearer [ 448.881402][T13354] loop1: detected capacity change from 0 to 2048 [ 448.889048][T13354] EXT4-fs: Ignoring removed bh option [ 448.923781][T13354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.960117][T13354] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 448.986925][T13354] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 12 with max blocks 22 with error 28 [ 449.000632][T13354] EXT4-fs (loop1): This should not happen!! Data will be lost [ 449.000632][T13354] [ 449.011785][T13354] EXT4-fs (loop1): Total free blocks count 0 [ 449.018342][T13354] EXT4-fs (loop1): Free/Dirty block details [ 449.024305][T13354] EXT4-fs (loop1): free_blocks=2415919104 [ 449.031128][T13354] EXT4-fs (loop1): dirty_blocks=48 [ 449.036502][T13354] EXT4-fs (loop1): Block reservation details [ 449.042626][T13354] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 449.134092][T13363] loop0: detected capacity change from 0 to 512 [ 449.164223][T13363] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 449.182802][T13363] EXT4-fs (loop0): invalid journal inode [ 449.189460][ T2973] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 449.234778][T13363] EXT4-fs (loop0): can't get journal size [ 449.242952][T13363] EXT4-fs (loop0): 1 truncate cleaned up [ 449.255923][T13363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.362158][ T27] audit: type=1800 audit(1759673121.317:54): pid=13363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2053" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 449.382990][ T27] audit: type=1800 audit(1759673121.327:55): pid=13363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2053" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 449.430745][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2050'. [ 449.448381][T13366] dummy0: entered promiscuous mode [ 449.453918][T13366] macvtap14: entered promiscuous mode [ 449.459754][T13366] macvtap14: entered allmulticast mode [ 449.465499][T13366] dummy0: entered allmulticast mode [ 449.775719][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.249090][T13369] loop1: detected capacity change from 0 to 32768 [ 450.296753][T13369] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 450.426025][T13369] XFS (loop1): Ending clean mount [ 450.464805][T13369] XFS (loop1): Quotacheck needed: Please wait. [ 450.584694][T13369] XFS (loop1): Quotacheck: Done. [ 450.705844][T13392] tipc: Enabled bearer , priority 0 [ 450.714034][ T27] audit: type=1800 audit(1759673122.667:56): pid=13369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2054" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 450.756224][T13392] syzkaller0: entered promiscuous mode [ 450.772134][T13392] syzkaller0: entered allmulticast mode [ 450.856498][T13391] tipc: Resetting bearer [ 450.978342][T13391] tipc: Disabling bearer [ 451.214162][T13380] loop0: detected capacity change from 0 to 32768 [ 451.312687][T13380] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 451.323772][T13390] loop3: detected capacity change from 0 to 40427 [ 451.340562][T13390] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 451.349262][T13380] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 451.366593][T13390] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 451.410846][T13390] F2FS-fs (loop3): invalid crc value [ 451.478181][T13405] loop2: detected capacity change from 0 to 1024 [ 451.490163][T13380] XFS (loop0): Ending clean mount [ 451.513907][T13390] F2FS-fs (loop3): Found nat_bits in checkpoint [ 451.533598][T13380] XFS (loop0): Quotacheck needed: Please wait. [ 451.566078][T13405] EXT4-fs: Ignoring removed nobh option [ 451.596403][T13405] EXT4-fs: Ignoring removed bh option [ 451.646739][T13405] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 451.677789][T13380] XFS (loop0): Quotacheck: Done. [ 451.710958][T13405] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 451.798208][T13390] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 451.821126][T13405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.845228][T13390] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 452.102655][ T5790] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 452.132891][ T27] audit: type=1800 audit(1759673124.087:57): pid=13390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2059" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 452.682023][T13414] lo speed is unknown, defaulting to 1000 [ 452.931005][T13415] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.2062: Allocating blocks 385-513 which overlap fs metadata [ 452.984626][T13413] EXT4-fs (loop2): pa ffff8880759419f8: logic 16, phys. 129, len 24 [ 452.992935][T13413] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 453.081934][ T5794] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 453.326964][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.051834][T13426] loop2: detected capacity change from 0 to 1024 [ 454.072221][T13426] EXT4-fs: Ignoring removed nobh option [ 454.089448][T13426] EXT4-fs: Ignoring removed bh option [ 454.116645][T13426] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 454.163862][T13426] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 454.209079][T13426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.413529][T13432] tipc: Enabled bearer , priority 0 [ 454.431540][T13432] syzkaller0: entered promiscuous mode [ 454.440884][T13432] syzkaller0: entered allmulticast mode [ 454.479274][T13421] loop0: detected capacity change from 0 to 32768 [ 454.591346][T13421] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2063 (13421) [ 455.028686][T13436] lo speed is unknown, defaulting to 1000 [ 455.281894][T13437] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.2068: Allocating blocks 385-513 which overlap fs metadata [ 455.444595][T13421] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 455.446305][T13438] EXT4-fs (loop2): pa ffff8880759410e8: logic 16, phys. 129, len 24 [ 455.463381][T13438] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 455.490862][T13421] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 455.495272][T13431] tipc: Resetting bearer [ 455.540203][T13421] BTRFS info (device loop0): using free space tree [ 455.816461][T13431] tipc: Disabling bearer [ 455.830981][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.862422][T13421] BTRFS info (device loop0): enabling ssd optimizations [ 455.924293][T13421] BTRFS info (device loop0): auto enabling async discard [ 457.900632][ T5790] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 458.702731][T13466] loop1: detected capacity change from 0 to 32768 [ 458.780052][T13466] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 458.856813][T13466] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 458.994149][T13466] XFS (loop1): Ending clean mount [ 459.029620][T13466] XFS (loop1): Quotacheck needed: Please wait. [ 459.133474][T13466] XFS (loop1): Quotacheck: Done. [ 459.288976][ T5794] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 459.304207][T13486] loop3: detected capacity change from 0 to 64 [ 460.846256][T13491] tipc: Enabled bearer , priority 0 [ 460.877734][T13491] syzkaller0: entered promiscuous mode [ 460.883306][T13491] syzkaller0: entered allmulticast mode [ 460.951783][T13490] tipc: Resetting bearer [ 461.052439][T13490] tipc: Disabling bearer [ 461.556454][T13483] loop0: detected capacity change from 0 to 40427 [ 461.590086][T13483] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 461.635991][T13483] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 461.671535][T13483] F2FS-fs (loop0): invalid crc value [ 461.709537][T13483] F2FS-fs (loop0): Found nat_bits in checkpoint [ 461.942826][T13483] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 461.994586][T13483] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 462.100464][T13503] loop2: detected capacity change from 0 to 512 [ 462.178083][T13503] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 462.181608][ T27] audit: type=1800 audit(1759673134.137:58): pid=13483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2075" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 462.245452][T13503] EXT4-fs (loop2): invalid journal inode [ 462.275520][T13503] EXT4-fs (loop2): can't get journal size [ 462.327667][T13503] EXT4-fs (loop2): 1 truncate cleaned up [ 462.356857][T13503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.388729][ T27] audit: type=1800 audit(1759673134.347:59): pid=13503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2082" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 462.423878][ T27] audit: type=1800 audit(1759673134.377:60): pid=13503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2082" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 462.477818][T13495] loop3: detected capacity change from 0 to 32768 [ 462.518736][T13495] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2080 (13495) [ 462.603101][T13495] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 462.645538][T13495] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 462.660037][T13495] BTRFS info (device loop3): using free space tree [ 462.858541][T13495] BTRFS info (device loop3): enabling ssd optimizations [ 462.883102][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.904147][T13495] BTRFS info (device loop3): auto enabling async discard [ 463.258478][ T5795] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 463.659562][T13511] loop1: detected capacity change from 0 to 40427 [ 463.710504][T13511] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 463.729800][T13511] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 463.802618][T13511] F2FS-fs (loop1): invalid crc value [ 463.844503][T13511] F2FS-fs (loop1): Found nat_bits in checkpoint [ 464.058013][T13511] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 464.088641][T13511] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 464.191171][ T27] audit: type=1800 audit(1759673136.147:61): pid=13511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2084" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 465.203031][T13529] loop2: detected capacity change from 0 to 32768 [ 465.398370][T13529] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 465.439101][T13529] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 465.514569][T13547] tipc: Enabled bearer , priority 0 [ 465.522588][T13547] syzkaller0: entered promiscuous mode [ 465.528728][T13547] syzkaller0: entered allmulticast mode [ 465.572179][T13551] loop0: detected capacity change from 0 to 64 [ 465.620171][T13529] XFS (loop2): Ending clean mount [ 465.646036][T13546] tipc: Resetting bearer [ 465.678830][T13529] XFS (loop2): Quotacheck needed: Please wait. [ 465.816402][T13546] tipc: Disabling bearer [ 465.840852][T13529] XFS (loop2): Quotacheck: Done. [ 466.088760][ T5797] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 466.157646][T13555] tipc: Enabled bearer , priority 0 [ 466.200208][T13555] syzkaller0: entered promiscuous mode [ 466.226742][T13555] syzkaller0: entered allmulticast mode [ 466.294191][T13555] tipc: Resetting bearer [ 466.354746][T13553] tipc: Resetting bearer [ 466.467984][T13553] tipc: Disabling bearer [ 466.767781][T13564] loop0: detected capacity change from 0 to 512 [ 466.770160][T13566] loop2: detected capacity change from 0 to 512 [ 466.814729][T13564] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 466.826046][T13566] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 466.840280][T13566] EXT4-fs (loop2): invalid journal inode [ 466.861529][T13564] EXT4-fs (loop0): invalid journal inode [ 466.869121][T13566] EXT4-fs (loop2): can't get journal size [ 466.890477][T13564] EXT4-fs (loop0): can't get journal size [ 466.921127][T13566] EXT4-fs (loop2): 1 truncate cleaned up [ 466.937639][T13564] EXT4-fs (loop0): 1 truncate cleaned up [ 466.950572][T13566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.954130][T13564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.104575][ T27] audit: type=1800 audit(1759673139.017:62): pid=13566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2095" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 467.193254][ T27] audit: type=1800 audit(1759673139.037:63): pid=13566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2095" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 467.215940][ T27] audit: type=1800 audit(1759673139.107:64): pid=13564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2094" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 467.257222][ T27] audit: type=1800 audit(1759673139.117:65): pid=13564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2094" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 468.511001][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.541785][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.622763][T13560] loop3: detected capacity change from 0 to 32768 [ 468.665732][T13560] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2093 (13560) [ 469.032568][T13577] loop0: detected capacity change from 0 to 64 [ 469.486084][T13560] BTRFS error (device loop3): open_ctree failed: -4 [ 469.492031][T13582] loop0: detected capacity change from 0 to 1024 [ 469.501749][T13582] EXT4-fs: Ignoring removed nobh option [ 469.508162][T13582] EXT4-fs: Ignoring removed bh option [ 469.514442][T13582] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 469.530027][T13582] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 469.572729][T13584] tipc: Enabled bearer , priority 0 [ 469.587303][T13584] tipc: Resetting bearer [ 469.669605][T13583] tipc: Disabling bearer [ 469.678876][T13582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.489728][T13592] lo speed is unknown, defaulting to 1000 [ 470.700016][T13593] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4031: comm syz.0.2097: Allocating blocks 385-513 which overlap fs metadata [ 470.908001][T13594] EXT4-fs (loop0): pa ffff88807977a570: logic 16, phys. 129, len 24 [ 470.916269][T13594] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 471.280939][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.423346][T13581] loop2: detected capacity change from 0 to 32768 [ 471.450954][T13581] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2098 (13581) [ 471.503780][T13602] loop0: detected capacity change from 0 to 512 [ 471.515678][T13581] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 471.554601][T13581] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 471.564504][T13581] BTRFS info (device loop2): force clearing of disk cache [ 471.571826][T13581] BTRFS info (device loop2): force zlib compression, level 3 [ 471.578543][T13602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.580495][T13581] BTRFS info (device loop2): enabling disk space caching [ 471.600159][T13581] BTRFS info (device loop2): max_inline at 0 [ 471.612768][T13581] BTRFS info (device loop2): enabling auto defrag [ 471.620328][T13581] BTRFS info (device loop2): disk space caching is enabled [ 471.628892][T13602] ext4 filesystem being mounted at /527/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 471.758952][T13619] loop1: detected capacity change from 0 to 128 [ 471.779215][T13619] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 471.793870][T13588] loop3: detected capacity change from 0 to 40427 [ 471.808435][T13588] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 471.817027][T13588] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 471.830999][T13619] hpfs: filesystem error: improperly stopped [ 471.841320][T13588] F2FS-fs (loop3): invalid crc value [ 471.851543][T13619] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 471.853066][T13581] BTRFS info (device loop2): enabling ssd optimizations [ 471.864478][T13619] hpfs: You really don't want any checks? You are crazy... [ 471.887275][T13619] hpfs: hpfs_map_sector(): read error [ 471.892732][T13619] hpfs: code page support is disabled [ 471.930258][T13588] F2FS-fs (loop3): Found nat_bits in checkpoint [ 471.938072][T13581] BTRFS info (device loop2): auto enabling async discard [ 471.944562][T13619] hpfs: hpfs_map_4sectors(): unaligned read [ 471.957858][T13581] BTRFS info (device loop2): rebuilding free space tree [ 471.983078][T13619] hpfs: hpfs_map_4sectors(): unaligned read [ 472.003109][T13619] hpfs: filesystem error: unable to find root dir [ 472.025123][T13581] BTRFS info (device loop2): disabling free space tree [ 472.078014][T13581] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 472.106666][T13619] hpfs: hpfs_map_4sectors(): unaligned read [ 472.108561][T13581] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 472.148321][T13619] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 472.196842][T13588] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 472.235112][T13588] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 472.488520][T13619] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 472.557154][ T27] audit: type=1800 audit(1759673144.507:66): pid=13588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2100" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 472.927914][ T5797] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 473.781448][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.817046][T13640] loop2: detected capacity change from 0 to 512 [ 473.860149][T13640] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 473.915868][T13640] EXT4-fs (loop2): invalid journal inode [ 473.921650][T13640] EXT4-fs (loop2): can't get journal size [ 473.982853][T13640] EXT4-fs (loop2): 1 truncate cleaned up [ 474.005866][T13640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.040740][T13632] loop1: detected capacity change from 0 to 32768 [ 474.087109][ T27] audit: type=1800 audit(1759673146.047:67): pid=13640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2109" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 474.144990][ T27] audit: type=1800 audit(1759673146.047:68): pid=13640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2109" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 475.790707][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.089958][T13658] loop3: detected capacity change from 0 to 128 [ 476.152764][T13658] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 476.152828][T13658] hpfs: filesystem error: improperly stopped [ 476.152847][T13658] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 476.152865][T13658] hpfs: You really don't want any checks? You are crazy... [ 476.154073][T13658] hpfs: hpfs_map_sector(): read error [ 476.171097][T13660] loop1: detected capacity change from 0 to 64 [ 476.201683][T13658] hpfs: code page support is disabled [ 476.229300][T13658] hpfs: hpfs_map_4sectors(): unaligned read [ 476.257820][T13658] hpfs: hpfs_map_4sectors(): unaligned read [ 476.257840][T13658] hpfs: filesystem error: unable to find root dir [ 476.291254][T13658] hpfs: hpfs_map_4sectors(): unaligned read [ 476.291425][T13658] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 476.440905][T13643] loop0: detected capacity change from 0 to 32768 [ 476.478858][T13658] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 476.513489][T13643] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2110 (13643) [ 476.517326][T13643] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 476.517419][T13643] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 476.517480][T13643] BTRFS info (device loop0): using free space tree [ 476.925249][T13643] BTRFS info (device loop0): enabling ssd optimizations [ 476.925330][T13643] BTRFS info (device loop0): auto enabling async discard [ 478.128388][ T5790] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 478.264086][T13685] loop3: detected capacity change from 0 to 512 [ 478.291185][T13686] loop1: detected capacity change from 0 to 512 [ 478.359082][T13686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.359217][T13686] ext4 filesystem being mounted at /536/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 478.374786][T13685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.494609][T13685] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 479.100971][T13694] loop0: detected capacity change from 0 to 8192 [ 479.297601][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.386850][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.582380][T13707] tipc: Enabled bearer , priority 0 [ 479.592176][T13707] syzkaller0: entered promiscuous mode [ 479.598058][T13707] syzkaller0: entered allmulticast mode [ 479.648235][T13707] tipc: Resetting bearer [ 479.781802][T13708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 480.445348][T13706] tipc: Resetting bearer [ 480.558617][T13706] tipc: Disabling bearer [ 481.032836][T13715] loop0: detected capacity change from 0 to 32768 [ 481.042099][T13715] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2129 (13715) [ 481.081801][T13715] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 481.112407][T13715] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 481.128955][T13715] BTRFS info (device loop0): force clearing of disk cache [ 481.137607][T13715] BTRFS info (device loop0): force zlib compression, level 3 [ 481.145560][T13715] BTRFS info (device loop0): enabling disk space caching [ 481.152841][T13715] BTRFS info (device loop0): max_inline at 0 [ 481.160751][T13715] BTRFS info (device loop0): enabling auto defrag [ 481.174310][T13715] BTRFS info (device loop0): disk space caching is enabled [ 481.218999][T13713] loop1: detected capacity change from 0 to 40427 [ 481.230659][T13713] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 481.255284][T13713] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 481.286241][T13715] BTRFS info (device loop0): enabling ssd optimizations [ 481.293326][T13715] BTRFS info (device loop0): auto enabling async discard [ 481.311634][T13713] F2FS-fs (loop1): invalid crc value [ 481.341752][T13715] BTRFS info (device loop0): rebuilding free space tree [ 481.375302][T13713] F2FS-fs (loop1): Found nat_bits in checkpoint [ 481.429941][T13715] BTRFS info (device loop0): disabling free space tree [ 481.448765][T13715] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 481.484424][T13715] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 481.589110][T13713] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 481.589141][T13713] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 481.815086][T13742] syzkaller0: entered promiscuous mode [ 481.815110][T13742] syzkaller0: entered allmulticast mode [ 481.872648][ T27] audit: type=1800 audit(1759673153.827:69): pid=13713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2126" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 482.328347][T13713] overlayfs: missing 'lowerdir' [ 482.340023][ T5790] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 482.422106][T13747] loop2: detected capacity change from 0 to 512 [ 482.466814][T13747] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 482.502297][T13747] EXT4-fs (loop2): invalid journal inode [ 482.502385][T13747] EXT4-fs (loop2): can't get journal size [ 482.544859][T13747] EXT4-fs (loop2): 1 truncate cleaned up [ 482.546262][T13747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.603242][ T27] audit: type=1800 audit(1759673154.557:70): pid=13747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2133" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 482.620834][ T27] audit: type=1800 audit(1759673154.577:71): pid=13747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2133" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 483.024308][T13754] loop0: detected capacity change from 0 to 512 [ 483.152543][T13754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.152682][T13754] ext4 filesystem being mounted at /534/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 483.333711][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.581193][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2137'. [ 484.013475][T13763] tipc: Enabled bearer , priority 0 [ 484.022563][T13763] syzkaller0: entered promiscuous mode [ 484.046745][T13763] syzkaller0: entered allmulticast mode [ 484.099884][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.119745][T13763] tipc: Resetting bearer [ 484.232122][T13768] Cannot find add_set index 0 as target [ 484.615426][T13762] tipc: Resetting bearer [ 484.913951][T13762] tipc: Disabling bearer [ 485.206613][T13778] syzkaller0: entered promiscuous mode [ 485.212155][T13778] syzkaller0: entered allmulticast mode [ 485.621768][T13780] Cannot find add_set index 0 as target [ 486.390670][T13784] loop3: detected capacity change from 0 to 1024 [ 486.447059][T13784] EXT4-fs: Ignoring removed nobh option [ 486.453072][T13784] EXT4-fs: Ignoring removed bh option [ 486.503269][T13786] loop1: detected capacity change from 0 to 512 [ 486.513174][T13784] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 486.538911][T13786] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 486.565311][T13784] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 486.582802][T13786] EXT4-fs (loop1): invalid journal inode [ 486.602642][T13786] EXT4-fs (loop1): can't get journal size [ 486.637886][T13784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.643931][T13786] EXT4-fs (loop1): 1 truncate cleaned up [ 486.701577][T13786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.743716][ T27] audit: type=1800 audit(1759673158.697:72): pid=13786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2145" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 486.783338][ T27] audit: type=1800 audit(1759673158.727:73): pid=13786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2145" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 486.848593][T13775] loop0: detected capacity change from 0 to 32768 [ 486.906496][T13775] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.2141 (13775) [ 487.079235][T13775] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 487.113149][T13775] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 487.506788][T13793] lo speed is unknown, defaulting to 1000 [ 487.795431][T13794] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4031: comm syz.3.2144: Allocating blocks 385-513 which overlap fs metadata [ 487.901827][T13775] BTRFS info (device loop0): using free space tree [ 487.968856][T13782] loop2: detected capacity change from 0 to 40427 [ 488.016341][T13782] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 488.026817][T13782] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 488.099308][T13782] F2FS-fs (loop2): invalid crc value [ 488.137626][T13783] EXT4-fs (loop3): pa ffff88807977a2b8: logic 16, phys. 129, len 24 [ 488.145861][T13783] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 488.218920][T13782] F2FS-fs (loop2): Found nat_bits in checkpoint [ 488.336395][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.340270][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.363838][T13775] BTRFS error (device loop0): open_ctree failed: -4 [ 488.541364][T13818] loop1: detected capacity change from 0 to 128 [ 488.548255][T13782] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 488.587315][T13782] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 488.629491][T13818] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 488.684733][T13818] hpfs: filesystem error: improperly stopped [ 488.690812][T13818] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 488.739918][T13818] hpfs: You really don't want any checks? You are crazy... [ 488.785638][T13818] hpfs: hpfs_map_sector(): read error [ 488.791530][T13818] hpfs: code page support is disabled [ 488.833949][T13818] hpfs: hpfs_map_4sectors(): unaligned read [ 488.875653][T13818] hpfs: hpfs_map_4sectors(): unaligned read [ 488.959048][T13823] xt_CT: You must specify a L4 protocol and not use inversions on it [ 488.968668][T13818] hpfs: filesystem error: unable to find root dir [ 489.130705][T13818] hpfs: hpfs_map_4sectors(): unaligned read [ 489.196114][T13818] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 489.214435][ T27] audit: type=1800 audit(1759673161.147:74): pid=13782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2143" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 489.427840][T13818] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 490.012726][T13782] overlayfs: missing 'lowerdir' [ 490.258038][T13839] xt_CT: You must specify a L4 protocol and not use inversions on it [ 491.019393][T13841] syzkaller0: entered promiscuous mode [ 491.026391][T13841] syzkaller0: entered allmulticast mode [ 491.581725][T13847] xt_CT: You must specify a L4 protocol and not use inversions on it [ 491.650941][T13847] loop0: detected capacity change from 0 to 256 [ 491.674425][T13847] exfat: Unknown parameter 'vime_offset' [ 492.356742][T13852] loop3: detected capacity change from 0 to 64 [ 492.849811][T13856] xt_CT: You must specify a L4 protocol and not use inversions on it [ 493.891904][T13850] loop1: detected capacity change from 0 to 32768 [ 493.904838][T13850] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.2158 (13850) [ 493.954193][T13871] loop3: detected capacity change from 0 to 1024 [ 493.962071][T13850] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 493.973515][T13850] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 493.989841][T13871] EXT4-fs: Ignoring removed nobh option [ 493.996816][T13871] EXT4-fs: Ignoring removed bh option [ 494.002496][T13850] BTRFS info (device loop1): using free space tree [ 494.012911][T13871] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 494.030929][T13871] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 494.068126][T13871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.106243][T13858] loop2: detected capacity change from 0 to 32768 [ 494.119611][T13858] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2156 (13858) [ 494.140829][T13850] BTRFS info (device loop1): enabling ssd optimizations [ 494.148858][T13850] BTRFS info (device loop1): auto enabling async discard [ 494.171067][T13858] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 494.198849][T13858] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 494.235926][T13858] BTRFS info (device loop2): force clearing of disk cache [ 494.252534][T13858] BTRFS info (device loop2): force zlib compression, level 3 [ 494.281146][T13858] BTRFS info (device loop2): enabling disk space caching [ 494.429396][T13858] BTRFS info (device loop2): max_inline at 0 [ 494.475624][T13858] BTRFS info (device loop2): enabling auto defrag [ 494.504149][T13858] BTRFS info (device loop2): disk space caching is enabled [ 494.978546][T13894] lo speed is unknown, defaulting to 1000 [ 495.234541][T13895] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4031: comm syz.3.2164: Allocating blocks 385-513 which overlap fs metadata [ 495.686770][T13901] EXT4-fs (loop3): pa ffff88807977a570: logic 16, phys. 129, len 24 [ 495.694966][T13901] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 495.815757][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.831913][T13858] BTRFS info (device loop2): enabling ssd optimizations [ 495.852006][T13858] BTRFS info (device loop2): auto enabling async discard [ 495.860774][ T5794] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 495.908823][T13858] BTRFS info (device loop2): rebuilding free space tree [ 496.022575][T13858] BTRFS info (device loop2): disabling free space tree [ 496.045338][T13858] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 496.105513][T13858] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 496.529579][T13922] Cannot find add_set index 0 as target [ 497.458692][T13921] syzkaller0: entered promiscuous mode [ 497.464246][T13921] syzkaller0: entered allmulticast mode [ 497.495560][ T5797] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 498.259053][T13934] loop2: detected capacity change from 0 to 2048 [ 498.964501][T13938] Cannot find add_set index 0 as target [ 499.226421][T13934] EXT4-fs: Ignoring removed bh option [ 499.348726][T13941] Cannot find add_set index 0 as target [ 499.417212][T13941] loop1: detected capacity change from 0 to 256 [ 499.434797][T13941] exfat: Unknown parameter 'vime_offset' [ 500.193022][T13934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.403407][T13934] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 500.473387][T13934] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 12 with max blocks 22 with error 28 [ 500.490645][T13934] EXT4-fs (loop2): This should not happen!! Data will be lost [ 500.490645][T13934] [ 500.517954][T13950] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 500.534491][T13934] EXT4-fs (loop2): Total free blocks count 0 [ 500.540591][T13934] EXT4-fs (loop2): Free/Dirty block details [ 500.568224][T13950] EXT4-fs (loop2): This should not happen!! Data will be lost [ 500.568224][T13950] [ 500.591232][T13934] EXT4-fs (loop2): free_blocks=2415919104 [ 500.610792][T13950] EXT4-fs (loop2): Total free blocks count 0 [ 500.638475][T13934] EXT4-fs (loop2): dirty_blocks=48 [ 500.782275][T13954] loop1: detected capacity change from 0 to 64 [ 500.891718][T13958] loop0: detected capacity change from 0 to 1024 [ 500.919234][T13958] EXT4-fs: Ignoring removed nobh option [ 500.939147][T13958] EXT4-fs: Ignoring removed bh option [ 500.969730][T13958] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 501.034548][T13958] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 501.136776][T13958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.195365][T13960] syzkaller0: entered promiscuous mode [ 501.200918][T13960] syzkaller0: entered allmulticast mode [ 501.877500][T13968] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4031: comm syz.0.2177: Allocating blocks 385-513 which overlap fs metadata [ 501.893849][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.900521][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.387355][T13967] lo speed is unknown, defaulting to 1000 [ 502.413658][T13956] loop3: detected capacity change from 0 to 32768 [ 502.474646][T13956] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2176 (13956) [ 502.690874][T13956] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 502.800459][T13977] Cannot find add_set index 0 as target [ 502.943149][T13956] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 503.127224][T13956] BTRFS info (device loop3): force clearing of disk cache [ 503.330931][T13979] loop1: detected capacity change from 0 to 1024 [ 503.347896][T13956] BTRFS info (device loop3): force zlib compression, level 3 [ 503.369045][T13979] EXT4-fs: Ignoring removed nobh option [ 503.383714][T13956] BTRFS info (device loop3): enabling disk space caching [ 503.416073][T13979] EXT4-fs: Ignoring removed bh option [ 503.422489][T13956] BTRFS info (device loop3): max_inline at 0 [ 503.452670][T13979] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 503.469587][T13956] BTRFS info (device loop3): enabling auto defrag [ 503.497044][T13956] BTRFS info (device loop3): disk space caching is enabled [ 503.524769][T13979] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 503.645864][T13979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.740984][T13956] BTRFS info (device loop3): enabling ssd optimizations [ 503.762257][T13956] BTRFS info (device loop3): auto enabling async discard [ 503.803010][T13956] BTRFS info (device loop3): rebuilding free space tree [ 503.829305][T13956] BTRFS info (device loop3): disabling free space tree [ 503.842028][T13956] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 503.852683][T13956] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 504.026289][ T5795] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 504.450864][T14006] lo speed is unknown, defaulting to 1000 [ 504.844503][T14007] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.2181: Allocating blocks 385-513 which overlap fs metadata [ 504.903234][T14003] EXT4-fs (loop1): pa ffff88805f725ae0: logic 16, phys. 129, len 24 [ 504.911389][T14003] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 505.253052][ T5792] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop3 scanned by udevd (5792) [ 505.301057][T13967] EXT4-fs (loop0): pa ffff88807977acb0: logic 16, phys. 129, len 24 [ 505.309280][T13967] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 505.378523][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.513444][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.002724][T14011] loop2: detected capacity change from 0 to 32768 [ 506.913861][T14011] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 507.383887][T14031] Cannot find add_set index 0 as target [ 508.397482][ T5967] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 509.964848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 509.974647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 511.531512][T14054] loop0: detected capacity change from 0 to 512 [ 511.607075][T14055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2195'. [ 511.695353][T14054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.774250][T14054] ext4 filesystem being mounted at /545/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 512.112512][T14061] loop1: detected capacity change from 0 to 512 [ 512.157343][T14061] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 512.354490][T14064] loop2: detected capacity change from 0 to 2048 [ 512.475876][T14064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.735161][T14061] EXT4-fs (loop1): invalid journal inode [ 512.853712][T14061] EXT4-fs (loop1): can't get journal size [ 513.386824][T14061] EXT4-fs (loop1): 1 truncate cleaned up [ 513.436226][T14061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.619012][ T27] audit: type=1800 audit(1759673185.517:75): pid=14061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2197" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 513.722358][ T27] audit: type=1800 audit(1759673185.517:76): pid=14061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2197" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 515.252755][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.331652][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.423273][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.057956][T14091] xt_CT: You must specify a L4 protocol and not use inversions on it [ 517.731995][T14100] loop1: detected capacity change from 0 to 1024 [ 517.741582][T14100] EXT4-fs: Ignoring removed nobh option [ 517.760331][T14100] EXT4-fs: Ignoring removed bh option [ 517.773363][T14100] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 517.823256][T14100] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 517.891043][T14100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.446680][T14113] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.2206: Allocating blocks 385-513 which overlap fs metadata [ 519.907757][T14099] EXT4-fs (loop1): pa ffff88805f725e80: logic 16, phys. 129, len 24 [ 519.916341][T14099] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 519.947665][T14115] loop3: detected capacity change from 0 to 512 [ 520.019720][T14115] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 520.041126][T14115] EXT4-fs (loop3): invalid journal inode [ 520.047225][T14115] EXT4-fs (loop3): can't get journal size [ 520.146044][T14115] EXT4-fs (loop3): 1 truncate cleaned up [ 520.154272][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.176059][T14115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.345846][ T27] audit: type=1800 audit(1759673192.297:77): pid=14115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2210" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 520.454420][ T27] audit: type=1800 audit(1759673192.297:78): pid=14115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2210" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 523.547221][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.057193][T14140] Cannot find add_set index 0 as target [ 524.069555][T14140] loop1: detected capacity change from 0 to 256 [ 524.077173][T14140] exfat: Unknown parameter 'vime_offset' [ 525.013383][ T5792] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 526.600864][T14132] loop0: detected capacity change from 0 to 40427 [ 526.614595][T14132] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 526.622448][T14132] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 526.649280][T14132] F2FS-fs (loop0): invalid crc value [ 526.655222][T14132] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4) [ 526.735925][T14161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2223'. [ 526.750113][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2223'. [ 527.998634][T14168] syz.3.2222[14168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.999460][T14168] syz.3.2222[14168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 528.062364][T14168] loop3: detected capacity change from 0 to 128 [ 529.911796][T14179] loop1: detected capacity change from 0 to 2048 [ 529.955521][T14179] EXT4-fs: Ignoring removed bh option [ 530.858570][T14179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.095014][T14186] wireguard0: entered promiscuous mode [ 531.100568][T14186] wireguard0: entered allmulticast mode [ 531.250134][T14179] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 531.296724][T14179] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 12 with max blocks 22 with error 28 [ 531.315928][T14179] EXT4-fs (loop1): This should not happen!! Data will be lost [ 531.315928][T14179] [ 531.329150][T14179] EXT4-fs (loop1): Total free blocks count 0 [ 531.393491][T14179] EXT4-fs (loop1): Free/Dirty block details [ 531.401256][T14179] EXT4-fs (loop1): free_blocks=2415919104 [ 531.412585][T14179] EXT4-fs (loop1): dirty_blocks=48 [ 531.418293][T14179] EXT4-fs (loop1): Block reservation details [ 531.429637][T14179] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 531.514993][T14195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 531.529616][T14195] loop0: detected capacity change from 0 to 256 [ 531.537170][T14195] exfat: Unknown parameter 'vime_offset' [ 531.616615][ T58] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 531.632208][ T5792] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 533.202195][T14203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2232'. [ 533.212422][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2232'. [ 533.465755][T14209] loop0: detected capacity change from 0 to 512 [ 534.427181][T14210] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 535.174549][T14209] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 535.250477][T14209] EXT4-fs (loop0): invalid journal inode [ 535.296384][T14209] EXT4-fs (loop0): can't get journal size [ 535.367590][T14209] EXT4-fs (loop0): 1 truncate cleaned up [ 535.420985][T14209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.564630][ T27] audit: type=1800 audit(1759673207.437:79): pid=14209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2235" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 535.669716][ T27] audit: type=1800 audit(1759673207.437:80): pid=14209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2235" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 537.308372][T14231] wireguard0: entered promiscuous mode [ 537.313932][T14231] wireguard0: entered allmulticast mode [ 537.394969][T14235] syz.2.2238[14235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 537.395460][T14235] syz.2.2238[14235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 537.438426][T14235] loop2: detected capacity change from 0 to 128 [ 538.923983][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.361694][T14242] loop1: detected capacity change from 0 to 2048 [ 539.375228][T14242] EXT4-fs: Ignoring removed bh option [ 539.682677][T14242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.066323][T14249] wireguard0: entered promiscuous mode [ 540.071933][T14249] wireguard0: entered allmulticast mode [ 540.585313][T14242] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 540.621394][T14252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2243'. [ 540.649923][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2243'. [ 540.682876][T14242] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 12 with max blocks 22 with error 28 [ 540.816446][T14242] EXT4-fs (loop1): This should not happen!! Data will be lost [ 540.816446][T14242] [ 540.827997][T14242] EXT4-fs (loop1): Total free blocks count 0 [ 540.834054][T14242] EXT4-fs (loop1): Free/Dirty block details [ 540.840120][T14242] EXT4-fs (loop1): free_blocks=2415919104 [ 540.891222][T14242] EXT4-fs (loop1): dirty_blocks=48 [ 540.908603][T14242] EXT4-fs (loop1): Block reservation details [ 540.918137][T14259] tipc: Enabled bearer , priority 0 [ 540.928767][T14242] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 540.940129][T14259] tipc: Resetting bearer [ 540.969323][T14257] tipc: Disabling bearer [ 541.044857][T13848] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 541.358917][T14263] syz.3.2245[14263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.359689][T14263] syz.3.2245[14263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.425644][T14263] loop3: detected capacity change from 0 to 128 [ 542.519339][T14254] loop0: detected capacity change from 0 to 32768 [ 542.553021][T14254] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 542.812672][T14275] loop1: detected capacity change from 0 to 512 [ 542.854609][T14275] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 542.869924][ T5792] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 542.965017][T14275] EXT4-fs (loop1): invalid journal inode [ 542.995918][T14275] EXT4-fs (loop1): can't get journal size [ 543.086169][T14275] EXT4-fs (loop1): 1 truncate cleaned up [ 543.127523][T14275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.294524][ T27] audit: type=1800 audit(1759673215.237:81): pid=14275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2248" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 543.504521][ T27] audit: type=1800 audit(1759673215.247:82): pid=14275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2248" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 543.803655][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.942523][T14291] syzkaller0: entered promiscuous mode [ 543.954538][T14291] syzkaller0: entered allmulticast mode [ 544.081373][T14292] Cannot find add_set index 0 as target [ 544.124748][T14292] loop2: detected capacity change from 0 to 256 [ 544.140740][T14292] exfat: Unknown parameter 'vime_offset' [ 545.884459][T14300] Cannot find add_set index 0 as target [ 546.756505][T14300] loop1: detected capacity change from 0 to 256 [ 546.763988][T14300] exfat: Unknown parameter 'vime_offset' [ 546.786576][T14296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2252'. [ 546.796060][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2252'. [ 546.875211][ T5967] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 548.931636][T14306] loop3: detected capacity change from 0 to 32768 [ 548.940896][T14317] loop1: detected capacity change from 0 to 512 [ 549.797406][T14317] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 549.806556][T14306] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.2255 (14306) [ 549.818743][T14317] EXT4-fs (loop1): invalid journal inode [ 550.045119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 550.720989][T14317] EXT4-fs (loop1): can't get journal size [ 550.762976][T14317] EXT4-fs (loop1): 1 truncate cleaned up [ 550.823731][T14317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.886028][ T27] audit: type=1800 audit(1759673222.847:83): pid=14317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2260" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 550.964599][ T27] audit: type=1800 audit(1759673222.867:84): pid=14317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2260" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 551.350491][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.519562][T14338] xt_CT: You must specify a L4 protocol and not use inversions on it [ 551.568937][T14338] loop0: detected capacity change from 0 to 256 [ 551.582034][T14338] exfat: Unknown parameter 'vime_offset' [ 552.601880][T14344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2265'. [ 552.697831][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2265'. [ 553.353115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 553.362202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 554.131190][T14363] wireguard0: entered promiscuous mode [ 554.136966][T14363] wireguard0: entered allmulticast mode [ 555.072011][T14368] loop2: detected capacity change from 0 to 512 [ 555.126333][T14368] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 555.165189][T14368] EXT4-fs (loop2): invalid journal inode [ 555.171008][T14368] EXT4-fs (loop2): can't get journal size [ 555.224624][T14368] EXT4-fs (loop2): 1 truncate cleaned up [ 555.255226][T14368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.343966][ T27] audit: type=1800 audit(1759673227.297:85): pid=14368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2272" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 555.439695][ T27] audit: type=1800 audit(1759673227.297:86): pid=14368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2272" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 555.642834][T14374] syz.1.2268[14374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.643692][T14374] syz.1.2268[14374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.866392][T14374] loop1: detected capacity change from 0 to 128 [ 556.186525][T14376] wireguard0: entered promiscuous mode [ 556.192210][T14376] wireguard0: entered allmulticast mode [ 556.698279][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.870972][T14387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2275'. [ 556.881244][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2275'. [ 561.033014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 561.860093][T14413] kthread_run failed with err -4 [ 562.069018][T14418] loop0: detected capacity change from 0 to 512 [ 562.119622][T14418] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 562.147154][T14418] EXT4-fs (loop0): invalid journal inode [ 562.152949][T14418] EXT4-fs (loop0): can't get journal size [ 562.226458][T14418] EXT4-fs (loop0): 1 truncate cleaned up [ 562.266418][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2285'. [ 562.282471][T14418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.320551][T14420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'. [ 562.389670][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'. [ 562.424051][ T27] audit: type=1800 audit(1759673234.377:87): pid=14418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2283" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 562.448888][ T27] audit: type=1800 audit(1759673234.407:88): pid=14418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2283" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 563.261223][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.270772][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.408125][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.692090][T14435] loop3: detected capacity change from 0 to 2048 [ 563.838476][T14435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.685894][T14438] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 565.835554][T14453] syz.2.2291[14453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 565.835706][T14453] syz.2.2291[14453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 565.854154][T14453] loop2: detected capacity change from 0 to 128 [ 567.836450][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.385867][T14457] loop0: detected capacity change from 0 to 1024 [ 568.420365][T14457] EXT4-fs: Ignoring removed nobh option [ 568.455813][T14457] EXT4-fs: Ignoring removed bh option [ 568.479806][T14457] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 568.524602][T14457] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 568.586331][T14457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.143704][T14464] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4031: comm syz.0.2292: Allocating blocks 385-513 which overlap fs metadata [ 569.752285][T14455] EXT4-fs (loop0): pa ffff88805f7cdd98: logic 16, phys. 129, len 24 [ 569.760446][T14455] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 569.967460][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.152187][T14470] loop2: detected capacity change from 0 to 1024 [ 570.180601][T14470] EXT4-fs: Ignoring removed nobh option [ 570.204593][T14470] EXT4-fs: Ignoring removed bh option [ 570.233968][T14473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2295'. [ 570.236381][T14470] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 570.278999][T14470] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 570.283814][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2295'. [ 570.357719][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2295'. [ 570.372746][T14470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.684850][T14480] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.2302: Allocating blocks 385-513 which overlap fs metadata [ 571.005467][T14469] EXT4-fs (loop2): pa ffff88805f725e80: logic 16, phys. 129, len 24 [ 571.013619][T14469] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 571.132651][T14490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 571.144001][T14490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 571.155442][T14490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 571.166223][T14490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 571.176348][T14490] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 571.184114][T14490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 571.368136][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.413101][T14486] lo speed is unknown, defaulting to 1000 [ 572.249433][T14486] chnl_net:caif_netlink_parms(): no params data found [ 573.244732][T14490] Bluetooth: hci4: command tx timeout [ 574.856118][T14486] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.426447][T14490] Bluetooth: hci4: command tx timeout [ 575.461253][T14504] tty tty25: ldisc open failed (-12), clearing slot 24 [ 575.469000][T14486] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.507246][T14486] bridge_slave_0: entered allmulticast mode [ 575.559758][T14486] bridge_slave_0: entered promiscuous mode [ 575.859001][T14486] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.892164][T14486] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.899607][T14486] bridge_slave_1: entered allmulticast mode [ 575.907791][T14486] bridge_slave_1: entered promiscuous mode [ 575.969079][T14486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.129481][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'. [ 576.329705][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2305'. [ 576.833636][T14486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.999039][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.012653][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.034603][T14525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2305'. [ 577.125989][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.164652][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.205895][T14528] tipc: Enabling of bearer rejected, failed to enable media [ 577.250669][T14486] team0: Port device team_slave_0 added [ 577.471529][T14486] team0: Port device team_slave_1 added [ 577.504912][T14490] Bluetooth: hci4: command tx timeout [ 577.831000][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.893877][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.119618][T14544] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 578.248982][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.280862][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.357083][T14486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.378410][T14486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.437076][T14486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.456202][T14486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.474704][T14486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.512245][T14486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.548214][T14486] hsr_slave_0: entered promiscuous mode [ 579.564645][T14490] Bluetooth: hci4: command tx timeout [ 579.610837][T14486] hsr_slave_1: entered promiscuous mode [ 579.672369][T14486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.719371][T14486] Cannot create hsr debugfs directory [ 579.820840][T14555] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 581.214670][ T11] tipc: Left network mode [ 582.879318][T14579] loop3: detected capacity change from 0 to 1024 [ 582.887037][T14579] EXT4-fs: Ignoring removed nobh option [ 582.892662][T14579] EXT4-fs: Ignoring removed bh option [ 582.899518][T14579] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 582.937630][T14579] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 583.078194][T14579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.335068][T14591] tipc: Enabling of bearer rejected, failed to enable media [ 584.476455][T14579] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4031: comm syz.3.2316: Allocating blocks 385-513 which overlap fs metadata [ 584.745036][T14578] EXT4-fs (loop3): pa ffff88805f7cdbc8: logic 16, phys. 129, len 24 [ 584.753108][T14578] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 585.042422][T14486] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 585.078338][T14486] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 585.121099][T14486] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 585.448571][T14486] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 585.460991][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.435444][T14621] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 586.675746][T14635] loop2: detected capacity change from 0 to 512 [ 586.795197][T14635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.808106][T14635] ext4 filesystem being mounted at /581/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 587.203773][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.400039][T14486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.591216][T14486] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.427686][T14655] loop3: detected capacity change from 0 to 128 [ 593.269564][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.276919][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.346924][T14670] loop2: detected capacity change from 0 to 1024 [ 593.354613][T14670] EXT4-fs: Ignoring removed nobh option [ 593.360232][T14670] EXT4-fs: Ignoring removed bh option [ 593.624557][T14670] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 594.573958][T14670] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 594.719519][T14670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.852478][ T11] macvlan0: left promiscuous mode [ 594.881765][ T11] hsr_slave_0: left promiscuous mode [ 594.888353][ T11] hsr_slave_1: left promiscuous mode [ 594.919362][ T11] veth0_macvtap: left promiscuous mode [ 594.932880][ T11] veth1_vlan: left allmulticast mode [ 594.941805][ T11] veth1_vlan: left promiscuous mode [ 594.963029][ T11] veth0_vlan: left promiscuous mode [ 595.269034][T14687] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.2329: Allocating blocks 385-513 which overlap fs metadata [ 595.957806][T14667] EXT4-fs (loop2): pa ffff88805f7cd910: logic 16, phys. 129, len 24 [ 595.965982][T14667] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 596.128753][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.728945][T14695] Cannot find add_set index 0 as target [ 602.151938][ T11] bond0 (unregistering): Released all slaves [ 602.188437][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.197088][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.241832][T14700] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 602.752012][T14723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2339'. [ 602.939535][T14732] loop0: detected capacity change from 0 to 128 [ 604.284529][T14734] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 607.787280][T14762] wireguard0: entered promiscuous mode [ 607.802878][T14762] wireguard0: entered allmulticast mode [ 608.671252][T14486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.686263][T14766] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 608.906161][ T11] IPVS: stop unused estimator thread 0... [ 611.612512][T14794] wireguard0: entered promiscuous mode [ 611.618246][T14794] wireguard0: entered allmulticast mode [ 612.167093][T14486] veth0_vlan: entered promiscuous mode [ 612.282476][T14486] veth1_vlan: entered promiscuous mode [ 612.494573][T14806] wireguard0: entered promiscuous mode [ 612.500277][T14806] wireguard0: entered allmulticast mode [ 613.562602][T14486] veth0_macvtap: entered promiscuous mode [ 613.598352][T14486] veth1_macvtap: entered promiscuous mode [ 613.623628][T14486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.662106][T14486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.611182][T14818] wireguard0: entered promiscuous mode [ 615.617458][T14818] wireguard0: entered allmulticast mode [ 615.980358][T14486] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.003692][T14486] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.019662][T14486] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.074510][T14486] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.758427][T14841] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 618.800697][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.879219][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.148876][T14849] loop2: detected capacity change from 0 to 1024 [ 619.156555][T14849] EXT4-fs: Ignoring removed nobh option [ 619.175563][T14849] EXT4-fs: Ignoring removed bh option [ 619.200103][T14849] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 619.220046][T14849] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 619.686544][T14849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.026392][T14852] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 620.149616][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.271717][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.195583][T14864] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.2356: Allocating blocks 385-513 which overlap fs metadata [ 622.683085][T14865] EXT4-fs (loop2): pa ffff88805f725910: logic 16, phys. 129, len 24 [ 622.691877][T14865] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 622.929706][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.254951][T14878] overlayfs: failed to resolve './file0': -2 [ 624.896214][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.902677][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.023376][T14887] wireguard0: entered promiscuous mode [ 625.029833][T14887] wireguard0: entered allmulticast mode [ 626.141914][T14877] loop4: detected capacity change from 0 to 32768 [ 628.198002][T14902] wireguard0: entered promiscuous mode [ 628.203605][T14902] wireguard0: entered allmulticast mode [ 628.342506][T14906] wireguard0: entered promiscuous mode [ 628.348361][T14906] wireguard0: entered allmulticast mode [ 629.933414][T14924] loop2: detected capacity change from 0 to 2048 [ 630.184190][T14924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.115250][T14932] wireguard0: entered promiscuous mode [ 631.120884][T14932] wireguard0: entered allmulticast mode [ 634.830438][T14931] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 639.437025][T14973] wireguard0: entered promiscuous mode [ 639.442642][T14973] wireguard0: entered allmulticast mode [ 642.635492][T14989] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 642.835922][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 642.858008][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 642.866998][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 642.877870][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 642.885892][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 642.895012][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 644.184654][T15005] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 645.344448][ T5793] Bluetooth: hci1: command tx timeout [ 646.914793][ T1129] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.022965][T14998] lo speed is unknown, defaulting to 1000 [ 647.405270][T14490] Bluetooth: hci1: command tx timeout [ 648.088888][ T1129] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.197004][T15019] lo speed is unknown, defaulting to 1000 [ 648.403654][ T1129] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.404156][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 648.428785][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 648.506405][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 648.546858][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 648.557390][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 648.565354][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 648.751258][ T1129] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.830407][T15030] lo speed is unknown, defaulting to 1000 [ 649.550066][ T5793] Bluetooth: hci1: command tx timeout [ 650.410369][T15047] kthread_run failed with err -4 [ 650.684680][ T5793] Bluetooth: hci2: command tx timeout [ 650.789480][ T1129] tipc: Left network mode [ 650.799799][T14998] chnl_net:caif_netlink_parms(): no params data found [ 651.894855][ T5793] Bluetooth: hci1: command tx timeout [ 652.596602][T15072] loop4: detected capacity change from 0 to 2048 [ 652.711861][T15072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.808986][ T5793] Bluetooth: hci2: command tx timeout [ 653.674659][T14998] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.713625][T14998] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.763972][T14998] bridge_slave_0: entered allmulticast mode [ 653.811136][T14998] bridge_slave_0: entered promiscuous mode [ 653.848733][T14998] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.856596][T14998] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.970743][T14998] bridge_slave_1: entered allmulticast mode [ 654.003336][T14998] bridge_slave_1: entered promiscuous mode [ 654.047249][T14919] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.141299][T15030] chnl_net:caif_netlink_parms(): no params data found [ 654.365589][T15077] lo speed is unknown, defaulting to 1000 [ 654.500293][T14998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.553419][T14998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.844742][ T5793] Bluetooth: hci2: command tx timeout [ 654.957706][T14486] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.980202][T14998] team0: Port device team_slave_0 added [ 656.408954][T14998] team0: Port device team_slave_1 added [ 656.629849][ T8149] ================================================================== [ 656.637970][ T8149] BUG: KASAN: slab-use-after-free in __mutex_lock+0x6cb/0xcc0 [ 656.645486][ T8149] Read of size 8 at addr ffff88802f9200a0 by task khidpd_00070008/8149 [ 656.653764][ T8149] [ 656.656130][ T8149] CPU: 0 PID: 8149 Comm: khidpd_00070008 Not tainted syzkaller #0 [ 656.663973][ T8149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 656.674080][ T8149] Call Trace: [ 656.677390][ T8149] [ 656.680370][ T8149] dump_stack_lvl+0x16c/0x230 [ 656.685156][ T8149] ? __lock_acquire+0x7c80/0x7c80 [ 656.690212][ T8149] ? show_regs_print_info+0x20/0x20 [ 656.695432][ T8149] ? load_image+0x3b0/0x3b0 [ 656.699952][ T8149] ? __virt_addr_valid+0x469/0x540 [ 656.705082][ T8149] print_report+0xac/0x220 [ 656.709519][ T8149] ? __mutex_lock+0x6cb/0xcc0 [ 656.714215][ T8149] kasan_report+0x117/0x150 [ 656.718736][ T8149] ? __mutex_lock+0x6cb/0xcc0 [ 656.723437][ T8149] __mutex_lock+0x6cb/0xcc0 [ 656.727964][ T8149] ? __mutex_lock+0x4e8/0xcc0 [ 656.732667][ T8149] ? l2cap_unregister_user+0x6a/0x1a0 [ 656.738068][ T8149] ? mutex_lock_nested+0x20/0x20 [ 656.743026][ T8149] ? __wake_up+0x11f/0x190 [ 656.747456][ T8149] ? __wake_up_bit+0x1e0/0x1e0 [ 656.752234][ T8149] ? _raw_spin_unlock+0x40/0x40 [ 656.757103][ T8149] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 656.763106][ T8149] l2cap_unregister_user+0x6a/0x1a0 [ 656.768345][ T8149] hidp_session_thread+0x3c8/0x410 [ 656.773481][ T8149] ? hidp_session_get+0x80/0x80 [ 656.778812][ T8149] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 656.784728][ T8149] ? hidp_session_thread+0x410/0x410 [ 656.790130][ T8149] ? hidp_session_thread+0x410/0x410 [ 656.795530][ T8149] ? __kthread_parkme+0x7a/0x1c0 [ 656.800490][ T8149] ? __kthread_parkme+0x162/0x1c0 [ 656.805537][ T8149] kthread+0x2fa/0x390 [ 656.809619][ T8149] ? hidp_session_get+0x80/0x80 [ 656.814771][ T8149] ? kthread_blkcg+0xd0/0xd0 [ 656.819548][ T8149] ret_from_fork+0x48/0x80 [ 656.823982][ T8149] ? kthread_blkcg+0xd0/0xd0 [ 656.828603][ T8149] ret_from_fork_asm+0x11/0x20 [ 656.833466][ T8149] [ 656.836504][ T8149] [ 656.838849][ T8149] Allocated by task 5797: [ 656.843193][ T8149] kasan_set_track+0x4e/0x70 [ 656.847800][ T8149] __kasan_kmalloc+0x8f/0xa0 [ 656.852404][ T8149] __kmalloc+0xb4/0x240 [ 656.856577][ T8149] hci_alloc_dev_priv+0x28/0x2040 [ 656.861615][ T8149] vhci_create_device+0x11b/0x650 [ 656.866655][ T8149] vhci_write+0x3b5/0x470 [ 656.870998][ T8149] vfs_write+0x43b/0x940 [ 656.875272][ T8149] ksys_write+0x147/0x250 [ 656.879628][ T8149] do_syscall_64+0x55/0xb0 [ 656.884092][ T8149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 656.890010][ T8149] [ 656.892429][ T8149] Freed by task 14919: [ 656.896524][ T8149] kasan_set_track+0x4e/0x70 [ 656.901126][ T8149] kasan_save_free_info+0x2e/0x50 [ 656.906178][ T8149] ____kasan_slab_free+0x126/0x1e0 [ 656.911305][ T8149] slab_free_freelist_hook+0x130/0x1b0 [ 656.916789][ T8149] __kmem_cache_free+0xba/0x1f0 [ 656.921662][ T8149] bt_host_release+0x82/0x90 [ 656.926327][ T8149] device_release+0x96/0x1c0 [ 656.930940][ T8149] kobject_put+0x221/0x470 [ 656.935381][ T8149] vhci_release+0x15d/0x1a0 [ 656.939904][ T8149] __fput+0x234/0x970 [ 656.943906][ T8149] task_work_run+0x1ce/0x250 [ 656.948516][ T8149] do_exit+0x90b/0x23c0 [ 656.952697][ T8149] do_group_exit+0x21b/0x2d0 [ 656.957409][ T8149] get_signal+0x12fc/0x1400 [ 656.961964][ T8149] arch_do_signal_or_restart+0x96/0x780 [ 656.967542][ T8149] exit_to_user_mode_loop+0x70/0x110 [ 656.972935][ T8149] exit_to_user_mode_prepare+0xf6/0x180 [ 656.978511][ T8149] syscall_exit_to_user_mode+0x1a/0x50 [ 656.984002][ T8149] do_syscall_64+0x61/0xb0 [ 656.988457][ T8149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 656.994398][ T8149] [ 656.996790][ T8149] Last potentially related work creation: [ 657.002536][ T8149] kasan_save_stack+0x3e/0x60 [ 657.007233][ T8149] __kasan_record_aux_stack+0xaf/0xc0 [ 657.012626][ T8149] insert_work+0x3d/0x310 [ 657.016972][ T8149] __queue_work+0xd2c/0x1020 [ 657.021578][ T8149] queue_work_on+0x121/0x1e0 [ 657.026182][ T8149] process_scheduled_works+0xa45/0x15b0 [ 657.031745][ T8149] worker_thread+0xa55/0xfc0 [ 657.036356][ T8149] kthread+0x2fa/0x390 [ 657.040443][ T8149] ret_from_fork+0x48/0x80 [ 657.044919][ T8149] ret_from_fork_asm+0x11/0x20 [ 657.049705][ T8149] [ 657.052139][ T8149] Second to last potentially related work creation: [ 657.058748][ T8149] kasan_save_stack+0x3e/0x60 [ 657.063453][ T8149] __kasan_record_aux_stack+0xaf/0xc0 [ 657.068846][ T8149] insert_work+0x3d/0x310 [ 657.073190][ T8149] __queue_work+0xc39/0x1020 [ 657.077793][ T8149] call_timer_fn+0x16e/0x530 [ 657.082399][ T8149] __run_timers+0x558/0x7d0 [ 657.086933][ T8149] run_timer_softirq+0x67/0xf0 [ 657.091736][ T8149] handle_softirqs+0x280/0x820 [ 657.096522][ T8149] __irq_exit_rcu+0xc7/0x190 [ 657.101143][ T8149] irq_exit_rcu+0x9/0x20 [ 657.105400][ T8149] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 657.111061][ T8149] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 657.117061][ T8149] [ 657.119409][ T8149] The buggy address belongs to the object at ffff88802f920000 [ 657.119409][ T8149] which belongs to the cache kmalloc-8k of size 8192 [ 657.133482][ T8149] The buggy address is located 160 bytes inside of [ 657.133482][ T8149] freed 8192-byte region [ffff88802f920000, ffff88802f922000) [ 657.147387][ T8149] [ 657.149814][ T8149] The buggy address belongs to the physical page: [ 657.156250][ T8149] page:ffffea0000be4800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f920 [ 657.166421][ T8149] head:ffffea0000be4800 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 657.175397][ T8149] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 657.183435][ T8149] page_type: 0xffffffff() [ 657.187792][ T8149] raw: 00fff00000000840 ffff888017842280 ffffea00006cf000 dead000000000002 [ 657.196394][ T8149] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 657.204990][ T8149] page dumped because: kasan: bad access detected [ 657.211435][ T8149] page_owner tracks the page as allocated [ 657.217190][ T8149] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5448, tgid 5448 (sh), ts 52588394112, free_ts 52558693526 [ 657.237034][ T8149] post_alloc_hook+0x1cd/0x210 [ 657.241830][ T8149] get_page_from_freelist+0x195c/0x19f0 [ 657.247399][ T8149] __alloc_pages+0x1e3/0x460 [ 657.252011][ T8149] alloc_slab_page+0x5d/0x170 [ 657.256711][ T8149] new_slab+0x87/0x2e0 [ 657.260804][ T8149] ___slab_alloc+0xc6d/0x1300 [ 657.265545][ T8149] __kmem_cache_alloc_node+0x1a2/0x260 [ 657.271023][ T8149] kmalloc_trace+0x2a/0xe0 [ 657.275455][ T8149] tomoyo_init_log+0x1104/0x1f10 [ 657.280406][ T8149] tomoyo_supervisor+0x32d/0x1080 [ 657.285445][ T8149] tomoyo_env_perm+0x14a/0x1e0 [ 657.290229][ T8149] tomoyo_find_next_domain+0x1594/0x1a60 [ 657.295891][ T8149] tomoyo_bprm_check_security+0x116/0x170 [ 657.301652][ T8149] security_bprm_check+0x62/0xa0 [ 657.306604][ T8149] bprm_execve+0xa51/0x16f0 [ 657.311144][ T8149] do_execveat_common+0x51b/0x6c0 [ 657.316186][ T8149] page last free stack trace: [ 657.320883][ T8149] free_unref_page_prepare+0x7ce/0x8e0 [ 657.326390][ T8149] free_unref_page+0x32/0x2e0 [ 657.331083][ T8149] __unfreeze_partials+0x1cf/0x210 [ 657.336225][ T8149] put_cpu_partial+0x17c/0x250 [ 657.341064][ T8149] __slab_free+0x31d/0x410 [ 657.345507][ T8149] qlist_free_all+0x75/0xe0 [ 657.350026][ T8149] kasan_quarantine_reduce+0x143/0x160 [ 657.355542][ T8149] __kasan_slab_alloc+0x22/0x80 [ 657.360418][ T8149] slab_post_alloc_hook+0x6e/0x4d0 [ 657.365664][ T8149] __kmem_cache_alloc_node+0x13e/0x260 [ 657.371149][ T8149] __kmalloc+0xa4/0x240 [ 657.375350][ T8149] tomoyo_supervisor+0xb70/0x1080 [ 657.380399][ T8149] tomoyo_env_perm+0x14a/0x1e0 [ 657.385185][ T8149] tomoyo_find_next_domain+0x1594/0x1a60 [ 657.390848][ T8149] tomoyo_bprm_check_security+0x116/0x170 [ 657.396594][ T8149] security_bprm_check+0x62/0xa0 [ 657.401551][ T8149] [ 657.403881][ T8149] Memory state around the buggy address: [ 657.409520][ T8149] ffff88802f91ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.417600][ T8149] ffff88802f920000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 657.425701][ T8149] >ffff88802f920080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 657.433771][ T8149] ^ [ 657.438895][ T8149] ffff88802f920100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 657.446973][ T8149] ffff88802f920180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 657.455058][ T8149] ================================================================== [ 657.465447][ T8149] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 657.472709][ T8149] CPU: 0 PID: 8149 Comm: khidpd_00070008 Not tainted syzkaller #0 [ 657.480556][ T8149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 657.490646][ T8149] Call Trace: [ 657.493960][ T8149] [ 657.496928][ T8149] dump_stack_lvl+0x16c/0x230 [ 657.497090][ T5793] Bluetooth: hci2: command tx timeout [ 657.507430][ T8149] ? show_regs_print_info+0x20/0x20 [ 657.512779][ T8149] ? load_image+0x3b0/0x3b0 [ 657.517493][ T8149] panic+0x2c0/0x710 [ 657.521607][ T8149] ? bpf_jit_dump+0xd0/0xd0 [ 657.526407][ T8149] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 657.532325][ T8149] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 657.538234][ T8149] ? _raw_spin_unlock+0x40/0x40 [ 657.543118][ T8149] ? print_memory_metadata+0x314/0x400 [ 657.548599][ T8149] ? __mutex_lock+0x6cb/0xcc0 [ 657.553299][ T8149] check_panic_on_warn+0x84/0xa0 [ 657.558261][ T8149] ? __mutex_lock+0x6cb/0xcc0 [ 657.562958][ T8149] end_report+0x6f/0x140 [ 657.567216][ T8149] kasan_report+0x128/0x150 [ 657.571763][ T8149] ? __mutex_lock+0x6cb/0xcc0 [ 657.576903][ T8149] __mutex_lock+0x6cb/0xcc0 [ 657.581442][ T8149] ? __mutex_lock+0x4e8/0xcc0 [ 657.586143][ T8149] ? l2cap_unregister_user+0x6a/0x1a0 [ 657.591541][ T8149] ? mutex_lock_nested+0x20/0x20 [ 657.596508][ T8149] ? __wake_up+0x11f/0x190 [ 657.600953][ T8149] ? __wake_up_bit+0x1e0/0x1e0 [ 657.605738][ T8149] ? _raw_spin_unlock+0x40/0x40 [ 657.610604][ T8149] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 657.616611][ T8149] l2cap_unregister_user+0x6a/0x1a0 [ 657.621844][ T8149] hidp_session_thread+0x3c8/0x410 [ 657.626988][ T8149] ? hidp_session_get+0x80/0x80 [ 657.631984][ T8149] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 657.637917][ T8149] ? hidp_session_thread+0x410/0x410 [ 657.643320][ T8149] ? hidp_session_thread+0x410/0x410 [ 657.648626][ T8149] ? __kthread_parkme+0x7a/0x1c0 [ 657.653595][ T8149] ? __kthread_parkme+0x162/0x1c0 [ 657.658680][ T8149] kthread+0x2fa/0x390 [ 657.662836][ T8149] ? hidp_session_get+0x80/0x80 [ 657.667729][ T8149] ? kthread_blkcg+0xd0/0xd0 [ 657.672353][ T8149] ret_from_fork+0x48/0x80 [ 657.676814][ T8149] ? kthread_blkcg+0xd0/0xd0 [ 657.681442][ T8149] ret_from_fork_asm+0x11/0x20 [ 657.686255][ T8149] [ 657.689558][ T8149] Kernel Offset: disabled [ 657.693932][ T8149] Rebooting in 86400 seconds..