last executing test programs: 48m50.151262787s ago: executing program 32 (id=1767): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x3, 0xc) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x38) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000fd7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r5, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0) 44m24.423859464s ago: executing program 33 (id=3118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x5, {0x0, 0x0, 0x80000000}}]}]}}}]}, 0x68}}, 0x0) 32m58.501294423s ago: executing program 34 (id=6443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 32m57.202151935s ago: executing program 35 (id=6452): socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) socket$key(0xf, 0x3, 0x2) 12m25.143454775s ago: executing program 36 (id=14417): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)={[{}, {@acl}, {}, {}]}, 0x1, 0x177, &(0x7f0000000240)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f0200006706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 10m49.95023394s ago: executing program 37 (id=15393): r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) bind$tipc(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 10m47.615042254s ago: executing program 38 (id=15420): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) readv(r4, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 10m46.518985336s ago: executing program 39 (id=15437): r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) bind$tipc(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = gettid() ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000b28000)) process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f00006ba000/0x4000)=nil, 0x4000, 0x15) 10m7.161767237s ago: executing program 40 (id=15900): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_io_uring_setup(0x2756, 0x0, &(0x7f0000ff5000), &(0x7f0000ff4000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 7m33.030327633s ago: executing program 41 (id=16834): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) wait4(r1, &(0x7f0000000300), 0x80000000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x453, &(0x7f0000000a40)="$eJzs3E1PXNUbAPDnXqDNn/YvVfENW0VbW7QKQhU1MU3YuSC60IXbCVBs5EULJrYhBhIXbk3sB9C4tR/BaBNfNroy3arRhZoQU1g0sYsxd94Y6AztKPQa5vdL7vScO2d6zr1Pnzt3Tk9uAG2rP3tJIg5GxA8R0VOubm7QX/5j/erSRLYlUSy++mdSard2dWmi2rT6uQPZSxoxkEak7yfxYIN+F85feLMwMzN1rlIfWpx9a2jh/IWnzs4Wpqemp+aGTw2Pjj737PMjw9sNv+9gC8f60vfrv37S+fLcpxfX5q6dHunOxlv9fP1x7JT+6N98Lusc3+nOcnZPXTnpzHEgtKQjIrJwdZXyvyc6YiN4PfHNT7kODthVxcz+pm8vF4E9LIm8RwDko/pFn/3+rW4N7gP+Ku7WDQi5Wh0r/wBcq8ztrNfi3xlpufD28a++3PT7fif1R8Tr468cybbYpXkYAAAAgHb2xVhEPNlo/i+Ne+vaZeX7IuL+iHggIvoiSut6DkfEkYh4KCIerq4nasHW9lvmf5r/zyQ7YnUs4sW6tV3rdfGvONRRqf0/q0RXcubszNTTEXFHRAxE1/6svt0qrdk3Ct81e29j/u9yd3nP0kR1LrAyjj86t/wrmCwsFv7xAbPJ6kpEX2ej+Ce1lUBJRDwSEY/eyl/4dWlF3XTvpeu1XS98cPeVZs3r53+zLet/c/zZTcWPI040zP+VWptk+/WZQ6XrwVD1qnCjby+Oftasf/HPV5b/3Q3jX1u5eiipX6+70Hofl3t//rHZe9eLxeL28W98/d+XvFYa4L7KvncLi4vnhiP2JeM37h9pfcx7VfV8VM9XFv+Boxvx32iZxl2VUnZCj0bEsYh4rLJ2+UTpuz/i8Yh4IiJObtPn8vQvTe/j5H++svhPtpT/rRd+X/nwWLP+bx7/LP+fKQ1moLLH/d/N3WqA8h4nAAAAAAAAADsjLT0DL0kHa+U0HRwsP8OvN7rTmfmFxZNn5t+Zmyw/K+9QdKXVlV49detBh0vljfrIlvqpiLgzIj7q+F+pPjgxPzOZ98FDmzvQJP8zv3XkPTpg13leK7Qv+Q/tS/5D+5L/0L7kP7Qv+Q/tS/5D+6rk/3Le4wBuv63f/+9dGT997fPDl3IaDnAbuf+HtvRvnuunoKCwVwt5X5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/hv+DgAA///vYdKh") r4 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r5 = signalfd(r4, &(0x7f0000002340), 0x8) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200003, &(0x7f0000000000), 0x1, 0x636, &(0x7f0000000740)="$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") ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000001ec0)=@urb_type_iso={0x0, {0xe, 0x1}, 0x8, 0x0, &(0x7f0000000280)="f775f299c13569ed7f4e01a481dc148b0e99925207849bf911d7e19196415ff2a0c19b163876322b4f4276691e48b40f8cb6d93e274bb0290b495f19bbe4439e", 0x40, 0x80000001, 0x0, 0x4c, 0x7, 0x8, &(0x7f0000000ec0)="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", [{0xa1, 0xde, 0x6}, {0x4, 0x1ff, 0x80}, {0x94da, 0x2, 0xc7}, {0x80000000, 0xa00000, 0xb0d9}, {0x2, 0xffff, 0x9}, {0xd603c3b, 0x80, 0x200}, {0x40, 0x8, 0x3}, {0x7fff, 0x8, 0x97d8}, {0x0, 0xb7, 0x1}, {0x13, 0x0, 0x7fff}, {0x3, 0x8000, 0x8}, {0x9, 0x26, 0x4}, {0x0, 0x716267e, 0x8}, {0x693, 0x7, 0x6}, {0x3, 0x9, 0x89f5}, {0x80000001, 0x9, 0x9}, {0x5, 0x4, 0x4ff0}, {0xee6, 0x1, 0x5}, {0xfffffffc, 0xe, 0x2}, {0xffff, 0x6, 0x4}, {0xfffffffe, 0x8, 0x8}, {0x2, 0xfb, 0x1}, {0xb, 0xfffff001, 0x9}, {0xf, 0xfffffffa, 0x1000}, {0x9, 0x5, 0xbb}, {0x200, 0x7, 0x5}, {0x5, 0x9, 0x61}, {0x80000001, 0x5, 0x3}, {0x401, 0x9, 0x1}, {0x62, 0x9, 0x4}, {0xffff, 0x4, 0x3}, {0x80000000, 0x3, 0xfffffff4}, {0x9, 0x80000001, 0x6}, {0x3, 0x10e, 0x9}, {0x9, 0x2, 0xffffff7f}, {0x3, 0x7, 0x3}, {0xc4, 0x9, 0xff}, {0x1, 0x7, 0xfd0b}, {0xe7, 0x3, 0x3}, {0x5b94, 0x3ff, 0x8}, {0xfffeffff, 0x4, 0x3436}, {0x0, 0x7, 0xb}, {0x49, 0x7, 0x8}, {0x2, 0x1d, 0xfffffff9}, {0x9, 0x2, 0x800}, {0x3ff, 0x3, 0x5}, {0x2aa, 0x9, 0x8}, {0xfffffffb, 0x10001}, {0x2d42, 0x9, 0x4}, {0x2, 0xfff, 0x8}, {0x0, 0x46, 0x7}, {0x390, 0x9, 0x9}, {0x77, 0xff, 0x1}, {0x80, 0x5, 0xffff}, {0x6, 0x1, 0x3}, {0x5, 0x1, 0xd99}, {0xc, 0x8, 0x9}, {0x4, 0xcdb, 0x1000}, {0x0, 0x7, 0x8000}, {0x4, 0x8, 0x4}, {0xffffffff, 0x9, 0x10001}, {0x7, 0x9, 0x1}, {0x7, 0x9}, {0xfc9a, 0x7fffffff, 0x5}, {0x80000000, 0x7, 0x3}, {0x8, 0x1ff, 0x80000001}, {0x78, 0x8c200000, 0xfffffffc}, {0x1, 0x9, 0x6}, {0xad, 0xfffffff7, 0x4}, {0x4, 0xff, 0x200}, {0x4, 0x401, 0x5}, {0x9, 0x6, 0xc3}, {0x0, 0x8, 0x7f}, {0x6, 0x3, 0x8}, {0x0, 0x4, 0x1}, {0x8, 0x3, 0xd3}]}) 7m24.812567656s ago: executing program 2 (id=16892): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x80) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r3, 0x1}, 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xc4, 0xd6, &(0x7f00000004c0)="6241780b96fdeb48b88dc8cf155fb4b8121df16eb0b86bdfe0d600c9d80183a6e5a929de4bf0755de80dc074a6253460896bc91b97bcf69db47eec6b7ff60765d2890913699816e3822bd48b520530e763ad607faa04c444991174b5520f9e1cbade80ecea400bb314674bda16c01776bed96a1734b491115e5a0f0ff71976321d2784959d64e8af3d7a39d2f8c1063885c67fbcd0200e6a1f57f3fe1db2930d61e7c12fe1d6ca92f8a54d93b10ed2753b6f114e3ca26df35d9016da2e91a9650cef5965", &(0x7f00000006c0)=""/214, 0x0, 0x0, 0x92, 0x1e, &(0x7f0000000280)="ad73ae25e881f617d062d22681f98c5c80d73da30c6a5a8e2c9dae717133f452168b77d386a13555e22a35328624bbdbee20782174b0a2a2a7aa4db20e732b47ec54c7be61b285f1ed1718e4282f7dcba1d3876a13ad82ea29e204281214c62d90e697d3bb5a368d83c17881c3b0e084d9b38bfabc34bda9a52e387d9526dc3903363a8bb1867a77c68f3ef80053ff1070c4", &(0x7f0000000080)="01658ac1a435630e73e4361c1bd1fe0208628cf6650ac435b1341179cb83", 0x2, 0x0, 0x9}, 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) 7m24.811919345s ago: executing program 2 (id=16893): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000000000000008006966623000000000000000000000000064756d6d79300000000000000000000069705f76746930000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0000000000000182c20000000000000000000000b8000000b8000000e80000006970000000000000000000000000000000000000000000a823c565625b8d720020000000000000007f0000e1ab1414000000"]}, 0x1aa) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 7m24.618049706s ago: executing program 2 (id=16895): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000000940)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@grpid}, {@errors_remount}, {@data_err_ignore}, {@noblock_validity}, {@sysvgroups}, {@quota}]}, 0x1, 0x60a, &(0x7f0000001c40)="$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") socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRESOCT], 0x0) recvmsg$unix(r0, 0x0, 0x0) 7m20.540435192s ago: executing program 2 (id=16914): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08000, &(0x7f00000000c0)={[{@init_itable}]}, 0xfc, 0x484, &(0x7f0000000a80)="$eJzs3DtsHEUfAPD/rn1OnKe/DwLkAZiXiHjEsfMgBQ0IJAqQkKAIdMZxohCHoNhIJLJwQCiUKBI9okSioKaCBgEVEi30KFKE3CQ8JBbt3m58fpyfZ5/hfj/prJmdudv/7OycZ2fvLoCO1Z//SSJ2RMTPeTotsrdlZaW83q3pyZHfpydHksiyV35LirKb05MjVd3qeTvKzME0Iv0wif0L7Hf80uVzw2NjoxfL/MDE+bcHxi9dfvLs+eEzo2dG3xo6ceLokcGnjg8da0k7d+ax7nvvwoG9L7x27aWRk9fe+P6L7irWOe1olf7on3UsGz3S6p212c6GdNLdxkBYka6IyLurVoz/3dEVM523O57/oK3BAesqy7JsV/PiKxnwH5ZEuyMA2qP6R39zujciJkfW4zp4M7vxTP0CKG/3rfJRL+mOtKxTm3N920pby3WTk1f++DSKftjSUccfANh4X+fznyfq85/qUS/pi7sa6u0q1oPzrRH/i4j/R8QdEXFnROyJKOreHRH3rHD//XPy8+ef6fVVNWyZ8vnf0+W9rdnzv3L293fW11XmdkZv9EUtOX12bPRweUwORm1Lnh9cZB/fPPfTx83K+su5X/XI91/NBcs4rndvmf2cU8MTw2tr9Ywb7xdrgFPz2z9z5ypP7Y2Ifat4/XzefPaxzw80K1+6/YtowX2m7LOIR+v9fyUWaf/c+5O9ZdnxoWMDW2Ns9PBAdVbM98OPV19utv81tb8F8v7ftuD5f7v9fUnj/drxle/j6i8fNb2mWcH5/3q1JT//e5JXi3RPue3d4YmJi4MRPcmL87cPzbxala/q39ixJ+Khhcd//h6Xn2N5+/dHRH4S3xsR90XE/WXsD0TEg1G8xEKmbkXEd88+/OZq2p8udWBbIO//U7P6P5bo//mJnuZFRaLr3Ldfrab9dXn/Hy1SB8sty3n/WyScWYm1HDsAAAD4t0iLz8An6aHb6TQ9dChie7G2uy0duzA+8fjpC+/8ear+Wfm+qKXVSld9Pbi+HjpYrg1X+aE5+SPluvEnXb1Fflt57xton+0N4//LhvGf+7Wr3dEB6873taBzGf/QuYx/6FzGP3Su5Y7/bJ3jADbeQuN/qg1xABvP/B86l/EPncv4h85l/ENHWtaX5DdFIpKITRDGShJTLT68PRsWfNIdsUSdSItENtXG4/xX+TMsy6u8fvFUv5axdOVaOe42yynaPNG+9yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBW+icAAP//pXravQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x40000000000000, 0x12) open(&(0x7f0000000000)='./bus\x00', 0x401c2, 0xb) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x14913e, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x40c000}) 7m19.263527645s ago: executing program 2 (id=16920): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) 7m18.740794216s ago: executing program 2 (id=16925): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x26) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x5, &(0x7f00000001c0)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x19000}]) 7m18.688440876s ago: executing program 42 (id=16925): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x26) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x5, &(0x7f00000001c0)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x19000}]) 6m30.819442579s ago: executing program 1 (id=17189): arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000002000000040000000200000000000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r8, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r5, 0x2}, 0x20) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xec67ba842dbbc0d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 6m29.827966971s ago: executing program 1 (id=17197): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) futex(0x0, 0x6, 0x3d, 0x0, 0x0, 0x2) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1b42, 0x1a4) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="000800000000000002", @ANYRES32=r5]) 6m28.847479632s ago: executing program 1 (id=17208): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x60, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0x103b83) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 6m27.990384813s ago: executing program 43 (id=17215): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 5m52.924381797s ago: executing program 4 (id=17399): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) readv(r1, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) 5m51.921423139s ago: executing program 4 (id=17403): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000480)='asymmetric\x00', 0x0, &(0x7f00000007c0), 0x0, r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 5m50.951578221s ago: executing program 4 (id=17408): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x60, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0x103b83) r2 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000540)={0x0, {}, 0x0, {}, 0x8001, 0x1, 0x3, 0x18, "5361b2a8ea45c7b73e237cb291f2f74a5f64db69cff4c756339051e17e6421ae3d10a8df55356863ecbb732d9491331068d0b38d4aed4876e63e6c8d2c90d43b", "1c93171ad47fae62c5f0d7b52aa168e7153826f9b5b81608c3f8e8d11ff5013f", [0x3, 0xde95]}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 5m49.240402313s ago: executing program 4 (id=17419): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08000, &(0x7f00000000c0)={[{@init_itable}]}, 0xfc, 0x484, &(0x7f0000000a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x40000000000000, 0x12) open(&(0x7f0000000000)='./bus\x00', 0x401c2, 0xb) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x14913e, 0x0) write$binfmt_script(r2, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x40c000}) 5m48.932906613s ago: executing program 4 (id=17421): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 5m48.146127155s ago: executing program 4 (id=17426): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1}, 0x0) 5m47.654791126s ago: executing program 44 (id=17426): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1}, 0x0) 4m55.031618766s ago: executing program 8 (id=17742): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x80) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r4, 0x1}, 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x0, 0xd6, &(0x7f00000004c0), &(0x7f00000006c0)=""/214, 0x0, 0x0, 0x92, 0x1e, &(0x7f0000000280)="ad73ae25e881f617d062d22681f98c5c80d73da30c6a5a8e2c9dae717133f452168b77d386a13555e22a35328624bbdbee20782174b0a2a2a7aa4db20e732b47ec54c7be61b285f1ed1718e4282f7dcba1d3876a13ad82ea29e204281214c62d90e697d3bb5a368d83c17881c3b0e084d9b38bfabc34bda9a52e387d9526dc3903363a8bb1867a77c68f3ef80053ff1070c4", &(0x7f0000000080)="01658ac1a435630e73e4361c1bd1fe0208628cf6650ac435b1341179cb83", 0x2, 0x0, 0x9}, 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) 4m55.015801576s ago: executing program 8 (id=17743): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 4m54.865731807s ago: executing program 8 (id=17744): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 4m54.865380517s ago: executing program 8 (id=17745): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) process_vm_writev(r1, 0x0, 0x0, &(0x7f0000001d00)=[{0x0}], 0x1, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x4000000) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000001a00)=ANY=[], 0x9, 0x1fa, &(0x7f0000000240)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 4m54.040861468s ago: executing program 8 (id=17754): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='mm_compaction_try_to_compact_pages\x00', r4, 0x0, 0x5}, 0x18) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r6, 0x5412, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @broadcast, 0x4e22, 0x3, 'lblcr\x00', 0x31, 0x0, 0x12}, {@broadcast, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 4m53.836900419s ago: executing program 8 (id=17758): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x18) write$selinux_validatetrans(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='system_u:object_r:useradd_exec_t:s0 system_u:object_r:run_init_exec_t:s0 00000000000000000005 /'], 0x6d) 4m53.787050278s ago: executing program 45 (id=17758): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x18) write$selinux_validatetrans(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='system_u:object_r:useradd_exec_t:s0 system_u:object_r:run_init_exec_t:s0 00000000000000000005 /'], 0x6d) 2m39.705395135s ago: executing program 5 (id=18526): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300001000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_access(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6b6c6f67645f7661725f72756e5f6172fa71743a7330202f7573722f6c69622f74656c6570617468792f6d697373696f6e2d636f6e74726f6c2d35203030"], 0x5f) 2m39.690381005s ago: executing program 5 (id=18527): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000903000000000000000000000105000000080000000000000000000003000000000200000002000000000200000000000000000003000000000100000002"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 2m39.646087475s ago: executing program 5 (id=18528): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="040000000400000004000000280b00"], 0x48) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 2m38.168582577s ago: executing program 5 (id=18540): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$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") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x11000, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f0000002140)='./file0\x00', 0x0) 2m37.728391688s ago: executing program 5 (id=18544): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) 2m37.436879268s ago: executing program 5 (id=18547): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000107000000810000000003"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x0) 2m37.383367368s ago: executing program 46 (id=18547): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000107000000810000000003"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x0) 5.082083392s ago: executing program 3 (id=19301): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_pidfd_open(r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) setuid(0x0) pidfd_send_signal(r2, 0x9, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002500)='fdinfo/4\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800080}, 0x10, 0x0, 0x0, 0x57, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000c) 4.985736102s ago: executing program 7 (id=19302): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readv(r0, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 4.963331142s ago: executing program 7 (id=19303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) 4.571953063s ago: executing program 9 (id=19304): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x8010661b, 0x0) 4.411095013s ago: executing program 7 (id=19305): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 3.901323844s ago: executing program 0 (id=19307): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "679462", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, 0x40}, 0x1, {0x7ff}}}, {0x8, 0x22eb, 0x2, {{0x8, 0x2, 0x7, 0x1, 0x0, 0x3, 0x2, 0xad}, 0x2, {0x10000, 0x8, 0x0, 0x1e, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@unspec={0x0, 0xe803}, 0xc) 3.900997114s ago: executing program 9 (id=19308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006, 0x0, 0x0, 0xffffff3d}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tkill(r0, 0x1d) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) process_vm_readv(r0, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f0000000300)=""/74, 0x4a}, {&(0x7f0000000580)=""/163, 0xa3}, {&(0x7f0000000240)=""/98, 0x62}, {0x0}, {&(0x7f00000006c0)=""/169, 0xa9}, {&(0x7f0000000780)=""/150, 0x96}], 0x7, &(0x7f00000008c0), 0x0, 0x0) sendmsg$nl_xfrm(r4, 0x0, 0x20004800) 3.900491984s ago: executing program 7 (id=19309): r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}, 0x20) 3.900228074s ago: executing program 3 (id=19310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) 3.360762944s ago: executing program 7 (id=19312): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) chdir(&(0x7f0000000000)='./file0\x00') ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.946820985s ago: executing program 0 (id=19314): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='mm_compaction_try_to_compact_pages\x00', r4, 0x0, 0x5}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.946565055s ago: executing program 6 (id=19315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[]) 2.946132635s ago: executing program 9 (id=19316): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89506ebe, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000000600)=ANY=[@ANYBLOB="ba618c14e6c7e698de3fb8b765b993fa49575985fb77bf8cbe11f3e10fe145c3161212e5b9a65501d007df1337c25665e8404c1dc11c53041207bea7fd891761869c2d7d6a7a06c71bfcfe33d41cab42b82ecd0a1fd7f713b1fc70fee63b712bbefbb0a96138503f0163651b0512fa7aa1c1df2df969aa400e0f1901ad03d5cb2eaa2e2fd9500641a214a4ff49e005d1eeb61c2893e933bb23f2568bb02382c787f0c6642de45d21683e0bcf71115878d6e9a489bf815b4133e3d156bdd935a75e", @ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64], 0xfe, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x42) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000003c0)="e4", 0x1}, {&(0x7f0000000100)}], 0x3) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x18000, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@grpjquota}, {@orlov}, {@bsdgroups}, {@jqfmt_vfsv0}, {@errors_remount}, {@test_dummy_encryption_v1}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}]}, 0x80, 0x62d, &(0x7f0000000c40)="$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") 2.209512706s ago: executing program 6 (id=19317): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000440)=ANY=[@ANYBLOB]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1}}) syz_emit_ethernet(0x92, &(0x7f0000000700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "679462", 0x5c, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[@routing={0x14, 0x2, 0x2, 0x45, 0x0, [@empty]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, 0x40}, 0x1, {0x7ff}}}, {0x8, 0x22eb, 0x2, {{0x8, 0x2, 0x7, 0x1, 0x0, 0x3, 0x2, 0xad}, 0x2, {0x10000, 0x8, 0x0, 0x1e, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$netlink(r5, &(0x7f0000000000)=@unspec={0x0, 0xe803}, 0xc) 1.661467747s ago: executing program 9 (id=19318): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) 1.657503407s ago: executing program 0 (id=19319): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES8, @ANYRES32, @ANYRES8, @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRES8], 0xff, 0x1f2, &(0x7f0000000b00)="$eJzsmb2LE0EYxp+Z3WTvDhFsLGwsPPBEb7+ics0VCmIlCKeoZfD2juAmkWSFJCASbGwsRQRb/wELi9R2drZaqCBYmFKwEEZmdtydJG5ISJHAvT/I5Jl3Pt+XzZNiQRDEkeXb119fnl/duXUBwDFswtHxH1Y+hwNZ7/OrR+df7F57/fbTm/eN448H4/utARBi9vPXgX7eE0I8GR3flM3L0dhtcJzT+g4Y3FT+EYq0E4HhnlI2kGmgua5FHLn3m/H+QS2OfNkEsgllUzHPkquHfYb9LDchmDHe7vYeVOM4ao2Lkvh3zsTQvGJa/dT9rnDs5hUUHMDdZ09VXXVt4IOntQQQgCPQugKGPa134MB13bwkRv6n7Hx/a5b8lyXY7/QxkJET28u/zyzCWY1rLCbE6mRR0g9nwRw2HpE/6Cxycjj4MLnq+yrkNV0wFDiOMi4AWeS6nvNxI45vLHBoubDOlulPzAbOGv5kw878w0vqD712t7ddq1cPo8OoEYaVy/5F378Uegc1B76n7GiK/60pf9ow9i+ZE4w/lDIro1NNklbQAZJWkPXDtDUcd+9d86daw5X/cWydSfeQRVZpO/+/D9Mfrr6l2rIKL08QBEEQBEEQBEEQBEEQBDEXp8GQvgJRL6pEAeFNNftvAAAA//8Wg2kI") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) 1.583068267s ago: executing program 3 (id=19320): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x8010661b, 0x0) 1.482577627s ago: executing program 9 (id=19321): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, 0x0, 0x0) personality(0x5000007) truncate(&(0x7f00000003c0)='./file0\x00', 0x3) write$binfmt_script(r6, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0xd, &(0x7f0000000180)=@raw=[@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @call={0x85, 0x0, 0x0, 0x6f}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1735}], &(0x7f0000000000)='syzkaller\x00', 0xffffff29, 0x2e, &(0x7f0000000040)=""/46, 0x41000, 0x8, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000300)=[{0x1, 0x2, 0x0, 0x4}, {0x2, 0x3, 0x8}, {0x0, 0x3, 0x3, 0x2}, {0x0, 0x1, 0xd, 0x1}, {0x3, 0x1, 0x1, 0x8}], 0x10, 0xe9, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x2e4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 1.475180177s ago: executing program 0 (id=19322): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r1, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.429039957s ago: executing program 3 (id=19323): r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) 1.387947878s ago: executing program 3 (id=19324): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000440)=ANY=[@ANYBLOB]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x1}}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.321676248s ago: executing program 0 (id=19325): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "679462", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, 0x40}, 0x1, {0x7ff}}}, {0x8, 0x22eb, 0x2, {{0x8, 0x2, 0x7, 0x1, 0x0, 0x3, 0x2, 0xad}, 0x2, {0x10000, 0x8, 0x0, 0x1e, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@unspec={0x0, 0xe803}, 0xc) 1.273613538s ago: executing program 6 (id=19326): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1.213063838s ago: executing program 6 (id=19327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[]) 739.895848ms ago: executing program 6 (id=19328): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) fdatasync(r0) 358.208909ms ago: executing program 0 (id=19329): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89506ebe, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000000600)=ANY=[@ANYBLOB="ba618c14e6c7e698de3fb8b765b993fa49575985fb77bf8cbe11f3e10fe145c3161212e5b9a65501d007df1337c25665e8404c1dc11c53041207bea7fd891761869c2d7d6a7a06c71bfcfe33d41cab42b82ecd0a1fd7f713b1fc70fee63b712bbefbb0a96138503f0163651b0512fa7aa1c1df2df969aa400e0f1901ad03d5cb2eaa2e2fd9500641a214a4ff49e005d1eeb61c2893e933bb23f2568bb02382c787f0c6642de45d21683e0bcf71115878d6e9a489bf815b4133e3d156bdd935a75e", @ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64], 0xfe, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x42) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000003c0)="e4", 0x1}, {&(0x7f0000000100)}], 0x3) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x18000, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@grpjquota}, {@orlov}, {@bsdgroups}, {@jqfmt_vfsv0}, {@errors_remount}, {@test_dummy_encryption_v1}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}]}, 0x80, 0x62d, &(0x7f0000000c40)="$eJzs3c9rHNcdAPDvzEqyZauVXUqpTUsFPdhQvJZcU7c92e6hPhhqqA8h5GBhSY7w+geWDLZjsAw5JJBACLmG4Ev+gZBr0DXkFgKJbzkHnBCc5JAEb5jZWWuz2rU3kla78Xw+MDNv3szue98dvZ03MzuaAEprKhulEfsi4lwSMdmybCIaC6eK9R5+fft8NiRRr///qySSIq+5/qNiujsbJY3XfHwy4neV9eUu3bx1cbZWb7gTcXj50tXDSzdvHVq8NHth/sL85Zkj/zx6bPpfMx9uTZy7i+mp0//70+svv/iPhU9qh5I4HmdHX5qLtji2ylTj040sxNb8kYg4liU6fC6wnSrF3+NoRPwhJqOSzzVMxuJrA60c0Ff1SmP/VB+rA6WTxKBrAAxGsx/QPLbvx3HwMHtwIhvf6BD/SHH0vjM/Ntr1MGk5MspyI/ZsQfkrEfHj7f1vZ0N0OQ8xsgXldC3/bkT8sdP2T/L49+SRZvGnkba8LktPF+c2svr9ZxN1SFrSvf393dlEaT/3S+Jv3Q5Z/MeLaZZ/ssv7P+0Uz1TbfNnaHwCDsXqi2JFnHZFY2/9lPcNm/yfa+z/19/NrQ+37ro3ovv9Lt+Ddny7v/4102v839/c783142tYPS2Ll2zOd33K0PePzV0+92a38qZb+XzZk5Tf7gj3YdNfwwd2I/W3xv5J/9Mnj7Z906P9mq5zrsYz/fvrlqW7LNhn/ptXvRRzoePyz1ivNUm3XJ5NoXp88OnN4YbE2P90Ydyzjg49eeLdb+YOOP9v+u7rE/6Ttn+Vd7bGM987cu9RI7Vi3bOKp8adfjCVn89RYPl5rXmPJ6WKVxuTG7PLytSNPrktznXw604j/4F87t/8u8ecHH+PNr8weXH3u4sNuyza5/R/Ve1yxmyz+uQ1u/zd6LOO756//uduy9fGvnZMY32hQAAAAAAAAUFJpfg02SauP02laLS68/T52pbUrS8t/W7hy/fJcxMH895CjafNK92RjPsnmZ4rfwzbnj7TN/z0i9kbEW5XxfL56/kptbtDBAwAAAAAAAAAAAAAAAAAAwJDYXdz//6h4Htg3lTStVgddK2Db9PMBc8Bw0/6hvPL2vz3PWwOGjP0/lFfH9u9LAUpBU4fy0v6hvLR/KC/tH8pL+4fy6t7+1y252++6AAAAAABbZu9fVu+PRMTKv8fzITNWLBsdaM2AftPGobwqg64AMDCPL/C7/R9Kp6f+//fFPwfsf3WAAUg6Zeadg/qTG/9qx1cCAAAAAAAAAAAAAH1wYN/q/cT9/1BKbvuD8trY/f+Vjb8UGBqd/vW/x4FAOTjGh5Lr4STAzm4L3P8PAAAAAAAAAAAAANtmIh+StFr8DHgi0rRajfhNROyJ0WRhsTY/HRG/jYjPKqM7svmZQVcaAAAAAAAAAAAAAAAAAAAAnjFLN29dnK3V5q+1Jn5Yl/NsJ5pPPB2W+rQmIul7EWm05YxHxDDE3p/ESEtOErGSbfmteOdk838/MQyfT5EY8BcTAAAAAAAAAAAAAAAAAACUUMu9x53tf2ebawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA22/t+f/9Sww6RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg1+mnAAAA//+EYjvS") 357.861829ms ago: executing program 3 (id=19330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) 348.336759ms ago: executing program 7 (id=19331): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r0, r1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x1901, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) poll(&(0x7f00000000c0)=[{r6}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000340)={[{@errors_remount}, {@bh}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$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") 75.85691ms ago: executing program 6 (id=19332): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) 0s ago: executing program 9 (id=19333): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES8, @ANYRES32, @ANYRES8, @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRES8], 0xff, 0x1f2, &(0x7f0000000b00)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) kernel console output (not intermixed with test programs): fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3043.934814][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 3043.934837][ T28] audit: type=1326 audit(2000031446.325:13433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24878 comm="syz.7.18262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4971f85d19 code=0x7ffc0000 [ 3044.246039][T24896] netlink: 172 bytes leftover after parsing attributes in process `syz.7.18270'. [ 3044.362902][ T28] audit: type=1326 audit(2000031446.325:13434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24878 comm="syz.7.18262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4971f85d19 code=0x7ffc0000 [ 3044.386577][T24896] netlink: 16 bytes leftover after parsing attributes in process `syz.7.18270'. [ 3044.397054][T24900] loop5: detected capacity change from 0 to 128 [ 3044.411360][T24896] netlink: 16 bytes leftover after parsing attributes in process `syz.7.18270'. [ 3044.774206][ T28] audit: type=1326 audit(2000031446.335:13435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24878 comm="syz.7.18262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4971f85d19 code=0x7ffc0000 [ 3044.846905][ T28] audit: type=1326 audit(2000031446.335:13436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24878 comm="syz.7.18262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4971f85d19 code=0x7ffc0000 [ 3044.902871][ T28] audit: type=1326 audit(2000031446.335:13437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24878 comm="syz.7.18262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4971f85d19 code=0x7ffc0000 [ 3045.623109][ T28] audit: type=1326 audit(2000031448.641:13438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24917 comm="syz.9.18276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe275985d19 code=0x7ffc0000 [ 3045.668910][ T28] audit: type=1326 audit(2000031448.641:13439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24917 comm="syz.9.18276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe275985d19 code=0x7ffc0000 [ 3045.706387][ T28] audit: type=1326 audit(2000031448.641:13440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24917 comm="syz.9.18276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe275985d19 code=0x7ffc0000 [ 3045.745890][ T28] audit: type=1326 audit(2000031448.641:13441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24917 comm="syz.9.18276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe275985d19 code=0x7ffc0000 [ 3045.779541][ T28] audit: type=1326 audit(2000031448.641:13442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24917 comm="syz.9.18276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe275985d19 code=0x7ffc0000 [ 3046.613089][T24933] loop5: detected capacity change from 0 to 40427 [ 3046.622761][T24933] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 3046.630517][T24933] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3046.640251][T24933] F2FS-fs (loop5): invalid crc value [ 3046.729570][T24933] F2FS-fs (loop5): Found nat_bits in checkpoint [ 3047.217341][T24933] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 3047.272740][T24933] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 3047.949865][T24990] loop9: detected capacity change from 0 to 128 [ 3047.958712][T24990] EXT4-fs (loop9): Test dummy encryption mode enabled [ 3047.971090][T24990] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3047.975433][T24994] device batadv_slave_1 entered promiscuous mode [ 3047.980009][T24990] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3048.145216][T24995] loop5: detected capacity change from 0 to 8192 [ 3048.215717][T24995] loop5: p1 p3 p4 [ 3048.219409][T24995] loop5: p1 size 16777216 extends beyond EOD, truncated [ 3048.238395][T24995] loop5: p4 start 16711689 is beyond EOD, truncated [ 3048.260123][T24992] device batadv_slave_1 left promiscuous mode [ 3048.370359][T19634] udevd[19634]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 3048.394845][T19641] udevd[19641]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 3048.447342][T25006] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 3048.454977][T30511] Bluetooth: hci0: Frame reassembly failed (-84) [ 3048.512986][ T1955] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 3048.724966][ T1955] usb 8-1: Using ep0 maxpacket: 32 [ 3048.731146][ T1955] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 3048.751579][ T1955] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3048.771522][ T1955] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 3048.789399][ T1955] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3048.810399][ T1955] usb 8-1: rejected 1 configuration due to insufficient available bus power [ 3048.829002][ T1955] usb 8-1: no configuration chosen from 1 choice [ 3048.961332][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3049.075277][T25015] loop3: detected capacity change from 0 to 256 [ 3049.081598][T25015] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 3049.636836][T25030] loop3: detected capacity change from 0 to 512 [ 3049.783158][T25030] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.18311: casefold flag without casefold feature [ 3049.796564][T25030] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.18311: couldn't read orphan inode 15 (err -117) [ 3049.810019][T25030] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 3050.467113][T25040] loop9: detected capacity change from 0 to 256 [ 3050.505324][T25040] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 3050.541130][T25040] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 3050.664971][T32541] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3050.714823][T23213] EXT4-fs (loop3): unmounting filesystem. [ 3051.473392][ T1955] usb 8-1: USB disconnect, device number 93 [ 3051.492675][T25049] 9pnet: Could not find request transport: fd0x0000000000000005 [ 3052.191935][T25079] loop9: detected capacity change from 0 to 1024 [ 3052.205740][T25079] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3052.250495][T25079] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3052.510246][T25088] 9pnet: Could not find request transport: fd0x0000000000000005 [ 3052.658773][T25096] loop3: detected capacity change from 0 to 256 [ 3052.694527][T25096] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 3052.735251][T25096] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 3053.552983][T25106] loop7: detected capacity change from 0 to 1024 [ 3053.607369][T25106] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 3053.640291][T25106] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3054.243130][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3054.580682][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3054.600050][T25128] 9pnet: Could not find request transport: fd0x0000000000000005 [ 3054.771202][T25122] loop9: detected capacity change from 0 to 40427 [ 3054.782678][T25135] loop7: detected capacity change from 0 to 256 [ 3054.792963][T25122] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 3054.805003][T25122] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3054.820718][T25135] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 3054.833353][T25122] F2FS-fs (loop9): invalid crc value [ 3054.833561][T25135] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 3054.862847][T25122] F2FS-fs (loop9): Found nat_bits in checkpoint [ 3054.895681][T25126] loop3: detected capacity change from 0 to 40427 [ 3054.921759][T25126] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 3054.929597][T25126] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3054.938546][T25126] F2FS-fs (loop3): invalid crc value [ 3054.945401][T25126] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3055.130218][T25122] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 3055.249005][T25122] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 3055.282939][T25126] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3055.386240][T25126] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3057.164506][T25175] loop7: detected capacity change from 0 to 1024 [ 3057.204210][T25175] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 3057.244519][T25175] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3057.897117][T25182] device batadv_slave_1 entered promiscuous mode [ 3057.935388][T25181] device batadv_slave_1 left promiscuous mode [ 3058.200705][ T8384] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3058.210590][ T8384] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3058.211363][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3058.225539][T30511] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3058.246372][T30511] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3058.573822][T25189] loop7: detected capacity change from 0 to 40427 [ 3058.583535][T25189] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 3058.591518][T25189] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 3058.600412][T25189] F2FS-fs (loop7): invalid crc value [ 3058.607279][T25189] F2FS-fs (loop7): Found nat_bits in checkpoint [ 3058.838220][T25189] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 3058.845581][T25189] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 3058.940653][T25210] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3058.980728][T25214] loop5: detected capacity change from 0 to 1024 [ 3058.987711][T25214] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3059.024817][T25214] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 3060.035245][T25226] loop9: detected capacity change from 0 to 1024 [ 3060.073480][T25226] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 3060.115713][T25226] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3060.398660][T20188] EXT4-fs (loop5): unmounting filesystem. [ 3060.455011][T25223] loop3: detected capacity change from 0 to 40427 [ 3060.538167][T25223] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 3060.551805][T25223] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3060.553112][T25238] loop5: detected capacity change from 0 to 128 [ 3060.590786][T25238] incfs: Backing dir is not set, filesystem can't be mounted. [ 3060.649800][T25223] F2FS-fs (loop3): invalid crc value [ 3060.662605][T25238] incfs: mount failed -2 [ 3060.677711][T25223] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3060.935657][T25223] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3060.942734][T25223] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3062.229670][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3062.902007][ T43] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3062.914336][ T43] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3063.523515][T25280] loop3: detected capacity change from 0 to 256 [ 3063.541534][T25280] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 3063.553769][T25280] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 3066.151618][T25311] loop3: detected capacity change from 0 to 8192 [ 3066.160960][T25304] loop9: detected capacity change from 0 to 40427 [ 3066.170353][T25311] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3066.183843][T25315] loop5: detected capacity change from 0 to 1024 [ 3066.190211][T25304] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 3066.200202][T25304] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3066.208323][T25315] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3066.218063][T25304] F2FS-fs (loop9): invalid crc value [ 3066.230259][T25316] 9pnet_fd: Insufficient options for proto=fd [ 3066.250609][T25315] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 3066.259557][T25304] F2FS-fs (loop9): Found nat_bits in checkpoint [ 3066.519054][T25304] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 3066.532822][T25304] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 3067.081601][T20188] EXT4-fs (loop5): unmounting filesystem. [ 3067.184197][T25348] loop3: detected capacity change from 0 to 256 [ 3067.276891][T25348] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 3067.304288][T25348] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 3067.972971][T18213] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 3068.194017][T18213] usb 8-1: config 0 has no interfaces? [ 3068.201510][T18213] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3068.231653][T18213] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3068.408931][T18213] usb 8-1: Product: syz [ 3068.422579][T18213] usb 8-1: Manufacturer: syz [ 3068.464128][T18213] usb 8-1: config 0 descriptor?? [ 3068.594812][T25370] loop9: detected capacity change from 0 to 2048 [ 3068.691295][T25352] loop7: detected capacity change from 0 to 512 [ 3068.705204][T25370] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3068.784176][T25352] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 3068.791084][T25352] EXT4-fs (loop7): mount failed [ 3068.820601][T25381] loop3: detected capacity change from 0 to 1024 [ 3068.863277][T25381] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3068.917714][T25381] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3069.223917][T25352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3069.312207][T25352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3069.527151][T31729] usb 8-1: USB disconnect, device number 94 [ 3069.776126][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3069.795774][T23213] EXT4-fs (loop3): unmounting filesystem. [ 3069.803155][T25373] loop5: detected capacity change from 0 to 40427 [ 3069.820935][T25373] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 3069.829168][T25373] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3069.838295][T25373] F2FS-fs (loop5): invalid crc value [ 3069.844914][T25373] F2FS-fs (loop5): Found nat_bits in checkpoint [ 3069.911364][T25394] device batadv_slave_1 entered promiscuous mode [ 3069.938609][T25373] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 3069.945649][T25373] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 3070.014497][T25393] device batadv_slave_1 left promiscuous mode [ 3070.105085][T25402] loop9: detected capacity change from 0 to 1024 [ 3070.123839][T25402] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 3070.201513][T25402] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3070.591952][T25420] loop7: detected capacity change from 0 to 256 [ 3070.623561][T25420] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 3070.635975][T25420] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 3072.547698][T25437] device pim6reg1 entered promiscuous mode [ 3072.624933][T25441] binder: 25440:25441 ioctl c0306201 0 returned -14 [ 3072.640128][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3072.739214][T25446] device batadv_slave_1 entered promiscuous mode [ 3072.768769][T25445] device batadv_slave_1 left promiscuous mode [ 3072.850622][T25452] loop3: detected capacity change from 0 to 2048 [ 3072.858630][T25452] EXT4-fs: Ignoring removed mblk_io_submit option [ 3072.980979][T25452] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3074.245894][T25467] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.18435: bg 0: block 234: padding at end of block bitmap is not set [ 3074.260820][T25467] EXT4-fs (loop3): Remounting filesystem read-only [ 3074.531609][T25477] loop9: detected capacity change from 0 to 128 [ 3074.577860][T25477] EXT4-fs (loop9): Test dummy encryption mode enabled [ 3074.617796][T25477] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3074.639256][T25477] ext4 filesystem being mounted at /207/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3075.680589][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3075.712262][T23213] EXT4-fs (loop3): unmounting filesystem. [ 3075.765869][T25484] loop9: detected capacity change from 0 to 128 [ 3075.768829][T25471] loop7: detected capacity change from 0 to 40427 [ 3075.792332][T25486] device pim6reg1 entered promiscuous mode [ 3075.817852][T25471] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 3075.826956][T25490] loop5: detected capacity change from 0 to 256 [ 3075.835383][T25490] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 3075.843755][T25471] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 3075.844730][T25484] bio_check_eod: 26 callbacks suppressed [ 3075.844745][T25484] syz.9.18444: attempt to access beyond end of device [ 3075.844745][T25484] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 3075.853127][T25471] F2FS-fs (loop7): invalid crc value [ 3075.901695][T25484] syz.9.18444: attempt to access beyond end of device [ 3075.901695][T25484] loop9: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 3075.951487][T25484] syz.9.18444: attempt to access beyond end of device [ 3075.951487][T25484] loop9: rw=0, sector=177, nr_sectors = 1 limit=128 [ 3075.975964][T25484] syz.9.18444: attempt to access beyond end of device [ 3075.975964][T25484] loop9: rw=0, sector=177, nr_sectors = 1 limit=128 [ 3075.995437][T25484] buffer_io_error: 22 callbacks suppressed [ 3075.995458][T25484] Buffer I/O error on dev loop9, logical block 177, async page read [ 3076.013433][T25484] syz.9.18444: attempt to access beyond end of device [ 3076.013433][T25484] loop9: rw=0, sector=178, nr_sectors = 1 limit=128 [ 3076.025430][T25498] device batadv_slave_1 entered promiscuous mode [ 3076.027264][T25484] Buffer I/O error on dev loop9, logical block 178, async page read [ 3076.040867][T25484] syz.9.18444: attempt to access beyond end of device [ 3076.040867][T25484] loop9: rw=0, sector=179, nr_sectors = 1 limit=128 [ 3076.054427][T25484] Buffer I/O error on dev loop9, logical block 179, async page read [ 3076.062580][T25484] syz.9.18444: attempt to access beyond end of device [ 3076.062580][T25484] loop9: rw=0, sector=180, nr_sectors = 1 limit=128 [ 3076.187433][T25501] loop5: detected capacity change from 0 to 16 [ 3076.232204][T25501] erofs: (device loop5): mounted with root inode @ nid 36. [ 3076.244858][T25484] Buffer I/O error on dev loop9, logical block 180, async page read [ 3076.256619][T25484] syz.9.18444: attempt to access beyond end of device [ 3076.256619][T25484] loop9: rw=0, sector=181, nr_sectors = 1 limit=128 [ 3076.271000][ T47] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 3076.282517][T25501] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 3076.297013][T25471] F2FS-fs (loop7): Found nat_bits in checkpoint [ 3076.305133][T25495] device batadv_slave_1 left promiscuous mode [ 3076.350488][T25484] Buffer I/O error on dev loop9, logical block 181, async page read [ 3076.359995][T25484] syz.9.18444: attempt to access beyond end of device [ 3076.359995][T25484] loop9: rw=0, sector=182, nr_sectors = 1 limit=128 [ 3076.373294][T25484] Buffer I/O error on dev loop9, logical block 182, async page read [ 3076.381233][T25484] syz.9.18444: attempt to access beyond end of device [ 3076.381233][T25484] loop9: rw=0, sector=183, nr_sectors = 1 limit=128 [ 3076.401306][T25484] Buffer I/O error on dev loop9, logical block 183, async page read [ 3076.418342][T25484] Buffer I/O error on dev loop9, logical block 184, async page read [ 3076.435472][T25484] Buffer I/O error on dev loop9, logical block 177, async page read [ 3076.454165][T25484] Buffer I/O error on dev loop9, logical block 178, async page read [ 3076.466118][T25471] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 3076.479262][T25471] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 3076.708323][T25506] loop3: detected capacity change from 0 to 40427 [ 3076.732967][T25506] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 3077.054111][T25506] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3077.077200][T25519] loop5: detected capacity change from 0 to 1024 [ 3077.083574][T25506] F2FS-fs (loop3): invalid crc value [ 3077.088135][T25519] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 3077.104813][T25519] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 3077.113813][T25506] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3077.213660][T25506] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3077.220683][T25506] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3077.489121][T30511] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3077.511235][T30511] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3077.791751][T25536] loop7: detected capacity change from 0 to 128 [ 3077.805147][T25536] EXT4-fs (loop7): Test dummy encryption mode enabled [ 3078.925404][T25536] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3078.937131][T25542] loop9: detected capacity change from 0 to 256 [ 3078.946732][T25536] ext4 filesystem being mounted at /225/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3078.963177][T25542] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 3079.943137][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3079.957572][T20188] EXT4-fs (loop5): unmounting filesystem. [ 3080.182292][T25563] loop7: detected capacity change from 0 to 128 [ 3080.319019][T25564] binder: 25560:25564 ioctl c0306201 0 returned -14 [ 3080.476503][T25545] loop9: detected capacity change from 0 to 40427 [ 3080.484065][T25545] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 3080.491960][T25545] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3080.501107][T25545] F2FS-fs (loop9): invalid crc value [ 3080.509876][T25545] F2FS-fs (loop9): Found nat_bits in checkpoint [ 3080.585686][T25545] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 3080.592647][T25545] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 3080.702536][T13524] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3080.711924][T13524] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3081.965242][T25573] loop9: detected capacity change from 0 to 40427 [ 3081.982256][T25589] loop7: detected capacity change from 0 to 512 [ 3081.988626][T25573] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 3082.008427][T25573] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3082.030252][T25573] F2FS-fs (loop9): invalid crc value [ 3082.062922][T25589] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3082.072890][T25589] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3082.088262][T25573] F2FS-fs (loop9): Found nat_bits in checkpoint [ 3082.117165][T25601] loop5: detected capacity change from 0 to 128 [ 3082.127068][T25601] EXT4-fs (loop5): Test dummy encryption mode enabled [ 3082.173516][T25601] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 3082.214236][T25601] ext4 filesystem being mounted at /328/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3082.223516][T25605] device pim6reg1 entered promiscuous mode [ 3082.301296][T25573] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 3082.302329][T25608] loop3: detected capacity change from 0 to 256 [ 3082.308170][T25573] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 3082.327082][T25608] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 3082.927649][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3083.181768][T20188] EXT4-fs (loop5): unmounting filesystem. [ 3083.384143][ T28] audit: type=1326 audit(2000031483.473:13443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25631 comm="syz.5.18480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4985d19 code=0x7ffc0000 [ 3083.462450][T25628] loop3: detected capacity change from 0 to 16 [ 3083.497922][T25628] erofs: (device loop3): mounted with root inode @ nid 36. [ 3083.513407][ T47] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 3083.524716][T25628] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 3084.043529][ T28] audit: type=1326 audit(2000031483.473:13444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25631 comm="syz.5.18480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ee4985d19 code=0x7ffc0000 [ 3084.369272][ T28] audit: type=1326 audit(2000031483.473:13445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25631 comm="syz.5.18480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4985d19 code=0x7ffc0000 [ 3084.399793][T25645] loop5: detected capacity change from 0 to 1024 [ 3084.457089][T25645] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 3084.498787][ T28] audit: type=1326 audit(2000031483.473:13446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25631 comm="syz.5.18480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ee4985d19 code=0x7ffc0000 [ 3084.544681][T25645] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 3084.634965][ T28] audit: type=1326 audit(2000031483.473:13447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25631 comm="syz.5.18480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4985d19 code=0x7ffc0000 [ 3084.730011][ T28] audit: type=1326 audit(2000031483.483:13448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25631 comm="syz.5.18480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0ee4985d19 code=0x7ffc0000 [ 3084.786744][T25650] loop7: detected capacity change from 0 to 40427 [ 3084.796671][T25650] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 3084.815409][T25650] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 3084.828723][T25650] F2FS-fs (loop7): invalid crc value [ 3084.847484][T25662] 9pnet_fd: Insufficient options for proto=fd [ 3084.869826][T25650] F2FS-fs (loop7): Found nat_bits in checkpoint [ 3084.955120][T25650] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 3084.965753][T25650] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 3085.047233][T25672] loop9: detected capacity change from 0 to 2048 [ 3085.083240][T25672] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3085.201977][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3085.287466][T25679] 9pnet_fd: Insufficient options for proto=fd [ 3085.349837][T20188] EXT4-fs (loop5): unmounting filesystem. [ 3085.376825][T25685] loop5: detected capacity change from 0 to 128 [ 3085.383818][T25685] EXT4-fs (loop5): Test dummy encryption mode enabled [ 3085.392557][T25685] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 3085.403878][T25685] ext4 filesystem being mounted at /332/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3085.516675][ T8384] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3085.525949][ T8384] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3085.648663][T25696] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3085.657392][T25696] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3086.240557][T25698] loop9: detected capacity change from 0 to 512 [ 3086.376724][T25698] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.18501: casefold flag without casefold feature [ 3086.391517][T25698] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.18501: couldn't read orphan inode 15 (err -117) [ 3086.405039][T25698] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3087.266419][T25704] loop7: detected capacity change from 0 to 40427 [ 3087.284151][T25704] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 3087.292015][T25704] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 3087.301233][T25704] F2FS-fs (loop7): invalid crc value [ 3087.308296][T25704] F2FS-fs (loop7): Found nat_bits in checkpoint [ 3087.353821][T20188] EXT4-fs (loop5): unmounting filesystem. [ 3087.360066][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3087.414804][T25717] loop9: detected capacity change from 0 to 2048 [ 3087.447441][T25717] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3087.448352][T25721] netlink: 208 bytes leftover after parsing attributes in process `syz.5.18508'. [ 3087.517199][T25704] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 3087.560031][T25704] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 3087.566571][T25713] loop3: detected capacity change from 0 to 40427 [ 3087.577338][T25713] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 3087.585612][T25713] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3087.597221][T25713] F2FS-fs (loop3): invalid crc value [ 3087.607105][T25713] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3087.748191][T25713] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3087.755357][T25713] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3087.866744][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3088.110066][T25739] loop3: detected capacity change from 0 to 256 [ 3088.180050][T25739] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 3088.195552][ T43] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3088.215374][ T43] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3088.721159][T25753] loop7: detected capacity change from 0 to 512 [ 3088.740605][T25753] EXT4-fs: Ignoring removed i_version option [ 3088.758685][T25753] EXT4-fs: Ignoring removed mblk_io_submit option [ 3088.788300][T25753] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 3088.815999][T25753] EXT4-fs (loop7): 1 truncate cleaned up [ 3088.821622][T25753] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3090.810199][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3090.848384][T25775] loop3: detected capacity change from 0 to 8192 [ 3090.908490][T25775] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3091.226416][T25800] loop7: detected capacity change from 0 to 128 [ 3092.332346][T25817] loop3: detected capacity change from 0 to 1024 [ 3092.389028][T25817] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3092.392076][T25823] loop5: detected capacity change from 0 to 512 [ 3092.427087][T25823] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.5.18540: corrupted xattr block 95 [ 3092.440144][T25823] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.18540: bg 0: block 7: invalid block bitmap [ 3092.457435][T25817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3092.489779][T25823] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 3092.660515][T25823] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2925: inode #11: comm syz.5.18540: corrupted xattr block 95 [ 3092.667691][T25834] fuse: Bad value for 'fd' [ 3092.687958][T25823] EXT4-fs warning (device loop5): ext4_evict_inode:299: xattr delete (err -117) [ 3092.700588][T25823] EXT4-fs (loop5): 1 orphan inode deleted [ 3092.708770][T25823] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 3092.773682][T25823] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 3092.827442][T20188] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /344/file0: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0 [ 3092.857289][T23213] EXT4-fs (loop3): unmounting filesystem. [ 3092.910943][T20188] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 3092.943244][T20188] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 3092.991277][T25841] loop3: detected capacity change from 0 to 8192 [ 3093.012623][T25841] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3093.034833][T20188] EXT4-fs (loop5): unmounting filesystem. [ 3093.135566][T25837] loop9: detected capacity change from 0 to 40427 [ 3093.153868][T25837] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 3093.162885][T25837] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3093.186296][T25837] F2FS-fs (loop9): invalid crc value [ 3093.209222][T25837] F2FS-fs (loop9): Found nat_bits in checkpoint [ 3093.323988][T25837] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 3093.338843][T25837] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 3094.680559][ T43] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3094.698050][ T43] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3094.833228][T25858] bridge0: port 1(bridge_slave_0) entered blocking state [ 3094.840215][T25858] bridge0: port 1(bridge_slave_0) entered disabled state [ 3094.860833][T25879] loop9: detected capacity change from 0 to 2048 [ 3094.863760][T25858] device bridge_slave_0 entered promiscuous mode [ 3094.885360][T25858] bridge0: port 2(bridge_slave_1) entered blocking state [ 3094.892282][T25858] bridge0: port 2(bridge_slave_1) entered disabled state [ 3094.900146][T25858] device bridge_slave_1 entered promiscuous mode [ 3094.907506][ T8384] device bridge_slave_0 left promiscuous mode [ 3094.914199][ T8384] bridge0: port 1(bridge_slave_0) entered disabled state [ 3094.921611][T25879] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3094.931348][ T8384] device veth1_macvtap left promiscuous mode [ 3094.950506][ T8384] device veth0_vlan left promiscuous mode [ 3095.034706][T17999] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 3095.151384][T25858] bridge0: port 2(bridge_slave_1) entered blocking state [ 3095.158326][T25858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3095.165448][T25858] bridge0: port 1(bridge_slave_0) entered blocking state [ 3095.172299][T25858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3095.212499][T18785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3095.221853][T18785] bridge0: port 1(bridge_slave_0) entered disabled state [ 3095.233549][T18785] bridge0: port 2(bridge_slave_1) entered disabled state [ 3095.244291][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3095.244551][T17999] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3095.261797][T17999] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 3095.276773][T18785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3095.292155][T18785] bridge0: port 1(bridge_slave_0) entered blocking state [ 3095.299052][T18785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3095.306389][T17999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3095.318854][T17999] usb 4-1: config 0 descriptor?? [ 3095.319113][T25889] loop9: detected capacity change from 0 to 8192 [ 3095.323782][T18785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3095.334225][T25889] FAT-fs (loop9): Unrecognized mount option "ÿÿÿÿÿÿÿÿS®^F† Ö]3ó4/‡8vЩXÙåã "¡Úhù\o‘ËC:ÀÛdôQ;Œ/àwÚ*é•·­ì»ÚzÄ|Ñþ6Ý /]%:n•eF4Ű+ðÑy®ê…ˆà=°‡š7“MBfûh¹ ¨Ù Rn"" or missing value [ 3095.346908][T18785] bridge0: port 2(bridge_slave_1) entered blocking state [ 3095.363332][T18785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3095.370769][T18785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3095.386222][T18785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3095.405999][T18785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3095.427336][T18785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3095.438892][T18785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3095.447101][T18785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3095.447113][T25891] loop9: detected capacity change from 0 to 1024 [ 3095.461769][T25858] device veth0_vlan entered promiscuous mode [ 3095.468748][T25891] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3095.486292][T18785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3095.495409][T25858] device veth1_macvtap entered promiscuous mode [ 3095.506941][ T8384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3095.516208][T25891] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3095.526068][ T8384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3095.559082][ T8009] usb 4-1: USB disconnect, device number 27 [ 3095.761390][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3095.907662][T25905] loop9: detected capacity change from 0 to 8192 [ 3095.944207][T25905] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3096.083138][T25910] loop7: detected capacity change from 0 to 512 [ 3096.263142][T25910] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.18565: casefold flag without casefold feature [ 3096.277269][T25910] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.18565: couldn't read orphan inode 15 (err -117) [ 3096.290830][T25910] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3098.438381][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3098.499694][T25912] loop9: detected capacity change from 0 to 40427 [ 3098.524255][T25912] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 3098.531963][T25912] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3098.624612][T25912] F2FS-fs (loop9): invalid crc value [ 3099.698175][T25912] F2FS-fs (loop9): Failed to initialize F2FS segment manager (-4) [ 3100.180079][T25950] loop6: detected capacity change from 0 to 40427 [ 3100.193459][T25950] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 3100.205359][T25947] loop3: detected capacity change from 0 to 40427 [ 3100.214540][T25950] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 3100.231349][T25947] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 3100.239196][T25947] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3100.247423][T25950] F2FS-fs (loop6): invalid crc value [ 3100.253566][T25947] F2FS-fs (loop3): invalid crc value [ 3100.260814][T25947] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3100.272532][T25950] F2FS-fs (loop6): Found nat_bits in checkpoint [ 3100.349522][T25950] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 3100.356036][T25947] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3100.356487][T25950] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 3100.363322][T25947] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3100.505755][ T8384] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3100.518831][ T8384] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3100.743131][T25979] loop6: detected capacity change from 0 to 1024 [ 3100.767361][T25979] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3100.802548][T25979] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 3102.942050][T26010] device batadv_slave_1 entered promiscuous mode [ 3102.950519][T26009] device batadv_slave_1 left promiscuous mode [ 3103.021858][T26006] loop3: detected capacity change from 0 to 40427 [ 3103.048006][T26006] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 3103.055830][T26006] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3103.064750][T26006] F2FS-fs (loop3): invalid crc value [ 3103.071814][T26006] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3103.120123][T26006] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3103.127219][T26006] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3103.513086][T18785] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3103.523127][T18785] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3103.582565][ T28] audit: type=1326 audit(2000031502.121:13449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26023 comm="syz.7.18596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4971f85d19 code=0x7ffc0000 [ 3103.681358][ T28] audit: type=1326 audit(2000031502.158:13450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26023 comm="syz.7.18596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f4971f85d19 code=0x7ffc0000 [ 3103.778206][ T28] audit: type=1326 audit(2000031502.158:13451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26023 comm="syz.7.18596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4971f85d19 code=0x7ffc0000 [ 3103.841213][ T28] audit: type=1326 audit(2000031502.158:13452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26023 comm="syz.7.18596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4971f85d19 code=0x7ffc0000 [ 3103.911411][ T28] audit: type=1326 audit(2000031502.158:13453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26023 comm="syz.7.18596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4971f85d19 code=0x7ffc0000 [ 3104.332484][ T28] audit: type=1326 audit(2000031502.158:13454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26023 comm="syz.7.18596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4971f85d19 code=0x7ffc0000 [ 3104.400404][ T28] audit: type=1326 audit(2000031502.158:13455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26023 comm="syz.7.18596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4971f85d19 code=0x7ffc0000 [ 3104.448247][ T28] audit: type=1326 audit(2000031502.158:13456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26023 comm="syz.7.18596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4971f85d19 code=0x7ffc0000 [ 3104.488023][ T28] audit: type=1326 audit(2000031502.158:13457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26023 comm="syz.7.18596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4971f85d53 code=0x7ffc0000 [ 3104.511726][ T28] audit: type=1326 audit(2000031502.158:13458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26023 comm="syz.7.18596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4971f85d53 code=0x7ffc0000 [ 3104.551621][T26036] loop3: detected capacity change from 0 to 40427 [ 3104.565789][T26036] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 3104.582918][T26036] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3104.607671][T26036] F2FS-fs (loop3): invalid crc value [ 3104.630352][T26036] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3104.734915][T26036] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3104.741891][T26036] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3105.940475][T25858] EXT4-fs (loop6): unmounting filesystem. [ 3106.014500][T26040] loop9: detected capacity change from 0 to 40427 [ 3106.032171][T26040] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 3106.097596][T26040] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3106.140503][T26063] loop6: detected capacity change from 0 to 1024 [ 3106.178513][T26055] loop7: detected capacity change from 0 to 40427 [ 3106.235859][T26040] F2FS-fs (loop9): Found nat_bits in checkpoint [ 3106.267234][T26063] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 3106.275807][T26055] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 3106.290432][T26055] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 3106.300790][T26063] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 3106.309931][T26055] F2FS-fs (loop7): invalid crc value [ 3106.321375][T26055] F2FS-fs (loop7): Found nat_bits in checkpoint [ 3106.850045][T26055] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 3106.861817][T26040] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 3106.872975][T26040] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 3106.887195][T26055] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 3107.065909][T25858] EXT4-fs (loop6): unmounting filesystem. [ 3107.246702][T18785] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3107.256388][T18785] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3108.095316][T26096] device pim6reg1 entered promiscuous mode [ 3108.232497][T26101] loop7: detected capacity change from 0 to 1024 [ 3108.264346][T26101] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3108.523428][T26101] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3109.084286][T26116] loop9: detected capacity change from 0 to 2048 [ 3109.090789][T26116] FAT-fs (loop9): Unrecognized mount option "0000000000000000000000518446744073709551615 œ·À" or missing value [ 3114.235672][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3114.329201][T26131] loop6: detected capacity change from 0 to 512 [ 3116.248810][T26138] loop9: detected capacity change from 0 to 2048 [ 3116.255289][T26138] FAT-fs (loop9): Unrecognized mount option "0000000000000000000000518446744073709551615 œ·À" or missing value [ 3116.408084][T26131] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.18620: casefold flag without casefold feature [ 3116.421654][T26131] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.18620: couldn't read orphan inode 15 (err -117) [ 3116.434555][T26131] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 3116.718398][T25858] EXT4-fs (loop6): unmounting filesystem. [ 3117.069094][T26153] loop9: detected capacity change from 0 to 256 [ 3117.673665][T26151] loop3: detected capacity change from 0 to 40427 [ 3117.684128][T26151] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 3117.699439][T26151] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3117.719696][T26151] F2FS-fs (loop3): invalid crc value [ 3117.740732][T26151] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3117.808110][T26151] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3117.815655][T26151] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3117.961538][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 3117.961556][ T28] audit: type=1326 audit(2000031515.389:13464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26152 comm="syz.9.18629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe275985d19 code=0x7fc00000 [ 3118.177640][T26178] loop9: detected capacity change from 0 to 1024 [ 3118.190518][T26178] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3118.445184][T26178] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3118.568974][T26185] device batadv_slave_1 entered promiscuous mode [ 3118.599518][T26184] device batadv_slave_1 left promiscuous mode [ 3118.663805][T26169] loop6: detected capacity change from 0 to 40427 [ 3118.672394][T26169] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 3118.680155][T26169] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 3119.860015][T26169] F2FS-fs (loop6): invalid crc value [ 3120.518994][T26169] F2FS-fs (loop6): Found nat_bits in checkpoint [ 3120.897928][T26169] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 3120.904939][T26169] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 3121.259441][T26216] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000000bºG¢â9 [ 3121.288649][T26218] loop3: detected capacity change from 0 to 256 [ 3121.556320][T18785] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3121.579088][T26218] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 3121.591979][T18785] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3121.617259][T26218] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 3121.728645][T26224] loop7: detected capacity change from 0 to 2048 [ 3121.792099][T26224] EXT4-fs: Ignoring removed mblk_io_submit option [ 3121.846578][T26224] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3122.020157][T26232] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.18648: bg 0: block 234: padding at end of block bitmap is not set [ 3122.034602][T26232] EXT4-fs (loop7): Remounting filesystem read-only [ 3122.303553][T26237] overlayfs: failed to resolve './file0': -2 [ 3122.600708][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3122.695879][T26243] loop7: detected capacity change from 0 to 1024 [ 3122.721222][T26243] EXT4-fs: Ignoring removed nobh option [ 3122.736010][T26243] EXT4-fs: Ignoring removed bh option [ 3122.747119][T26243] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3122.823795][T26243] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3122.836461][T26234] loop6: detected capacity change from 0 to 40427 [ 3122.894245][T26234] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 3122.921014][T26234] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 3122.942352][T26234] F2FS-fs (loop6): invalid crc value [ 3123.097273][T26234] F2FS-fs (loop6): Found nat_bits in checkpoint [ 3123.130873][ T28] audit: type=1400 audit(2000031520.160:13465): avc: denied { ioctl } for pid=26242 comm="syz.7.18651" path="/265/file1/file1" dev="loop7" ino=15 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 3123.381102][T26234] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 3123.447204][T26234] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 3124.085208][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3124.483201][T26262] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000000bºG¢â9 [ 3124.844332][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3124.903103][T26270] loop9: detected capacity change from 0 to 256 [ 3124.931879][T26270] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 3125.079821][T26275] loop9: detected capacity change from 0 to 1024 [ 3125.124243][T26275] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 3125.153434][T26279] loop7: detected capacity change from 0 to 128 [ 3125.219374][T26279] EXT4-fs (loop7): Test dummy encryption mode enabled [ 3125.224440][T26275] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3125.246276][T26279] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3125.276158][T26284] loop3: detected capacity change from 0 to 1024 [ 3125.293946][T26279] ext4 filesystem being mounted at /268/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3125.803324][T26284] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3126.655909][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3126.664341][T26284] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3127.996630][T26303] loop9: detected capacity change from 0 to 512 [ 3128.184473][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3129.303377][T26303] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.18665: casefold flag without casefold feature [ 3129.318027][T26303] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.18665: couldn't read orphan inode 15 (err -117) [ 3129.330420][T26303] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3129.462254][T26311] loop6: detected capacity change from 0 to 256 [ 3129.509903][T26311] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 3129.685108][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3130.593565][T26321] loop7: detected capacity change from 0 to 512 [ 3130.620098][T19634] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3130.624446][T26324] loop9: detected capacity change from 0 to 256 [ 3130.636297][T23213] EXT4-fs (loop3): unmounting filesystem. [ 3130.661657][T26324] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 3130.727651][T26324] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 3130.745408][T26321] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.18666: casefold flag without casefold feature [ 3130.759292][T26321] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.18666: couldn't read orphan inode 15 (err -117) [ 3130.771604][T26321] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3131.279026][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3131.925575][T26333] loop3: detected capacity change from 0 to 40427 [ 3131.949472][T26350] loop7: detected capacity change from 0 to 128 [ 3131.988975][T26333] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 3132.024433][T26333] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3132.051153][T26350] bio_check_eod: 25 callbacks suppressed [ 3132.051175][T26350] syz.7.18680: attempt to access beyond end of device [ 3132.051175][T26350] loop7: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 3132.078782][T26333] F2FS-fs (loop3): invalid crc value [ 3132.101209][T26333] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3132.182683][T26350] syz.7.18680: attempt to access beyond end of device [ 3132.182683][T26350] loop7: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 3132.201708][T26358] loop9: detected capacity change from 0 to 1024 [ 3132.228607][T26346] loop6: detected capacity change from 0 to 40427 [ 3132.261793][T26346] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 3132.273251][T26346] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 3132.288906][T26358] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3132.304050][T26350] syz.7.18680: attempt to access beyond end of device [ 3132.304050][T26350] loop7: rw=0, sector=177, nr_sectors = 1 limit=128 [ 3132.305041][T26346] F2FS-fs (loop6): invalid crc value [ 3132.326890][T26333] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3132.334102][T26333] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3132.343497][T26358] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3132.685242][T26346] F2FS-fs (loop6): Found nat_bits in checkpoint [ 3132.958904][T26346] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 3132.970122][T26346] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 3133.852877][T18785] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3133.873913][ T8384] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3133.884682][T18785] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3133.884811][ T8384] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3133.905575][T26387] syz.0.18689 uses obsolete (PF_INET,SOCK_PACKET) [ 3133.993585][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3134.216854][T26404] device pim6reg1 entered promiscuous mode [ 3134.768939][T26414] loop3: detected capacity change from 0 to 512 [ 3134.781424][T26414] EXT4-fs: Ignoring removed bh option [ 3135.393977][T26414] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3135.405008][T26414] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 3135.414487][T26414] EXT4-fs error (device loop3): ext4_acquire_dquot:6788: comm syz.3.18697: Failed to acquire dquot type 0 [ 3135.426830][T26414] EXT4-fs (loop3): Remounting filesystem read-only [ 3135.433481][T26414] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3135.443781][T26414] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 3135.453093][T26414] EXT4-fs error (device loop3): ext4_acquire_dquot:6788: comm syz.3.18697: Failed to acquire dquot type 0 [ 3135.465469][T26414] EXT4-fs (loop3): Remounting filesystem read-only [ 3135.473285][T26414] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3135.483562][T26414] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 3135.492805][T26414] EXT4-fs error (device loop3): ext4_acquire_dquot:6788: comm syz.3.18697: Failed to acquire dquot type 0 [ 3135.505239][T26414] EXT4-fs (loop3): Remounting filesystem read-only [ 3135.511819][T26414] EXT4-fs (loop3): 1 orphan inode deleted [ 3135.517436][T26414] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 3135.527103][T26414] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3135.541053][T26414] EXT4-fs (loop3): unmounting filesystem. [ 3135.603383][T26419] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18698'. [ 3136.099948][T26408] loop6: detected capacity change from 0 to 256 [ 3136.728129][T26434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3136.735190][T26434] IPv6: NLM_F_CREATE should be set when creating new route [ 3136.772935][T26439] loop3: detected capacity change from 0 to 1024 [ 3136.779539][T26439] EXT4-fs: Ignoring removed nobh option [ 3136.785111][T26439] EXT4-fs: Ignoring removed bh option [ 3136.790699][T26439] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3136.795927][T26441] device pim6reg1 entered promiscuous mode [ 3136.816406][T26439] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 3136.845747][T26446] 9pnet_fd: Insufficient options for proto=fd [ 3136.879703][T26450] device batadv_slave_1 entered promiscuous mode [ 3136.887992][T26449] device batadv_slave_1 left promiscuous mode [ 3137.020362][T26452] loop9: detected capacity change from 0 to 256 [ 3137.195649][T26471] device pim6reg1 entered promiscuous mode [ 3137.448960][T26475] 9pnet_fd: Insufficient options for proto=fd [ 3137.649799][T26478] device batadv_slave_1 entered promiscuous mode [ 3137.833114][T26476] device batadv_slave_1 left promiscuous mode [ 3137.843651][T23213] EXT4-fs (loop3): unmounting filesystem. [ 3138.710875][T26515] device batadv_slave_1 entered promiscuous mode [ 3138.719171][T26514] device batadv_slave_1 left promiscuous mode [ 3139.849246][T26536] device pim6reg1 entered promiscuous mode [ 3139.998736][T26547] loop3: detected capacity change from 0 to 1024 [ 3140.020466][T26547] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3140.186014][T26547] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3142.646112][T26583] loop6: detected capacity change from 0 to 128 [ 3142.731444][T26581] loop7: detected capacity change from 0 to 256 [ 3142.771291][T26583] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 3142.801342][T26583] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 3143.037774][T23213] EXT4-fs (loop3): unmounting filesystem. [ 3143.428787][T26603] loop3: detected capacity change from 0 to 512 [ 3143.435152][T26603] EXT4-fs: Ignoring removed nobh option [ 3143.446954][T26603] EXT4-fs: Ignoring removed mblk_io_submit option [ 3143.454607][T26603] EXT4-fs: Mount option(s) incompatible with ext3 [ 3145.551094][T26579] loop9: detected capacity change from 0 to 40427 [ 3145.566131][T25858] EXT4-fs (loop6): unmounting filesystem. [ 3145.579174][T26579] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 3145.604533][T26579] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3145.653683][T26579] F2FS-fs (loop9): invalid crc value [ 3145.712037][T26579] F2FS-fs (loop9): Found nat_bits in checkpoint [ 3148.055451][T26631] loop3: detected capacity change from 0 to 256 [ 3148.187515][T26641] loop9: detected capacity change from 0 to 512 [ 3148.209339][T26641] EXT4-fs: Ignoring removed bh option [ 3148.272931][T26641] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3148.321509][T26641] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 3148.356517][T26641] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.18773: Failed to acquire dquot type 0 [ 3148.368645][T26641] EXT4-fs (loop9): Remounting filesystem read-only [ 3148.375506][T26641] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3148.386146][T26641] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 3148.395490][T26641] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.18773: Failed to acquire dquot type 0 [ 3148.407686][T26641] EXT4-fs (loop9): Remounting filesystem read-only [ 3148.432865][T26641] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3148.496962][T26641] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 3148.519229][T26641] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.18773: Failed to acquire dquot type 0 [ 3148.521749][T26648] loop3: detected capacity change from 0 to 1024 [ 3148.574183][T26648] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3148.586602][T26641] EXT4-fs (loop9): Remounting filesystem read-only [ 3148.593893][T26641] EXT4-fs (loop9): 1 orphan inode deleted [ 3148.599823][T26641] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3148.609716][T26641] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3148.623788][T26641] EXT4-fs (loop9): unmounting filesystem. [ 3148.694296][T26648] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3149.686924][T26666] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18780'. [ 3149.969215][T23213] EXT4-fs (loop3): unmounting filesystem. [ 3150.412487][T26678] loop3: detected capacity change from 0 to 256 [ 3150.999901][T26698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18792'. [ 3151.465786][T26702] loop3: detected capacity change from 0 to 1024 [ 3151.598188][T26702] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3152.014506][T26702] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3152.462552][T26722] loop6: detected capacity change from 0 to 40427 [ 3152.479308][T26728] loop7: detected capacity change from 0 to 8192 [ 3152.496334][T26722] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 3152.513813][T26722] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 3152.522772][T26728] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3152.534380][T26722] F2FS-fs (loop6): invalid crc value [ 3152.558859][T26722] F2FS-fs (loop6): Found nat_bits in checkpoint [ 3152.639705][T26722] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 3152.646636][T26722] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 3152.678281][T26735] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18804'. [ 3154.349944][T23213] EXT4-fs (loop3): unmounting filesystem. [ 3157.955288][T26778] netlink: 108 bytes leftover after parsing attributes in process `syz.9.18817'. [ 3157.990355][T26776] loop7: detected capacity change from 0 to 8192 [ 3158.019413][T26776] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3158.213733][T26786] netlink: 16 bytes leftover after parsing attributes in process `syz.7.18819'. [ 3158.229645][T26786] netlink: 3 bytes leftover after parsing attributes in process `syz.7.18819'. [ 3158.462765][T26787] loop6: detected capacity change from 0 to 128 [ 3159.171450][ T28] audit: type=1400 audit(2000031553.414:13466): avc: denied { mount } for pid=26791 comm="syz.7.18820" name="/" dev="configfs" ino=13930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 3159.226696][ T28] audit: type=1400 audit(2000031553.442:13467): avc: denied { search } for pid=26791 comm="syz.7.18820" name="/" dev="configfs" ino=13930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3159.323006][ T28] audit: type=1400 audit(2000031553.506:13468): avc: denied { read } for pid=26791 comm="syz.7.18820" name="/" dev="configfs" ino=13930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3159.907300][ T28] audit: type=1400 audit(2000031553.506:13469): avc: denied { open } for pid=26791 comm="syz.7.18820" path="/" dev="configfs" ino=13930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3160.647638][T26819] loop6: detected capacity change from 0 to 128 [ 3160.695786][T26819] EXT4-fs error (device loop6): __ext4_fill_super:5387: inode #2: comm syz.6.18830: iget: checksum invalid [ 3160.719868][T26817] loop9: detected capacity change from 0 to 8192 [ 3160.731919][T26819] EXT4-fs (loop6): get root inode failed [ 3160.762949][T26819] EXT4-fs (loop6): mount failed [ 3160.768314][T26817] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3160.803005][T26806] loop3: detected capacity change from 0 to 40427 [ 3160.814713][T26806] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 3160.831254][T26806] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3160.855211][T26819] loop6: detected capacity change from 0 to 16 [ 3160.863560][T26806] F2FS-fs (loop3): invalid crc value [ 3160.868125][T26819] erofs: Unknown parameter 'ÿÿÿÿ' [ 3160.883724][T26806] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3160.891481][T26826] loop9: detected capacity change from 0 to 2048 [ 3160.929141][T19634] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3160.942604][T26826] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3160.954497][T26826] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3160.965273][T26806] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3160.973914][T26806] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3161.007320][T26826] fs-verity: sha512 using implementation "sha512-avx2" [ 3161.157104][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3161.165272][T26840] fuse: Bad value for 'fd' [ 3161.638452][T26855] loop9: detected capacity change from 0 to 1024 [ 3161.768879][T26855] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3161.982386][T26855] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3162.116228][T26866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18844'. [ 3162.774417][T26873] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 3163.212192][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3163.351715][T26886] fuse: Bad value for 'fd' [ 3163.765796][T26890] loop7: detected capacity change from 0 to 2048 [ 3163.772293][T26890] FAT-fs (loop7): Unrecognized mount option "0000000000000000000000518446744073709551615 œ·À" or missing value [ 3164.667625][T26900] loop7: detected capacity change from 0 to 512 [ 3164.684342][T26888] loop6: detected capacity change from 0 to 40427 [ 3164.696541][T26892] loop9: detected capacity change from 0 to 40427 [ 3164.706398][T19634] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3164.721841][T26888] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 3164.765106][T26892] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 3164.787873][T26892] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3164.793161][T26888] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 3164.802386][T26892] F2FS-fs (loop9): invalid crc value [ 3164.817132][T26888] F2FS-fs (loop6): invalid crc value [ 3164.817150][T26892] F2FS-fs (loop9): Found nat_bits in checkpoint [ 3164.841610][T26888] F2FS-fs (loop6): Found nat_bits in checkpoint [ 3164.873213][T26892] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 3164.880135][T26892] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 3164.974068][T26888] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 3164.981360][T26888] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 3165.490518][ T43] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3165.506958][T26917] fuse: Bad value for 'fd' [ 3165.516712][ T43] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3165.603905][ T28] audit: type=1326 audit(2000031559.356:13470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26922 comm="syz.0.18861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4608985d19 code=0x7ffc0000 [ 3165.651940][ T28] audit: type=1326 audit(2000031559.356:13471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26922 comm="syz.0.18861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4608985d19 code=0x7ffc0000 [ 3165.820545][ T28] audit: type=1326 audit(2000031559.356:13472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26922 comm="syz.0.18861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4608985d19 code=0x7ffc0000 [ 3166.750144][ T28] audit: type=1326 audit(2000031559.356:13473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26922 comm="syz.0.18861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4608985d19 code=0x7ffc0000 [ 3166.774700][ T28] audit: type=1326 audit(2000031559.384:13474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26922 comm="syz.0.18861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4608985d19 code=0x7ffc0000 [ 3167.088424][ T28] audit: type=1326 audit(2000031559.393:13475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26922 comm="syz.0.18861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f4608985d19 code=0x7ffc0000 [ 3167.452511][ T28] audit: type=1326 audit(2000031559.393:13476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26922 comm="syz.0.18861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4608985d19 code=0x7ffc0000 [ 3167.491395][ T28] audit: type=1326 audit(2000031559.393:13477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26922 comm="syz.0.18861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4608985d19 code=0x7ffc0000 [ 3167.606213][T26948] block device autoloading is deprecated and will be removed. [ 3167.613614][T26948] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 3167.685838][T26929] loop6: detected capacity change from 0 to 40427 [ 3167.720967][T26929] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 3167.739692][T26929] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 3167.758983][T26929] F2FS-fs (loop6): invalid crc value [ 3167.787155][T26929] F2FS-fs (loop6): Found nat_bits in checkpoint [ 3167.835879][T26929] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 3167.842921][T26929] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 3167.915510][T26943] loop3: detected capacity change from 0 to 40427 [ 3167.931495][T26943] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 3168.676493][T26967] loop0: detected capacity change from 0 to 512 [ 3168.682867][T26943] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3168.819477][T26943] F2FS-fs (loop3): invalid crc value [ 3168.961641][T19634] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3169.094075][ T8384] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3169.108814][ T8384] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3169.118393][T26943] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3169.263066][T26943] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3169.270136][T26943] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3169.775533][T13524] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3169.796755][T13524] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3170.110097][T27012] loop7: detected capacity change from 0 to 1024 [ 3170.121967][T27012] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3170.133301][T27012] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 3170.148967][T27012] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3170.431589][T27015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18888'. [ 3170.461185][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3172.666992][T27046] binder: 27045:27046 ioctl c0306201 0 returned -14 [ 3172.791823][T27049] loop9: detected capacity change from 0 to 1024 [ 3172.812768][T27049] EXT4-fs: Ignoring removed nobh option [ 3172.818237][T27049] EXT4-fs: Ignoring removed bh option [ 3172.823729][T27049] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3172.851792][T27049] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3173.046791][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3173.096941][T27062] loop9: detected capacity change from 0 to 128 [ 3173.139827][T27050] loop6: detected capacity change from 0 to 40427 [ 3173.168126][T27050] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 3173.176486][T27050] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 3173.185331][T27050] F2FS-fs (loop6): invalid crc value [ 3173.241755][T27050] F2FS-fs (loop6): Found nat_bits in checkpoint [ 3173.292373][T27050] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 3173.299594][T27050] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 3175.512607][T27105] loop6: detected capacity change from 0 to 256 [ 3175.738338][T27105] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 3177.653887][T27133] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 3177.660978][ T8384] Bluetooth: hci0: Frame reassembly failed (-84) [ 3177.707496][ T8384] Bluetooth: hci0: Frame reassembly failed (-84) [ 3177.911535][T27136] fuse: Bad value for 'fd' [ 3178.085060][T27123] loop7: detected capacity change from 0 to 40427 [ 3178.106348][T27123] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 3178.130616][T27123] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 3178.193481][T27123] F2FS-fs (loop7): invalid crc value [ 3178.215767][T27123] F2FS-fs (loop7): Found nat_bits in checkpoint [ 3178.344537][T27123] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 3178.351474][T27123] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 3178.710023][T27150] loop9: detected capacity change from 0 to 128 [ 3178.807839][T27149] binder: 27146:27149 ioctl c0306201 0 returned -14 [ 3179.008343][T27155] loop7: detected capacity change from 0 to 128 [ 3179.021915][T27155] EXT4-fs (loop7): Test dummy encryption mode enabled [ 3179.030373][T27155] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3179.042986][T27155] ext4 filesystem being mounted at /327/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3179.179698][ T28] audit: type=1400 audit(2000031571.886:13478): avc: denied { ioctl } for pid=27159 comm="syz.9.18931" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 3179.850918][T23873] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3179.850947][T32541] Bluetooth: hci0: command 0x1003 tx timeout [ 3180.860968][T27199] device pim6reg1 entered promiscuous mode [ 3180.867496][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3181.049736][T27204] loop0: detected capacity change from 0 to 1024 [ 3181.087758][T27204] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3181.135211][T27204] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3181.813917][T27227] loop9: detected capacity change from 0 to 128 [ 3182.079506][T27230] device pim6reg1 entered promiscuous mode [ 3182.105476][T27227] EXT4-fs (loop9): Test dummy encryption mode enabled [ 3182.143609][T27227] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3182.179962][T27227] ext4 filesystem being mounted at /320/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3182.194533][T27233] loop7: detected capacity change from 0 to 128 [ 3182.375235][T23470] EXT4-fs (loop0): unmounting filesystem. [ 3182.391853][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3182.648536][T27259] device pim6reg1 entered promiscuous mode [ 3182.672203][T27263] loop6: detected capacity change from 0 to 1024 [ 3182.683173][T27265] loop0: detected capacity change from 0 to 128 [ 3182.731082][T27263] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3182.853960][T27265] EXT4-fs (loop0): Test dummy encryption mode enabled [ 3182.980354][T27265] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3183.009358][T27263] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 3183.135658][T27265] ext4 filesystem being mounted at /252/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3183.761891][T27284] loop3: detected capacity change from 0 to 128 [ 3184.458346][T23470] EXT4-fs (loop0): unmounting filesystem. [ 3184.507892][T25858] EXT4-fs (loop6): unmounting filesystem. [ 3184.586410][T27306] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 3185.791186][T27322] loop3: detected capacity change from 0 to 256 [ 3186.003287][ T28] audit: type=1326 audit(2000031578.170:13479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27319 comm="syz.3.18986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5185d19 code=0x7ffc0000 [ 3186.353831][T27329] incfs: Error accessing: ./file0/../file0. [ 3186.409596][ T28] audit: type=1326 audit(2000031578.198:13480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27319 comm="syz.3.18986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5e5185d19 code=0x7ffc0000 [ 3186.578027][T27330] overlayfs: './file0' not a directory [ 3186.617193][T27329] incfs: mount failed -20 [ 3186.667859][ T28] audit: type=1326 audit(2000031578.216:13481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27319 comm="syz.3.18986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5185d19 code=0x7ffc0000 [ 3186.770909][ T28] audit: type=1326 audit(2000031578.216:13482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27319 comm="syz.3.18986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5e5185d19 code=0x7ffc0000 [ 3186.879220][T27339] loop9: detected capacity change from 0 to 1024 [ 3186.883685][T27338] loop0: detected capacity change from 0 to 2048 [ 3186.889251][T27328] loop6: detected capacity change from 0 to 256 [ 3186.892060][T27338] EXT4-fs: Ignoring removed mblk_io_submit option [ 3186.907189][T27340] loop3: detected capacity change from 0 to 256 [ 3186.908746][ T28] audit: type=1326 audit(2000031578.225:13483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27319 comm="syz.3.18986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5185d19 code=0x7ffc0000 [ 3186.913555][T27340] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 3186.950247][T27339] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3186.993937][T27338] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3187.025211][T27339] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3187.066376][ T28] audit: type=1326 audit(2000031578.225:13484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27319 comm="syz.3.18986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd5e5185d19 code=0x7ffc0000 [ 3187.090816][ T28] audit: type=1326 audit(2000031578.225:13485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27319 comm="syz.3.18986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5185d19 code=0x7ffc0000 [ 3187.110266][T27323] loop7: detected capacity change from 0 to 40427 [ 3187.130931][ T28] audit: type=1326 audit(2000031578.235:13486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27319 comm="syz.3.18986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fd5e5185d19 code=0x7ffc0000 [ 3187.154567][ T28] audit: type=1326 audit(2000031578.235:13487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27319 comm="syz.3.18986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5185d19 code=0x7ffc0000 [ 3187.189105][T27323] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 3188.065409][ T28] audit: type=1326 audit(2000031578.235:13488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27319 comm="syz.3.18986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd5e5185d19 code=0x7ffc0000 [ 3188.111607][T27323] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 3188.140224][T27323] F2FS-fs (loop7): invalid crc value [ 3188.223890][T23470] EXT4-fs (loop0): unmounting filesystem. [ 3188.393974][T27364] loop3: detected capacity change from 0 to 2048 [ 3188.401700][T27323] F2FS-fs (loop7): Found nat_bits in checkpoint [ 3188.747383][T27364] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3188.759252][T27364] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3188.798922][T27323] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 3188.808173][T23213] EXT4-fs (loop3): unmounting filesystem. [ 3188.813822][T27323] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 3189.353942][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3189.388893][ T43] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3189.606962][ T43] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3189.782344][T27392] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3190.365010][T27399] loop7: detected capacity change from 0 to 256 [ 3190.377306][T27399] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 3191.433015][T27410] loop9: detected capacity change from 0 to 2048 [ 3191.449340][T27410] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3191.572151][T27427] loop0: detected capacity change from 0 to 1024 [ 3191.579238][T27427] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3191.616406][T27421] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 3191.658787][T27427] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3192.947740][T27438] loop6: detected capacity change from 0 to 128 [ 3193.861572][T27443] loop3: detected capacity change from 0 to 40427 [ 3193.898568][T27443] F2FS-fs (loop3): fault_injection options not supported [ 3193.914043][T27443] F2FS-fs (loop3): invalid crc value [ 3193.932229][T27443] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3194.026721][T27443] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3194.044075][T23470] EXT4-fs (loop0): unmounting filesystem. [ 3194.055803][T23213] syz-executor: attempt to access beyond end of device [ 3194.055803][T23213] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3194.166437][T27459] loop0: detected capacity change from 0 to 2048 [ 3194.239079][T27459] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3194.270586][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3194.274764][T27459] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3194.325998][T23470] EXT4-fs (loop0): unmounting filesystem. [ 3194.350725][T27465] loop3: detected capacity change from 0 to 2048 [ 3194.357755][T27465] EXT4-fs: Ignoring removed mblk_io_submit option [ 3194.396859][T27465] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3194.653113][T27474] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.19022: bg 0: block 234: padding at end of block bitmap is not set [ 3194.668497][T27474] EXT4-fs (loop3): Remounting filesystem read-only [ 3195.337849][T27468] loop0: detected capacity change from 0 to 40427 [ 3195.366559][T27468] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 3195.376998][T27468] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 3195.394410][T27468] F2FS-fs (loop0): invalid crc value [ 3195.498911][T27468] F2FS-fs (loop0): Found nat_bits in checkpoint [ 3195.624349][T23213] EXT4-fs (loop3): unmounting filesystem. [ 3195.638731][T27468] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 3195.645857][T27468] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 3195.671645][T27488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19030'. [ 3195.700736][T27490] loop3: detected capacity change from 0 to 128 [ 3195.708033][T27490] EXT4-fs (loop3): Test dummy encryption mode enabled [ 3195.962356][T27490] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3195.971160][T27490] ext4 filesystem being mounted at /228/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3196.409840][T20870] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3196.418948][T20870] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3196.450704][T27509] loop9: detected capacity change from 0 to 2048 [ 3196.489825][T27509] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3196.502666][T27509] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3196.557347][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3196.641504][T23213] EXT4-fs (loop3): unmounting filesystem. [ 3196.699456][T27522] loop3: detected capacity change from 0 to 2048 [ 3196.707512][T27524] loop6: detected capacity change from 0 to 256 [ 3196.719447][T27522] EXT4-fs: Ignoring removed mblk_io_submit option [ 3196.871832][T27524] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 3196.923518][T27522] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3197.197043][T27542] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.19040: bg 0: block 234: padding at end of block bitmap is not set [ 3197.212006][T27542] EXT4-fs (loop3): Remounting filesystem read-only [ 3197.943774][T27551] loop9: detected capacity change from 0 to 2048 [ 3198.106229][T27557] loop6: detected capacity change from 0 to 128 [ 3198.113402][T27551] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3198.121728][T27551] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3198.156611][T27557] EXT4-fs (loop6): Test dummy encryption mode enabled [ 3198.189482][T27557] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 3198.211037][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3198.216916][T27557] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3198.401735][T23213] EXT4-fs (loop3): unmounting filesystem. [ 3198.416825][T27561] loop9: detected capacity change from 0 to 1024 [ 3198.424215][T27561] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3198.451989][T27561] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3198.507356][T27549] loop0: detected capacity change from 0 to 40427 [ 3198.541422][T27549] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 3198.555757][T27549] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 3198.571701][T27549] F2FS-fs (loop0): invalid crc value [ 3198.633342][T27549] F2FS-fs (loop0): Found nat_bits in checkpoint [ 3198.897198][T27549] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 3198.952058][T27549] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 3199.054829][T25858] EXT4-fs (loop6): unmounting filesystem. [ 3200.092190][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3200.098685][ T8384] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3200.108267][ T8384] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3200.634146][T27595] loop3: detected capacity change from 0 to 256 [ 3200.651225][T27601] loop6: detected capacity change from 0 to 256 [ 3200.693014][T27601] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 3200.709701][T27605] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 3200.775848][T27610] loop3: detected capacity change from 0 to 128 [ 3200.803108][T27610] EXT4-fs (loop3): Test dummy encryption mode enabled [ 3200.875623][T27610] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3200.895246][T27610] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3201.808907][T23213] EXT4-fs (loop3): unmounting filesystem. [ 3201.937841][T27613] loop0: detected capacity change from 0 to 40427 [ 3201.967311][T27613] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 3201.984382][T27630] loop7: detected capacity change from 0 to 8192 [ 3201.990657][T27613] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 3201.999793][T27613] F2FS-fs (loop0): invalid crc value [ 3202.017441][T27630] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3202.029335][T27613] F2FS-fs (loop0): Found nat_bits in checkpoint [ 3202.122323][T27613] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 3202.129564][T27613] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 3202.159161][T27642] loop9: detected capacity change from 0 to 256 [ 3202.168749][T27642] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 3203.358754][ T8384] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3203.422696][ T8384] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3204.660826][T27675] loop3: detected capacity change from 0 to 8192 [ 3204.697740][T27689] loop6: detected capacity change from 0 to 256 [ 3204.715886][T27689] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 3204.730809][T27675] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3204.740895][T27691] loop7: detected capacity change from 0 to 2048 [ 3204.828959][T27691] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3204.842555][T27702] binder: 27701:27702 ioctl c0306201 0 returned -14 [ 3204.853676][T27691] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3204.983210][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3205.096383][T27694] loop0: detected capacity change from 0 to 40427 [ 3205.143907][T27694] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 3205.162695][T27694] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 3205.184261][T27694] F2FS-fs (loop0): invalid crc value [ 3205.541030][T27694] F2FS-fs (loop0): Found nat_bits in checkpoint [ 3205.666193][T27694] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 3205.679883][T27694] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 3207.063778][ T8110] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3207.077398][ T8110] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3207.170955][T27733] loop9: detected capacity change from 0 to 8192 [ 3207.191632][T27733] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3207.332539][T27746] netlink: 108 bytes leftover after parsing attributes in process `syz.7.19109'. [ 3207.533929][T27756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19112'. [ 3207.793328][T27760] loop3: detected capacity change from 0 to 2048 [ 3207.799852][T27760] FAT-fs (loop3): Unrecognized mount option "0000000000000000000000518446744073709551615 œ·À" or missing value [ 3207.848202][T19634] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3207.917481][T27766] loop9: detected capacity change from 0 to 2048 [ 3207.997515][T27766] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3208.020317][T27766] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3208.076918][T27773] loop0: detected capacity change from 0 to 256 [ 3208.083900][T27773] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 3208.101481][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3208.156094][T27777] binder: 27776:27777 ioctl c0306201 0 returned -14 [ 3208.294822][T27780] loop6: detected capacity change from 0 to 256 [ 3208.370474][T27785] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19123'. [ 3208.683013][T27798] loop7: detected capacity change from 0 to 2048 [ 3208.744035][T27798] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3208.754721][T27798] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3208.799561][T27794] loop3: detected capacity change from 0 to 256 [ 3208.844502][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3208.890788][T27808] loop7: detected capacity change from 0 to 256 [ 3208.917346][T27808] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 3209.003766][T27816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19135'. [ 3209.207926][T27822] loop3: detected capacity change from 0 to 2048 [ 3209.214364][T27822] FAT-fs (loop3): Unrecognized mount option "0000000000000000000000518446744073709551615 œ·À" or missing value [ 3209.513619][ T8009] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 3209.652112][T19634] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3209.859034][ T8009] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3209.895227][ T8009] usb 8-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 3209.959661][ T8009] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3211.924408][T27836] loop9: detected capacity change from 0 to 512 [ 3211.963455][T27836] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3211.978615][T27836] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3212.416530][ T8009] usb 8-1: config 0 descriptor?? [ 3212.563864][ T8009] usb 8-1: can't set config #0, error -71 [ 3212.570144][ T8009] usb 8-1: USB disconnect, device number 95 [ 3212.582068][T27853] loop3: detected capacity change from 0 to 256 [ 3212.592005][T27853] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 3212.621106][T27857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19147'. [ 3212.678990][T27859] loop7: detected capacity change from 0 to 2048 [ 3212.687136][T27859] EXT4-fs: Ignoring removed mblk_io_submit option [ 3212.782292][T27859] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3212.861229][T27846] loop6: detected capacity change from 0 to 40427 [ 3212.891249][T27846] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 3212.899143][T27846] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 3212.908362][T27846] F2FS-fs (loop6): invalid crc value [ 3212.914901][T27846] F2FS-fs (loop6): Found nat_bits in checkpoint [ 3212.922440][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3212.957378][T27873] loop9: detected capacity change from 0 to 128 [ 3212.972713][T27846] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 3212.979666][T27846] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 3214.098242][T27802] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 3214.112934][T27802] EXT4-fs (loop7): Remounting filesystem read-only [ 3214.690837][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3214.698176][ T43] kworker/u4:2: attempt to access beyond end of device [ 3214.698176][ T43] loop9: rw=1, sector=145, nr_sectors = 33 limit=128 [ 3214.712858][T13524] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3214.733443][T13524] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3214.815680][T27891] loop0: detected capacity change from 0 to 256 [ 3214.857202][ T8009] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 3214.872593][T27891] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 3215.054134][ T8009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3215.151068][ T8009] usb 4-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 3215.281808][ T8009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3215.481508][ T8009] usb 4-1: config 0 descriptor?? [ 3215.591591][T27897] loop0: detected capacity change from 0 to 128 [ 3220.243081][T27902] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19160'. [ 3220.283710][T27906] loop3: detected capacity change from 0 to 512 [ 3220.355917][ T8009] usb 4-1: can't set config #0, error -71 [ 3220.362087][ T8009] usb 4-1: USB disconnect, device number 28 [ 3220.383613][T27906] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 3220.405852][T27906] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3221.539252][T27931] loop6: detected capacity change from 0 to 128 [ 3221.552305][T23213] EXT4-fs (loop3): unmounting filesystem. [ 3221.823804][T27928] loop9: detected capacity change from 0 to 40427 [ 3221.875199][T27928] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 3221.883448][T27928] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3221.898411][T27928] F2FS-fs (loop9): invalid crc value [ 3221.955731][T27928] F2FS-fs (loop9): Found nat_bits in checkpoint [ 3222.041056][T27928] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 3222.048424][T27928] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 3222.768669][T13524] kworker/u4:4: attempt to access beyond end of device [ 3222.768669][T13524] loop6: rw=1, sector=145, nr_sectors = 33 limit=128 [ 3222.785095][T18785] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3222.879107][T18785] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3223.493655][T27955] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19173'. [ 3224.409357][T27972] loop7: detected capacity change from 0 to 256 [ 3224.429446][T27972] exfat: Deprecated parameter 'utf8' [ 3224.434608][T27972] exfat: Deprecated parameter 'namecase' [ 3224.440586][T27972] exfat: Deprecated parameter 'namecase' [ 3224.446154][T27972] exfat: Deprecated parameter 'utf8' [ 3224.454836][T27972] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 3224.532341][T27974] loop7: detected capacity change from 0 to 512 [ 3224.586119][T27974] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3224.602133][T27980] loop6: detected capacity change from 0 to 128 [ 3224.607321][T27974] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3224.622622][T27980] EXT4-fs (loop6): Test dummy encryption mode enabled [ 3224.639674][T27980] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 3224.643470][ T8068] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 3224.665647][T27980] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3225.220222][ T8068] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3225.323203][ T8068] usb 10-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 3225.400606][ T8068] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3225.492212][ T8068] usb 10-1: config 0 descriptor?? [ 3225.548886][T25858] EXT4-fs (loop6): unmounting filesystem. [ 3225.558409][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3225.593495][T27995] fuse: Bad value for 'user_id' [ 3225.640524][T27997] block device autoloading is deprecated and will be removed. [ 3225.651461][T27997] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 3225.708766][T27986] loop3: detected capacity change from 0 to 40427 [ 3225.732681][T27986] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 3225.748232][T27986] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3225.766050][T27986] F2FS-fs (loop3): invalid crc value [ 3225.779226][T27986] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3225.779977][ T8068] usbhid 10-1:0.0: can't add hid device: -71 [ 3225.792783][ T8068] usbhid: probe of 10-1:0.0 failed with error -71 [ 3225.801088][T28001] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19187'. [ 3225.811112][ T8068] usb 10-1: USB disconnect, device number 4 [ 3226.067311][T27986] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3226.088572][T27986] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3227.564486][T27900] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3227.674201][T27900] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3227.700590][T28026] fuse: Bad value for 'user_id' [ 3227.708890][T28028] loop0: detected capacity change from 0 to 128 [ 3227.734880][T28028] EXT4-fs (loop0): Test dummy encryption mode enabled [ 3227.793719][T28028] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3227.825951][T28028] ext4 filesystem being mounted at /292/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3228.595734][T28038] loop6: detected capacity change from 0 to 40427 [ 3228.606097][T28038] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 3228.621303][T28038] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 3228.637750][T28038] F2FS-fs (loop6): invalid crc value [ 3228.654444][T23470] EXT4-fs (loop0): unmounting filesystem. [ 3228.686591][T28038] F2FS-fs (loop6): Found nat_bits in checkpoint [ 3228.819070][T28038] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 3228.847885][T28038] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 3228.942289][T28059] loop7: detected capacity change from 0 to 512 [ 3228.964269][T28059] EXT4-fs: Ignoring removed mblk_io_submit option [ 3229.012495][T28059] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.19203: invalid indirect mapped block 10 (level 1) [ 3229.036838][T28059] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.19203: invalid indirect mapped block 8 (level 1) [ 3229.061709][T28059] EXT4-fs (loop7): 1 truncate cleaned up [ 3229.206599][T28059] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3229.375495][T17999] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 3229.392104][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3229.443422][T28068] tipc: Started in network mode [ 3229.448256][T28068] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 3229.456966][T28068] tipc: Enabling of bearer rejected, failed to enable media [ 3229.489649][T28070] fuse: Bad value for 'user_id' [ 3229.575709][T17999] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3229.607063][T17999] usb 10-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 3229.637878][T17999] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3229.681753][T17999] usb 10-1: config 0 descriptor?? [ 3229.722898][T28065] loop3: detected capacity change from 0 to 40427 [ 3229.741837][T28065] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 3229.758747][T28065] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3229.770790][T28065] F2FS-fs (loop3): invalid crc value [ 3229.777468][T28065] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3229.926210][T28065] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3229.947476][T28065] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3230.135014][T17999] usbhid 10-1:0.0: can't add hid device: -71 [ 3230.140943][T17999] usbhid: probe of 10-1:0.0 failed with error -71 [ 3230.150746][T17999] usb 10-1: USB disconnect, device number 5 [ 3230.204733][T28091] loop0: detected capacity change from 0 to 1024 [ 3230.214587][T28091] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3230.247616][T28091] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3231.489885][T28106] loop6: detected capacity change from 0 to 40427 [ 3231.506920][T28104] loop9: detected capacity change from 0 to 40427 [ 3231.540270][T28106] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 3231.547923][T28106] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 3231.570024][T28104] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 3231.598211][T20870] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3231.604899][T28106] F2FS-fs (loop6): invalid crc value [ 3231.607550][T20870] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3231.612089][T28104] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3231.622333][T23470] EXT4-fs (loop0): unmounting filesystem. [ 3231.629856][T28104] F2FS-fs (loop9): invalid crc value [ 3231.660934][T28113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19218'. [ 3231.669830][T28115] fuse: Bad value for 'fd' [ 3231.675076][T28106] F2FS-fs (loop6): Found nat_bits in checkpoint [ 3231.696332][T28104] F2FS-fs (loop9): Found nat_bits in checkpoint [ 3231.751133][T28106] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 3231.758523][T28106] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 3231.837463][T28104] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 3231.847396][T28104] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 3233.803151][T20870] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 3233.846446][T28144] loop3: detected capacity change from 0 to 1024 [ 3233.849714][T20870] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 3233.861536][T28144] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3233.907863][T28144] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3233.999803][T28148] loop6: detected capacity change from 0 to 16 [ 3234.025760][T28148] erofs: (device loop6): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 3234.480209][T24628] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 3234.538565][T28148] loop6: detected capacity change from 0 to 2048 [ 3234.636636][T28148] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 3234.645018][T28148] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3234.672295][T28148] device vcan0 entered promiscuous mode [ 3234.677726][T28148] device vlan2 entered promiscuous mode [ 3234.683376][T28148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 3234.691116][T28148] device vcan0 left promiscuous mode [ 3234.826520][T28159] loop9: detected capacity change from 0 to 512 [ 3234.842950][T24628] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3234.861834][T24628] usb 8-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 3234.885806][T25858] EXT4-fs (loop6): unmounting filesystem. [ 3234.917600][T19641] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3235.083269][T28165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19231'. [ 3235.205929][T23213] EXT4-fs (loop3): unmounting filesystem. [ 3235.584322][T24628] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3235.593421][T24628] usb 8-1: config 0 descriptor?? [ 3235.617422][T28175] binder: 28174:28175 ioctl c0306201 0 returned -14 [ 3235.819181][T24628] usbhid 8-1:0.0: can't add hid device: -71 [ 3235.825252][T24628] usbhid: probe of 8-1:0.0 failed with error -71 [ 3235.841294][T24628] usb 8-1: USB disconnect, device number 96 [ 3235.848608][T28180] input: syz1 as /devices/virtual/input/input74 [ 3235.922888][T28183] loop9: detected capacity change from 0 to 128 [ 3235.964393][T28183] syz.9.19237: attempt to access beyond end of device [ 3235.964393][T28183] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 3235.986800][T28183] syz.9.19237: attempt to access beyond end of device [ 3235.986800][T28183] loop9: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 3236.003359][T28183] syz.9.19237: attempt to access beyond end of device [ 3236.003359][T28183] loop9: rw=0, sector=177, nr_sectors = 1 limit=128 [ 3236.017151][T28183] syz.9.19237: attempt to access beyond end of device [ 3236.017151][T28183] loop9: rw=0, sector=177, nr_sectors = 1 limit=128 [ 3236.031705][T28183] buffer_io_error: 22 callbacks suppressed [ 3236.031724][T28183] Buffer I/O error on dev loop9, logical block 177, async page read [ 3236.071369][T28183] syz.9.19237: attempt to access beyond end of device [ 3236.071369][T28183] loop9: rw=0, sector=178, nr_sectors = 1 limit=128 [ 3236.095510][T28183] Buffer I/O error on dev loop9, logical block 178, async page read [ 3236.117322][T28183] syz.9.19237: attempt to access beyond end of device [ 3236.117322][T28183] loop9: rw=0, sector=179, nr_sectors = 1 limit=128 [ 3236.141497][T28183] Buffer I/O error on dev loop9, logical block 179, async page read [ 3236.163375][T28183] syz.9.19237: attempt to access beyond end of device [ 3236.163375][T28183] loop9: rw=0, sector=180, nr_sectors = 1 limit=128 [ 3236.185605][T28183] Buffer I/O error on dev loop9, logical block 180, async page read [ 3236.204420][T28183] syz.9.19237: attempt to access beyond end of device [ 3236.204420][T28183] loop9: rw=0, sector=181, nr_sectors = 1 limit=128 [ 3236.228616][T28183] Buffer I/O error on dev loop9, logical block 181, async page read [ 3236.250640][T28183] syz.9.19237: attempt to access beyond end of device [ 3236.250640][T28183] loop9: rw=0, sector=182, nr_sectors = 1 limit=128 [ 3236.272315][T28183] Buffer I/O error on dev loop9, logical block 182, async page read [ 3236.283096][T28183] syz.9.19237: attempt to access beyond end of device [ 3236.283096][T28183] loop9: rw=0, sector=183, nr_sectors = 1 limit=128 [ 3236.315654][T28183] Buffer I/O error on dev loop9, logical block 183, async page read [ 3236.326445][T28183] Buffer I/O error on dev loop9, logical block 184, async page read [ 3236.334299][T28183] Buffer I/O error on dev loop9, logical block 177, async page read [ 3236.375795][T28183] Buffer I/O error on dev loop9, logical block 178, async page read [ 3236.475703][T28191] loop0: detected capacity change from 0 to 128 [ 3236.509142][T28191] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3236.532221][T28191] ext4 filesystem being mounted at /303/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 3236.724415][T23470] EXT4-fs (loop0): unmounting filesystem. [ 3236.736244][T28200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19243'. [ 3237.118807][T28208] loop0: detected capacity change from 0 to 512 [ 3237.183197][T19634] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3237.298994][T28204] loop6: detected capacity change from 0 to 40427 [ 3237.326375][T28204] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 3237.341734][T28204] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 3237.350991][T28204] F2FS-fs (loop6): invalid crc value [ 3237.357573][T28204] F2FS-fs (loop6): Found nat_bits in checkpoint [ 3237.407316][T28204] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 3237.414248][T28204] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 3237.453559][ T1955] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 3237.981754][T28226] loop9: detected capacity change from 0 to 512 [ 3237.988123][ T1955] usb 4-1: Using ep0 maxpacket: 32 [ 3238.007573][ T1955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3238.021301][T28226] EXT4-fs: Ignoring removed i_version option [ 3238.027181][T28226] EXT4-fs: Ignoring removed mblk_io_submit option [ 3238.033876][ T1955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3238.044241][T28226] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 3238.054228][ T1955] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 3238.064558][ T1955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3238.075044][T28226] EXT4-fs (loop9): 1 truncate cleaned up [ 3238.080743][T28226] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3238.090442][ T1955] usb 4-1: config 0 descriptor?? [ 3238.550967][T28239] binder: 28235:28239 ioctl c0306201 0 returned -14 [ 3238.636809][ T1955] elo 0003:04E7:0030.00E1: collection stack underflow [ 3238.643473][ T1955] elo 0003:04E7:0030.00E1: item 0 2 0 12 parsing failed [ 3238.650832][ T1955] elo 0003:04E7:0030.00E1: parse failed [ 3238.656260][ T1955] elo: probe of 0003:04E7:0030.00E1 failed with error -22 [ 3238.876757][ T8068] usb 4-1: USB disconnect, device number 29 [ 3239.115584][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3239.186741][T28253] loop9: detected capacity change from 0 to 128 [ 3239.648690][T28258] loop7: detected capacity change from 0 to 128 [ 3239.735771][T28258] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3239.744350][T28258] ext4 filesystem being mounted at /398/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 3239.770537][T28265] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19262'. [ 3240.136846][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3240.240598][T28284] loop9: detected capacity change from 0 to 512 [ 3240.254021][T28284] EXT4-fs: Ignoring removed i_version option [ 3240.264032][T28284] EXT4-fs: Ignoring removed mblk_io_submit option [ 3240.321871][T28284] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 3240.549657][T28291] binder: 28290:28291 ioctl c0306201 0 returned -14 [ 3240.642534][T28294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19273'. [ 3240.653991][T28284] EXT4-fs (loop9): 1 truncate cleaned up [ 3240.659467][T28284] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3241.567198][T28311] loop3: detected capacity change from 0 to 128 [ 3241.569477][T28305] loop6: detected capacity change from 0 to 40427 [ 3241.580390][T28305] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 3241.587270][T28305] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 3241.641864][T28311] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3241.653506][T28305] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 3241.695639][T28311] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 3241.741580][T28305] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 3241.748598][T28305] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 3241.763006][T23213] EXT4-fs (loop3): unmounting filesystem. [ 3243.418873][T28322] loop0: detected capacity change from 0 to 40427 [ 3243.425806][T28322] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 3243.436462][T28322] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 3243.550840][T28322] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 3243.795688][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3243.840294][T28322] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 3243.847300][T28322] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 3243.923247][T28359] loop7: detected capacity change from 0 to 128 [ 3243.957418][T28359] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3244.079537][T28359] ext4 filesystem being mounted at /407/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 3244.270895][T21452] EXT4-fs (loop7): unmounting filesystem. [ 3244.385264][T28371] binder: 28364:28371 ioctl c0306201 0 returned -14 [ 3245.363532][T28385] loop6: detected capacity change from 0 to 2048 [ 3245.388064][T28385] EXT4-fs: Ignoring removed mblk_io_submit option [ 3245.428140][T28385] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 3245.520033][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 3245.520052][ T28] audit: type=1326 audit(2000031889.090:13548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.3.19301" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5e5185d19 code=0x0 [ 3246.101905][T28407] loop9: detected capacity change from 0 to 128 [ 3246.238473][T28407] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3246.249142][T28407] ext4 filesystem being mounted at /380/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 3246.458399][T28413] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 3246.599956][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3246.646718][T28422] binder: 28420:28422 ioctl c0306201 0 returned -14 [ 3247.176463][T25858] EXT4-fs (loop6): unmounting filesystem. [ 3247.598823][T28438] loop9: detected capacity change from 0 to 128 [ 3247.633134][T28438] EXT4-fs (loop9): Test dummy encryption mode enabled [ 3247.651990][T28438] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3247.675342][T28438] ext4 filesystem being mounted at /382/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3247.680498][T31729] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 3248.314904][T31729] usb 8-1: config 0 has no interfaces? [ 3248.397409][T31729] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3248.406826][T31729] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3248.419089][T31729] usb 8-1: config 0 descriptor?? [ 3248.880316][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3248.890367][T28454] loop0: detected capacity change from 0 to 16 [ 3248.917736][T28454] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 3248.942531][T28457] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 3248.957861][T28459] loop3: detected capacity change from 0 to 128 [ 3248.979644][T28454] loop0: detected capacity change from 0 to 2048 [ 3248.980038][T28459] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3248.995145][T28459] ext4 filesystem being mounted at /282/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 3249.031536][T28454] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3249.040574][T28454] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3249.073410][T23470] EXT4-fs (loop0): unmounting filesystem. [ 3249.076370][T28464] loop9: detected capacity change from 0 to 2048 [ 3249.085514][T23213] EXT4-fs (loop3): unmounting filesystem. [ 3249.088582][T28464] EXT4-fs: Ignoring removed mblk_io_submit option [ 3249.132072][T28464] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3249.152042][T17999] usb 8-1: USB disconnect, device number 97 [ 3250.198088][T28489] loop0: detected capacity change from 0 to 128 [ 3250.214798][T28490] binder: 28487:28490 ioctl c0306201 0 returned -14 [ 3250.251246][T28489] EXT4-fs (loop0): Test dummy encryption mode enabled [ 3250.516892][T28495] loop7: detected capacity change from 0 to 512 [ 3250.523198][T28495] EXT4-fs: Ignoring removed bh option [ 3250.539799][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3250.569632][T28495] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3250.579916][T28495] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 3250.589198][T28495] EXT4-fs error (device loop7): ext4_acquire_dquot:6788: comm syz.7.19331: Failed to acquire dquot type 0 [ 3250.602666][T28495] EXT4-fs (loop7): Remounting filesystem read-only [ 3250.609159][T28495] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3250.619377][T28495] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 3250.628592][T28495] EXT4-fs error (device loop7): ext4_acquire_dquot:6788: comm syz.7.19331: Failed to acquire dquot type 0 [ 3250.640961][T28495] EXT4-fs (loop7): Remounting filesystem read-only [ 3250.649198][T28495] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3250.659485][T28495] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 3250.668718][T28495] EXT4-fs error (device loop7): ext4_acquire_dquot:6788: comm syz.7.19331: Failed to acquire dquot type 0 [ 3250.680787][T28495] EXT4-fs (loop7): Remounting filesystem read-only [ 3250.687384][T28495] EXT4-fs (loop7): 1 orphan inode deleted [ 3250.692953][T28495] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3250.701917][T28495] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3250.716391][T28495] EXT4-fs (loop7): unmounting filesystem. [ 3250.851145][T28489] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3250.902280][T28489] general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN [ 3250.913834][T28489] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 3250.922080][T28489] CPU: 0 PID: 28489 Comm: syz.0.19329 Tainted: G W 6.1.115-syzkaller-00015-gb9ba16d91d44 #0 [ 3250.933371][T28489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3250.943257][T28489] RIP: 0010:__ext4_journal_get_write_access+0xb0/0x690 [ 3250.949953][T28489] Code: 88 ff 49 8d 5e 30 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9e eb cf ff 48 8b 1b 48 83 c3 38 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 81 eb cf ff 4c 8b 23 4d 85 e4 4c [ 3250.958759][T28504] loop9: detected capacity change from 0 to 16 [ 3250.969383][T28489] RSP: 0018:ffffc9000a71f6e0 EFLAGS: 00010202 [ 3250.969410][T28489] RAX: 0000000000000007 RBX: 0000000000000038 RCX: 0000000000080000 [ 3250.969424][T28489] RDX: ffffc9000d800000 RSI: 0000000000005c8e RDI: 0000000000005c8f [ 3250.969439][T28489] RBP: ffffc9000a71f7b0 R08: ffff88813564d000 R09: 0000000000000001 [ 3250.979344][T28504] erofs: (device loop9): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 3250.981278][T28489] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 3251.020417][T28489] R13: dffffc0000000000 R14: ffff88813564d000 R15: 0000000000000001 [ 3251.028228][T28489] FS: 00007f460970e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 3251.036996][T28489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3251.043417][T28489] CR2: 0000001b3341dff8 CR3: 000000012c1d0000 CR4: 00000000003506b0 [ 3251.051238][T28489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3251.059043][T28489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3251.066856][T28489] Call Trace: [ 3251.069977][T28489] [ 3251.072764][T28489] ? __die_body+0x62/0xb0 [ 3251.076918][T28489] ? die_addr+0x9f/0xd0 [ 3251.080919][T28489] ? exc_general_protection+0x317/0x4c0 [ 3251.086297][T28489] ? _raw_spin_unlock+0x4c/0x70 [ 3251.090980][T28489] ? asm_exc_general_protection+0x27/0x30 [ 3251.096536][T28489] ? __ext4_journal_get_write_access+0xb0/0x690 [ 3251.102613][T28489] ? __ext4_journal_ensure_credits+0x470/0x470 [ 3251.108600][T28489] ? __kasan_check_read+0x11/0x20 [ 3251.113460][T28489] ext4_update_superblocks_fn+0x2dc/0x1300 [ 3251.119103][T28489] ? irqentry_exit+0x30/0x40 [ 3251.123529][T28489] ? ext4_update_superblocks_fn+0x1300/0x1300 [ 3251.129434][T28489] ? ext4_update_overhead+0x170/0x170 [ 3251.134640][T28489] ext4_update_overhead+0x143/0x170 [ 3251.139675][T28489] ext4_fill_super+0x309b/0x8460 [ 3251.144457][T28489] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 3251.150520][T28489] ? snprintf+0xd6/0x120 [ 3251.154604][T28489] ? sb_set_blocksize+0xa8/0xf0 [ 3251.159289][T28489] get_tree_bdev+0x440/0x680 [ 3251.163733][T28489] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 3251.169805][T28489] ext4_get_tree+0x1c/0x20 [ 3251.174045][T28489] vfs_get_tree+0x88/0x290 [ 3251.178296][T28489] do_new_mount+0x2ba/0xb30 [ 3251.182641][T28489] ? do_move_mount_old+0x160/0x160 [ 3251.187581][T28489] ? security_capable+0x87/0xb0 [ 3251.192271][T28489] ? ns_capable+0x89/0xe0 [ 3251.196435][T28489] path_mount+0x671/0x1070 [ 3251.200687][T28489] ? user_path_at_empty+0x14e/0x1a0 [ 3251.205723][T28489] __se_sys_mount+0x2c4/0x3b0 [ 3251.210238][T28489] ? __x64_sys_mount+0xd0/0xd0 [ 3251.214835][T28489] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3251.220740][T28489] __x64_sys_mount+0xbf/0xd0 [ 3251.225165][T28489] x64_sys_call+0x49d/0x9a0 [ 3251.229603][T28489] do_syscall_64+0x3b/0xb0 [ 3251.233851][T28489] ? clear_bhb_loop+0x55/0xb0 [ 3251.238368][T28489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3251.244096][T28489] RIP: 0033:0x7f46089874ba [ 3251.248350][T28489] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3251.267795][T28489] RSP: 002b:00007f460970de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3251.276037][T28489] RAX: ffffffffffffffda RBX: 00007f460970def0 RCX: 00007f46089874ba [ 3251.283845][T28489] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 00007f460970deb0 [ 3251.291777][T28489] RBP: 0000000020000240 R08: 00007f460970def0 R09: 0000000000000840 [ 3251.299591][T28489] R10: 0000000000000840 R11: 0000000000000246 R12: 0000000020000280 [ 3251.307399][T28489] R13: 00007f460970deb0 R14: 0000000000000236 R15: 0000000020000540 [ 3251.315217][T28489] [ 3251.318081][T28489] Modules linked in: [ 3251.381723][T19634] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3251.455552][T28504] loop9: detected capacity change from 0 to 2048 [ 3251.607708][T28489] ---[ end trace 0000000000000000 ]--- [ 3251.619466][T28489] RIP: 0010:__ext4_journal_get_write_access+0xb0/0x690 [ 3251.635467][T28489] Code: 88 ff 49 8d 5e 30 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9e eb cf ff 48 8b 1b 48 83 c3 38 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 81 eb cf ff 4c 8b 23 4d 85 e4 4c [ 3251.656502][T28504] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3251.665037][T28504] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3251.710668][T22188] EXT4-fs (loop9): unmounting filesystem. [ 3251.749950][T28489] RSP: 0018:ffffc9000a71f6e0 EFLAGS: 00010202 [ 3251.755876][T28489] RAX: 0000000000000007 RBX: 0000000000000038 RCX: 0000000000080000 [ 3251.764481][T28489] RDX: ffffc9000d800000 RSI: 0000000000005c8e RDI: 0000000000005c8f [ 3251.772438][T28489] RBP: ffffc9000a71f7b0 R08: ffff88813564d000 R09: 0000000000000001 [ 3251.780293][T28489] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 3251.788591][T28489] R13: dffffc0000000000 R14: ffff88813564d000 R15: 0000000000000001 [ 3251.796565][T28489] FS: 00007f460970e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 3251.805620][T28489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3251.812090][T28489] CR2: 00007f11eaf48178 CR3: 000000012c1d0000 CR4: 00000000003506a0 [ 3251.820041][T28489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3251.828155][T28489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3251.836179][T28489] Kernel panic - not syncing: Fatal exception [ 3251.842350][T28489] Kernel Offset: disabled [ 3251.846480][T28489] Rebooting in 86400 seconds..